Privacy policy
Introduction
In connection with the use of its services, and in particular the services available on its website, mobile site, online shop and mobile applications, SAS CV, as data controller, may collect and process personal data concerning you.
We are committed to complying with the rules on the protection of the privacy of prospective customers and visitors to our sites: website, mobile site, online shop and mobile applications. All personal data processing carried out in connection with the services available complies with the applicable local regulations on personal data protection, and in particular the provisions of the amended French Data Protection Act of 6 January 1978 and the General Data Protection Regulation (Regulation (EU) 2016/679) or “GDPR”.
1 - What are our commitments regarding personal data protection?
SAS CV undertakes to guarantee a high level of protection of the personal data of its customers, prospective customers, users of its sites (website, mobile site, online shop and mobile applications) and any other person whose personal data it processes.
SAS CV undertakes to comply with the regulations applicable to all the personal data processing it carries out:
- Your personal data is processed lawfully, fairly and transparently;
- Your personal data is collected for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes;
- Your personal data is kept in an adequate and relevant manner and is limited to what is necessary in relation to the purposes for which it is processed;
Your personal data is accurate and kept up to date, and every reasonable step is taken to ensure that data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay.
SAS CV implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk inherent in its processing operations, to meet regulatory requirements and to protect the rights and data of data subjects from the design stage of processing operations.
In addition, SAS CV contractually requires its subcontractors (service providers, suppliers, etc.) to provide the same level of personal data protection.
2 - What personal data do we collect?
A - Depending on the purpose of collection
The personal data we collect varies depending on the purpose of collection and the Service we provide to you.
Generally, we may directly collect the following categories of personal data:
- a) personal contact details, such as your surname, first name, email address, postal address and telephone number(s);
- b) the credentials used to access your online account, i.e. your username and password. We need these to create a personal user account;
- c) exchanges with us, which may include details of conversations via chat or the customer service;
- d) demographic information, such as your age, gender and lifestyle preferences (including your favourite products and your interest in them);
- e) browsing history, such as the pages visited, the date of the visit, the location at the time of the visit, or the IP address;
- f) payment information when a purchase or booking is made on one of our sites, online shops or applications. Generally, the invoice is issued in your name, with your billing address and payment details such as your credit card or bank account;
We may also collect personal data about you indirectly when you share content on social networks, websites, shops or applications relating to our products and services, or respond to our posts and promotional announcements on social networks.
B - Personal data concerning minors
SAS CV does not collect or process personal data relating to children under the age of 18 without the prior consent of the parents or holders of parental responsibility for the child.
If personal data concerning children is collected via our sites (website, mobile site, online shop and mobile applications), the parents or persons exercising parental authority may object by contacting us at the address given at the bottom of this page.
3 - How is personal data collected?
A - Means of collecting your data
In the course of our relationship, you may provide us with your personal data by various means, in particular on our sites (website, mobile site, online shop and mobile applications) when browsing the internet, making purchases or bookings, filling in the various data collection forms, subscribing to the e-newsletter, creating an account, submitting an application, posting comments on our social network pages, making any contact with our establishment, or when you provide us with your personal data in any other way.
B - IP address
An IP address is a series of numbers automatically assigned to your computer by your internet service provider each time you connect. With each of your requests on the website, our servers record a trace of your visit. We collect IP addresses in order to analyse trends on the website. We do not transmit any information that would allow you to be identified, which means that your session will be recorded but will remain anonymous to us. We may use your IP address in cooperation with your internet service provider to identify you in the event that we need to enforce the terms of use to protect our services or customers, or in order to comply with the laws in force.
C - Cookies
In order to constantly improve the quality of the services offered on our sites (website, mobile site, online shop and mobile application) and their suitability for your expectations, SAS CV may use “cookies”, text files used to identify your device when you connect to one of our services. The placing of a cookie or tracker on your device (computer, tablet, smartphone, etc.) allows SAS CV to collect information and personal data, depending on the settings you have chosen for your device.
Types of cookies used:
- a) Cookies essential to the use of the website. These allow you to use the main features of the website, such as purchasing or booking services, for example. If you disable the use of cookies, you will no longer be able to benefit from these features. The information stored may not be used for commercial purposes.
- b) Website performance cookies. Performance cookies allow us to optimise our website and to detect any technical problems you may encounter. They allow us to gather information on how you use the website, in particular the number of visits per page, the number of error messages displayed, the time spent on a page, or the number of clicks on an area of the website. The information stored may not be used for commercial purposes.
- c) Functionality cookies. These cookies allow the website to remember the choices you have made (such as your username, the language chosen or the region in which you are located) and to provide more precise and personal features. These cookies may also be used to remember changes made by the user, such as text size or font. They may also be used to provide services you have requested, such as watching a video or leaving a comment on a blog. The information collected by these cookies may be anonymised and cannot track your browsing activity on other websites. By using our website, you agree to receive this type of cookie on your device.
- d) Advertising and marketing cookies. These cookies collect information about your internet browsing habits in order to offer you advertisements that are tailored to you and match your interests. They also make it possible to limit the number of times you see an advertisement and help us assess the effectiveness of our advertising campaigns. They are generally installed by advertising networks with the permission of the website operator. They remember the visits made to a website and share this information with other companies (advertisers, for example). Targeting or advertising cookies are often linked to website features provided by the partner company. The information is collected and shared with third parties in order to offer audience targeting and optimisation solutions to advertisers and publishers. No personal data is collected and no individual can be identified through the data collected.
- e) Cookies from third-party websites and social networks. Our website contains links and/or content leading to other websites and social networks, and we do not know which cookies they use. To find out more, please consult the information provided by these third-party websites and social networks about their own cookies.
D - Respect for your privacy
We are committed to protecting your privacy and comply with the following 2 principles.
- We do not associate with your cookies any information that would allow you to be identified directly and personally. Cookies in no way make it possible to know your address, date of birth, telephone number or any other information that would allow you to be identified.
- We do not provide any personal information to advertisers or to third-party websites that display our interest-based advertisements.
If your computer or mobile device is used by several people, or if it has several browsers, the content displayed to other users may match your preferences. If you wish, you can change your browser settings.
For more information on how cookies and targeted advertising work, you can consult the Cnil website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
E - Links to third-party websites
Our sites (website, mobile site, online shop and mobile applications) may contain links redirecting to third-party websites.
We accept no liability for the collection, use, management, sharing or disclosure of data and information by these third parties.
The disclosure of information on third-party websites is governed by the privacy policy and terms of use of those websites. We recommend that you read the privacy policies of these websites before submitting any personal information.
4 - What is the data that may be collected used for?
Your data is mainly used for the purposes of booking and purchasing (provision of services, specific services and products), prospecting, customer loyalty, promotional activities, commercial information, satisfaction surveys, the organisation of competitions, new services and products intended to improve your customer experience at our establishment, statistical studies, recruitment, after-sales service, and the handling of your requests and/or complaints. Apart from cases where your consent has been obtained (in particular to send you personalised offers), the processing of your data for the various purposes referred to above is necessary in particular:
- To ensure the performance of the service contract;
- To comply with a legal obligation;
For the purposes of the legitimate interests pursued by our establishment (in particular developing new services and offers, improving customer service, etc.).
More specifically, your data is used:
- To enable you to benefit from all the services available on our establishment’s website, mobile site, shop and mobile applications: creation of a user account, e-newsletter, booking management, assistance and complaints, management of loyalty programmes, etc.;
- To enable you to browse our websites;
- To match our information, notifications, offers and other forms of service as closely as possible to your interests;
To facilitate the completion of administrative formalities relating to booking and purchasing.
5 - How long is your data kept?
SAS CV undertakes to keep your personal data for no longer than is necessary for the purposes for which it is processed.
Retention periods are defined according to the purposes of the processing carried out by SAS CV and take into account, in particular, the applicable legal provisions requiring a specific retention period for certain categories of data, any applicable limitation periods and the recommendations of the CNIL concerning certain categories of data processing.
6 - Who may access your personal data?
A - Recipients of your data
The data collected on our website, mobile site, online shop and mobile applications may be disclosed to our internal staff, or to its ancillary service providers (subcontractors, service providers, banks), in connection with the performance of all or part of the services referred to above. Please note that, in this context, SAS CV requires its service providers to implement strict measures to ensure the confidentiality and protection of this data.
B - Data transfers outside the European Union
Personal data may be processed outside the European Economic Area (EEA). If this is the case, SAS CV will make every effort to ensure that this international data transfer has an adequate level of security and adequate safeguards.
7 - How can you exercise your rights?
In accordance with the applicable personal data protection regulations, you may at any time exercise your rights of access, rectification and erasure of data concerning you, as well as your rights to restriction of and objection to processing and to the portability of your personal data.
In addition, you have the legal right to set out instructions concerning what happens to your personal data after your death.
Furthermore, any person who was a minor at the time their personal data was collected may obtain its erasure as soon as possible.
These rights may be exercised by post at the following address:
SAS CV, Place de la Gare 9, 1630 Bulle, Switzerland – [email protected]
In this context, please accompany your request with the details necessary to identify you (surname, first name, email) as well as any other information necessary to confirm your identity. You also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés in the event of a breach of the applicable personal data protection regulations, and in particular of the GDPR.
8 - IT security / transaction security
Ensuring the security and confidentiality of the personal data you entrust to us is a priority for SAS CV. We therefore implement all appropriate technical and organisational measures, having regard to the nature, scope and context of the personal data you provide to us and the risks presented by its processing, to preserve the security of your personal data and, in particular, to prevent any accidental or unlawful destruction, loss, alteration, disclosure, intrusion or unauthorised access to this data.
We offer you a secure online payment system using the latest current technologies.
SAS CV strives to combat identity theft practices on the internet. This is why, for example, we use a system for detecting fraudulent bank card payments. This system is intended to protect you in the event of the loss or theft of your bank card.
The security and confidentiality of personal data depend on the good practices of everyone. This is why we invite you not to disclose your passwords to third parties, to always log out of your profile and your social media account (particularly in the case of linked accounts) and to close your browser window at the end of your session, especially if you access the internet from a computer shared with other people. This will prevent other users from accessing your personal information.
9 - Contact us
For any further questions regarding this policy or the way in which SAS CV processes your personal data, please contact us at the following address: [email protected]
10 - Changes to the statement
SAS CV reserves the right to adapt its personal data protection policy. When we make substantial changes to this Statement, we will publish a link to the Statement on the home page of our website.
11 - Objection to telephone canvassing
Users may register on the opt-out list for telephone canvassing by visiting the following link: https://www.bloctel.gouv.fr/










