Personal data collection charter for customers and / or esf students
In the framework of the services that it proposes, the esf may collect the personal data of its users.
The purpose of this charter is to describe the methods by which the esf uses said data in accordance with the provisions of the GDPR (General Data Protection Regulation applicable from 25 May 25 2018).
The purpose of this charter is to describe the methods by which the esf uses said data in accordance with the provisions of the GDPR (General Data Protection Regulation applicable from 25 May 25 2018).
1. Did you know?
Ski instructors for esf adopt a self-employed status to exercise their profession.
They come together locally in French Ski Schools to organize the teaching, supervision and animation of skiing and other winter sports disciplines in resorts.
To ensure the defense of their interests they also group together in Local Unions endowed with juridical entity. There is only one Local Union per resort.
The name « French Ski School » or esf is authorized by the National Syndicate of French Ski Instructors (S.N.M.S.F) created in 1945. Its objective is to organize the profession by insuring the instructors are independent in terms of organization and teaching.
When you benefit from esf services, your personal data is therefore processed by both the Local Union and the S.N.M.S.F., each responsible for processing the data for their own purposes.
In other words:
They come together locally in French Ski Schools to organize the teaching, supervision and animation of skiing and other winter sports disciplines in resorts.
To ensure the defense of their interests they also group together in Local Unions endowed with juridical entity. There is only one Local Union per resort.
The name « French Ski School » or esf is authorized by the National Syndicate of French Ski Instructors (S.N.M.S.F) created in 1945. Its objective is to organize the profession by insuring the instructors are independent in terms of organization and teaching.
When you benefit from esf services, your personal data is therefore processed by both the Local Union and the S.N.M.S.F., each responsible for processing the data for their own purposes.
In other words:
- The Local Union processes your data to manage its contractual relationship with you (invoicing, payment, managing bookings, etc..), to carry out marketing campaigns and to comply with its legal obligations.
- The S.N.M.S.F. processes your data because it manages the central computer booking system which allows the Local Unions to collect the data necessary to organize its esf services. The S.N.M.S.F manages this computer system for CRM processing needs.
2. What data is collected?
a. General case
Your personal data collected upon voluntary booking (online or in person) with or without prior reservation are as follows:
b. Photographs or videos
The customer authorises, free of charge, the esf instructors, a company participating on behalf of the esf and / or an independent photographer as part of a service which will be offered (after taking the images) by the latter to the client, to photograph him/ her and / or film them during the lessons given by the instructors of this esf and followed by the client and / or during competitions organized by this esf in which the client participates.
The customer authorizes the esf, the provider of the esf having participated on behalf of the latter in the taking and / or use of the images (examples: shooting, video editing, etc.) and / or the independent photographer within the framework of the aforementioned service, the case where appropriate, to use, in particular by reproduction, representation, projection and adaptation, these images (photographs or videos), on their website, their social networks or any other material media such as leaflets, prospectuses, posters and other advertising.
This authorization is granted for the whole world and for a period of 5 years from the capture of said images.
If the client is a minor, the client's parents grant to the esf, to the providers of the esf above and / or to the independent photographer as part of the aforementioned service the authorization to photograph, film and use the image of their child, under the same conditions.
c. esf competition results
If you have taken part in esf competitions, your results are public and are displayed in the Local Union premises and online.
d. Bank data
Bank data transmitted during bookings are not collected by the Local Union or the S.N.M.S.F. Encryption technology is used by our service provider to secure your transactions.
Your personal data collected upon voluntary booking (online or in person) with or without prior reservation are as follows:
- Surname;
- First name;
- Date of birth;
- Level of teaching;
- Language(s) spoken ;
- Postal address;
- E-mail address;
- Telephone number.
b. Photographs or videos
The customer authorises, free of charge, the esf instructors, a company participating on behalf of the esf and / or an independent photographer as part of a service which will be offered (after taking the images) by the latter to the client, to photograph him/ her and / or film them during the lessons given by the instructors of this esf and followed by the client and / or during competitions organized by this esf in which the client participates.
The customer authorizes the esf, the provider of the esf having participated on behalf of the latter in the taking and / or use of the images (examples: shooting, video editing, etc.) and / or the independent photographer within the framework of the aforementioned service, the case where appropriate, to use, in particular by reproduction, representation, projection and adaptation, these images (photographs or videos), on their website, their social networks or any other material media such as leaflets, prospectuses, posters and other advertising.
This authorization is granted for the whole world and for a period of 5 years from the capture of said images.
If the client is a minor, the client's parents grant to the esf, to the providers of the esf above and / or to the independent photographer as part of the aforementioned service the authorization to photograph, film and use the image of their child, under the same conditions.
c. esf competition results
If you have taken part in esf competitions, your results are public and are displayed in the Local Union premises and online.
d. Bank data
Bank data transmitted during bookings are not collected by the Local Union or the S.N.M.S.F. Encryption technology is used by our service provider to secure your transactions.
3. For what purpose?
Your personal data is collected to exercise esf activities.
They are kept (globally and anonymously) for statistical purposes.
We only ask you for data that is strictly necessary to run our esf services smoothly and to protect your vital interests.
If a third party (see below) needs to use your personal data, we make sure that they are able to protect it.
We thus hold a legitimate interest in using your personal data and this use does not infringe your freedom and your interests.
They are kept (globally and anonymously) for statistical purposes.
We only ask you for data that is strictly necessary to run our esf services smoothly and to protect your vital interests.
If a third party (see below) needs to use your personal data, we make sure that they are able to protect it.
We thus hold a legitimate interest in using your personal data and this use does not infringe your freedom and your interests.
4. Who receives the data?
In order to guarantee quality services, your data is intended for:
- The management team of your resort’s Local Union;
- Your esf instructor;
- The IT department of the S.N.M.S.F.
- To our IT subcontractors (technical services) and e-commerce web developers (sales analysis, CRM tools;
- Local authorities if the law requires us to.
5. Data security
Les informations recueillies sont enregistrées dans un fichier informatisé sécurisé du Syndicat Local et du S.N.M.S.F.
Des mesures adéquates sont prises sur le plan de la technique (ex : pares-feux) et de l’organisation (ex : identifiant/mot de passe, moyens de protection physique, etc.) pour protéger vos données contre la destruction, la perte ou l’altération, l’utilisation détournée et l’accès non autorisée, la modification ou la divulgation, que ces actions soient illicites ou accidentelles.
6. Your rights
You have the right to oppose, access, rectify and delete your data personal data.
To exercise this right, you must contact the Local Union by clicking on the following link: Contact
To exercise this right, you must contact the Local Union by clicking on the following link: Contact
7. Conservation period
The collected data is kept, archived and then anonymized by the Local Union and the S.N.M.S.F.
Before being anonymized, customer and student data is archived for 10 years from the booking date for accounting purposes (as invoices must be kept for 10 years from the end of the financial year).
Before being archived, the data is kept in the « active database » of the Local Union for 3 consecutive seasons for prospecting purposes. At the end of the aforementioned period, they will be archived if you do not respond to any solicitation by the esf.
Before being anonymized, customer and student data is archived for 10 years from the booking date for accounting purposes (as invoices must be kept for 10 years from the end of the financial year).
Before being archived, the data is kept in the « active database » of the Local Union for 3 consecutive seasons for prospecting purposes. At the end of the aforementioned period, they will be archived if you do not respond to any solicitation by the esf.
8. Cookies and web beacons
a. Cookies
A « cookie » is an information file sent to your web browser and saved on your terminal (e.g. computer, smartphone). This file includes information such as your domain name, your internet service provider, your operating system, and the date and time of your access.
If you visit the Local Union’s website, they are likely to process information about your activity such as the pages viewed, the searches carried out. This information is intended to improve the content of the site and your navigation.
You can configure your browser to restrict your terminal from storing cookies. Your experience on the website may then be limited.
b. Web beacons
The Local Union may occasionally use web beacons (or « tags ») in order to assess your responses to its website and the effectiveness of its actions (e.g. the number of times a page has been visited).
PAGE UPDATED: 28/08/2020
A « cookie » is an information file sent to your web browser and saved on your terminal (e.g. computer, smartphone). This file includes information such as your domain name, your internet service provider, your operating system, and the date and time of your access.
If you visit the Local Union’s website, they are likely to process information about your activity such as the pages viewed, the searches carried out. This information is intended to improve the content of the site and your navigation.
You can configure your browser to restrict your terminal from storing cookies. Your experience on the website may then be limited.
b. Web beacons
The Local Union may occasionally use web beacons (or « tags ») in order to assess your responses to its website and the effectiveness of its actions (e.g. the number of times a page has been visited).
PAGE UPDATED: 28/08/2020
CRM - Privacy policy
The person responsible for processing your personal data is: Val Thorens Tourist Office - VAL THORENS 73440 LES BELLEVILLE
Certain services are subcontracted to the following companies:
Customer knowledge and operational exploitation (e-mailing campaigns) :
Val Thorens Tourist Office - Maison de Val Thorens - 73440 Val Thorens Tel. 04 79 00 08 08
Manager: Vincent Lalanne-Cloute
SIRET NO.: 77650121500029
Technical services (hosting, deduplication, data quality, aggregation, anonymisation, etc.) :
Visitdata - 1005 Chemin de la Traverse - 26600 Beaumont-Monteux
Manager: Laurent Pouyet
SIRET NO.: 80318005800015
In accordance with Article 28 of the RGPD, these service providers are bound by strict confidentiality clauses prohibiting any use of the data entrusted to them that is not provided for in the service contract and requiring them to implement technical and organisational measures that meet security and personal data protection requirements.
PURPOSE OF PROCESSING
Collection and processing of your personal data
are carried out as part of the performance of the contract to which you are party (management of contracts, orders, deliveries and invoices, accounting and in particular management of customer accounts and handling of complaints, etc.).
also respond to the fulfilment of our legitimate interest in developing a commercial approach consisting of informing you, unless you object, of our products and services, promoting them and enabling you to benefit from preferential offers (management of technical canvassing operations, standardisation, enrichment and de-duplication of data, selection of persons to carry out loyalty, canvassing, survey, product testing and promotional actions, compilation of commercial statistics, etc.).Some of these operations rely on subcontractors who operate in compliance with article 28 of the RGPD.
We are taking part in a partnership with various players in the resort's tourism industry, the aim of which is to pool our customer knowledge, coordinate our communication campaigns and build customer loyalty. The partners in this programme are as follows:
Val Thorens Reservation
SETAM
SOGEVAB
ValthoParc
Val Tho Immo
ESF
Prosneige
Ski Cool
Transdev
Agence La Cîme
Tourist Office
Within the framework of this partnership, we entrust our two subcontractors mentioned in §1, i.e. the Val Thorens Tourist Office and the company Visit Data, with the task of :
manage your personal data on our behalf, send postal or digital mail, collect customer opinions, provide analytical solutions or audience measurement statistics) in compliance with the retention periods and under security conditions that comply with the requirements in force
to orchestrate, in our name and on our behalf, communications with you, in particular by electronic means of communication;
to avoid the risk of redundancy and saturation in the electronic communication sent to you on our behalf or by other entities of the station. This communication is organised in two cycles:
an annual relational communication cycle. The aim is to maintain a link with the customer without being oppressive, and to offer informative and experiential content (without a commercial offer). The e-mails are sent twice a month (September - May) and once a month (June - August).
a relational communication cycle for your stay. The aim of this cycle is to create a personalised relationship with you as soon as you book with us. The aim of this relationship is to inform you of good tips and practical advice before and during your stay and to measure your satisfaction. 11 multi-channel messages are sent out before, during and after your stay. This activity is carried out either indiscriminately on all the partner files, or on behalf of a particular partner and in this case only on a partner's customer file.
to send you, in our name and on our behalf, where necessary, safety information concerning snow conditions, weather, road conditions, etc.
to enable us to get to know you better and to respond better to your expectations by means of global studies carried out on your data and on the data of all the resort's customers collected by other entities present in the resort. Please note that these studies use your personal data after it has been anonymised and that there is no integration of external data or exchange or transfer of data between partners.
DATA COLLECTED
For the purposes of the processing described in § 2, the following data are collected and processed:
Identity: title, surname, first names, address, telephone number (landline and/or mobile), e-mail addresses, date of birth, internal processing code enabling the customer to be identified.
Data relating to the transaction, such as the transaction number, details of the purchase, subscription, good or service subscribed to.
Family situation: number of people in the household, number of children in the household
Data relating to the monitoring of the commercial relationship: requests for documentation, trial requests, products purchased, services or subscriptions subscribed to, quantity, amount, frequency, delivery address, purchase and service history, product returns, origin of the sale (vendor, representative, partner, affiliate) or order, correspondence with the customer and after-sales service, exchanges and comments from customers and prospects, person(s) in charge of customer relations, etc.
Data relating to the organisation and processing of competitions, sweepstakes and any promotional operation, such as the date of participation, responses to competitions and the nature of prizes offered.
Data relating to the contributions of people who post opinions on products, services or content, in particular their pseudonym
In principle, our products and services are intended for adults who are capable of entering into contractual obligations. Users who are minors must obtain the consent of their legal guardian prior to the communication of personal data concerning them.
DATA RECIPIENTS
The recipients of your personal data are our own management teams and those of our sub-contracted service providers.
Our subcontractors and their employees have access to your data on the basis of signed contracts which specify their obligations in terms of data security and confidentiality.
The use of social networks to interact with our website (in particular the "share" buttons on Facebook and Twitter) is likely to result in data being exchanged between the Tourist Office and its social networks. We therefore invite you to consult the personal data management policies of the various social networks to find out how they collect and process your data.
SHELF LIFE
Personal data relating to customers and collected for the purposes described in § 2 is kept for a period of five years from the end of the commercial relationship. This period takes into account the length of stay generally observed in terms of tourist numbers. At the end of this period and without any commercial interaction on your part, your data will be rendered anonymous.
Data used to establish proof of a right or contract, or stored to comply with a legal obligation, may be stored for a longer period and archived in accordance with the provisions in force (in particular those set out in the French Commercial Code, Civil Code or Consumer Code).
Personal data relating to non-customer prospects may be kept for a period of 3 years from the date of collection by the data controller or the last contact from the prospect (e.g. request for documentation). On expiry and without any commercial interaction on the part of the prospect, your data will be rendered anonymous.
SECURITY
As data controller, we implement appropriate technical and organisational measures in accordance with the applicable legal provisions, to protect your personal data against alteration, accidental or unlawful loss, use, disclosure or unauthorised access, and in particular :
Appointment of a data protection officer
Raising awareness of confidentiality requirements among our employees who have access to your personal data
Securing access to our premises and IT platforms
Implementing a general IT security policy for the company
Secure access, sharing and transfer of data
High standards of data protection when selecting our subcontractors and partners.
RIGHT OF ACCESS, RIGHT TO OBJECT
In accordance with the provisions of articles 38, 39 & 40 of the law of January 78, you have the right to access, rectify and object, on legitimate grounds, to the collection and processing of your personal data.
You may exercise your right of access by sending a letter to : Val Thorens Tourist Office - VAL THORENS 73440 LES BELLEVILLE or by e-mail to relationclient@valthorens.com
In certain circumstances, refusal to provide the necessary information as mentioned in § 3 may result in it being impossible to register you as a customer, to perform the contract for the sale of the product or service and, as a result, the customer may have to withdraw from the contract.
Your data may be used for the purposes of commercial communication, electronically by e-mail or by SMS, on our part and concerning products or services similar to those that you have acquired or to which you have subscribed. Your data may also be used by our sub-contractor, the Val Thorens Tourist Office, for the purposes of sending, in our name and on our behalf, information messages by e-mail or SMS concerning events in the resort (newsletter, for example).
In accordance with the applicable legal provisions, you have the possibility of objecting to receiving this type of communication when your personal data is collected and on any appropriate medium (reservation, contract, registration, online form, etc.). You may also exercise your right to object at a later date by using the ad hoc link which appears in the footer of each message sent, either by us or by the Val Thorens Tourist Office on our behalf.
Certain services are subcontracted to the following companies:
Customer knowledge and operational exploitation (e-mailing campaigns) :
Val Thorens Tourist Office - Maison de Val Thorens - 73440 Val Thorens Tel. 04 79 00 08 08
Manager: Vincent Lalanne-Cloute
SIRET NO.: 77650121500029
Technical services (hosting, deduplication, data quality, aggregation, anonymisation, etc.) :
Visitdata - 1005 Chemin de la Traverse - 26600 Beaumont-Monteux
Manager: Laurent Pouyet
SIRET NO.: 80318005800015
In accordance with Article 28 of the RGPD, these service providers are bound by strict confidentiality clauses prohibiting any use of the data entrusted to them that is not provided for in the service contract and requiring them to implement technical and organisational measures that meet security and personal data protection requirements.
PURPOSE OF PROCESSING
Collection and processing of your personal data
are carried out as part of the performance of the contract to which you are party (management of contracts, orders, deliveries and invoices, accounting and in particular management of customer accounts and handling of complaints, etc.).
also respond to the fulfilment of our legitimate interest in developing a commercial approach consisting of informing you, unless you object, of our products and services, promoting them and enabling you to benefit from preferential offers (management of technical canvassing operations, standardisation, enrichment and de-duplication of data, selection of persons to carry out loyalty, canvassing, survey, product testing and promotional actions, compilation of commercial statistics, etc.).Some of these operations rely on subcontractors who operate in compliance with article 28 of the RGPD.
We are taking part in a partnership with various players in the resort's tourism industry, the aim of which is to pool our customer knowledge, coordinate our communication campaigns and build customer loyalty. The partners in this programme are as follows:
Val Thorens Reservation
SETAM
SOGEVAB
ValthoParc
Val Tho Immo
ESF
Prosneige
Ski Cool
Transdev
Agence La Cîme
Tourist Office
Within the framework of this partnership, we entrust our two subcontractors mentioned in §1, i.e. the Val Thorens Tourist Office and the company Visit Data, with the task of :
manage your personal data on our behalf, send postal or digital mail, collect customer opinions, provide analytical solutions or audience measurement statistics) in compliance with the retention periods and under security conditions that comply with the requirements in force
to orchestrate, in our name and on our behalf, communications with you, in particular by electronic means of communication;
to avoid the risk of redundancy and saturation in the electronic communication sent to you on our behalf or by other entities of the station. This communication is organised in two cycles:
an annual relational communication cycle. The aim is to maintain a link with the customer without being oppressive, and to offer informative and experiential content (without a commercial offer). The e-mails are sent twice a month (September - May) and once a month (June - August).
a relational communication cycle for your stay. The aim of this cycle is to create a personalised relationship with you as soon as you book with us. The aim of this relationship is to inform you of good tips and practical advice before and during your stay and to measure your satisfaction. 11 multi-channel messages are sent out before, during and after your stay. This activity is carried out either indiscriminately on all the partner files, or on behalf of a particular partner and in this case only on a partner's customer file.
to send you, in our name and on our behalf, where necessary, safety information concerning snow conditions, weather, road conditions, etc.
to enable us to get to know you better and to respond better to your expectations by means of global studies carried out on your data and on the data of all the resort's customers collected by other entities present in the resort. Please note that these studies use your personal data after it has been anonymised and that there is no integration of external data or exchange or transfer of data between partners.
DATA COLLECTED
For the purposes of the processing described in § 2, the following data are collected and processed:
Identity: title, surname, first names, address, telephone number (landline and/or mobile), e-mail addresses, date of birth, internal processing code enabling the customer to be identified.
Data relating to the transaction, such as the transaction number, details of the purchase, subscription, good or service subscribed to.
Family situation: number of people in the household, number of children in the household
Data relating to the monitoring of the commercial relationship: requests for documentation, trial requests, products purchased, services or subscriptions subscribed to, quantity, amount, frequency, delivery address, purchase and service history, product returns, origin of the sale (vendor, representative, partner, affiliate) or order, correspondence with the customer and after-sales service, exchanges and comments from customers and prospects, person(s) in charge of customer relations, etc.
Data relating to the organisation and processing of competitions, sweepstakes and any promotional operation, such as the date of participation, responses to competitions and the nature of prizes offered.
Data relating to the contributions of people who post opinions on products, services or content, in particular their pseudonym
In principle, our products and services are intended for adults who are capable of entering into contractual obligations. Users who are minors must obtain the consent of their legal guardian prior to the communication of personal data concerning them.
DATA RECIPIENTS
The recipients of your personal data are our own management teams and those of our sub-contracted service providers.
Our subcontractors and their employees have access to your data on the basis of signed contracts which specify their obligations in terms of data security and confidentiality.
The use of social networks to interact with our website (in particular the "share" buttons on Facebook and Twitter) is likely to result in data being exchanged between the Tourist Office and its social networks. We therefore invite you to consult the personal data management policies of the various social networks to find out how they collect and process your data.
SHELF LIFE
Personal data relating to customers and collected for the purposes described in § 2 is kept for a period of five years from the end of the commercial relationship. This period takes into account the length of stay generally observed in terms of tourist numbers. At the end of this period and without any commercial interaction on your part, your data will be rendered anonymous.
Data used to establish proof of a right or contract, or stored to comply with a legal obligation, may be stored for a longer period and archived in accordance with the provisions in force (in particular those set out in the French Commercial Code, Civil Code or Consumer Code).
Personal data relating to non-customer prospects may be kept for a period of 3 years from the date of collection by the data controller or the last contact from the prospect (e.g. request for documentation). On expiry and without any commercial interaction on the part of the prospect, your data will be rendered anonymous.
SECURITY
As data controller, we implement appropriate technical and organisational measures in accordance with the applicable legal provisions, to protect your personal data against alteration, accidental or unlawful loss, use, disclosure or unauthorised access, and in particular :
Appointment of a data protection officer
Raising awareness of confidentiality requirements among our employees who have access to your personal data
Securing access to our premises and IT platforms
Implementing a general IT security policy for the company
Secure access, sharing and transfer of data
High standards of data protection when selecting our subcontractors and partners.
RIGHT OF ACCESS, RIGHT TO OBJECT
In accordance with the provisions of articles 38, 39 & 40 of the law of January 78, you have the right to access, rectify and object, on legitimate grounds, to the collection and processing of your personal data.
You may exercise your right of access by sending a letter to : Val Thorens Tourist Office - VAL THORENS 73440 LES BELLEVILLE or by e-mail to relationclient@valthorens.com
In certain circumstances, refusal to provide the necessary information as mentioned in § 3 may result in it being impossible to register you as a customer, to perform the contract for the sale of the product or service and, as a result, the customer may have to withdraw from the contract.
Your data may be used for the purposes of commercial communication, electronically by e-mail or by SMS, on our part and concerning products or services similar to those that you have acquired or to which you have subscribed. Your data may also be used by our sub-contractor, the Val Thorens Tourist Office, for the purposes of sending, in our name and on our behalf, information messages by e-mail or SMS concerning events in the resort (newsletter, for example).
In accordance with the applicable legal provisions, you have the possibility of objecting to receiving this type of communication when your personal data is collected and on any appropriate medium (reservation, contract, registration, online form, etc.). You may also exercise your right to object at a later date by using the ad hoc link which appears in the footer of each message sent, either by us or by the Val Thorens Tourist Office on our behalf.