Book
Home

Privacy Policy

Home » Home » Privacy Policy

Last modified on 16/12/2022

1. Preamble

The personal data that you provide to us when you visit our website are processed in accordance with the Data Protection Act of 6 January 1978, as amended, and the General Data Protection Regulation of 27 April 2016, known as the “GDPR”.
In a desire for transparency, we present our confidentiality policy which aims to inform you about the conditions under which we are required to collect and process your personal data when consulting our site.

2. Identity and contact details of the data controller and the DPO

The controller of your data is Meurthe & Moselle, l'esprit Lorraine (hereinafter MMEL) located at 48, Esplanade Jacques Baudot, 54035 NANCY CEDEX.

In order to guarantee the protection of your personal data, we have appointed a Data Protection Officer “DPO”.
For any questions relating to the management of your personal data or the exercise of your rights, you can contact our data protection officer:

  • by email to the following address dpo@departement54.fr
  • by mail: 48, Espanalde Jacques Baudot, 54035 NANCY CEDEX for the attention of the Data Protection Officer

3. Purposes and legal bases of the processing implemented

MMEL implements different processing operations which are based on several legal bases such as: your consent, a legal or regulatory obligation to which we are subject, a public interest mission with which we are invested, our legitimate interest or contractual execution.

The processing carried out on the basis of your consent is carried out solely for the purposes of:

  • Management of contact requests via our various forms
  • Newsletter Management
  • Management of cookies subject to your consent (see our cookies policy)

Certain processing operations are necessary for the purposes of the legitimate interests pursued by the MMEL:

  • Site security administration: legitimate interest being to ensure the security and functionality of our website
  • Management of cookies deposited strictly for the provision of a service, and those which allow or facilitate communication by electronic means (see our cookies policy)
  • Hosting your website

Some processing is based on contractual or pre-contractual relationships between you and the tourism players presented on our site:

  • Online booking of activities, accommodation, restaurants and products

Finally, certain processing operations are based on the performance of a mission of public interest or relating to the exercise of authority for the purposes of:

  • Promotion of the Department’s tourist activities and news
  • Census of events in Meurthe-et-Moselle

4. Categories of data processed

We collect your personal data through several channels:

  • Your browsing on our site: visiting our site automatically involves the collection of technical and identification data about you (IP address, timestamp of the visit, nature of the equipment used during your visit, browser used, pages viewed, etc.).
  • Our various forms: in addition to technical data, civil status, identity or identification data concerning you are collected. Free fields are also available to you on certain forms. To protect your privacy, we advise you to only provide the information strictly necessary for the processing of your request. Information relating to your personal life or of an economic and financial nature may also be requested via these forms.
  • Your online bookings for activities, accommodation, restaurants and products offered on our site. These forms are set up by the tourism players present on our site. In addition to technical data, civil status, identity or identification data concerning you are collected. Free fields are also available to you on certain forms. To protect your privacy, we advise you to only provide the information strictly necessary for the processing of your request. Information relating to your personal or professional life may also be requested via these forms.
  • The promotion of tourist activities offered by tourist stakeholders: Meurthe & Moselle, the Lorraine spirit meets with stakeholders in the territories in order to advertise their activities. This promotion of activity, initially of legal entities, can lead to presenting their employees, volunteers or employers.

The transmission of your personal data is mandatory for MMEL to be able to offer you its services. However, and in order to best respect the principle of data minimization, it may happen that the communication of some of your personal data is optional. In this case, an asterisk indicates the mandatory fields.

5. Data retention period

MMEL undertakes to retain your personal data for a period that does not exceed the time necessary to pursue and achieve the purposes for which this data was collected. The retention period of your data may be linked to:

  • The duration of validity of your consent;
  • In the execution or preparation of a contract;
  • Legal and regulatory constraints, particularly in terms of litigation management;
  • In the performance of a mission of public interest;
  • In pursuit of legitimate interests of MMEL.

MMEL's general data retention policy is as follows:

  • Management of contact requests (consent and legitimate interest): 2 years from our last contact with you.
  • Newsletter management: Until you unsubscribe
  • Cookie management: 13 months maximum (see our cookies policy)
  • Site administration (legitimate interest): 1 year maximum
  • Website hosting: Until you close your session on the computer
  • Online booking of activities, accommodation, restaurants and products: This retention period depends on the service provider for whom you made a reservation and not on MMEL
  • Promotion of the Department's tourist activities and news: The time of publication of the article on the site
  • Census of events in Meurthe-et-Moselle: Time of publication of the article on the site

*The retention periods applicable in these situations are specified on the relevant forms. You can also contact the management department or the DPO to obtain information on the precise retention period applicable to your file.

Certain data may be kept for longer than the periods indicated above when they are necessary for the purposes of exercising a right or a civil, criminal or administrative contentious procedure.

6. Recipients of personal data

Only strictly authorized personnel from MMEL's internal services have access to your personal data. These accesses are defined according to the purpose of the processing of your data.

MMEL communicates your personal data to the following third parties:

  • SA Proximit, subcontractor of MMEL, publisher of the Avizi tourism CRM software, located in Bois Joli, Rue de la fontaine tanche, 87500 Saint-Yrieix-la-Perche, France*
  • The Grand Est Regional Tourism Agency, host of the MMEL website, located at 24 rue de Verdun, 68 000 Colmar, France
  • ELLOHA SAS subcontractor of the online reservation tool offered on our site, whose head office is located at 2 rue de l'Horloge, 66 000 Perpignan, France
  • Thuria, subcontractor of MMEL, publisher of the site tourisme-meurtheetmoselle.fr and the SITLor platform, located at 21 avenue de l'Europe, 67 300 Schiltigheim, France*
  • Visitors to the site for the promotion of tourist activities of tourism stakeholders in the Department

We ensure compliance with the GDPR of the processing carried out by these subcontractors. We undertake to implement the necessary measures with regard to the sensitivity of the data processed, to guarantee their security and avoid, in particular, their disclosure to unauthorized third parties.

* Contracts with these service providers are concluded by group order by the Regional Tourism Agency.

Specific case of data transfers outside the European Union

MMEL's policy is not to transfer data outside the European Union. However, the use of third-party cookies may result in a transfer outside the EU (view cookie policy).
For all data transfers outside the European Union, MMEL undertakes to exercise particular vigilance and to ensure that they are carried out in a context of maximum security.
The personal data of the tourism stakeholders presented on the site can be consulted from anywhere in the world.

7.Safety

In accordance with the legislation and regulations in force, MMEL and its potential subcontractors undertake to preserve the confidentiality, availability and integrity of your personal data by undertaking to implement all necessary technical and organizational measures.

9. Exercise of your rights

In accordance with current legislation and regulations, you have the following rights:

  • The right to access your data at any time (Article 15 of the GDPR)
  • The right to rectify, update or complete your data (Article 16 of the GDPR)
  • The right to request the erasure of your data (Article 17 of the GDPR)
  • The right to withdraw your consent at any time (Article 13-2 c of the GDPR)
  • The right to limit the processing of your data (Article 18 of the GDPR)
  • The right to object to the processing of your data (Article 21 of the GDPR)
  • The right to the portability of your data, when they are subject to automated processing (article 20 of the GDPR)
  • The right not to be subject to a fully automated individual decision (Article 22 of the GDPR)

To exercise these rights, you can contact our Data Protection Officer (DPO).

  • By email:  dpo@departement54.fr
  • By mail: 48, Esplanade Jacques Baudot, 54035 NANCY CEDEX for the attention of the Data Protection Officer

In the event of difficulties relating to the management of your data or the exercise of your rights, you have the possibility of submitting a complaint to the CNIL: website: (https://www.cnil.fr/fr/plaintes).