Privacy policy

1. Preamble

The personal data you entrust to us when you visit our website is processed in accordance with the French Data Protection Act of January 6, 1978, as amended, and the General Data Protection Regulation of April 27, 2016, known as the "RGPD".

In the interests of transparency, we hereby present our privacy policy, the purpose of which is to inform you of the conditions under which we may collect and process your personal data when you consult our site.

2. Identity and contact details of the data controller and DPO

The person responsible for processing your data is OFFICE DE TOURISME D'ÉPINAL ET SA REGION located at 7 Avenue de Saint Dié 88000 EPINAL.

To guarantee the protection of your personal data, we have appointed a Data Protection Officer (DPO).

If you have any questions concerning the management of your personal data or the exercise of your rights, please contact our Data Protection Officer:

• by e-mail to dpo@epinal.fr

3. Purposes and legal basis of the processing operations carried out

OFFICE DE TOURISME D'ÉPINAL ET SA REGION carries out various processing operations based on various legal grounds, such as: your consent, a legal or regulatory obligation to which we may be subject, our legitimate interest or contractual performance.  

1) The processing carried out on the basis of your consent is carried out solely for the purposes of :

- Management of contact and reservation requests

- Management of newsletter mailings

- Managing cookies subject to your consent

2) Some processing is necessary for the purposes of the legitimate interests pursued by the CENTRE DES CONGRES D'EPINAL.

- Management of site administration and security: the legitimate interest being to ensure the security and functionality of our website.

- Cookies deposited strictly for the provision of a service, and those that enable or facilitate electronic communication.

4. Categories of data processed

Connecting to our site automatically involves the collection of technical and identification data about you.

Technical data: IP address; time stamps (date and time of connection); technical data relating to the equipment and browser used; and data relating to website navigation are collected. 

We also collect non-technical data via our forms: 

Last name; first name; title; e-mail address; telephone number; company name

5. Recipients of personal data

• Strictly authorized OFFICE DE TOURISME D'ÉPINAL ET SA REGION in-house personnel.
• Subcontractors and service providers of the OFFICE DE TOURISME D'ÉPINAL ET SA REGION who process data on its behalf and for its account

- Hosting : OXYD S.A.R.L

1, rue Mozart

92110 Clichy

Sales department

Telephone: 01 71 250 350, Monday to Friday, 9.30 a.m. to 6 p.m.

E-mail: commercial@oxyd.fr

Website: https: //www.oxyd.fr/

- platform maintenance and administration: OFFICE DE TOURISME D'ÉPINAL ET SA REGION 7 Avenue de Saint Dié 88000 Epinal

- Publisher: Section 4 ( https://section4.fr )

14 rue Boulay de la Meurthe

88000 Épinal

contact@section4.fr

03 72 54 04 44

6. Data retention period

L'OFFICE DE TOURISME D'ÉPINAL ET SA REGION undertakes to keep your personal data for no longer than is necessary for the purposes for which it was collected.

Management of contact and reservation requests:
Data is kept for as long as it takes to process your request. 

Management of newsletter mailings:
Data are kept until a request to unsubscribe is submitted.

Management of your RGPD rights:
1year in the event of exercising the right of access or rectification
3years in the event of exercising the right of opposition

7 - Transfer of data outside the European Union

The Epinal Convention Centre does not transfer data outside the European Union.

8 - Third-party services

Third-party companies may collect personal data about you, in particular your Internet Protocol (IP) address. They may process other data from other sources for their own statistical and technical purposes. Such processing is therefore subject to their own privacy policies.

> GOOGLE ANALYTICS

Google Analytics is an offering of Google Ireland Limited, a company incorporated under the laws of Ireland, whose registered office is at Gordon House, Barrow Street, Dublin 4, Ireland. The company may place cookies on your terminal. These cookies enable Google to analyze the use of our website. In this way, Google obtains personal data such as your IP address.
The transfer of personal data outside the EU to Google's servers in the USA is governed by the Privacy Shield, to which Google is a member. For more information on Google's data protection management and settings options, visit https://policies.google.com/privacy.

> GOOGLE FONT

To ensure an attractive display of our services, we use "Google Fonts", which integrates selected fonts into our website. Google Fonts is an offering of Google Ireland Limited, a company incorporated under the laws of Ireland, whose registered office is at Gordon House, Barrow Street, Dublin 4, Ireland. "The transfer of personal data outside the EU to Google's servers in the United States is governed by the Privacy Shield, to which Google is a member. For more information on Google's data protection management and settings options, see their privacy policy https://policies.google.com/privacy.

> Google Captcha (www.google.com/recaptcha/) - 258 call(s)

To protect our website from abusive automated spam, we use Google's "reCAPTCHA" service, which checks whether data entered on our website (e.g. on a contact form) has been entered by a user or by an automatic program.

Google Recaptcha is an offering of Google Ireland Limited, a company incorporated under the laws of Ireland, whose registered office is at Gordon House, Barrow Street, Dublin 4, Ireland.

Personal data may be transferred outside the EU. For more information on Google's data protection policies and setting options, please consult their privacy policy: https://policies.google.com/privacy.

Link to privacy policy: https: //policies.google.com/privacy?hl=fr

> SITLOR

In order to provide you with a list of upcoming events at the Convention Center, we use SITLOR to upload these events to our website.

Sitlor is a service of the Agence Régionale du Tourisme Grand Est, SIRET n° 848 825 196 000 27, headquartered at 24 rue de Verdun 68000 COLMAR. 

Link to privacy policy: http: //www.sitlorpro.com/politique-de-confidentialite

> scontent.cdninstagram.com

The scontent.cdninstagram.com server is an Instagram server responsible for providing the site's static content (photos, videos, images, etc.). Here's their privacy policy: https: //help.instagram.com/51952212510787

9 - Safety

In accordance with current legislation and regulations, OFFICE DE TOURISME D'ÉPINAL ET SA REGION and any subcontractors undertake to maintain the confidentiality, availability and integrity of your personal data by implementing all necessary technical and organizational measures.

10 - Exercising your rights

In accordance with current legislation and regulations, you have the following rights:

• The right to access your data at any time (article 15 of the RGPD)
• The right to rectify, update or complete your data (Article 16 of the RGPD).
• The right to demand the erasure of your data (Article 17 of the RGPD).
• The right to withdraw your consent at any time (article 13-2 c of the RGPD).
• The right to limit the processing of your data (Article 18 of the RGPD)
• The right to object to the processing of your data (Article 21 of the RGPD).
• The right to portability of your data, where it is subject to automated processing (Article 20 of the RGPD).

To exercise these rights, please contact our Data Protection Officer (DPO)

- Contact our DPO electronically: dpo@epinal.fr

- Contact our DPO by post :

OFFICE DE TOURISME D'ÉPINAL ET SA REGION - To the attention of the Data Protection Officer

9, rue du Général Leclerc

B.P. 25 - 88026 EPINAL Cedex

In the event of any difficulties relating to the management of your data or the exercise of your rights, you may lodge a complaint with the CNIL: website:(https://www.cnil.fr/fr/plaintes).