- The way their personal data is collected and processed. All data likely to identify a user must be considered personal data. In particular this means first name, last name, age, mailing address, email address, a user’s location or even IP address.
- Users’ rights concerning this data
- To whom this data is sent
- Possibly, the site’s policy towards cookies
The collection and processing of data of the site’s users respect the following principles:
- Legality, good faith and transparency: the data can only be collected and processed with consent of the users who own the data. Each time personal data is collected, users will be notified that their data was collected, and for what reasons their data was collected.
- Limited purposes: data is collected and processed to respond to one or more objectives set out in these general terms and conditions of use
- Minimizing the collection and processing of data: only data necessary to properly execute objectives being pursued by the site are collected
- Retention of data for limited time: data is retained for a limited period, indicated to users.
- Integrity and confidentiality of data collected and processed: the party responsible for data processing promises to guarantee the integrity and confidentiality of collected data.
Personal data can only be collected and processed if at least one of the conditions listed hereafter is followed:
- The user has expressly consented to processing
- Processing is necessary for the proper execution of a contract
- The processing responds to a legal obligation
- Processing is justified by a need associated with protecting the vital interests of the individual concerned or another individual
- Processing can be justified by a need associated with executing a task in the public interest or one that falls under the exercise of official authority
- Processing and collection of personal data are necessary for the purposes of legitimate, private interests being pursued by the processing party or by a third party
A. DATA COLLECTED AND PROCESSED AND COLLECTION METHOD
The personal data collected on the skiandrent.com site is as follows:
- Mandatory: Last name, first name, email, mailing address, city, country of residence
- Optional: title, birthdate, first name of individual(s) associated with each package or piece of equipment rented, landline or mobile phone number, size, shoe size, age, sex, ski ability level, weight, calf type, foot width, head size.
This data is collected when users perform one of the following operations on the site: Use of contact forms, online order on the https://skiandrent.com/ website, newsletter signup.
The processing party will retain all the data collected in the site’s information systems under reasonably secure conditions for the following periods:
- Encrypted bank data handled by a third banking party for the time it takes to complete the payment transaction
- 6 months for login data
- 3 years from the end of a business relationship for customers
- 5 years involving a rental contract
- 10 years involving accounting and financial data
Data collection and processing respond to the following purposes:
- Managing online reservations
- Secondary purposes:
- Creating an account
- Ordering on the website
- Tracking an order
- Sending personalised recommendations and promotions for similar services or products
- Sending the newsletter
- Requesting feedback on transactions or customer experiences
- Measuring audiences and creating statistics
B. TRANSMISSION OF DATA TO THIRD PARTIES
The data may be communicated to the third party (parties) listed hereafter:
To technical service providers, especially those who:
- Process payments
- Route emails, both transactional and sales-related
- Analyse traffic on the Group’s websites
In keeping with regulations concerning the processing of personal data, users possess the rights listed hereafter.
For the data processing party to grant requests, users must communicate: their first and last names, as well as their email address.
The data processing party must respond to users within a period of 30 (thirty) days, which can be extended to 60 (sixty) days, depending on the complexity or number of requests.
A. PRESENTATION OF USERS’ RIGHTS IN COLLECTING AND PROCESSING DATA
a. Right to access, correct and right to erase
You have a right to access, correct, erase and limit, and a right to portability and opposition of your personal data processed.
You can exercise these rights at any time and at no cost by sending an email to а firstname.lastname@example.org
b. Right not to be subject to a decision made solely on automatic processes
Users have the right not to be subject to a decision made solely on an automatic process, if the decision produces legal effects for them, or affects them significantly in a similar way.
c. Right to appeal to the responsible supervisory authority
In the event the data processing party decides not to respond to users’ requests, and users wish to challenge this decision, or if they think one of the rights listed below has been infringed, they have the right to appeal to the supervisory authority in Andorra or to any competent court in Andorra.
Any request must be signed and accompanied by a photocopy of a piece of identification and specify the address where a request is expected.
B. PERSONAL DATA OF MINORS
Only minors 15 years and older may consent to the processing of their personal data.
If a user is a minor under 15 years old, consent from a legal representative will be required before the personal data can be collected and processed.
The site’s publisher reserves the right to verify in any way that a user is over 15 years old, or that they have obtained consent from a legal representative before browsing the site.
The site may resort to the technology of ‘cookies’.
A cookie is a small file (under 4KB) stored by the site on a user’s hard drive, containing information relating to the user’s web browsing habits.
These files allow it to process statistics and traffic information, facilitate browsing and improve the service for users’ convenience.
This consent by the user is considered valid for a period of 13 (thirteen) months maximum. At the end of this period, the site will again ask for the user’s authorisation to save cookies on their hard drive.
Users are made aware that they may oppose cookies being saved by configuring their web browser.
For reference, users may find the steps to follow at the addresses below to configure their web browsers to stop cookies from being saved:
- Chrome: https://support.google.com/
- Firefox: https://support.mozilla.org/
- Safari: https://support.apple.com/
- Internet Explorer: https://support.microsoft.com/
- Opera: https://help.opera.com/
In the event users decide to deactivate their cookies, they may continue browsing the site. However, any problem on the site caused by this change cannot be considered the fault of the site’s publisher.
The site’s publisher reserves the right to modify it to guarantee it complies with applicable laws.