In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act of 6 January 1978, as amended, this document aims to inform you about all personal data processing activities carried out through the COMTOUR website (hereinafter referred to as the “Website”).

WHO IS THE DATA CONTROLLER?

The Data Controller is COMTOUR.

WHAT DATA IS COLLECTED AND FOR WHAT PURPOSES?

The processing of your personal data relies on different legal bases depending on the purpose of the processing, as detailed below.

These legal bases may include:

• Your freely given, specific, informed and unambiguous consent for one or more of the purposes described below;
• Compliance with one or more legal obligations applicable to the Data Controller;
• The legitimate interests pursued by the Data Controller.

Personal data is retained only for as long as necessary to fulfil the purposes for which it is processed. This period may be extended where necessary for the establishment, exercise or defence of legal claims.

Where personal data is collected through a form, mandatory fields will be indicated by an asterisk (*) or another appropriate marker. Failure to provide mandatory information may prevent us from processing your request.

Only data that is strictly necessary for the purposes described below is collected.

CONTACT REQUESTS AND COMMUNICATION

Legal Basis: Legitimate Interest

Data Collected:

• First name
• Last name
• Email address
• Telephone number

Retention Period: 2 years

WEBSITE USE

This data is collected for technical and analytical purposes only. No advertising profiling or behavioural targeting is carried out.

Legal Basis: Legitimate Interest

Data Collected:

• IP addresses
• Connection logs
• Cookies
• Pages visited

Retention Period: 2 years

Processors:

• OVH (website hosting provider)

MANAGEMENT OF DATA SUBJECT RIGHTS REQUESTS

Legal Basis: Legal Obligation

Data Collected:

• First name
• Last name
• Postal address
• Email address
• Telephone number

Retention Period:

• 1 year for access, rectification, erasure and restriction requests
• 6 years for objections to processing

RECORDING OF CONSENT

Legal Basis: Legal Obligation

Data Collected:

• IP addresses
• Connection logs
• Cookies

Retention Period: Until consent is withdrawn

BOOKING AND TRAVEL ARRANGEMENTS

Legal Basis: Legitimate Interest

Data Collected:

• First name
• Last name
• Date of birth
• Place of birth

Retention Period: 2 years

Processors:

• Inter-island airline companies requiring personal information for flight bookings.

ANALYTICS

This website uses Matomo Analytics to collect statistical information.

The data collected is anonymised.

ARE YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

When a booking is made, your personal data may be transferred to and processed in the Comoros.

The Comoros is not currently recognised by the European Commission as providing an adequate level of data protection.

However, we have implemented appropriate safeguards to ensure the security and confidentiality of your data, including technical and organisational measures such as access controls, data protection procedures and security monitoring.

You retain all rights granted under the General Data Protection Regulation (GDPR), including the rights of access, rectification, erasure, restriction, objection and portability.

YOUR RIGHTS

You have the following rights regarding your personal data:

Right of Access

You may obtain confirmation as to whether your personal data is being processed and receive a copy of such data, together with information about its use and recipients.

Right to Rectification

You may request that inaccurate or incomplete personal data be corrected or completed.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, unless legal obligations or legal claims require its retention.

Right to Restriction of Processing

You may request that processing be temporarily restricted in the following situations:

• You contest the accuracy of the data;
• The processing is unlawful but you oppose deletion;
• The data is no longer needed by the Data Controller but is required by you for legal claims;
• You have objected to processing and verification of legitimate grounds is ongoing.

Right to Data Portability

You may receive personal data that you have provided to us in a structured, commonly used and machine-readable format where processing is based on consent or contractual necessity.

Right to Object

You may object at any time, on grounds relating to your particular situation, to processing based on the legitimate interests of the Data Controller.

You also have the right to object at any time to the processing of your data for direct marketing purposes, including profiling related to such marketing.

Right to Set Instructions After Death

You may provide instructions regarding the retention, deletion and communication of your personal data after your death.

Right to Withdraw Consent

Where processing is based solely on consent, you may withdraw your consent at any time.

HOW CAN YOU EXERCISE YOUR RIGHTS?

You may exercise your rights by contacting us at:

Email: contact@com-tour.com

Requests may be refused where they do not meet the legal requirements applicable to the exercise of data protection rights. In such cases, you will be informed accordingly.

HOW TO LODGE A COMPLAINT

If you believe that the processing of your personal data does not comply with applicable laws and regulations, you may lodge a complaint with the French Data Protection Authority (CNIL):

Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

COOKIES USED ON THIS WEBSITE

A cookie is a small file stored and read on your device when visiting websites, reading emails or using software applications.

Matomo Analytics Cookies

Cookies:

• _pk_ses
• _pk_cvar
• _pk_hsr

Purpose: Temporary storage of visit-related information

Category: Necessary

Retention Period: Session only

HOW TO MANAGE COOKIES

You may modify your cookie preferences at any time through the cookie management tool available on the Website or via the cookie banner displayed during your first visit.

Most web browsers also allow you to manage and refuse cookies directly through their settings.

For more information, please consult the support pages of your browser:

• Google Chrome
• Chrome Android
• Chrome iOS
• Safari
• Safari iOS
• Firefox
• Internet Explorer
• Microsoft Edge
• Opera