Privacy policy

Dans le cadre de ses activités, le Comité est amené à collecter et traiter certaines de vos données à caractères personnel, que celles-ci vous identifient de manière directe ou indirecte.

La présente page a pour objet d’attirer son attention sur les droits dont il dispose à cet égard, dans le cadre du Règlement 2016/679 Général sur la Protection des Données (ci-après « RGPD ») et de la loi n° 78-17 du 6 janvier 1978 relative à l’informatique, aux fichiers et aux libertés.

 

Article 1. Data Controller

The Data Controller is the person or organisation that determines the purposes and means of collecting and processing your personal data.

For this Website, the Data Controller is the Vélo au Sommet Association, a non-profit association established under the French Law of 1 July 1901, registered under SIREN No. 933 348 302, with its registered office at:

6 Rue du Pré Paillard
74940 Annecy
France

For further information about how we process your personal data or to exercise your rights, you may contact us:

By post:

GDPR – Vélo au Sommet Association
6 Rue du Pré Paillard
74940 Annecy
France

Or by email:

rgpd@hsmb2027.fr

The Data Controller is committed to protecting your personal data by implementing appropriate technical and organisational measures designed, in particular, to prevent your data from being altered, damaged or accessed by unauthorised third parties.

The Data Controller also undertakes to ensure that any person or organisation processing personal data on its behalf applies the same level of protection.

.

 

Article 2. Personal Data Collected

All personal data processed by the Vélo au Sommet Association is provided directly by you. Depending on the nature of the data concerned, some information is mandatory while other information is optional.

Where personal data relating to third parties is provided in connection with the performance of a legal or contractual obligation, the User warrants that they have obtained the consent of the individuals whose personal data is disclosed.

Personal data relating to minors may only be provided by the holder(s) of parental responsibility.

 

Article 3. Purpose of Processing

Where your personal data is used to send you information about the activities of the Vélo au Sommet Association, you may withdraw your consent and opt out of receiving such communications at any time by contacting:

rgpd@hsmb2027.fr

 

Article 4. Retention and Storage of Personal Data

The Data Controller identified above processes your personal data for the various purposes described in this Privacy Policy. Depending on the purpose of the processing, your personal data is retained for different periods in accordance with applicable legal and regulatory requirements.

Your personal data is stored on our systems. The Data Controller implements appropriate technical and organisational measures to ensure the security of your personal data and to prevent its destruction, loss, alteration, disclosure, unauthorised access or any other form of unlawful processing, including through the use of antivirus software and firewalls.

 

Article 5. Users' Rights

In accordance with applicable data protection legislation, you have the following rights:

  • Right of access: You may request access to all personal data relating to you held by the Data Controller.
  • Right to rectification: If your personal data is inaccurate or incomplete, you may request that it be corrected or updated.
  • Right to object: You may object to the processing of your personal data where such processing is based on the Data Controller's legitimate interests.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. In such cases, the Data Controller will cease processing your personal data for the relevant purpose. This includes consent to receive information or marketing communications from the Data Controller or its partners.
  • Right to erasure ("right to be forgotten"): You may request that your personal data be deleted or that its processing be discontinued.
  • Right to determine the use of your data after your death: You may provide general or specific instructions regarding the exercise of your rights after your death, in accordance with applicable law.
  • Right to restriction of processing: You may request that the processing of your personal data be restricted while allowing the Data Controller to retain it.
  • Right to data portability: In the cases provided for by applicable law, you may request that your personal data be provided in a structured, commonly used and machine-readable format or transferred directly to another data controller.

  • Right to lodge a complaint: If you believe that your rights have not been respected, you may lodge a complaint at any time with the competent supervisory authority, the French Data Protection Authority (CNIL):

    Commission Nationale de l'Informatique et des Libertés (CNIL)
    3 Place de Fontenoy – TSA 80715
    75334 Paris Cedex 07
    France

    Website: https://www.cnil.fr

The Data Controller will respond to your request within 30 days of receiving it.

These rights may be exercised by contacting us using the following details:

By post:

GDPR – Vélo au Sommet Association
6 Rue du Pré Paillard
74940 Annecy
France

By email:

rgpd@hsmb2027.fr

 

Article 6. Changes to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time.

Should any changes be made, the updated version will be published on the relevant Website.

If you do not agree with the revised Privacy Policy, you may exercise your rights as described above.