1. Data Controller
The controller responsible for the processing of personal data carried out through the website https://www.tvo.bike/ (hereinafter the “Site”) is Tour Valromey Organisation, represented by:
Last Name: Jean-Marc Vivier
Company Name: Tour Valromey Organization
Address: 10 rue du Plâtre
, 01510 Artemare
Email: contact@tvo.bike
2. Data Collected
The personal data collected through the Site is accessible only to the data controller and, when necessary, to technical service providers involved in the operation of the Site: the web host, maintenance provider, email service provider, web analytics tool, or any third-party service used on the Site. These service providers access the data only to the extent necessary to perform their duties.
When you visit our Site and/or use our services, we collect the following information:
| Treatment | Relevant Data | Purpose | Legal Basis | Recipients |
|---|---|---|---|---|
| Contact form | Last name, first name, email address, phone number | Respond to your request for information submitted via the contact form or by email | Legitimate interest: We have a legitimate interest in processing the data you choose to provide to us in order to respond to you. This information is required; if you do not provide it, we will not be able to respond to your request. | Data Controller |
| Audience Measurement | IP address, cookie ID, pages viewed, browser, device | Measuring Traffic and Improving the Website | Consent: Audience measurement tools are only activated after you have given your consent, unless the tool is configured in accordance with the CNIL exemption conditions. This data is optional. | Google Analytics |
| Security and Anti-Spam Measures | IP address, technical browser information, and form-related browsing behavior | Protect the site from abuse, spam, and fraudulent attempts | Legitimate interest: Our legitimate interest is to ensure the security of the site, prevent fraudulent use, and detect technical anomalies. This information is required. | Website host Google reCAPTCHA |
No automated decisions, including profiling, are made based on your personal data.
3. Data Transfer
Your personal data is hosted in data centers within the European Union.
Certain service providers used by the Site, notably Google when its services are enabled, may process data outside the European Union.
In such cases, the transfer is governed by appropriate safeguards provided for by the GDPR, such as the European Commission’s standard contractual clauses, an applicable adequacy decision, or any other mechanism recognized by the regulations.
Users may obtain additional information about these safeguards by contacting the data controller.
4. Data Retention Period
Your personal data is retained for a limited period of time:
- Your choice to accept or reject cookies is retained for a period of 6 months. The specific lifespan of each cookie is indicated on the page dedicated to cookies.
- Contact requests: for as long as necessary to process the request. If no business relationship results, the data is deleted within a maximum of 12 months from the last communication. If a business relationship is established, certain data may be retained for the applicable statutory periods, particularly for accounting or evidentiary purposes.
- Security logs: for 6 months
We may retain certain personal data beyond the time periods stated above in order to comply with our legal or regulatory obligations.
5. Your Rights
In accordance with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act, you have the following rights:
- You have the right to know why your personal data is needed, what will happen to it and how long it will be kept.
- Right of Access: You have the right to access your personal data that we hold.
- Right to rectification and right to erasure: You have the right at any time to supplement, correct, or have your personal data deleted in the cases provided for by law.
- Right to data portability: You have the right to request all of your personal data from the data controller and to transfer it in its entirety to another data controller.
- Right to Object: You have the right to object to the processing of your data.
- Right to restrict the processing of your data under the conditions set forth in the regulations.
- If you give us your consent to process your data, you have the right to withdraw your consent at any time.
- The right to file a complaint with a supervisory authority.
To exercise these rights, please contact us using the contact information provided above (Data Controller section).
We will respond to your request within one month of receiving it. If there is reasonable doubt regarding your identity, we may ask you to provide proof of identity.
If, after contacting us, you believe that your rights regarding your personal data have not been respected, you may file a complaint with the CNIL.
6. Data Security
We implement appropriate technical and organizational security measures to protect your data against loss, unauthorized access, alteration, or disclosure.
We use secure protocols (SSL/HTTPS) to ensure the security of your personal data during transmission.
7. Use of Cookies
Our website uses cookies to improve your user experience.
Please refer to our Cookies page, which can be accessed here.
8. Changes to the Privacy Policy
We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page, and, if applicable, we will notify you by email.
9. Data Protection Officer (DPO)
No Data Protection Officer has been appointed. If you have any questions regarding your personal data, please contact us at the address listed above.
