Privacy policy

In accordance with the provisions of the legislation in force on the protection of personal data, we inform you that your data will be incorporated into the processing system belonging to OFFICE DE TOURISME INTERCOMMUNAL DE BASTIA, whose registered office is located at: place Saint-Nicolas, 20200 Bastia.

Data controller

In accordance with article 4.7 of the RGPD, OFFICE DE TOURISME DE BASTIA is responsible for processing the personal data collected on the https://www.bastia-tourisme.com website. OFFICE DE TOURISME DE BASTIA determines the purposes and means of the processing carried out.

Why does OFFICE DE TOURISME DE BASTIA collect personal data?

OFFICE DE TOURISME DE BASTIA collects data for several purposes explained below: analysis of website consultation behaviour. Some data is collected automatically. You are then scrupulously informed beforehand. Other data is collected as required by law and/or regulation, and other data is of strategic and commercial importance and requires your prior consent. In each case, OFFICE DE TOURISME DE BASTIA ensures that it complies with the regulations, whose requirements vary from simple information to the prior collection of your consent.

1) Data collected automatically

• the device and browser used
• IP address (anonymised)
• the date and time of your visit
• your browsing history (from https://www.bastia-tourisme.com)

To ensure that this data collection is authorised by the regulations, we provide you with the option of objecting by updating your preferences in the “privacy policy” section of our website. This option can be used on all browsers and all types of terminal (including smartphones and tablets). Please contact us using the contact form if you have any problems using this mechanism. In accordance with regulations, we would also like to inform you that :

• The data collected is not cross-referenced with other processing (customer files or statistics on visits to other sites, for example).
• The data collected in this way is used only to produce anonymous statistics.
• We do not track your browsing on other websites.
• The IP address collected does not provide a more precise geolocation than the scale of a town:
• This data will not be kept for longer than 13 months from the date of your first visit.
• raw traffic data associated with an identifier must not be kept for more than 13 months.

Any collection of data beyond that required to supply these statistics requires your prior consent if it is not based on another legal basis.

2) Data collected when you contact Customer Service

You may provide us with personal data when you contact customer service, so that we can process your requests. Here again, the legal basis is article 6.1.b of the RGPD. The legal basis for this collection and processing is Article 6.1.b of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or «GDPR») .

3) Data collected when creating your customer account and when placing an order

Data retention

In accordance with the regulations in force, OFFICE DE TOURISME DE BASTIA informs you that data will be kept for the period strictly necessary for processing, in accordance with the regulations in force locally. For example, in accordance with French law, we are obliged to keep payment and invoicing information for a period of 10 years.

Data processing

OFFICE DE TOURISME DE BASTIA informs that it will process data in a legal, fair, transparent, adequate, relevant, limited, precise and updated manner. OFFICE DE TOURISME DE BASTIA therefore undertakes to take all reasonable steps to ensure that any inaccurate data is deleted or rectified without delay.

OFFICE DE TOURISME DE BASTIA will process your data in order to be able to contact you again following your contact request.

User rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights with regard to the data we hold about you:
- right of access (Article 15 of the RGPD)
- right of rectification (Article 16 of the RGPD)
- right to erasure (Article 17 of the RGPD)
- right to limit processing (Article 18 of the RGPD)
- right to notification of data: rectification, erasure, restriction (Article 19 of the RGPD)
- right to data portability (Article 20 of the RGPD)
- right to object (Article 21 of the RGPD)
- the right not to be profiled (Article 22 of the RGPD)

You can exercise these rights by sending your request to the following postal address: place Saint-Nicolas, 20200 Bastia or to the following e-mail address: accueil@bastia-tourisme.corsica. Any request to exercise a right must be accompanied by a copy of valid proof of identity to enable us to ensure that the request does indeed come from the legitimate holder of the data concerned. You may also contact the relevant supervisory authority (CNIL) to make any complaint you consider appropriate.

Data transfer

OFFICE DE TOURISME DE BASTIA informs you that it will not transfer your data to a third party.

Data retention period

The length of time your data is kept varies according to the state of the law and, when constraints are less severe, according to the recommendations of the CNIL and our needs.

For your information, you will find in the attached table the retention periods for the main data used by the BASTIA TOURIST OFFICE.

Type of data processing : Customer relations
Purpose of processing : Commercial relationship management
Legal basis for processing : Article L123-22 paragraph 2 of the French Commercial Code
Shelf life : 365 days
Remarks (The CNIL's simplified standards have only had indicative value since 25.05.2018. Future standards are expected). CNIL simplified standard NS-048

Type of data processing : Order management
Purpose of processing : Commercial relationship management
Legal basis for processing : Article L123-22 paragraph 2 of the French Commercial Code
Shelf life : 10 years
Remarks (the CNIL simplified standards have only been indicative since 25.05.2018. Future standards are expected). CNIL simplified standard NS-048

Type of data processing : Using the customer area
Legal basis for processing : Article 6.1.b of the RGPD
Shelf life Data that may not be kept beyond the period strictly necessary to manage the commercial relationship, with certain exceptions.

Changes to this Privacy Policy

This confidentiality policy was updated on 13 April 2021. From time to time, OFFICE DE TOURISME DE BASTIA may make changes to its privacy policy and update it on its website. Any updates to this policy will be notified to you by means of easily identifiable inserts on our website and/or the sending of an informative e-mail.