Les vignes de Champagne

Privacy Policy

 1. Preamble

The personal data you entrust us with when you visit our explore-grandest.com website are processed in compliance with the French Data Protection Act of 6 January 1978 amended and the General Data Protection Regulation (GDPR) of 27 April 2016.

In an effort to be fully transparent, we hereby present our Privacy Policy, the aim of which is to inform you of the conditions under which we collect and process your personal data when you consult our site.

2. Identity and contact details of the Data Controller and DPO

Your data’s Data Controller is Grand Est Regional Tourism Agency (hereinafter referred to as GE RTA), located at Château Kiener - 24 rue de Verdun, 68 000 Colmar.

With a view to ensuring protection of your personal data, we have appointed a Data Protection Officer (DPO).

For all questions regarding management of your personal data and exercise of your rights, you can contact our Data Protection Officer by email at dpo@art-grandest.fr

3. Purposes of and legal grounds for the processing operations implemented

GE RTA carries out various processing operations on the basis of several legal grounds, including your consent, legal or regulatory obligations to which we are subject, our legitimate interest, and contract performance.

3.1. Processing operations carried out on the basis of your consent are only implemented for the purposes of:

  • Management of service providers’ accounts enabling referencing of tourism offers
  • Management of users’ accounts enabling addition of offers to their Favourites basket and/or recording of their preferences
  • Management of contact requests
  • Management of Newsletters sends
  • Management of cookies subject to your consent
  • Taking account of your feedback

3.2. Certain processing operations are required for the purposes of GE RTA’s legitimate interests:

  • Management of the site’s administration and security: the legitimate interest being our website’s security and functionality
  • Cookies placed strictly for provision of a service, and which enable or facilitate electronic communication

 

4. Categories of data processed

Connection to our site automatically involves collection of technical and personal data concerning you.

Technical data:

  • IP address
  • Timestamps (date and time of connection)
  • Technical data on equipment and browser used
  • Data on website browsing are collected.

Non-technical data:

  • Family name and first name
  • Telephone numbers
  • Email address
  • Postal address
  • Family status – occupational status
  • Date of birth
  • Types of services and accommodation preferred
  • Password

5. Recipients of personal data

  • Strictly authorised staff working at GE RTA’s internal departments
  • GE RTA’s data processors, who process the data in the name and on behalf of the Agency

In no case will GE RTA sell your data to third-party companies.

6. Data retention period

GE RTA undertakes not to retain your personal data for a period longer than that required for the pursuit and achievement of the purposes for which such data have been collected.

6.1. Purpose: Management of contact requests

Retention period: The time taken to deal with the request

6.2. Purpose: Management of service providers’ accounts enabling referencing of tourism offers

Retention period: 5 years

6.3. Purpose: Management of users’ accounts enabling addition of offers to their Favourites basket and/or recording of their preferences

Retention period: 3 years

6.4. Purpose: Account taking of your feedback

Retention period: Until deletion of the proposed offer or service

6.5. Purpose: Site administration

Retention period: 6 months

6.6. Purpose: Management of Newsletter sends

Retention period: Until your unsubscription

6.7. Purpose: Cookies placed strictly for provision of a service, and those enabling or facilitating electronic communication

Retention period: Maximum 13 months

6.8. Purpose: Cookies subject to your consent

Retention period: Maximum 13 months 

 
7. Transfer of data outside the European Union

Personal data collected via use of third-party cookies and third-party applications may be transferred outside the EU, in particular to the United States.
In order to ensure protection of your personal data during any transfer of data outside the European Union, we have implemented Standard Contractual Clauses with our data processors in compliance with the requirements of European Regulation no.2016/679/EU of 27 April 2016.

8. Security

Pursuant to the legislation and regulations currently in force, GE RTA and its data processors undertake to preserve the confidentiality, availability and integrity of your personal data by implementing all necessary technical and organisational measures.

9. Exercising your rights

In compliance with the legislation and regulations currently in force, you have the following rights:

  • The right to access your data at any time (Article 15 of the GDPR)
  • The right to rectify, update and complete your data (Article 16 of the GDPR)
  • The right to require erasure of your data (Article 17 of the GDPR)
  • The right to withdraw your consent at any time (Article 13-2 c of the GDPR)
  • The right to limit the processing of your data (Article 18 of the GDPR)
  • The right to object to the processing of your data (Article 21 of GDPR)
  • The right to portability of your data when they are the subject of an automated processing operation (Article 20 of the GDPR)

To exercise these rights, you can contact our Data Protection Officer (DPO). Proof of identity will be required for any request to exercise rights. Such proof will not be retained beyond the period required for exercise of the right requested.

  • Contact our DPO by email: dpo@art-grandest.fr
  • Contact our DPO by post:

Data Protection Officer
Château KIENER - 24 rue de Verdun
68 000 COLMAR

 
In the event of difficulties relating to management of your data or exercise of your rights, you can lodge a complaint with the CNIL: https://www.cnil.fr/en/home

 

Information on Cookies and other trackers

1. Definition and purposes

When you consult the site, information on your terminal’s (computer, tablet, smartphone, etc.) browsing on the site may be recorded in text files known as “cookies” placed on your browser. Cookies are used in order to recognise your browser during their period of validity and to send various items of information back to the site (e.g. a session identifier or choice of language).

Cookies and other trackers are deposited and used via our website by GE RTA and third-party companies. Some of them are essential to the website’s operation while others enable provision of various functionalities (geographical position, weather map, social network sharing buttons, etc.) and optimisation of use of our site.

Third-party companies may collect your personal data, including your Internet Protocol (IP) address. They may also use cookies, log files and web beacons to process other data from other sources for their own statistical and technical purposes. Such processing operations are subject to their own privacy policies.

2. Cookie setting management

You can retain control of your data and object to storage of cookies in two ways:

  • By visiting our cookie management module
  • or by modifying your browser’s settings by consulting one of the linked sites below, depending on your type of browser: Firefox, Chrome, Explorer, Safari

You should bear in mind that deactivating certain cookies may reduce the website’s functionalities and diminish browsing quality as a result.
To find out more, please consult the National Commission for Information Technology and Civil Liberties (CNIL) website: https://www.cnil.fr/en/home

3. List of third-party trackers and applications

1. A number of Google’s trackers are present on the site:

  • Google analytics
  • Google Ads
  • Google Conversion Linker
  • Google Conversion Tracking
  • DoubleClick

These cookies enable measurement of the website’s audience and obtainment of data on visitors’ frequency of use and behaviour, for statistical purposes and in order to monitor marketing actions carried out on the site.

They also enable analysis of the ways visitors use the site and recommendation and personalisation of content in order to enhance customer experience.
 
2. Hotjar enables capture of user behaviours in the Front Office in order to optimise the interface and user experience.

3. HubSpot enables storage and management of communications to registered contacts via forms present on the site in a customer relations management tool.

4. Facebook enables the monitoring of marketing actions relating to the social network via placement of a pixel.

5. ContentSquare is a solution that aggregates data on site traffic and use with a view to improving user experience. Statistics produced are anonymous.

List of cookies (cookie, duration, description):

  • _cs_id, 13 months, this cookie contains the ContentSquare user ID
  • _cs_s, 30 minutes, this cookie contains the number of pages viewed in the current session for the ContentSquare tool
  • _cs_vars, session, this cookie is used by ContentSquare in order to record personalised variables
  • _cs_ex, 30 days, this cookie is used by ContentSquare in order to exclude some visitors from the collection
  • _cs_c, 13 months, this cookie is used by ContentSquare in order to save the user’s consent to data collection
  • _cs_optout, 13 months, this cookie is used by ContentSquare in order to exclude some visitors from the collection
  • _cs_mk, 30 minutes, this cookie is used for our Google Analytics and Adobe integrations. It sends a random number-timestamp in milliseconds

Further information on our Privacy Policy can be found here

You can control placement and reading of trackers on your terminal by configuring your consent in AXEPTIO’s tracker management tool, by visiting the site’s GDPR section.
NB:  https://www.axeptio.eu/  deposits a cookie required for management and retention of user preferences with regard to their personal data.
 
This Privacy Policy may be amended or adjusted at any time. If an amendment is made to this Policy, Grand Est RTA undertakes to publish the new version on the website and inform you of such amendment. The information may take a variety of forms at GE RTA’s discretion (e.g. via email or a pop-in). 
 
Date of most recent amendment: 4 May 2022