Privacy policy

In accordance with the provisions of the legislation in force on the protection of personal data, we inform you that your data will be incorporated into the processing system belonging to the OFFICE DE TOURISME INTERCOMMUNAL DE BASTIA, whose registered office is located at: place Saint-Nicolas, 20200 Bastia

Person in charge of the processing

In the sense of article 4.7 of the RGPD, OFFICE DE TOURISME DE BASTIA is responsible for the processing of personal data collected on the website https://www.bastia-tourisme.com. OFFICE DE TOURISME DE BASTIA determines the purposes and means of the processing carried out.

Why does OFFICE DE TOURISME DE BASTIA collect personal data?

OFFICE DE TOURISME DE BASTIA collects data for the following purposes: analysis of website consultation behaviour. Some data is collected automatically. You are then scrupulously informed beforehand. Other data is collected as required by law and/or regulation, and other data is of strategic and commercial importance and requires your prior consent. In each case, OFFICE DE TOURISME DE BASTIA ensures that it complies with the regulations, the requirements of which vary from simple information to the prior collection of your consent.

1) Data collected automatically

• the device and browser used
• IP address (anonymised)
• the date and time of your navigation
• your browsing history (of the https://www.bastia-tourisme.com site)

In order for this data collection to be permitted by the regulations, we provide you with the mechanism to object by updating your preferences in the “privacy policy” section of our website. This option is available on all browsers, and all types of terminals (including smartphones and tablets). Please contact us via the contact form if you have any difficulties in using this mechanism. In accordance with the regulations, we also inform you that :

• The data collected is not cross-referenced with other processing (customer files or statistics on visits to other sites, for example).
• The data collected by this means only gives rise to the production of anonymous statistics
• We do not track your navigation on other websites.
• The IP address collected does not allow us to obtain a more precise geolocation than the scale of a city:
• This data is not kept beyond 13 months from your first visit.
• Raw traffic data associated with an identifier must not be kept for more than 13 months.

Any collection of data beyond that intended to supply these statistics requires your prior consent if it is not based on another legal basis.

2) Data collected when you contact customer service

You may provide us with personal data when you contact customer service, so that we can process your requests. Again, the legal basis for this is Article 6.1.b of the GDPR. The legal basis for this collection and processing is Article 6.1.b of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”) .

3) Data collected when creating your customer account and when ordering

Data retention

In accordance with the regulations in force, OFFICE DE TOURISME DE BASTIA informs you that data will be kept for the period strictly necessary for its processing, in accordance with the regulations in force locally. For example, in accordance with French law, we are obliged to keep payment and billing information for a period of 10 years.

Data processing

OFFICE DE TOURISME DE BASTIA informs that it will process data in a lawful, fair, transparent, adequate, relevant, limited, accurate and up-to-date manner. OFFICE DE TOURISME DE BASTIA therefore undertakes to take all reasonable steps to ensure that any inaccurate data is deleted or rectified without delay.
OFFICE DE TOURISME DE BASTIA will process your data in order to be able to contact you again following your request for contact.

OFFICE DE TOURISME DE BASTIA traitera vos données afin de pouvoir vous recontacter suite à votre demande de contact.

Users’ rights

In accordance with articles 15 to 22 RGPD, concerning the data we hold on you, you have the following rights
– right of access (article 15 of the RGPD)
– right of rectification (Article 16 GDPR)
– right to erasure (Article 17 of the GDPR)
– right to limitation of processing (Article 18 of the GDPR)
– right to notification of data: rectification, erasure, restriction (Article 19 of the GDPR)
– right to data portability (Article 20 of the GDPR)
– right to object (Article 21 of the GDPR)
– right not to be profiled (Article 22 of the GDPR)

You can exercise these rights by sending your request to the following postal address: place Saint-Nicolas, 20200 Bastia or to the following e-mail address: accueil@bastia-tourisme.corsica. Any request to exercise a right must be accompanied by a copy of a valid proof of identity to enable us to ensure that the request made is indeed from the legitimate holder of the data concerned. You may also contact the relevant supervisory authority (CNIL) to make any complaint you consider appropriate.

Transfer of data

OFFICE DE TOURISME DE BASTIA informs that it will not transfer your data to a third party.

Duration of data retention

The length of time your data is kept varies according to the state of the law and when the constraints are lesser, according to the recommendations of the CNIL and our needs.

As an indication, you will find in the attached table the retention periods of the main data applied by OFFICE DE TOURISME DE BASTIA.

Type of data processing: Customer relations
Purpose of the processing: Management of the commercial relationship
Legal basis for processing : Article L123-22 paragraph 2 of the Commercial Code
Retention period: 365 days
Remarks (the simplified standards of the CNIL have only an indicative value since 25.05.2018. Future reference documents are expected). CNIL simplified standard NS-048

Type of data processing: Order management
Purpose of the processing: Management of the commercial relationship
Legal basis of the processing : Article L123-22 paragraph 2 of the Commercial Code
Retention period: 10 years
Remarks (the simplified standards of the CNIL have only an indicative value since 25.05.2018. Future reference documents are expected). CNIL simplified standard NS-048

Type of data processing: Use of the customer area
Legal basis of the processing : Article 6.1.b of the GDPR
Retention period: Data that may not be kept beyond the retention period strictly necessary for the management of the commercial relationship, with some exceptions.

Changes to this Privacy Policy

This privacy policy was updated on 13 April 2021. From time to time, OFFICE DE TOURISME DE BASTIA may make changes to its privacy policy and update it on its website. Any update of this policy will be indicated by means of easily identifiable inserts on our website and/or by sending you an informative e-mail.