Preamble
OTI Est processes personal data (hereinafter the “Personal Data)” concerning you in connection with the use of this website (hereinafter the “Site”).
As data controller, we respect privacy and protect the personal data of users of our Site.
This policy aims to inform you of the methods of collection, processing and use of Personal Data and of your rights in terms of protection of personal data with regard to the applicable provisions in this matter, in particular Law 78-17. of January 6, 1978 relating to data processing, files and freedoms known as "Data processing and freedoms" in its latest version and with France's General Data Protection Regulations, in force since May 25, 2018.
Article 1 - Scope of this personal data protection policy
This Policy sets out the principles and guidelines for the protection of Your Personal Data, which includes Personal Data collected on - or through - the Site.
OTI Est collects Personal Data (online, including by e-mail, or offline); this policy applies regardless of the method of collection or processing.
The notion of Personal Data refers to any information relating to an identified or identifiable natural person. A person is “identifiable” when they can be identified, directly or indirectly, in particular by reference to an identification number, or to one or more elements which are specific to them.
“Non-Personal Data” corresponds to information that does not allow a person to be identified.
Article 2 - Places of storage of Personal Data
All Personal Data is stored exclusively in France, by our web hosting provider:
OTI East
2 rue Azéma, Rivière du Mât les Hauts
97412 PANON ARM
53877088400020 – reunionest.fr
Article 3 - Data controller
The controller of Your Personal Data is: OTI Est; certain technical services (hosting) are entrusted to our technical service providers (IRIS Interactive). In accordance with Article 28 of the GDPR, this service provider is bound by a strict confidentiality clause which prohibits it from any use of the data entrusted to it not provided for in the service contract and which requires it to implement technical and organizational arrangements that meet security and personal data protection requirements.
Article 4 - Data collected
Personal data
Personal Data may include the following:
Surname, First name, Email address, Postal address, Name of the structure, Name of the activity, Type of activity, Postal code, GSM.
And any other Personal Data that may be relevant for the purposes set out below.
Note to the attention of visitors and users of the Site: certain functionalities and characteristics of the Site can only be used if You communicate to OTI Est certain Personal Data when You visit or use the Site. You are free to provide or not, all or part of Your Personal Data.
However, if the individual chooses not to provide these details, such a decision could prevent the achievement or satisfactory achievement of the objectives described below, certain services and certain features of the Site may not function properly and / or they will be refused the access to certain pages of the Site.
Cookies and other trackers
The Site may use cookies or other technologies likely to collect or store Personal Data. Cookies are text files stored and used to record Personal and Non-Personal Data concerning browsing on the Site.
Cookies can be permanent (and remain after the user has disconnected from the Site, in order to be used during subsequent visits to the Site) or temporary (and disappear as soon as the user disconnects from the Site).
OTI Est uses cookies to improve your user experience, in particular by:
- allowing a service to recognise an individual user's equipment, so that person will not have to provide the same information several times in order to perform the same task;
- recognizing the username and password have already provided so that the user does not have to re-enter them on each web page that requests them.
OTI Est uses cookies to analyze traffic and data on the Sites in order to:
- measure the number of users of the services, thus making them easier to use and ensuring their ability to respond quickly to requests;
- help OTI Est understand how users interact with the services in order to improve them.
OTI Est may also use the services of third-party service providers for the purpose of performing the services on its behalf and in particular for:
- analyse individual browsing habits and measure the audience of the Sites and Applications;
- analyse an individual's areas of interest and offer targeted marketing or advertising offers;
- allow an individual to share the content of the Applications' Sites with other people on social networks or to let these other people know what a user is watching or what they think (eg the "Like" button on Facebook)
In this case, pixel tags and cookies provided by these third-party providers may be used and retained. When transmitting the information generated by these cookies, the cookie settings ensure that the IP address is anonymized before geolocation and before storage. Our service providers will use this information for the purpose of evaluating Your use of the Site, compiling reports on Site activity for OTI Est, and offering You better services and advertising targeted to Your needs. They will not associate your IP address with any other of their data.
When you browse the Site, cookies are enabled by default and data can be read or stored locally on your hardware. You will be notified the first time You receive a cookie and You can decide whether to accept or reject it. By continuing to use the Sites, You expressly agree to OTI Est's use of such cookies.
Any individual can also configure their browser to systematically refuse cookies (including cookies used for audience measurement purposes). However, if this were the case, certain functionalities and features of the Site may not function properly and that individual may not be able to access certain parts or services of the Site.
If any individual wishes to modify or delete information, please refer to Article 8: Your rights.
It's possible to access the cookie management panel to configure the storage and reading of cookies.
Data retention
By type of data:
- Civil status data (name, first name, postal address, etc.): 3 years max. ;
- Connection data: 3 years max. ;
- Location data = 48h;
We only keep Personal Data for a period of time necessary and proportionate to the purpose for which it was collected, namely for a maximum period of 3 years from the last exchange you had with us and carried out at your initiative.
Beyond the aforementioned periods, your data will be purely deleted or anonymised.
For professionals, the retention period is extended to 10 years on the basis of their consent.
Article 5 - Purposes of the collection of personal data
As indicated above, You provide Your Personal Data on a voluntary basis.
Personal Data is generally collected for the purposes of OTI Est's business such as improving OTI Est's marketing and advertising efforts, better tailoring OTI Est's products and services to customer needs. or compliance with reporting obligations provided by law, and other similar activities.
OTI Est collects and uses Personal Data concerning You for the purposes of its activity and in particular for the following purposes:
We process a user's data in whole or in part for the purposes of:
- Information to users by email / newsletter.
- Information to users by email / Special event (emailing)
- Registration of tourism professionals in the eastern territory of Reunion in the database
- Specific professional information by sector of activity.
- Quote request from groups (individual and professional) from 12 people
- Transmission of the estimate following the request
- Contact with the internal departments of OTI Est
- Streamline exchanges between tourism professionals and OTI Est
Subject to applicable local law, by providing Your e-mail address, You expressly authorize OTI Est to use it with other useful Personal Data to send You commercial or marketing messages.
OTI Est may also use Your email address for administrative or other non-marketing purposes (for example, to notify You of important changes to the Site).
Article 6 - Conditions for processing and storing personal data
The "processing" of Personal Data includes in particular the use, conservation, recording, transfer, adaptation, analysis, modification, declaration, sharing and destruction of Personal Data depending on what is necessary in view of the circumstances or legal requirements.
All Personal Data collected is kept for a limited period depending on the purpose of the processing and only for the period provided for by the applicable legislation.
All Personal Data collected is stored in mainland France.
Article 7 – Links to websites not controlled by OTI Est
The Site may provide links to third party websites that may be of interest to its users.
OTI Est has no control over the content of third-party sites or the practices of these third parties with regard to the protection of Personal Data that they may collect. Consequently, OTI Est declines all responsibility concerning the processing by these third parties of Your Personal Data. It is your responsibility to find out about the personal data protection policies of these third parties.
Article 8 - Transfer of personal data
In the event of access to the Site from a country which is not a member of the European Union whose legislation relating to the collection, use and transfer of data differs from those of the European Union, we draw the individual's attention to the fact that by continuing to use the Site, which is governed by French law, the corresponding Terms of Use and this Policy, Personal Data is transferred to the European Union and the user consents to this transfer.
Your Personal Data may be disclosed within OTI Est for the purposes set out in Section 3 of this Policy.
OTI Est may transfer Your Personal Data outside the European Union, provided that it ensures, before transferring it, that the entities outside the European Union offer an adequate level of protection, in accordance with the legislation. European in force.
If OTI East learns that a third party to whom OTI East has disclosed Personal Data for the purposes set out in Section 3 above is using or disclosing Personal Data inconsistent with this Policy or in violation of applicable law , OTI Est would take all reasonable steps to prevent or terminate any such use or disclosure.
You also have the right to authorize or not the OTI Est to use Your Personal Data for a purpose other than those for which this Personal Data was initially collected. You can object to this use by referring to Article 8 below.
OTI Est may also be required to transfer Your Personal Data to third parties if OTI Est deems that such a transfer is necessary for technical reasons (for example, for hosting services by a third party) or to protect its legal interests (for example, in the event of the sale of assets to a third-party company, change of control or total or partial liquidation of OTI Est).
In addition, OTI Est may share Your Personal Data with the reseller on which You depend or assigned to the territory in which You are located for the purposes of the activity of OTI Est. OTI Est may also share your Personal Data with business partners when OTI Est and the business partner are jointly sponsoring an event or jointly participating in a marketing promotion in which You are engaging.
OTI East may disclose Your Personal Data if required to do so by law or if OTI East believes in good faith that such disclosure is reasonably necessary to comply with a legal process (for example, a warrant, subpoena or other court order) or to protect the rights, property, or personal safety of OTI Est, our customers, or the public.
If permitted by applicable law, OTI Est may also share Your Personal Data with third parties in order to provide You with targeted marketing or advertising offers.
These transfers may take place over the Internet or by any other method deemed appropriate by L'OTI Est in accordance with the applicable legislation and the internal security policies of the L'OTI Est Group.
Article 9 - Your rights
Your right to access and rectify your data
You have the right to access and have your personal data corrected.
You can ask us that your personal data be, depending on the case, rectified, completed if they are inaccurate, incomplete, equivocal or out of date.
Your right to have your data deleted
You can ask us to erase your personal data when one of the following reasons applies:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- you withdraw the consent previously given;
- you object to the processing of your personal data for legitimate reasons;
- the processing of personal data does not comply with the provisions of applicable law and regulations.
Nevertheless, the exercise of this right will not be possible when the conservation of your personal data is necessary with regard to the legislation or the regulations and in particular for example for the establishment, the exercise or the defence of rights in court.
Your right to limit data processing
You can request the limitation of the processing of your personal data in the cases provided for by law and regulation.
Your right to object to data processing
You have the right to object to the processing of personal data concerning you when the processing is based on the legitimate interest of the controller.
Your right to the portability of your data
Since May 25, 2018, you have the right to the portability of your personal data.
The data on which this right can be exercised are:
- only your personal data, which excludes anonymised personal data or data that does not concern you;
- declarative personal data as well as the personal operating data mentioned above;
- personal data which does not infringe the rights and freedoms of third parties, such as those protected by business secrecy.
This right is limited to processing based on consent or on a contract as well as personal data that you have personally generated.
This right does not include Derived Data or Inferred Data, which is personal data created by OTI Est.
Your right to withdraw your consent
When the data processing that we carry out is based on your consent, you can withdraw it at any time. We then stop processing your personal data without the previous operations for which you had consented being called into question.
Your right to lodge an appeal
You have the right to lodge a complaint with the CNIL on French territory, without prejudice to any other administrative or judicial appeal.
Your right to set post-mortem guidelines
You have the possibility to define guidelines relating to the conservation, erasure and communication of your personal data after your death and this with a trusted third party, certified and responsible for ensuring that the will of the deceased is respected in accordance with the requirements of the applicable legal framework.
How to exercise your rights
All the rights listed above can be exercised:
- by post to the following address: [email protected], attaching a copy of your identity card and proof of address;
- via our email address [email protected]. A procedure will then be sent to you to validate your identity.
Note: the documents sent within the framework of this procedure will be purely destroyed, and the data potentially collected during the procedure will be definitively deleted at the end of the latter.
Also note that any requests that do not meet these guidelines will be ignored.
We undertake to respond to these requests within 1 month of receipt of the request. This period may be extended by 2 months depending on the complexity and the number of requests received, i.e. 3 months in total.
If you have an account, you can exercise Your rights of access and rectification by logging into your account.
However, with regard to the exercise of the right to information, we may not have the obligation to act on it if:
- you already have this information;
- the recording or communication of your personal data is expressly provided for by law
- communication of information proves impossible;
- providing information would require disproportionate effort.
Article 10 - Data security and recipients
OTI Est takes care to protect and secure the Personal Data that You have chosen to communicate to it, in order to ensure their confidentiality and prevent them from being distorted, damaged, destroyed or disclosed to unauthorized third parties.
OTI Est has taken physical, electronic and organizational protection measures to prevent any loss, misuse, unauthorized access or dissemination, alteration or possible destruction of this Personal Data. Among these protection measures, OTI Est incorporates technologies specially designed to protect Personal Data during their transfer. However, despite the efforts of OTI Est to protect Your Personal Data, OTI Est cannot guarantee the infallibility of this protection due to unavoidable risks that may arise during the transmission of Personal Data.
As all Personal Data is confidential, access to it is limited to employees and service providers of OTI Est who need it in the performance of their mission. All persons having access to Your Personal Data are bound by an obligation of confidentiality and expose themselves to disciplinary measures and/or other sanctions if they do not respect these obligations.
However, it is important that all users exercise caution to prevent unauthorized access to Personal Data. An individual is responsible for the confidentiality of passwords and the information contained in their account. Consequently, they must ensure that they close their session in the event of shared use of the same computer or the same terminal.
Article 11 - Conflict resolution
Although OTI Est has taken reasonable steps to protect Personal Data, no transmission or storage technology is completely infallible.
However, OTI Est is keen to guarantee the protection of Personal Data. If You have reason to believe that the security of Your Personal Data has been compromised or that it has been misused, You are invited to contact OTI Est at the following address: RGPD@REUNIONET .FR.
OTI East will investigate complaints regarding the use and disclosure of Personal Data and attempt to resolve them in accordance with the principles set out in this Policy.
Unauthorised access to Personal Data or its misuse may constitute an offence under local law.
Article 12 - Contact
For any questions regarding this Policy, to no longer receive information from OTI Est or for any request for rectification, addition, update or deletion of Your Personal Data, You can send an email to following email address: [email protected].
Article 13 - Date of entry into force and revisions of the personal data protection policy
This Policy may be updated based on OTI Est's needs and circumstances or as required by law. We therefore invite you to regularly check for updates.
Last modified: 01/09/2022