GDPR

Personal data

a. What personal data do we collect?

As part of its activity as a ski area manager, ALTISERVICE undertakes to ensure the protection, confidentiality and security of the personal data of the users of its services and to respect their privacy, in accordance with the legislation in force.
You may be required to provide us with personal information when using our site. Under no circumstances will personal information concerning you be collected by ALTISERVICE without your prior consent. The information requested in the forms may be mandatory in order to process your request or to receive an offer of services from ALTISERVICE or its partners. The collection of this information is essential in order to process your request.

We may collect, process and use all or part of the following categories of data:
- Identification data: surname, first name, customer number, etc.
- Personal data: age/date of birth, photo, etc.
- Contact data (postal or e-mail address, telephone number, etc.)
- Usage data (web pages visited, routes taken)
- Connection data (IP address, connection logs)
- Financial data (payment methods and history)
- Commercial data (list of products and services from which you benefit, receipts)

The personal data collected on this site is processed by ALTISERVICE, a company registered under SIREN number 380 373 480 and whose head office is located at 16 rue de Sébastopol, 31000 TOULOUSE.

b. What is the basis and purpose of the processing carried out on your data?

Personal information is collected by ALTISERVICE in compliance with the regulations in force and more specifically with the RGPD and the amended Data Protection Act of 6 January 1978, in complete confidentiality. It enables the staff of ALTISERVICE or its partners to process your request, to offer you personalised services and to inform you about our products and services.

c. Who has access to my data?

Personal data is collected and processed by ALTISERVICE's operational processing managers and MERCHANT partners (processing managers) in compliance with the RGPD. The departments and employees in charge of processing (ticketing, sales, communication, accounting, control, IT, line managers) are duly authorised to handle your data and only within the scope of their duties. Customer data is only used in the strict context of implementing processes. They are regularly trained in good practices relating to the handling of your data and are made aware of confidentiality commitments.

In certain cases, we may pass on your personal data to third parties (subcontractors, group companies and partner customers), subject to compliance with the relevant regulations.
Personal data is not transferred to any country outside the European Union.

d. Is my personal data kept securely?

Our aim is to store your personal data in the safest and most secure manner in compliance with the GDPR and only for as long as is necessary for the purposes for which it is to be processed.
To this end, we take appropriate technical measures to prevent, as far as possible, any alteration or loss of your data or any unauthorised access to it.

e. How long will my data be kept?

ALTISERVICE undertakes to keep your personal data for no longer than is necessary for the purposes for which it is collected and processed, i.e. a maximum of 36 months.

f. What are my rights?

In accordance with the regulations in force, you have the right to access the information that concerns you. To find out more, consult your rights on the CNIL website.
The General Data Protection Regulation stipulates that any person whose personal data is handled has the following rights:
- Right of access
- Right to rectification
- Right to limitation
- Right to erasure or the right to be forgotten
- Right to object
- Right to portability

In accordance with the applicable regulations, you may request access to and rectification of your data and exercise all your rights by sending us a request by email accompanied by proof of identity to: dpo@altiservice.com

ALTISERVICE undertakes to reply to your request for access, rectification or opposition or any other additional request for information within a reasonable period of time, which may not exceed 2 months from receipt of your request.
If your exchanges with ALTISERVICE have not been satisfactory, you have the possibility of introducing.
If your dealings with ALTISERVICE have not been satisfactory, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the supervisory authority responsible for compliance with obligations in terms of personal data in France.

On the CNIL website:
- in certain specific cases, via the online complaint teleservice;
- in other cases not covered by the teleservice, via the "Need help" service.

ALTISERVICE has appointed a Data Protection Officer at the CNIL, whom you can contact by e-mail: dpo@altiservice.com .