DJ.22.313v1

PERSONAL DATA

Purposes and legal bases for processing your personal data

The personal data on this website is collected for the purposes of:

- Creating and managing your personal account. This process is based on your consent.

- Process your order and implement the sales contract to which you are a party.

- Send you commercial offers, newsletters, invitations to participate in games or competitions, as well as satisfaction surveys. This processing is based on the legitimate interest of the Société d’Aménagement de la Station de la Plagne (SAP) in developing its activities

- Respond to your requests for information, comments and complaints. This processing is based on your consent

Unless otherwise stated on the website, completion of all fields is necessary to enable SAP to carry out the processing mentioned above.

Responsibility when processing your personal data

The processing is carried out under the responsibility of SAP, represented by its general director.

Recipients of your personal data

The data collected is intended for the SAP and the service providers whose intervention is necessary to carry out the processing mentioned above.

Retention periods of your personal data

The data collected is kept for the following periods:

- The data collected is kept for the following periods: - Data used to create and manage your personal account: until deletion of your personal account.

- Data used to process your order: five years from collection if the order amount is less than €120, ten years if the order amount is equal to or greater than €120. Only the number and expiry date of your bank card are kept for fifteen months after the last debit date for purposes of proof in the event of a dispute regarding the transaction. The cryptogram is not kept beyond the transaction. Also, by exception, the photograph is kept until the end of the validity of the package for which the photograph is used.

- Data used to send commercial offers, newsletters, invitations to games or competitions, as well as satisfaction surveys: three years from their collection date, this period is renewed with each interaction with SAP (new order, request for information, etc.)

- Data used to respond to your requests for information, comments and complaints: for the duration necessary to process these requests, comments and complaints.

Your rights regarding the processing of your personal data

You have the right to access your personal data, to have it rectified or deleted, to transfer it or to have it transferred to a third party, to obtain a restriction of, or to oppose this processing. SAP will comply with your request subject to compliance with its legal obligations.

You have the right to withdraw your consent to the processing of data concerning you at any time. The withdrawal of your consent does not affect the lawfulness of the processing carried out before this withdrawal.

A written copy of this document can be obtained from SAP as follows:

- By email to the following address: privacy.sap@compagniedesalpes.fr

- By post to the following address: SAP, Protection of personal data, Plagne Centre, 54 impasse de la Cembraie, Mâcot-la-Plagne, 73210 La Plagne Tarentaise, France.

In the interest of confidentiality and protection of your personal data, SAP reserves the right to ask you for proof of identity before responding to your request. You may therefore be asked to produce a copy of an identity document mentioning your date and place of birth and bearing your signature.

Finally, you have the right to send a complaint to the Commission Nationale de l’Informatique et des Libertés (CNIL) if you believe your rights have not been respected. The contact details of the CNIL are as follows: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – Tel. : +33 1 53 73 22 22 – Fax: +33 1 53 73 22 00 – Website: https://www.cnil.fr/fr/plaintes.