THE RESERVOIR

Last updated on 09/12/2020

As part of its activities in the public administration (trusteeship) of health, education, culture and social services (other than social security), SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI implements Personal Data Processing on behalf of users of the https://lereservoir-canaldumidi.fr/ website (hereinafter "the Site"). SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI attaches particular importance to the protection of personal data. As such, SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI ensures that user data is collected and processed in accordance with the laws and regulations in force relating to the protection of personal data, and in particular Regulation (EU) 2016/679 of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "the RGPD"), as well as Law n°78-17 of January 6, 1978 relating to information technology, files and freedoms, as amended by Law n°2018-493 of June 20, 2018. The processing of personal data carried out by Le SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI is governed by this Personal Data Protection Policy (hereinafter "the Policy"). Before accessing the services offered by SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI, the user is invited to take full cognizance of the provisions below.

1. Definitions

The purpose of this Policy is to define the way in which data is collected and processed by the data controller. The terms indicated below have the following definition:

- Personal Account" refers to the customer space created by the User to enable him/her to access the products and services offered by SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI;

- Live Chat" refers to the discussion area present on the Site and intended for the User to converse with a member of the SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI;

- Data Controller" means any natural or legal person who determines the purposes and means of processing Personal Data, in this case SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI [see legal notice].

- Subcontractor" means the natural or legal person in charge of processing Personal Data on behalf of the Data Controller as part of a service or provision ;

- Processing" refers to any operation involving Personal Data, regardless of the process used, whether computerized or not, such as the collection, recording, organization, adaptation, modification, extraction, consultation, communication, use, dissemination or reconciliation of Data;

- Users" refers to natural persons who may or may not have created a personal Account on the Site and who provide Personal Data to the Data Controller.

2. Purposes and legal basis of Data Processing

Users' Personal Data is collected and processed by the Data Controller on the basis of legal grounds and to the extent strictly necessary for the purposes set out below. The Processing carried out on the basis of the User's consent includes the following:

- Carrying out operations relating to the management of Users registered on the Site;
- Enabling Users to manage all their appointments at any time via their Personal Account;
- Transmitting to professionals the information required to organize and prepare the User's appointment;
- Investigating requests for information made by Users, in particular requests for audits and demonstrations; - Investigating requests for information made by Users via Live Chat;
- Carrying out communication and prospecting campaigns relating to products and services offered by the Data Controller when no commercial relationship exists between the User and the Data Controller.

The User may withdraw his consent at any time by contacting SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI under the conditions defined in article 3 below. The User may unsubscribe from any electronic communication at any time by clicking on "unsubscribe" at the bottom of each communication.

Finally, SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI may process certain Data for the purposes of the legitimate interests it pursues in the context of cookies and tracers deposited on the User's terminal via the site, marketing operations and statistics relating to site traffic.

3. User rights

In its capacity as Data Controller, SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI is responsible for implementing Users' rights with regard to their personal Data. Users' rights are as follows:

- Right of access to Data
The User may request confirmation from the Data Controller as to whether or not his/her personal Data is being processed. If the Data Controller does indeed process Data, the User may check its accuracy by requesting a copy, readable in an understandable format, of any information that the Data Controller holds concerning him or her.

- Right to rectify Data
The User may request that his or her Personal Data be modified if it is erroneous or incomplete.

- Right to object to Processing
The User may object, for legitimate reasons, to his/her Data being used for specific purposes.

- Right to limit Processing
The User may request that the Processing of his/her Personal Data be blocked for a certain period of time, in particular while a request to exercise rights is being examined.

- Right to erasure of Data
The User may request the erasure of all Data held on him/her by the Data Controller. The Data Controller undertakes to delete the Personal Data when:
- The Data is no longer necessary with regard to the purposes for which it was collected or processed;
- The User's consent is the sole basis for the Processing and the User withdraws his consent;
- The User objects to the Processing under the conditions determined by the RGPD; - The Personal Data has been processed unlawfully;
- When the law requires the Data Controller to delete the Data.

- Right to Data Portability
The User may request the recovery of his/her personal Data for his/her own use or for the purpose of communicating it to another organization.

- Right to give instructions on the fate of Data after death
The User has the option of informing the Data Controller of how his or her Data will be used after his or her death.

For any request to exercise these rights, the User may contact the Data Controller by e-mail at or by post to the attention of SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI, Avenue Pierre-Paul Riquet, 31250 Revel - Saint-Ferréol The Data Controller undertakes to respond as soon as possible to any request to exercise these rights. Given the complexity and/or large number of requests, the response time may be extended to two months. In the latter case, the User will be informed as soon as possible. In the absence of a satisfactory response from the Data Controller, the User is entitled to lodge a complaint with the supervisory authority, i.e. the Commission Nationale de l'Informatique et des Liberté (CNIL).

4. Data retention period

The Data Controller retains Users' personal Data for the time strictly necessary to achieve the purposes of the processing, unless the User expressly authorizes longer retention. Data retention periods vary according to the purposes for which they are processed. Data relating to Users who have a commercial relationship with the Data Controller is kept for as long as is necessary for its management, with the exception of that required to establish proof of a contract. The Data may be kept by the Data Controller for commercial prospecting purposes for a maximum of three years from the end of the commercial relationship. User Data processed in connection with Live Chat exchanges is kept for one month after the request is closed. User Data collected for the purpose of commercial solicitation is kept for three years from the date of collection or from the date of the last contact from the prospect.

5. Communication of Data

The recipients of the Data are the authorized members of the SYNDICAT MIXTE DU MUSEE ET JARDINS DU CANAL DU MIDI and its subcontractors. The Data Controller may also communicate User Data to third-party partners, in particular the following: Google only for the creation of professional accounts (Google my Business, Google Tag Manager,...) The Data Controller may communicate User Data for reasons required by law.

6. Subcontractors and data processing outside the European Union

In the event that the Data Controller subcontracts certain Data Processing operations to third parties located outside the European Union, measures are taken to ensure that said Data benefit from the same level of protection as that imposed by the European Union in this respect. The Data Controller ensures that Data Processing operations are carried out in accordance with this Policy, and that they are governed by Data Protection regulations.

7. Data security

All Data supplied to the Data Controller is processed with the necessary diligence and security. In this respect, the Data Controller undertakes to implement all appropriate measures, with regard to the nature of the Data and the Processing carried out, to ensure the security and confidentiality of personal Data.

8. Modifications

The Data Controller reserves the right to modify this Personal Data Protection Policy. In this case, an updated version will be published on the Site. The Data Controller invites its Users to consult this Policy on a regular basis. The date of the last update is indicated on the first page.