Privacy policy

As part of its tourism activities, the Agence du Tourisme de la Corse is required to process any personal data you may provide.

As the data controller, the Agence du Tourisme de la Corse considers the privacy of its customers to be of the utmost importance and is aware of the need to ensure the confidentiality of the data it collects.

The purpose of the current policy is therefore to define how your personal data is processed and your rights in accordance with the legislative and regulatory provisions in force.

This policy may be amended or supplemented at any time by the Agence du Tourisme de la Corse, in particular in order to comply with any changes in legislation or regulations.

In any event, the Agence du Tourisme de la Corse will comply with the main principles laid down by the General Data Protection Regulation.

DATA CONTROLLER

The person responsible for processing your personal data is the Agence du Tourisme de la Corse, a local public industrial or commercial establishment, registered under SIREN number 392 178 570, with its registered office at 17 Boulevard Roi Jérôme 20 000 AJACCIO.

If you have any questions about the management of your personal data, you can contact the Tourist Agency by e-mail: privacy@atc.corsica or by post at 17 Boulevard Roi Jérôme 20 000 AJACCIO.

The DPO (Délégué à la Protection des Données) of the Agence du Tourisme de la Corse is Mr Robert MENASSE, residing at the Agence de Tourisme de la Corse located at 17 Boulevard du Roi Jérôme in Ajaccio (20000), Tel : 04 95 51 77 77 ; e-mail : privacy@atc.corsica

LEGAL BASIS AND PURPOSES OF DATA PROCESSING

Personal data must be processed lawfully, fairly and transparently with regard to the individual involved.

Consequently, the Agence du Tourisme de la Corse hereby agrees to collect your personal information only for the purposes set out below and only when the processing is based on one of the six legal grounds set out in Article 6 of the General Data Protection Regulation.

Certain processing carried out by the Corsica Tourism Agency is based on the legitimate interests of the Agency, and in particular:

- When you contact the Agency to obtain information about the services offered by our partners;

- When you browse the Agency's website.

Thus, the Agency's legitimate interest is characterized by the need to respond to requests for information and messages sent by Internet users via the contact form provided for this purpose.

At the end of your stay, you also have the possibility of leaving a note and a comment on the activities carried out or the accommodation visited. The handling of the data you wish to communicate is based on your consent. You are free to communicate any personal information you wish, in the knowledge that this information will be published on the Agency's website.

DATA COLLECTION

Article 4 §1 of the General Data Protection Regulation (GDPR) sets out the definition of personal data as "any information relating to an identified or identifiable individual".

"An identifiable individual is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity".

In accordance with Article 5 of the General Data Protection Regulation, personal data must be adequate, relevant and limited to what is strictly necessary with regard to the purposes for which it is processed (minimization principle).

The Agence du Tourisme de la Corse is committed to respecting the principle of minimization, and only collects personal data that is strictly necessary for the purposes set out above.

Therefore, when you fill in the contact form on the Agency's website, the compulsory nature of the information requested is indicated by an asterisk. This is your surname, first name, e-mail address and IP address.

This information will enable us to contact you and respond to your request. If you do not provide this information, L'Agence du Tourisme will not be able to respond to your request.

L'Agence du Tourisme does not collect any so-called sensitive information on its Internet users (racial or ethnic information, political opinions, religious or philosophical opinions, trade union membership, health, sexual orientation). It therefore advises Internet users not to provide such information via the contact form, or when you decide to post a note or comment.

RETENTION PERIOD

The Agence du Tourisme de la Corse will only keep your personal data for as long as is necessary and proportionate to the purpose for which it was collected. Your personal data will therefore be deleted two years after your last contact with us.

On the other hand, personal information relating to the ratings and comments you publish on the Agence website remains accessible to the public, as long as the Internet user has not requested the deletion of the rating or comment.

DATA RECIPIENTS

The term "recipient" is defined by Article 4 §9 of the European Regulation as "the natural or legal person, public authority, agency or anybody which receives communication of personal data, whether a third party or not".

The data collected in order to respond to Internet users' requests is strictly communicated to authorized personnel of the Corsican Tourist Agency and is accessible to the website host.

Naturally, your data may be communicated in application of a law, regulation or decision by a legal authority.

PERSONAL RIGHTS

In compliance with French Data Protection Act no. 78-17 of January 6, 1978, as amended, relating to data processing, files and freedoms; and with Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, you have the following rights:

- Right of access ;

- Right to deletion;

- Right to object to processing ;

- Right to limit processing;

- Right to data portability ;

- Right to oppose processing;

- Right to define the fate of your data in the event of your death.

Furthermore, when the processing of your data is based on your consent, you have the possibility of withdrawing your consent, it being specified that the withdrawal of consent will lead to the deletion of the comment you have left on the Agence website. This withdrawal will in no way affect the lawfulness of the processing, based on consent, carried out prior to the withdrawal.

Your rights may be exercised by e-mail to privacy@atc.corsica; or by post to 17 Boulevard Roi Jérôme 20 000 AJACCIO. All requests must be accompanied by proof of identity. The Agence du Tourisme de la Corse is committed to responding to your requests as quickly as possible, and in any event, within the legal deadlines.

Finally, if you consider that the processing of your personal data constitutes a violation of the European regulation, you can lodge a complaint with the CNIL.

SECURITY AND CONFIDENTIALITY

The Agence du Tourisme de la Corse undertakes to take sufficient technical and organizational measures to prevent any violation of your data and prevents any communication of information concerning you to third parties.

The Agence du Tourisme de la Corse takes all necessary precautions, to avoid malicious intrusions and to prevent the loss, alteration or disclosure of your data.

In the event of a security breach, the Tourism Agency undertakes to notify the supervisory authority and to document the details of the violation.

In addition, when a personal data breach is likely to present a high risk for the rights and freedoms of its Internet users, the Tourism Agency undertakes to communicate this breach to the person concerned as soon as possible, and this in accordance with Article 34 of the General Data Protection Regulation.