In browsing the pages on this website, the website user acknowledges having read and accepted the limits of liability and the terms and conditions applying to use of the website. The Normandy Tourist Board and the Paris Region Tourist Board cannot be held responsible for difficulties in connecting to the internet network or viewing pages on the website. The internet user acknowledges, in particular, being aware of the different ways these internet pages may appear depending on the different types of browsers available on the market.
The Normandy Tourist Board and the Paris Region Tourist Board process data of a personal nature (hereafter referred to as “personal data”) about you in the context of use of this internet website (hereafter referred to as the “website”).
Being responsible for processing this data, we respect the private life and personal data of our website users.
This policy sets out the principles and guidelines regarding the protection of your personal data, including personal data collected on, or via, this website.
The Normandy Tourist Board and the Paris Region Tourist Board collect personal data (online, including via emails, and offline); this policy applies regardless of the method of collection or processing used.
The term personal data refers to any information relating to an identified or identifiable physical individual. A person is “identifiable” when he or she can be identified, directly or indirectly, in particular by reference to an identification number or to one or more elements specific to him or her.
“Non-personal data” refers to information that does not allow an individual to be identified.
ARTICLE 2 – STORAGE OF PERSONAL DATA
All personal data allowing us, in particular, to send professional letters from our Toursists’ Boards is stored exclusively in France by our service provider for the data base linked to our newsletter – Mailchimp
ARTICLE 3 – PERSONAL DATA PROCESSING CONTROLLER
The organisations responsible for processing your personal data concerning this website are: the CRT de Normandie / Normandy Tourist Board, 14 rue Charles Corbeau – 27000 Évreux – France, and the CRT de Paris Île-de-France / Paris Region Tourist Board, 11 Rue du Faubourg Poissonnière – 75009 Paris – France. Some technical services (such as hosting & the newsletter) are entrusted to our technical service providers (OVH and Mailchimp). In accordance with Article 28 of the GDPR, these service providers are forbidden by a strict confidentiality clause from using any data not covered by the service provision contract and are bound to put in place technical and organisational measures that meet the strict requirements set down regarding security and protection of personal data.
ARTICLE 4 – DATA COLLECTED
Personal data may include the following:
Town or place of residence
Date of birth
and any other personal data that may be relevant for the purposes laid out below.
Note to visitors to and users of our website: certain features and characteristics of this website can only function if you supply the Normandy Tourist Board and the Paris Region Tourist Board with specific personal data when you visit or use the website. You are free to provide or not, in whole or in part, such personal data.
However, if you choose not to provide such data, that decision may prevent the carrying out of or satisfactory carrying out of the objectives described below, certain services and functions of the website may not be able to function correctly for you, and/or you may be refused access to certain pages on the website.
COOKIES AND OTHER TRACKERS
Cookies can be permanent (and remain stored after you have logged out of the website in order to be used on your subsequent visits to the website) or temporary (disappearing as soon as you log out of the website).
allowing a service to recognise your details, so that you will not be required to provide the same information several times over to perform the same task;
recognising the username and password you have already provided so that you do not have to supply them again on each webpage that might otherwise request such information.
measure the number of users of their services, thus helping make these services easier to use and ensuring their ability to respond rapidly to your requests;
help the Normandy Tourist Board and the Paris Region Tourist Board to understand how users interact with their services in order to improve them.
The Normandy Tourist Board and the Paris Region Tourist Board may also use the services of third-party service providers in order to perform services on their behalf and in particular to:
analyse your browsing habits and measure the website’s and applications’ audience;
analyse your main interests and tailor marketing and advertising offers accordingly;
allow you to share content from the website and the applications with other people via social networks or to let other people know what you are watching and thinking (e.g. using the Like button on Facebook)
In such cases, invisible pixels and cookies set up by these third-party providers may be used and stored. When the information generated by these cookies is transmitted, the cookies’ parameters ensure that your IP address is made anonymous before geolocation and storage. Our service providers will use this information to evaluate your use of the website, to prepare reports on the website’s activity for the Normandy Tourist Board and the Paris Region Tourist Board, and to offer you improved services and advertising targeted to your specific requirements. They will not link your IP address to any other of their data.
When browsing the website, cookies are enabled by default and data may be read and stored locally on your device. You will be notified the first time you receive a cookie and you will therefore be able to decide whether or not to accept it. By continuing to use the website, you expressly accept the use of such cookies by the Normandy Tourist Board and the Paris Region Tourist Board.
If you wish to amend or delete your personal information, please refer to Article 9: Your rights.
You can access your cookie banner and consent panel in order to set up your own parameters on the input and reading of cookies.
By type of data:
Personal data (family name, first name, postal address…): maximum of 3 years;
Connection data: maximum of 3 years;
Location data: 48 hours.
We only keep your personal data for a necessary and proportionate duration connected to the purpose for which it was collected, that’s to say for a maximum of 3 years from the last exchange that you had with us carried out at your initiative.
Beyond the above-mentioned periods, your data will simply be deleted or anonymised.
ARTICLE 5 – PURPOSES OF PERSONAL DATA COLLECTION
As stated above, you provide us with your personal data on a voluntary basis.
Personal data is generally collected to meet the needs of the activities carried out by the Normandy Tourist Board and the Paris Region Tourist Board, such as improving marketing and advertising efforts for the Normandy Tourist Board and Paris Region Tourist Board, adapting products and services offered by the Normandy Tourist Board and the Paris Region Tourist Board to respond better to customers’ needs, and complying with statutory reporting obligations required by law and further similar activities.
The Normandy Tourist Board and the Paris Region Tourist Board collect and use your personal data to meet the needs of their activities and in particular for the following purposes:
to collect email addresses for sending newsletters containing information on tourism in Normandy and the Paris Île-de-France Region;
Subject to the applicable local legislation, by providing your email address, you expressly authorise the Normandy Tourist Board and the Paris Region Tourist Board to use it, along with other useful personal data, in order to send you informative messages.
The Normandy Tourist Board and the Paris Region Tourist Board may also use your email address for administrative purposes or for other reasons beyond their missions to inform and promote their regions (for example to notify you of important changes being made to the website).
ARTICLE 6 – CONDITIONS OF PROCESSING AND STORAGE OF PERSONAL DATA
Processing of personal data includes, in particular, the use, storage, recording, transfer, adaptation, analysis, modification, declaration, sharing and destruction of personal data according to what is required in terms of specific needs or legal requirements.
All personal data collected is stored for a limited time, depending on the purpose of the processing and only for the period provided for by the relevant legislation.
All the personal data collected is stored in mainland France (France Métropolitaine).
ARTICLE 7 – LINKS TO WEBSITES THAT ARE NOT MANAGED BY THE Normandy Tourist Board & THE Paris Region Tourist Board
The website may propose links to third-party websites that may be of interest to you.
Note that the Normandy Tourist Board and the Paris Region Tourist Board have no control over the contents of third-party websites or over the way these third parties deal with the protection of personal data they may collect. As a result, the Normandy Tourist Board and the Paris Region Tourist Board decline any responsibility concerning the processing of your personal data by these third parties. It is your responsibility to find out about the data protection policies of such third parties.
ARTICLE 8 – TRANSFER OF PERSONAL DATA
Your personal data may be disclosed within the Normandy Tourist Board and the Paris Region Tourist Board for the purposes set out in Article 3 of this policy.
The Normandy Tourist Board and the Paris Region Tourist Board may transfer your personal data outside of the European Union, once it has ensured, before any such transfer is made, that the relevant entities outside the European Union offer an adequate level of protection, in accordance with existing European law.
If the Normandy Tourist Board or the Paris Region Tourist Board were to discover that a third party to whom the Normandy Tourist Board or the Paris Region Tourist Board had communicated personal data for the purposes stipulated in Article 3 above were using or disclosing personal data without complying with this policy, or were in breach of the relevant legislation, then the Normandy Tourist Board and the Paris Region Tourist Board would take all reasonable steps to prevent or stop such usage or disclosure.
You also have the right to decide whether or not to authorise the Normandy Tourist Board and the Paris Region Tourist Board to use your personal data for purposes other than those for which your data was initially collected. You can object to such usage by referring to Article 9 below.
The Normandy Tourist Board and the Paris Region Tourist Board may also transfer your personal data to third parties if the Normandy Tourist Board or the Paris Region Tourist Board deem such a transfer necessary for technical reasons (for example, for hosting services offered by a third party) or to protect their legal interests.
The Normandy Tourist Board and the Paris Region Tourist Board may disclose your personal data if required to do so by law, or if the Normandy Tourist Board and the Paris Region Tourist Board deem, in good faith, that such disclosure is reasonable and necessary to comply with legal procedures (for example, involving a warrant, subpoena or other court order) or to protect the rights, property or personal safety of the Normandy Tourist Board and the Paris Region Tourist Board, their clients and the public.
These transfers may take place over the internet or by any other method deemed appropriate by the Normandy Tourist Board and the Paris Region Tourist Board, in compliance with the applicable legislation and the internal security policies of the Normandy Tourist Board and the Paris Region Tourist Board.
ARTICLE 9 – YOUR RIGHTS
YOUR RIGHT TO ACCESS AND RECTIFY YOUR DATA
You have the right to access and rectify or amend your personal data by contacting:
You can ask us to ensure that your personal data is, depending on the case, corrected or added to if it is inaccurate, incomplete, ambiguous or out of date.
YOUR RIGHT TO ERASE YOUR DATA
You can ask us to erase or delete your personal data by contacting where one of the following reasons applies:
the personal data held is no longer necessary for the purposes for which it was collected or otherwise processed;
you wish to withdraw the consent you had previously given;
you object to the processing of your personal data on legitimate grounds;
the processing of your personal data does not comply with the provisions laid down by laws and regulations in force.
However, the exercising of this right will not be possible where the storing of your personal data is required according to the law and regulations in force and in particular, for example, for the establishment, exercising and defence of legal rights.
YOUR RIGHT TO RESTRICT DATA PROCESSING
You can request to restrict the processing of your personal data in the cases provided for by the law and by regulations in force by contacting:
YOUR RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA
You have the right to object to certain processing of your personal data where this processing is based on the legitimate interest of the manager of this processing by contacting:
YOUR RIGHT TO DATA PORTABILITY
As of 25 May 2018, you have the right to the portability of your personal data by contacting:
The data over which this right can be exercised are:
only your personal data, which excludes anonymised personal data or data that does not concern you;
declarative personal data along with personal operating data mentioned above;
personal data that does not infringe on the rights and freedoms of third parties, such as those protected by trade secrets.
This right is limited to processing based on consent or a contract, as well as personal data that you have personally generated.
This right does not include derivative or inferred data, which is personal data created by the Normandy Tourist Board or the Paris Region Tourist Board.
YOUR RIGHT TO WITHDRAW YOUR CONSENT
Where the data processing that we carry out is based on your consent, you can withdraw that consent at any time by contacting: . We will then stop processing your personal data, without your being able to challenge any previous operations to which you previously gave your consent.
YOUR RIGHT TO APPEAL
You have the right to file a complaint with the CNIL, the authority on such matters on French territory, without prejudice to any other administrative or legal appeal.
YOUR RIGHT TO DEFINE POST-MORTEM GUIDELINES
You have the possibility of setting guidelines for the storage, deletion and disclosure of your personal data after your death in conjunction with a trusted, certified third party given responsibility to see that the wishes of the deceased are respected in accordance within the applicable legal framework.
HOW TO EXERCISE YOUR RIGHTS
All the rights listed above can be exercised:
by post, by writing to the following address: CRT de Normandie / Normandy Tourist Board, 14 rue Charles Corbeau – 27000 Évreux – France, enclosing a copy of your ID and a proof of address;
via our email address: ;
a procedure will then be set in motion in order for you to confirm your identity.
Note: the documents sent during this procedure will be destroyed for good and any data that could potentially have been collected during this procedure will be deleted for good at the end of the procedure.
Please note that any applications that do not comply with these guidelines will be ignored.
We undertake to respond to such requests within one month of receipt of the request. This deadline may be extended to two months depending on the complexity and number of requests received, so amounting potentially to three months in total.
If you have an account with us, you can exercise your rights of access and amendment by logging in to your account.
However, as regards exercising your right to information, we may not be obliged to follow up on such requests if:
you already have this information at your disposal;
the registration and communication of your personal data is expressly provided for by law;
the communication of information proves impossible;
the communication of the information requested would require disproportionate effort.
ARTICLE 10 – SECURITY AND RECIPIENTS OF PERSONAL DATA
The Normandy Tourist Board and the Paris Region Tourist Board are dedicated to protecting and making sure of the safety of the personal data that you have chosen to communicate to us in order to ensure confidentiality and prevent any personal data being distorted, damaged, destroyed or disclosed to unauthorised third parties.
The Normandy Tourist Board and the Paris Region Tourist Board have put in place protective physical, electronic and organisational measures to prevent any loss, misuse, unauthorised accessing or distribution, alteration or potential destruction of this personal data. Among these protective measures, the Normandy Tourist Board and the Paris Region Tourist Board have integrated technologies specially designed to protect personal data during its transfer. However, despite the best efforts of the Normandy Tourist Board and the Paris Region Tourist Board to protect your personal data, the Normandy Tourist Board and the Paris Region Tourist Board cannot guarantee the infallibility of these protective measures due to inevitable risks that may occur during the transmission of personal data.
As all personal data is confidential, access to it is limited to employees and service providers working with the Normandy Tourist Board and the Paris Region Tourist Board who require it in order to carry out their missions. All individuals given access to your personal data are bound by a confidentiality clause and are liable to disciplinary measures and/or further sanctions if they do not comply with these obligations.
Nevertheless, it is important that you exercise caution yourself, to prevent any non-authorised access to your personal data. You are responsible for maintaining the confidentiality of your password and your account information. In addition, you must ensure that you log off the website after a session on it if you are sharing a computer or a terminal.
ARTICLE 11 – DISPUTE RESOLUTION
Although the Normandy Tourist Board and the Paris Region Tourist Board take all reasonable measures to protect your personal data, no transmission or storage technology is completely infallible.
That said, the Normandy Tourist Board and the Paris Region Tourist Board are committed to ensuring the protection of your personal data. If you have reason to believe that the security of your personal data has been compromised or that it has been misused, we invite you to contact the Normandy Tourist Board or the Paris Region Tourist Board at the following email address:
The Normandy Tourist Board and the Paris Region Tourist Board will then set about investigating any complaint concerning the use and disclosure of your personal data and will attempt to resolve any complaint in compliance with the principles set out in this policy.
Gaining unauthorised access to personal data or its misuse may constitute a violation to the terms of local legislation.
ARTICLE 12 – CONTACT
If you have any questions concerning this policy, or to stop receiving information from the Normandy Tourist Board and the Paris Region Tourist Board, or for any request to correct, add to, update or delete your personal data, you are invited to send an email to our following email address: .
ARTICLE 13 – EFFECTIVE DATE AND REVISIONS TO OUR PERSONAL DATA PROTECTION POLICY