1. General Information

The Pays de Forbach Tourist Office aims to comply with all legal obligations regarding personal data protection.

All operations on your personal data are carried out in compliance with current regulations, particularly with the General Data Protection Regulation and the Data Protection Act - Regulation (EU) 2016/679, known as the General Data Protection Regulation ("GDPR"), and with Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, as amended by the law of August 6, 2004 ("Data Protection Act").

This data protection policy aims to inform you about the choices and practices of the Pays de Forbach Tourist Office regarding privacy, as well as the options available regarding how data is collected online and how it is used.

In accordance with the Data Protection Act and the General Data Protection Regulation, the Pays de Forbach Tourist Office commits to:

• only process data collected fairly and lawfully;
• only process data collected for specified, explicit, and legitimate purposes;
• only process data that is adequate, relevant, and not excessive in relation to the purpose of its processing;
• take all necessary precautions to preserve data security, in particular to prevent them from being distorted, altered, or damaged;
• not communicate this data to third parties outside the company without informing the individuals concerned.

Website Intellectual Property

The content of our site, its general structure, tree view, textual content, animated or non-animated images, and logos that make up the site are the exclusive property of the Pays de Forbach Tourist Office.

Any reproduction, in whole or in part, of this site or its content, on any medium, for collective or professional use, even internally within the company, by any means whatsoever, without the express prior written authorization of the Pays de Forbach Tourist Office is prohibited and would constitute an infringement punishable by articles L.335-2 and following of the Intellectual Property Code; likewise, violation of these provisions subjects the offender and all responsible persons to the criminal and civil penalties provided for by French Law.

Contact Details of the Personal Data Controller

For services offered on the website www.paysdeforbach.com, the data controller is the Pays de Forbach Tourist Office, Château Barrabino, Avenue Saint-Rémy, 57600 Forbach, email: contact@paysdeforbach.com

The legal representative of the Pays de Forbach Tourist Office is Ms. Jessica DELPECH, in her capacity as Director.

2. Collection and Use of Collected Data

The Pays de Forbach Tourist Office commits to collecting only the data strictly necessary for the provision of the service and any resulting follow-up, and after obtaining the client's consent in accordance with regulations.

Purpose of Collection

The Pays de Forbach Tourist Office uses collected personal data exclusively to transmit information and promotional offers regarding products published by it.

Categories of Data Collected

The Pays de Forbach Tourist Office ensures that it collects only data strictly necessary for the declared purpose of the various processing operations carried out by the company.

• managing requests via the contact form (individual / groups) or via the email address provided to you;
• managing newsletter subscriptions;
• managing brochure orders;
• managing and sending orders placed on the online store and associated account creation;
• managing customer reviews and satisfaction surveys;
• generating website traffic statistics.

Legitimate Interest of Our Processing

In certain cases, particularly concerning employees of the Pays de Forbach Tourist Office, processing may be necessary for the legitimate interests pursued by the data controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject, which require personal data protection, prevail, especially when the data subject is a child.

Type of Data Collected

The Pays de Forbach Tourist Office may collect the following data from you:

• Identification and contact data: title; last name; first name; postal address; phone number; email address;
• Professional life data: organization name, professional contact's first and last name; professional email address, professional phone number;
• Data related to newsletter subscriptions: last name; first name; email address;
• Connection data: IP address; pages viewed by the user; date and time of consultation;
• Audience measurement data (cookies).

Recipients of Your Data

Your personal data will not be transmitted to third parties, except for the sole purposes you have accepted when providing your consent.

Internally:

• Only the Pays de Forbach Tourist Office staff competent for their activity have access to the data that is necessary and indispensable to them.

Externally:

• The web agency responsible for site maintenance,
• The subcontractor for data hosting,
• The subcontractor for managing payments for purchases made on our website,
• Subcontractors specializing in managing our databases,
• Services responsible for tax and social contributions (for employees only)
• Subcontractors publishing software used by the Pays de Forbach Tourist Office
• The departmental attractiveness agency

Under no circumstances will your data be transmitted, sold, lent, transferred, or rented to third-party partners or non-partners who might solicit you, without your express consent.

However, the Pays de Forbach Tourist Office reserves the right to transmit personal data to authorized third parties (public bodies, judicial authorities, legal auxiliaries, and ministerial officers) in order to comply with its legal obligations, and particularly if compelled by judicial requisition.

The Pays de Forbach Tourist Office requires all its service providers and partners to process personal data in accordance with the Pays de Forbach Tourist Office's commitments regarding confidentiality and security.

Data Retention Period

The Pays de Forbach Tourist Office will store your personal data in a secure environment only for the period necessary to achieve the purposes for which they were collected or for the maximum retention period stipulated by applicable French legislation.

For example:

Data related to user requests via contact forms: 1 year from the last contact

Data related to newsletter subscriptions: as long as the data subject does not unsubscribe (via the unsubscribe link integrated into the newsletters)

Data necessary for order management and invoicing: for the entire duration of the commercial relationship and ten years for accounting obligations

Customer data: for the entire duration of the commercial relationship and three years from the last purchase

For employees, texts provide for variable retention periods for certain data (employment contracts, invoices, tax declarations, URSSAF, pension funds, etc.) without prejudice to legal retention obligations or limitation periods.

3. Reminder of Your Rights Defined by the GDPR

Under the provisions of Article 12 of the GDPR, you have the right to obtain clear, concise, and transparent information from the Pays de Forbach Tourist Office. The primary purpose of this document is to fulfill the obligations referred to in Article 13.

Right to Confirmation of Processing

You therefore have the right to obtain from the data controller confirmation as to whether or not personal data concerning you is being processed. (Art. 15-1 of the GDPR).

Rights of Access, Purposes, Categories, Recipients, Duration

Where they are, you have a right of access to said personal data as well as the following information:

• the purposes of the processing; (Art. 15-1a of the GDPR)
• the categories of personal data concerned; (Art. 15-1b of the GDPR)
• the recipients or categories of recipients to whom the personal data have been or will be disclosed; (Art. 15-1c of the GDPR)
• where possible, the envisaged period for which the personal data will be stored, or the criteria used to determine that period; (Art. 15-1d of the GDPR).

Rectification, Erasure-Right to be Forgotten, Restriction, Objection, Portability

You have the right to request from the data controller:

• the rectification of your personal data (Art. 16 of the GDPR)
• the erasure of your data or the "right to be forgotten" (Art. 17 of the GDPR)
• the restriction of processing of personal data (Art. 18 of the GDPR)
• the right to object to the processing of your data; (Art. 21 of the GDPR)
• the right to receive your data in a machine-readable format allowing for its portability; (Art. 20 of the GDPR).

Complaint to the CNIL, Data Origin, Automated Decision-Making

You also have the right:

• to lodge a complaint with a supervisory authority; (Art. 15-1f of the GDPR)
• where the personal data are not collected from you, any available information as to their source; (Art. 15-1g of the GDPR)
• to ascertain the existence of automated decision-making, including profiling, and, in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing. (Art. 22 of the GDPR) (Art. 15-1h of the GDPR).

Right to Know if Your Data is Subject to Cross-Border Transfers

You have the right to be informed of the appropriate safeguards provided if your data is transferred to a third country outside the European Union. (Art. 15-2 of the GDPR).

Right to Obtain a Copy of Your Data

You have the right, by proving your identity, to obtain from the data controller an electronic or paper copy of your personal data being processed by our company or any of our subcontractors (provided that this request does not infringe upon the rights and freedoms of others).

You can address any such request to the Data Protection Officer mentioned above. (Art. 15-3 & 4 of the GDPR).

Right to Give Instructions in Case of Death

You also have the right to give us instructions regarding the fate of your data after your death. (Law No. 2016-1321 of October 7, 2016, for a Digital Republic).

Right to Revoke Previously Given Consent

You have the right to withdraw your consent at any time.

The withdrawal of this consent does not affect the lawfulness of processing based on consent carried out before this withdrawal.

You must be informed of this right before giving your consent. It must be as easy for you to withdraw your consent as to give it to us. (Art. 7-3 of the GDPR).

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you notice a violation of your data or if you believe that the processing of your personal data constitutes any violation of the regulation.

However, we suggest that you first contact the data controller indicated above.

You can find information on the procedure provided by the CNIL via this link: https://www.cnil.fr/fr/agir

Right to Know the Consequences of Refusing to Provide Information

You are informed that, in accordance with Article 32 of the Data Protection Act, the information you provide to us via the forms on the site is necessary to respond to your request and is intended for the services responsible for responding to your request for follow-up purposes.

You have the right to refuse to transmit this information to us, but you are informed that in this case, the OTCBM may in turn refuse to act on an incomplete request from you.

Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you. (Art. 22-1)

The Pays de Forbach Tourist Office does not carry out such data processing.

Right to Demand Secure Data Storage

The Pays de Forbach Tourist Office ensures the security and durability of your Personal Data by implementing all appropriate technical and organizational measures for the storage and safeguarding of your data, to prevent them from being destroyed, corrupted, modified, misused, or altered.

However, it is up to each user to ensure the security of personal data transmissions over the internet.

The Pays de Forbach Tourist Office cannot be held responsible for personal data transmissions over the internet.

4. Exercise of Rights

In accordance with the amended "Data Protection Act" of January 6, 1978, by proving your identity, you have the right to access, rectify, or delete information concerning you. You may also, for legitimate reasons, object to the processing of this data or request its portability.

To exercise your various rights defined above, you will need to prove your identity and optionally:

• indicate the reasons why you wish to exercise them
• precisely define the scope of the data you wish to copy
• specify the data format you wish to receive in return

Partial objection (or simple unsubscribe request) is a right you can exercise at any time during mailings, via a link present in each email you receive from us, or by writing directly to contact@paysdeforbach.com or by postal mail: Pays de Forbach Tourist Office – Château Barrabino – Avenue Saint-Rémy – 57 600 Forbach.

If, after contacting us, you believe that your rights regarding your personal data are not respected, you can lodge a complaint with the CNIL or the supervisory authority of your place of residence.

For more information on your rights, visit the CNIL website at: https://www.cnil.fr

You also have the right to directly contact the CNIL if you believe your rights have been violated, or that our company is not complying with its data protection commitments.

5. Website Cookie Policy

Cookies are data stored on a user's device and used by the site to send information to the user's browser, allowing the browser to send information back to the original site (for example, a session ID, language choice, or a date).

Cookies allow for the retention of state information, for the duration of the cookie's validity, when a browser accesses different pages of a website or later returns to that website.

Different types of cookies may be placed on the site:

• Internal cookies necessary for the site to function

These cookies allow the site to function optimally.

You can object to them and delete them by using your browser settings; however, your user experience may be degraded.

This notably includes the Google Analytics audience measurement tool detailed below.

• Audience Measurement Cookies

This website uses Google Analytics, an open-source web analytics service, to analyze how visitors use it. On this website, IP address anonymization has been activated, meaning that visitors' IP addresses are shortened before being recorded by Google Analytics, in accordance with CNIL recommendations.

You can object to the tracking of your browsing on this website.

This will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

• Marketing Cookies

These cookies allow us to analyze your browsing in a bit more detail to personalize the content or advertisements offered to you.

This specifically includes Google Analytics and Facebook services.

These cookies can be refused as soon as one of the site's pages loads and are not triggered automatically.

• Third-Party Cookies

Content published on the website www.paysdeforbach.com may contain cookies from third parties. Such cookies may also be stored on your device when you browse the site.

The issuance and use of these cookies by third parties are subject to the privacy policies of those third parties.

Cookie Management

Only the issuer of a cookie can read or modify the information contained therein.

When you connect to www.paysdeforbach.com, a banner briefly presenting information related to the placement of cookies and similar technologies appears at the bottom of your screen. This banner informs you that the site uses Cookies, subject to your choice, which can be modified at any time.

Depending on the type of cookie involved, obtaining your prior consent for the placement and reading of cookies on your device may be mandatory.

User consent is obtained prior to the placement of these cookies. Users can also give or withdraw their consent at any time via the cookie manager.

If your browser allows it, you can also object to the recording of cookies by configuring your browser settings, as indicated below:

For Internet Explorer:
https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies

For Firefox:
https://support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences

For Google Chrome 4, Google Chrome 8 and above: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=fr

For Safari:
https://support.apple.com/fr-fr/HT201265

If applicable, the user is informed that access to certain services and sections of the site may, in this case, be altered, or even impossible.

6. Measures taken for the protection of personal data

The Pays de Forbach Tourist Office has taken measures to prevent any personal data breach, including:

• Appointment of a data controller
• Staff awareness of personal data protection
• Information system security audit
• Implementation of a general data protection policy

7. Applicable Law and Jurisdiction

Our activity is governed by French law. In case of dispute, French courts will have exclusive jurisdiction.

8. Modification of this Data Protection Policy

The Pays de Forbach Tourist Office reserves the right to modify this Data Protection Policy at any time, for example, to take into account new data collected, modifications to our processing or our purposes, but also to comply with changes in certain legislative and regulatory provisions, particularly with regard to the French Data Protection Act or the GDPR.

9. Secure Payment

• Secure payment by credit card

Payment by credit card is handled by a third-party payment provider, PAYZEN, which guarantees a 100% secure payment system. The accepted payment methods are the following credit cards: Visa, Mastercard, American Express... All transactions are carried out in euros.