FR
EN
Gestion des Données Personnelles

Personal Data Management

Gestion des Données Personnelles

MONT-BLANC Natural Resort

Identification of the data controller

In accordance with the obligations arising from Law No. 2004-575 of June 21, 2004 on confidence in the digital economy, you will find this information under the Legal Notices section.

Personal data management

Your data may be processed in several situations:

Type of data collected

The data collected and processed are, depending on the type of need, everything related to the commercial relationship. This may include your names, first names, postal address, email address, company name, your position, phone number.

We may collect your IP address and browser type for the purposes of administering our systems and/or establishing statistics without identifying any other individual information.

In some cases, we may also use cookies, which are small files of letters and numbers downloaded to your device when you access our sites. We mainly use cookies to recognize you when you log back into our sites and to display content that may match your interests.

The default settings of internet browsers are usually set to accept cookies, but you can easily change this by modifying your browser settings. However, please note that if you choose to disable cookies, some parts of our sites may not be accessible. We invite you to consult our detailed rules applicable to "Cookies".

This data helps us compile a list of people interested in our services and who share the same values as the Compagnie du Mont-Blanc group.

We do not collect so-called "sensitive" data such as racial or ethnic origins, political, philosophical or religious opinions, trade union membership, data relating to health, sexual life or offenses, convictions and security measures.

Use of collected data

The data you entrust to us is primarily used to confirm your identity and manage the customer-prospect relationship as defined by the CNIL Simplified Standard NS-048. This management is essential for our business as it allows us to have your information to contact you and provide our services, in particular to respond to your requests or to regularly send you news and information about our products, operations and/or activities that may be of interest to you.

We also use your data to improve your digital experience on our sites: understand your interest in our sites and their content, manage your online account, validate your participation in our operations, process your payments, ensure that our sites are presented in the manner most suited to you and your device, and protect you against potential fraudulent actions.

We record, store and process your data for the entire purchase process, including for any subsequent warranties, for our services, technical administration, for marketing purposes specific to our company, as well as to combat offenses and fraud. Your personal data will only be transmitted to third parties if the law permits, including for contract performance purposes, for billing purposes, for marketing purposes or if you have previously consented. In the context of order execution, the service providers we use (such as the carrier or the bank for payment validation) receive from us, for example, only the data necessary for the execution of the order and the contract. Our service providers may only use the data thus transmitted for the execution of their mission.

Security, confidentiality, recipients and transfer of your data

We aim to always keep your personal data in the safest and most secure manner, and only for the duration necessary to achieve the purpose pursued by the processing. In this perspective, we take appropriate physical, technical and organizational measures to prevent, as far as possible, any alteration or loss of your data or any unauthorized access to it.

On our e-commerce sites, we manage your payment information using methods that meet industry standards (such as PCI DSS).

All this personal information is confidential and is only accessible by our services, our business partners and our service providers and only to the extent necessary to accomplish the tasks entrusted to them. Your personal data is not intended to be transferred or sold.

Please note that we strictly require our service providers to use your personal data only to manage the services we ask them to provide. We also ask these providers to always act in compliance with applicable data protection laws and to pay particular attention to the confidentiality of this data.

The Compagnie du Mont-Blanc group is located on French territory and assures you that your personal information is stored on French territory and cannot be transferred outside the European Union.

Retention period of your personal information

The data you entrust to us is primarily used to confirm your identity and manage the customer-prospect relationship as defined by the CNIL Simplified Standard NS-048. This management is essential for our business as it allows us to have your information to contact you and provide our services, in particular to respond to your requests or to regularly send you news and information about our products, operations and/or activities that may be of interest to you.

The Compagnie du Mont-Blanc group only retains your data for the duration necessary for the operations for which they were collected and in compliance with current legislation.

For prospects and visitors, data is retained for 3 years from the last contact or collection.

For clients, data is retained for 5 years from the end of the commercial relationship and then archived for 5 years.

These retentions do not exceed the duration necessary for the purposes for which they are retained, in accordance with current provisions and compliance with the legal obligations of the Compagnie du Mont-Blanc group.

Purposes and lawfulness of processing

The personal information you provide to us is used for:

These processing operations are necessary to comply with our legal obligations, to execute a contract of which you are a party or for our legitimate interests. Otherwise, your consent will be requested.

Your rights and how to exercise them

In accordance with Regulation (EU) 2016/679 on the protection of personal data, you have the right of access, right of rectification, right to erasure (right to be forgotten), right to object, right to limitation of processing, right to portability regarding your data. You can also define directives relating to the retention, erasure and communication of your personal data after your death. You may, for reasons relating to your particular situation, object to the processing of data concerning you. Subject to a breach, if you believe, after contacting us, that your Data Protection and Freedom rights are not respected, you can file a complaint online or by post with the CNIL (instructions available on the CNIL website).

You can exercise each of these rights:

Consent collection

Your data cannot be collected without your clear and informed consent. Specifically, you are informed before each collection of your data and you can object to it.

Right to rectification or deletion

You can modify or delete at any time the information entered in your profile, whether on our Site or in your private space. Information related to the exercise of this right of rectification or deletion (for example your contact details) is retained for 1 year from the date of our response, then deleted at the end of this period.

Right to information

This policy contains all information relating to the purposes of processing that may be carried out, the categories of personal data processed and the recipients or categories of recipients to whom the data is communicated.

Right to object

The right to object, as its name suggests, allows you to object to the processing of your data. Specifically, you have the possibility to delete your account. Information related to the exercise of this right to object (for example your contact details) is retained for 1 year from the date of our response and will be permanently deleted beyond the legal limitation period (three years).

Right of access

You can ask us directly if we hold data concerning you and also information relating to their processing (such as the categories of data processed). This right also allows you to ask us to communicate all of this data to you. Information related to the exercise of this right of access (for example your contact details) is retained for 1 year from the date of our response, then deleted at the end of this period.

Publication and updating of the policy

This policy comes into effect on May 1, 2018

This procedure will be updated at least every three years.