Privacy policy
Date of last update: [Insert current date]

The Hautes-Pyrénées Tourisme Environnement (H.P.T.E.) association attaches the utmost importance to protecting your personal data and respecting your privacy. The purpose of this policy is to provide you with transparent information on how we collect, use and protect your information.

1. Data controller
The party responsible for processing the personal data collected on the www.tourisme-hautes-pyrenees.com website is: Hautes-Pyrénées Tourisme Environnement (H.P.T.E.)

11 rue Gaston Manent, BP 9502, 65950 Tarbes cedex 9 Represented by its General Management.

2. Data we collect
We collect different categories of data:

Identity and contact details: Surname, first name, postal address, e-mail address, telephone number (via our contact forms or documentation request forms).
Booking data: Information required to conclude your holiday contract (via “La Boutique”).
Technical data: IP address, browser type, browsing data (via cookies).
3. Why we collect your data (Purposes)
Your data is processed for the following reasons:

Fulfilment of the contract: Processing of your holiday bookings and order tracking.
Dispatch of documentation: Dispatch of requested guides and brochures.
Information and Promotion: Sending our newsletter (only if you have ticked the subscription box).
Statistics: Website audience analysis to improve our services.
4. Legal basis for processing
In accordance with the RGPD, we only process your data on the following bases:

Your consent (e.g. newsletter registration, cookies).
Performance of a contract (e.g. purchase of a holiday).
Our legitimate interests (e.g. responding to your contact requests).
A legal obligation (e.g. keeping invoices).
5. Data retention period
Customers (Shop) : Data is kept for the duration of the contractual relationship, then archived for 10 years to meet accounting and tax obligations.
Prospects and contacts: Data is kept for 3 years from the last contact from you.
Cookies: Cookies are valid for a maximum of 13 months.
6. Recipients of data
Your data is strictly confidential. It will only be transmitted to those recipients necessary for the proper functioning of our services:

The internal departments of H.P.T.E.
Our technical service providers: Raccourci Agency (hosting) and Think My Web (digital strategy).
Our secure payment partners: Athos and Crédit Agricole.
We never sell or rent your personal data to third parties.

7. Security of your data
H.P.T.E. implements technical and organisational security measures (SSL encryption, restricted access) to protect your data against unauthorised access, loss or alteration.

8. Your rights (Right of access, rectification, deletion)
You have the following rights with regard to your data:

Right of access and rectification of your data.
Right to erasure (“right to be forgotten”).
Right to restrict or object to processing.
The right to portability of your data.
To exercise these rights, please contact us:

By e-mail: rgpd@ha-py.fr
By post: H.P.T.E. – Service RGPD – 11 rue Gaston Manent, BP 9502, 65950 Tarbes cedex 9.
9. Cookie management
On your first visit, a banner allows you to accept or refuse cookies. You can change your preferences at any time using the cookie manager at the bottom of the page.

10. Complaints to the CNIL
If, after contacting us, you feel that your rights have not been respected, you can submit a complaint to the Commission Nationale de l’Informatique et des Libertés (CNIL) on their website: www.cnil.fr.