A PLACE OF LIFE AND CULTURE, WITH AND FOR EVERYONE

Personal data protection charters

  1. PURPOSE

When using the Services of the website accessible at the address: www.actavista.fr, the contact details of which are detailed in Article 2 below, the Citadelle de Marseille association is required to collect personal data from Users (the “Personal Data”). The purpose of this Personal Data Protection Charter (hereinafter the “Charter”) is to inform Users of the use made by the Citadelle de Marseille of Personal Data. This use is made in compliance with the Law n° 78-17 of January 6, 1978 relating to data processing, files and freedoms, modified by the Law n°2004-801 of August 6, 2004 and by the Law n° 2018-493 of June 20, 2018 (the “Data Protection Law”) and, the Directive of July 12, 2002 modified by the Directive 2009/136/EC (the “ePrivacy Directive”) and, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such personal data (the “GDPR”), and any national transposition text or any subsequent text that would succeed them (together the “Applicable Regulation”). The Charter may be modified at any time by La Citadelle de Marseille in order to comply with any legislative, regulatory, jurisprudential, editorial or technical changes. Users must therefore refer to the latest version of the Charter before browsing.

  1. DEFINITIONS

The terms “personal data” (“Personal Data”), “Processor/Processing”, “Processor”, “Subprocessor”, “Recipient(s)”, “Consent”, have the same meaning as set forth in Article 4 of the GDPR.” User(s)” means any natural person accessing the site without having created a Member Account, and using only certain features of the site;” Third party” means any natural or legal person who is a third party to La Citadelle de Marseille, to a User;” Services” refers to all or part of the services offered by La Citadelle de Marseille on its website;” Site ” means the Internet site published by La Citadelle de Marseille and the Services available at the address or any other site related to the Services.

  1. PURPOSES AND CONTROLLER OF PERSONAL DATA

We attach the greatest importance to respecting your privacy and protecting your Personal Data. This is why La Citadelle de Marseille processes your Personal Data, in compliance with the Applicable Regulations, for the following purposes:

 

  • contacting Users and managing the relationship with Users
  • informing Users of news, events and other activities related to the corporate purpose of La Citadelle de Marseille;
  • to offer Services related to the activities of La Citadelle de Marseille and the sector it represents;
  • to consult and keep information relating to navigation on the site that may be recorded in “cookies” files (defined in Article 9 below).

For these purposes only, the person in charge of processing Personal Data is the departmental association of popular education and outdoor activities La Citadelle de Marseille – SIREN N° 441024718 whose address is: Fort Saint-Nicolas 1, bd Charles-Livon 13007 Marseille whose contact details are given in Article 10 below.

  1. WHAT PERSONAL DATA IS COLLECTED, FOR WHAT PURPOSES?

When collecting Personal Data, the User will be informed whether certain Personal Data must be filled in or whether they are optional. Failure to provide the Personal Data that must be collected will make it impossible to access certain features of the Services. The Citadelle de Marseille may collect the following categories of Personal Data:

  • Name, first name and e-mail address in order to receive the Citadelle de Marseille newsletter. The declaration of Consent involves the voluntary transmission of this information by the User in each of the fields provided for this purpose in the Newsletter Sending Form. The User may, at any time, refuse the sending of newsletters by clicking on the corresponding link in the newsletter or by sending a message. The e-mail address will then be deleted from La Citadelle de Marseille’s distribution list.
  • The name, first name and e-mail address in order to contact a representative of La Citadelle de Marseille. The declaration of Consent involves the voluntary transmission of this information by the User in each of the fields provided for this purpose in the Contact Form.
  • Any other information constituting Personal Data within the meaning of the Applicable Regulations voluntarily provided in the “Leave your message” section of the Contact Form, the unsolicited application form and by any other appropriate means.
  • Navigation data as detailed in Article 9 below.
  1. RECIPIENTS OF PERSONAL DATA

The database of Personal Data created when you use the Services is strictly confidential. The Citadelle de Marseille undertakes to take all necessary precautions and appropriate organizational and technical measures to preserve the security, integrity and confidentiality of the Personal Data, and in particular to prevent it from being distorted, damaged or accessed by unauthorized third parties.

5.1 Data transferred to public authorities and/or bodies

In accordance with the Applicable Regulations, Personal Data may be transferred to competent authorities upon request and in particular to public bodies, exclusively to meet legal obligations, judicial officers, ministerial officers and bodies responsible for collecting debts.

5.2 Data accessible to Third Parties

The Personal Data may be used by La Citadelle de Marseille, its Subcontractors, its affiliates and/or, where applicable, by its partners, for the purposes described in Article 3 above.

  • The authorized personnel of La Citadelle de Marseille by virtue of their functions, the services in charge of control (auditor in particular) and the subcontractors of La Citadelle de Marseille shall have access to the Personal Data collected in the context of the use of the Services;
  • The Citadelle de Marseille’s partners who assist it in providing the Services;
  • Social networks: if the User has an account on social network sites and accesses the Services, these may include plug-ins such as “Like” buttons or sharing or redirection buttons, allowing the User to publish content from the Services on social networks. Where applicable, the social networks concerned may receive information relating to the use of the Services by the User.

5.3 Transfers outside the European Union

The User’s Personal Data may be processed outside the European Union, including via remote access. The Citadelle de Marseille undertakes not to transfer any Personal Data outside the European Union without implementing appropriate safeguards in accordance with the Applicable Regulations.

  1. THE USER’S RIGHTS

Subject to an express request and proof of identity to the Citadelle de Marseille, the User has the right to access, rectify and object to their Personal Data, as well as the right to erasure, under the conditions of the Applicable Regulations, by contacting the Citadelle de Marseille at the e-mail address mentioned in Article 10 below. If you exercise your right to object, the Citadelle de Marseille shall cease Processing your Personal Data, except in the event of legitimate and compelling reason(s) for Processing, or to ensure the establishment, exercise or defense of its legal rights, in accordance with the Applicable Regulations. Where applicable, the Citadelle de Marseille shall inform the User of the reasons why the rights he or she is exercising cannot be satisfied in whole or in part. Subject to an express request and proof of identity to La Citadelle de Marseille, the User also has the right to recover their Personal Data in a structured, commonly used and machine-readable format, in order to transmit them to another Data Controller. The User has the option of providing La Citadelle de Marseille with instructions regarding the fate of his or her Personal Data after his or her death. Where applicable, the Citadelle de Marseille will inform the User of the reasons why the rights he or she exercises cannot be satisfied in whole or in part.

  1. RETENTION PERIOD OF PERSONAL DATA

Users’ Personal Data is not kept beyond the period strictly necessary for the purposes set out in Article 3 above, in accordance with the Applicable Regulations. In particular:

  • Personal Data collected to manage requests to object to the Processing are stored for a maximum of 5 (five) years from the closing of the objection request ;
  • Personal Data Processed to manage requests for access and rectification of Personal Data are stored for a maximum period of 5 (five) years from the closing of the requests;
  • Personal Data relating to the management of interactions with La Citadelle de Marseille’s contacts (in particular via the “Contact” section) are stored for a maximum period of 3 (three) years from the last interaction initiated by the User.
  • The Personal Data may be archived beyond the time limits described above insofar as they are necessary for the purposes of researching, establishing and prosecuting criminal offences with the sole aim of making the Personal Data available to the judicial authorities, or for other storage obligations, in particular for accounting or tax purposes. Archiving implies that this Personal Data will be subject to access restrictions and will be stored on a secure, independent medium.
  1. SECURITY

In accordance with the Applicable Regulations, the Citadelle de Marseille processes Personal Data in a secure and confidential manner. In particular, the Citadelle de Marseille implements all technical and organizational measures necessary to guarantee the security and confidentiality of the Personal Data collected and processed, and in particular to prevent them from being distorted, damaged or communicated to unauthorized third parties, by ensuring a level of security adapted to the risks associated with the Processing and the nature of the Personal Data to be protected, taking into account the level of technology and the cost of implementation. However, the Citadelle de Marseille cannot guarantee the confidentiality of Personal Data made public by the User in the public areas of the Website and Services. The Site may include links to external websites or sources. The User acknowledges that the Charter only applies to the Services and the use of the Site, and in no way covers the information collected and/or Processed on the external sites or sources, the link to which appears on the Site. Consequently, the Citadelle de Marseille shall not be responsible for the practices of these external sites or sources with regard to the collection and processing of Personal Data, which are governed, where applicable, by the personal data policies specific to each of these external sites or sources.

  1. CONTACT AND COMPLAINTS 

For any request or dispute between the Citadelle de Marseille and the User concerning the Processing of his/her Personal Data, the User may address his/her request or complaint to the Citadelle de Marseille at the following e-mail address: contact-rgpd.culture@groupe-sos.org.

The Citadelle de Marseille will endeavor to find a satisfactory solution to ensure compliance with the Applicable Regulations. In the absence of a response from the Citadelle de Marseille or if the dispute persists despite the Citadelle de Marseille’s proposal, the User may file a complaint with the CNIL or the supervisory authority of the European Union Member State in which the User is ordinarily resident and appoint an association or organization mentioned in IV of Article 43 ter of Law No. 78-17 of January 6, 1978 as amended.