Privacy policy

ARTICLE 1: PREAMBLE

The purpose of this privacy policy is to inform users of the :

How their personal data is collected. Personal data is any information that can be used to identify a user. These may include, but are not limited to: first and last names, age, postal or e-mail address, location or IP address;
On the rights they have concerning this data;
On the person responsible for processing the personal data collected and processed ;
On the recipients of this personal data;
About the site’s cookie policy.

This policy supplements the legal notice and the General Conditions of Use, which can be consulted by users at the following address:

ARTICLE 2: PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data is :

Processed lawfully, fairly and transparently in relation to the data subject;
Collected for specified, explicit and legitimate purposes (see Article 3.1 hereof) and not further processed in a manner incompatible with those purposes;
Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
Accurate and, if necessary, up-to-date. All reasonable steps must be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
Kept in a form that permits identification of the data subjects for no longer than is necessary for the purposes for which they are processed;
Processed in such a way as to ensure appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is lawful only if, and insofar as, at least one of the following conditions is met:

The data subject has consented to the processing of his/her personal data for one or more specific purposes;
The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject’s request;
The processing is necessary to comply with a legal obligation to which the data controller is subject;
The processing is necessary to safeguard the vital interests of the data subject or of another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN BROWSING THE SITE

Article 3.1: Data collected

Article 6.1. a) of the RGPD The Data Subject has consented to the processing of his/her Data for one or more specific purposes.

Article 6 1. b) of the RGPD The processing is necessary for the performance of a contract to which the Data Subject is a party or for the performance of pre-contractual measures taken at the Data Subject’s request.

Article 6. 1 c) of the RGPD Processing is necessary for compliance with an obligation to which the Data Controller is subject (in particular Article L. 123-22 of the French Commercial Code, Article L34-1 of the French Post and Electronic Communications Code).

Article 6. 1. f) of the RGPD The processing is necessary for the purposes of the legitimate interests pursued by cosmic-horror.store for the purposes of improving knowledge of its Users, and with the aim of offering an improved user experience

Customer identity and contact details

This collection is used for :

Customer account creation. Article 6 1. a,b,c
Management and processing of the Order for transmission to the delivery service. Article 6 1. b)
Customer relationship monitoring. Article 6 1 . a,b,c
To create invoices. Article 6 1. . a,b,c
Commercial offers, if the customer or owner of the customer account has given his consent via an optin. Article 6.1. . a,b,c

Payment data

This collection is used for :

Management and processing of order payment (order placement, direct debits, customer refunds). Article 6 1. b)

Usage data including cookies

Production of audience and usage statistics. Number of users, source, etc. Article 6.1. . a,f
Retargeting, marketing. Article 6.1. . a,f
Site improvement and user experience. Article 6.1. . a,f

Article 3.2: Data collection method

Personal data is collected when you perform the following operations on the platform if you accept it via the cookie collection tool:

Facebook Pixel: Track visitor actions on the website, and see if there are any conversions.

Google Analytics: Essential for the management of our website, it enables us to measure indicators such as traffic, the products most consulted and the geographical distribution of visitors.

Facebook Conversion Tracking: Track visitors’ actions on the website to see if they make purchases or take other actions related to the site they’re on.

Facebook Custom Audiences: Create a customized audience of users who have visited or performed specific actions on your website, and reach them with personalized ads.

Instagram: Allows you to track visitor actions on the website, and see if there are any conversions.

They are kept by the data controller under reasonable security conditions for a period of : 24 months

The company may retain certain personal data beyond the above-mentioned periods in order to meet its legal or regulatory obligations.

Article 3.3: Data hosting

The site is hosted by :

Infomaniak Network SA

Rue Eugène Marziano 25

1227 Les Acacias (GE)

Article 3.4: Transfer to a third-party company

Chalet booking data transmitted to “Smoobu” channel manager solution

Article 3.5 : Cookies policy

The Site ensures that the User’s personal information is collected and processed in compliance with the French Data Protection Act no. 78-17 of January 6, 1978.

In accordance with the French Data Protection Act of January 6, 1978, Users have the right to access, rectify, delete and oppose their personal data. The User exercises this right :

by e-mail to camping-lesoleil@orange.fr

via your personal space ;

Any use, reproduction, distribution, marketing or modification of all or part of the Site without the Publisher’s authorization is prohibited and may result in legal action and prosecution as provided for in the French Intellectual Property Code and the French Civil Code.

For further information, please refer to the terms and conditions of use of the cosmic-horror.shop website, available under the heading “Terms and conditions of use”.

For further information, please refer to the terms and conditions of sale of the cosmic-horror.shop website, available under the heading “Terms and conditions of sale”.

For further information on the protection of personal data, please refer to the Charter on the protection of personal data on the cosmic-horror.shop website, accessible under the heading “Personal data”.

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: The data controller

Personal data are collected, Hervé Marietti

The data controller can be contacted as follows:

By e-mail: camping-lesoleil@orange.fr

Article 4.2: The Data Protection Officer

The Data Protection Officer of the company or the person in charge is :
Hervé Marietti

camping-lesoleil@orange.fr

If, after contacting us, you feel that your “Data Protection” rights have not been respected, you can send a complaint to the CNIL.

ARTICLE 5: THE USER’S RIGHTS WITH REGARD TO DATA COLLECTION AND PROCESSING

Any user concerned by the processing of their personal data may avail themselves of the following rights, pursuant to European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):

Right of access, rectification and right to erasure of data (laid down respectively in Articles 15, 16 and 17 of the RGPD);

Right to data portability (Article 20 of the RGPD);

Right to limit (Article 18 of the GDPR) and object to data processing (Article 21 of the GDPR);

Right not to be subject to a decision based exclusively on an automated process;

Right to determine the fate of data after death ;

Right to refer the matter to the competent supervisory authority (Article 77 of the RGPD).

To exercise your rights, please send an e-mail to camping-lesoleil@orange.fr

In order for the data controller to process the user’s request, the user may be required to provide certain information, such as first and last names, e-mail address and account, personal space or subscriber number.

Visit cnil.fr for more information on your rights.

ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY

The publisher of the cosmic-horror.shop site reserves the right to modify this Policy at any time in order to ensure that users of the site comply with current legislation.

Any modifications shall not affect purchases previously made on the site, which shall remain subject to the Policy in force at the time of purchase and as accepted by the user when validating the purchase.

The user is invited to take note of this Policy each time he uses our services, without it being necessary to formally notify him.