Purpose of the policy
Valmorel Gestion attaches great importance to respecting privacy. This is one of the reasons why we have a specific policy for confidentiality and the protection of personal data.
We are committed to protecting your rights in terms of confidentiality and ensuring that your personal data is protected.
This personal data management policy details the types of personal data that we collect, how we process them and protect them in relation to the services we offer.
The data is collected when you carry out actions via the digital platforms (websites, terminals) managed by Valmorel Gestion
No processing is implemented within the structure concerning user data if it does not relate to personal data collected by or for our services or processed in relation to our services and if it does not comply with the general principles of the GDPR.
This policy also reminds you of your rights and how to exercise them with our services.
We maintain adequate technical and organisational measures to protect the personal data you provide us against destruction, loss, alteration, disclosure or unauthorised access to your personal data, whether accidental or unlawful.
This Privacy and Personal Data Protection Policy is published by Valmorel Gestion represented by its Director who is the data controller.
Your rights and how to exercise them?
Law No. 78-17 dated 6th January 1978 relating to information technology, files and freedom, as well as the European General Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27thApril 2016, grant you specific rights such as the right to obtain consent, the right to access, oppose personal data concerning yourself and to rectify or delete incomplete or inaccurate information concerning yourself.
You can also decide to issue directives relating to the retention, deletion and communication of your personal data after your death.
If you believe that the way in which we have processed your personal data infringes data protection legislation, you can submit a complaint to the competent supervisory authorities (CNIL: https://www.cnil.fr/fr/plaintes), in particular in the Member State of your normal residence, your place of work or the place of the alleged infringement.
You can exercise each of these rights:
By sending us an email to the following address: parking@valmorel.com
By contacting us via the various online contact forms on our sites
By contacting us by post: Valmorel Gestion – 210 Route de crève tête – 73260 Valmorel
By following the instructions on the CNIL website at this address: https://www.cnil.fr/agir
Personal data
Personal data means information that can identify you directly or indirectly. It generally includes information such as your name, postal and email address, telephone number, but also other information such as your IP address, connection and browsing data.
When you provide us with your personal data, we process it in accordance with this policy.
If you do not agree with the terms of this policy, you are free not to provide personal data. You are nevertheless informed that the communication of some of this data conditions access to the services and that in the absence of this communication certain functionalities and services may be degraded.
Please consult the following section for details on the different types of personal data that we may collect, the purposes concerned and the legal basis for this processing.
Data processed, bases and purposes of processing
The personal data collected about you is mainly, depending on your choices and the settings of your terminal (in particular with regard to cookies): your title, surname, first name, email address, postal address, country, telephone number, your connection logs (IP address), connection data and browsing data, as well as the information you communicate to us when you contact us (mainly for archiving purposes).
Your personal data is collected in order to:
Respond to your questions, complaints, registrations, sent by email or via our contact or registration forms;
Send you information (newsletters) when you have requested them;
Produce statistics;
Prevent fraud.
The data that is essential for us to be able to fulfill the purposes described above are indicated by an asterisk on the various pages of our sites and applications. If you do not fill in these mandatory fields, we will not be able to respond to your requests and/or provide you with the requested services. The other information is optional and allows us to improve our services to you.
The processing of your personal data is justified by different laws (legal basis) depending on the use we make of the personal data. Below you will find the legal bases and retention periods that we apply to our main processing operations.
Among the applicable legal bases, in accordance with Articles 6.1. of the GDPR (European regulation on the protection of personal data) and article 7 of the Data Protection Act, we use in particular:
Legal obligation: the processing of your personal data is made mandatory by a legal text
The contract: the processing of personal data is necessary for the execution of the contract to which you have consented, this may be the case in particular when you subscribe to a service
Legitimate interest: the processing is necessary to satisfy the legitimate interest of Valmorel Gestion
Consent: you accept the processing of your personal data by means of express consent (checkbox, click, newsletter subscription). You can withdraw this consent at any time
Recipients
The personal data collected is intended for the internal departments of Valmorel Gestion authorised to receive it.
In the event that the structure entrusts data processing activities to subcontractors, only subcontractors who provide sufficient guarantees regarding the implementation of appropriate technical and organisational measures so that the processing meets the reliability and security requirements required by the applicable regulations and guarantees the protection of the rights of individuals, are used. The structure undertakes to use only subcontractors based in the European Economic Area or in countries recognised by the European Commission as having an adequate legislative level in terms of data protection.
In accordance with the regulations in force, your personal data may be transmitted to authorised third parties (public bodies, legal authorities, legal assistants and ministerial officers) by a legislative or regulatory provision, within the framework of a specific mission or the exercise of a right of communication.
When the structure is faced with a request for communication from a third party based on a text, it ensures that the provision put forward is in force, and that it actually provides for a right of communication for the benefit of the requester. Valmorel Gestion ensures that it only transmits the data provided for by the text or, in the event of imprecision in the latter, only the data that it considers strictly necessary to achieve the desired goal. The communication of data will be carried out in accordance with methods that ensure their security, by adapting the measure appropriate to the nature of the data and the risks involved.
Data retention periods
Valmorel Gestion keeps data confidentially for the time necessary to process the referral or request and in compliance with the legal deadlines in force.
Your data is then archived with restricted access for an additional period for limited reasons authorised by law (legal obligation, litigation, disputes, etc.).
These periods vary according to requests, procedures, referrals and depend in particular on legal requirements.
You will find some examples of retention periods in the table below:
| Purpose of procession | Legal basis | Duration of storage in active database | Archiving | Useful observations |
| Customer management | Contrat | 5 years from the last activity | 5 to 10 years | |
| Electronic prospecting | Legitimate interest | 3 years from the last activity | You can object to this at any time by contacting us | |
| Telephone prospecting | Legitimate interest | 3 years from the last activity | You can object to this at any time by contacting us | |
| Electronic prospecting by third parties | Consent | 3 years from the last activity | You can withdraw you consent at any time by contacting us | |
| Management of the exercise of I&L rights | Legal obligation | 1 year | ||
| Sending the newsletter | Consent | Until unsubscribing | You can withdraw your consent at any time by contacting us |
Advertising and updating of the policy
This policy comes into effect on 25th May 2018. This procedure may be updated at any time.