In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act of January 6, 1978, as amended, this document aims to inform you about all data processing carried out on the COMTOUR website (hereinafter referred to as the "Site").
WHO IS THE DATA CONTROLLER?
The data controller is the company COMTOUR.
WHAT DATA IS PROCESSED AND FOR WHAT PURPOSES?
The processing of your personal data is based on various legal grounds depending on the purposes pursued, as detailed below. These legal grounds include:
- The data subject gives their free, specific, informed, and unambiguous consent to the processing of their personal data for one or more of the purposes described below;
- Compliance with one or more legal obligations to which the data controller is subject.
Your personal data is only retained for the time strictly necessary to achieve the purposes for which it is processed, as described below. This duration may be extended for the exercise or defense of legal rights by the data controller.
If your personal data is collected through a form, you will be informed of the mandatory nature of the information via an asterisk (*) or another indication near the relevant fields. Without your response, the processing cannot be carried out, and your request will not be fulfilled.
Only the personal data strictly necessary for the purposes described below is collected.
Communication and exchanges of information to respond to contact requests
- Legal basis: Legitimate interest
- Data collected: Name, first name, email address, phone number
- Retention period: 2 years
Website usage
- Purpose: Data is collected for technical purposes. No targeted advertising is performed using this data.
- Legal basis: Legitimate interest
- Data collected: Navigation data (IP addresses, connection logs, cookies, pages viewed)
- Retention period: 2 years
- Sub-processors: OVH, the website hosting provider.
Management of user rights requests related to data processing
- Legal basis: Legal obligation
- Data collected: Contact information (name, first name, postal address, email, phone number)
- Retention period:
- 1 year for access, rectification, deletion, and restriction rights.
- 6 years for the exercise of the right to object to processing.
Retention of proof of obtained consent
- Legal basis: Legal obligation
- Data collected: Navigation data (IP addresses, connection logs, cookies)
- Retention period: Until consent is withdrawn
Communication and exchanges of information to respond to contact requests
- Legal basis: Legitimate interest
- Data collected: Name, first name, date, and place of birth
- Retention period: 2 years
- Sub-processors: Inter-island airline companies requiring personal data for flight reservations.
Website usage
This site uses the Matomo Analytics tool to collect statistical information. The collected data is anonymized.
IS YOUR DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
In the case of reservations, your personal data is transferred and processed in the Comoros, a country not recognized by the European Commission as providing an adequate level of data protection.
We have implemented appropriate safeguards to ensure the security and confidentiality of your data, including strict technical and organizational measures (data encryption, access limitations, audits).
You retain all your rights (access, rectification, opposition, deletion, limitation) under the General Data Protection Regulation (GDPR).
WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
You have the following rights regarding your personal data:
Right of Access
You can obtain a copy of your personal data at any time, as well as information about their nature, origin, and usage, and the identity or categories of their possible recipients.
Right of Rectification
You can request that inaccurate or incomplete personal data be corrected or completed.
Right to Erasure
You can request the deletion of your personal data, particularly if they are no longer necessary for the purposes of the processing, except when the data controller is legally required to retain them or needs them for legal claims.
Right to Restrict Processing
You can request the temporary inaccessibility of your personal data to limit future processing in the following cases:
- You dispute the accuracy of your personal data, for the duration necessary for the controller to verify them.
- You consider the processing unlawful but oppose the deletion of your personal data.
- Your personal data is no longer necessary but you want it retained for legal claims.
- You have objected to processing, pending verification of whether the controller’s legitimate reasons override yours.
Right to Data Portability
You can request to receive the personal data you provided to the controller, processed by automated means, in a structured and commonly used format. This right only applies if the processing is based on your consent or contractual measures.
Right to Object
You can object at any time, for reasons related to your specific situation, to the processing of your personal data based on the controller’s legitimate interests, except when there are compelling legitimate grounds for the processing or for legal claims.
You also have the right to object to the processing of your data for direct marketing purposes, including profiling.
Right to Define Post-Mortem Instructions
You can provide instructions on the retention, deletion, and communication of your personal data after your death.
Right to Withdraw Consent
You can withdraw your consent to data processing at any time when the processing is based solely on your consent.
HOW TO EXERCISE YOUR RIGHTS?
You can submit any request concerning your personal data rights by contacting the following email address: contact@com-tour.com
Requests may be denied if they do not meet regulatory conditions. In such cases, you will be duly informed.
HOW TO FILE A COMPLAINT WITH THE CNIL?
If you believe that the processing of your personal data does not comply with legal and regulatory provisions, you may file a complaint with the French Data Protection Authority (CNIL):
Address: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.
WHAT COOKIES ARE USED ON THE WEBSITE?
A cookie is a tracker placed and read during the browsing of websites, reading of emails, installation, or use of software on your device.
- _pk_ses, _pk_cvar, _pk_hsr (Matomo)
- Description: Short-duration cookies used to temporarily store visit data.
- Category: Necessary
- Retention period: Session
HOW TO MANAGE COOKIES?
You can configure your cookies and modify your choices at any time using the cookie manager on the website or via the information banner when you first visit the Site.
Your browser settings also allow you to be notified of the presence of HTTP cookies and to refuse them. The following links provide instructions for common browsers:
- Manage cookies in Chrome, Chrome Android, and Chrome iOS.
- Manage cookies in Safari and Safari iOS.
- Manage cookies in Firefox.
- Manage cookies in Internet Explorer.
- Manage cookies in Internet Edge.
- Manage cookies in Opera.