Data controller
Personal data collected on this website is processed by the operating company named in the legal notice, in its capacity as data controller.
If you have any questions regarding your data, please write to us at the contact address given in the legal notice.
Data collected and purposes
Booking: surname, first name, email address, telephone number, billing address, group composition and participants’ details. This information is required to fulfil the booking contract, to issue the invoice and to ensure the safety of participants.
Contact enquiry: name, email address, telephone number and message. This data is used solely to respond to your enquiry.
Payment: Bank details are never transmitted via our servers. They are processed directly by our payment service provider.
Audience measurement: anonymous browsing events are recorded to understand the booking journey. They do not allow us to identify you.
Legal basis
Performance of the contract in relation to booking and billing details.
Legal obligation to retain accounting records.
Legitimate interest in website security, the prevention of misuse and anonymous audience measurement.
Consent for contact requests and any communication not relating to an existing booking.
Recipients
Your data is accessible to authorised members of the ALOKANOE team, in accordance with the principle of least privilege and with sensitive access being logged.
This information is passed on to our technical service providers solely for the purposes of providing the service: web hosting, sending transactional emails and processing payments.
No data is sold or passed on for advertising purposes.
Retention periods
Booking records and accounting documents: retained for the statutory period applicable to commercial and tax documents.
Enquiries: automatically anonymised after the configured retention period, provided they do not result in a booking.
Anonymous browsing events: automatically deleted at the end of their retention period.
Your rights
You have the right to access, rectify, erase, restrict the processing of, object to the processing of, and request the portability of your data.
To exercise these rights, please send your request to the contact address set out in the legal notice. You will receive a reply within the statutory time limit.
You may also lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, 75007 Paris.
Safety
Access to the administration system is protected by two-factor authentication, revocable sessions and tamper-proof logging of sensitive operations.
Third-party service credentials are stored in encrypted form and are never displayed in plain text.
Database backups are carried out daily and their integrity is checked.
Cookies and trackers
The website only sets cookies that are necessary for it to function, in particular for the security of forms and the administration session.
No advertising cookies or third-party trackers for profiling purposes are used.
Related documents
The conditions that apply to your booking are set out in the terms and conditions of sale — legal notice.