Preamble

The Dijon Métropole Tourist Office processes your personal data (hereafter known as “Personal Data”) regarding your use of this website (hereafter known as “Website”).

As the entity responsible for processing, we strive to protect your privacy and we protect the personal data of the users of our Website.

The object of the present policy is to inform you of the means of collecting, processing and using Your Personal Data, and of your rights regarding the protection of personal data, in accordance with the application laws, in particular the Information Technology, Data Files and Civil Liberties law 78-17 of the 6th January 1978, known as the “Data Protection Directive” as per the latest version, and with the GDPR (General Data Protection Regulation) which was adopted on 25th May 2018.

Scope of application of the present privacy policy

The present Policy details the principles and guidelines for the protection of Your Personal Data, including Personal Data collected on – or via – the Website.

The Dijon Métropole Tourist Office collects Personal Data (for example: online, including by email, or offline); the present policy applies for all means of collection or processing.

The notion of Personal Data includes all information about a physical, identified or non-indentified, person. A person is known as “identifiable” as soon as they can be identified, directly or indirectly, in particular by reference to an identification number or one or more pieces of information which are unique to them.

The “Non-Personal Data” refers to information which does not allow a person to be identified.

Data controller

The data controller for Your Personal Data is: Cordula RIEDEL; some technical services (for example: hosting, duplication, data quality, customer insight) are entrusted to technical service providers. In accordance with Article 28 of the GDPR, this service provider is bound to a strict confidentiality clause which forbids any use of the data they handle which is not intended in the contract, and which means they must implement technical and organisational measures in order to comply with security and personal data protection regulations.

Security and confidentiality of personal data

We consider Your Personal Data as confidential.

We strive to take all reasonable technical measures in order to prevent any possible loss or misappropriation when the data you have provided us with is collected and stored, and prevent any communication with unauthorised third parties.

However, in spite of these measures, the Internet remains an open system and we cannot guarantee that unauthorised third parties do not breach said measures or use Your Personal Data for unlawful purposes. Consequently, the Dijon Métropole Tourist Office cannot be held liable in the event of fraudulent recovery of your data for any use.


The Website may propose links to other Internet sites which are likely to interest you.
The Dijon Métropole Tourist Office has no control over the content of these third-party websites or over the practices of these third parties with regards the protection of the Personal Data they may collect. Consequently, the Dijon Métropole Tourist Office accepts no responsiblity regarding the processing of Your Personal Data by these third parties. It is your responsibility to find out about the privacy policies of these third parties.

Purpose of data collection

We process your data, in whole or in part, for the following reasons:

  • to allow you to browse our Websites and Applications and to adapt our content to your device for an improved browsing experience;
  • to memorise the information you have entrered in the online forms (in your user account for example);
  • to allow you to share our content on social networks;
  • to allow you to buy products or services;
  • to provide you with an interactive and personalised experience when using our Websites and Applications;
  • to better understand your needs and interests and to provide you with better adapted products and/or services;
  • to allow you to open and manage an account and to be able to access all the features and options available on the Websites and Applications;
  • to send information and/or external communication;
  • to organise competitions (to contact the winners, hand out prizes, etc.);
  • to send newsletters, if you have given your consent by ticking the box;
  • to send commercial offers from partners, if you have given your consent by ticking the box;
  • to analyse the Website traffic
  • to post advertisements which are adapted to your interests;
  • to analyse the performance of these advertisements;
  • to process job applications and manage recruitment sources;

The only recipients of Your Personal Data are our own management teams and technical service providers.

Data collected

Personal Data

The Personal Data may include the following:

Surname;

First name;

Email address;

Postal address;

Date of birth;

Telephone number;

Password;

Portrait photo;

Geo-positioning;

IP address;

And any other Personal Data which may be deemed relevent for the purposes detailed hereafter.

Cookies and other trackers

Cookies, or other similar trackers, are small files used by a server to communicate with the browser. Cookies allow status information to be sent when a user consults a website. Status information could include session ID, a language, an expiry date, a response field, etc. Cookies allow status information to be retained, for the period of validity, while a browser is accessing the different pages of a website or when a browser returns to said website at a later date. Only the issuer of a cookie is authorised to read or modify its content. There are different types of cookies:

  • session cookies which disappear as soon as your close the browser or the website;
  • permanent cookies which remain on your device until the expiration of their shelf life (maximum 12 months) or until you have deleted them using the settings on your browser.

You can access your cookies management panel in order to configure the deposit and reading settings for cookies.

How do I deactivate cookies?

Browser settings

Some cookies require your consent before being installed. When you first visit the Website, an information banner appears, informing you that if you choose to continue browsing the Website, the above-mentioned cookies will be installed on your device.

Cookies or trackers allow you to take advantage of all features of the Website. If your browser settings are such that all cookies or trackers are refused, this could mean that you will not be able to use some of our services, the Dijon Métropole Tourist Office cannot be held responsible for this.

Online forms

Subscription to newsletters

Partner newsletters

In giving your consent for this type of newsletter, you authorise the partners of the Dijon Métropole Tourist Office to send you personalised emails, including commercial offers. You can unsubscribe at any time, nevertheless, your data will be stored for a maximum period of 3 years.

Information newsletters

In giving your consent for this type of newsletter, you authorise the Dijon Métropole Tourist Office to send you personalised emails. You can unsubscribe at any time from a link on one of the emails received, nevertheless, your data will be stored for a maximum period of 3 years.

Creation of a user account

You have the possibility to create an account which will give you access to your customer account. You can unsubscribe at any time from your customer account, nevertheless, your data will be stored for a maximum period of 3 years.

Contact form

The data is sent by the user of the website who would like to send a comment. The information collected from this form is sent to the department in charge of managing comments from the Dijon Métropole Tourist Office website. The maximum storage duration for your data is 3 years.

Your rights

In accordance with the dispositions of data protection regulations, you have the right to access, modify, delete your personal data, and the right to obtain a copy of the personal data we hold in a structured electronic format (portability).

You also have the right to oppose the processing of your own personal data, with legitimate reason, and the right to oppose your data being used for prospection purposes, in particular commercial prospection.

You can choose to exercise your rights by sending your requests to the following postal address: 11 and 11 ter rue des Forges – CS 82296 – 21022 DIJON CEDEX (FRANCE) or directly on the Website, via our contact form.

We shall send you a reply within one month from the date we receive your request. This period may be extended by two months, depending on the complexity and number of requests received.

In the case of disputes as to the exercise of your rights, you are entitled to send a complaint to the French National Commission on Informatics and Liberty (CNIL in French).

Data storage

We only store Your Personal Data for the necessary period and that which is relevant for the purpose for which it was collected, that is for a maximum period of 3 years, dating from the last exchange that took place between you and us, and taken upon your own initiative (particularly connecting to your account).

Beyond the above-mentioned periods, your data shall be rendered anonymous and only used for statistical purposes, or shall be deleted.

Updating the present privacy policy

The present privacy policy could be modified or updated at any moment.

Please consult it on a regular basis.

For more practical information on exercising your rights, we recommend you consult the website for the French National Commission on Informatics and Liberty (CNIL in French), and specifically the page https://www.cnil.fr/fr/comprendre-vos-droits

Declarations with the CNIL n°2047334 and 2047337 of the 24th March 2017.

Last updated on: 23/05/2019