Privacy policy

Controller

SKI & WAKE 74, single-shareholder simplified joint-stock company, registered office: 802 Route de Marceau Dessous, 74210 Doussard.
Welcome address: 120 Route de la Plage, 74210 Doussard, Lac d'Annecy.
Contact for your rights: annecyevg@gmail.com — 06 82 41 85 40.

No data protection officer has been appointed. Requests about data are sent to the contact above.

Quote request

The form collects your first name, last name, email address, phone number, type of event, number of participants, preferred date or the statement that the date is not yet known, the activities you are interested in and, if you provide them, an approximate budget per person and a message.

First name, last name, email, phone, type of event, number of participants, the date or its absence, and at least one activity are needed in order to reply. The budget and the message are optional. The form does not ask for an identity document, payment data, or a named list of participants.

Purpose: to review the request and reply to it. This is not a booking and it is not a payment. The data is not used to send a newsletter or any marketing that is unrelated to this request.

Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) of Regulation (EU) 2016/679). A consent tick box is not required in order to send the request.

Recipients: the people at SKI & WAKE 74 who reply, then the provider that delivers the email.

The form is sent by email through Google’s SMTP service (smtp.gmail.com, port 587). The message contains the information from the form and is sent to the company’s quote inbox. Google may process this content outside the European Economic Area.

Where the request is kept. The website does not write the request into a database or into an export file. After it is sent, it exists in the message received by the quote inbox, through Google. The anti-abuse counter keeps only the IP address, in memory, for the fifteen-minute window described below. It does not contain the content of the quote.

Retention periods. They depend on what the request becomes. A shorter period does not apply to a document that is subject to a longer obligation.

• Request that does not proceed: 12 months after the last exchange, then deletion. This is the period the company uses in order to reply and follow up. Basis: pre-contractual steps taken at your request (Article 6(1)(b) of Regulation (EU) 2016/679).
• Formal quote and commercial correspondence: kept for the legal periods that apply to proof of these exchanges, in principle five years, unless a shorter special limitation period applies (Article L. 110-4 of the French Commercial Code). Basis: legitimate interest in keeping proof of a commercial exchange (Article 6(1)(f)).
• Invoices and accounting records: ten years from the close of the financial year (Article L. 123-22 of the French Commercial Code). Basis: legal obligation (Article 6(1)(c)).
• Electronic contract concluded with a consumer for an amount of at least €120: ten years from the service, when that obligation applies (Article L. 213-1 of the French Consumer Code and the decree that sets the amount and the period). The website form does not conclude that contract. Basis: legal obligation, in that case only.

No automatic deletion is in place. The application does not erase the messages. When a quote is formalised, or a contract or an accounting record comes from it, the company keeps a copy in an archive that is separate from requests that do not proceed, before any sorting of the inbox. A request that does not proceed, and that has become neither a formal quote, nor a contract, nor an accounting record, is deleted from that inbox twelve months after the last exchange. The company carries out that deletion.

Language of the website

A cookie named annecy_locale stores the display language (French, English or German). It is set in order to provide the website in the chosen language. It is not used for advertising or audience measurement. The detail is in the cookie policy.

Form security

The IP address of the connection may be read for long enough to limit repeated submissions of the form (at most five requests per address in a fifteen-minute window). This processing is based on the legitimate interest in preventing abuse (Article 6(1)(f)). The counter is kept in the server’s memory and is not written into a database of the website. It disappears at the latest at the end of that window, or sooner if the server restarts.

Map

The Google Maps map is not loaded when the page opens. It is loaded only if you click “Show the map”. That click is agreement to this loading. Google may then set its own cookies and receive your IP address. Google acts for its map service; this is not a cookie of the SkiWake 74 website. A “Open in Google Maps” link leaves the website without loading the embedded map.

Google may process data outside the European Economic Area. Google’s terms and safeguards apply to this service. The website does not receive a copy of the cookies set by Google.

What the website does not do

No user account, no payment, no booking confirmed online, no statistics tool enabled, no advertising, no social-network pixel, no embedded video. Technical events on the website (opening the form, clicking the phone number) are not sent to a measurement tool.

Hosting logs

The host named in the legal notice, Hostinger International Ltd, may keep technical logs (IP address, date, page requested) for the security of its infrastructure. These logs are not a prospecting database of the website.

Your rights

You may request access to your data, its rectification, its erasure, restriction of processing and, for the quote request, portability of the information you provided. You may object to processing based on legitimate interest, for reasons related to your particular situation.

Write to annecyevg@gmail.com. A reply is due within one month, which may be extended by two months if the request is complex. Proof of identity may be requested only where there is reasonable doubt.

You may lodge a complaint with the CNIL, the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris CEDEX 07, France, or at cnil.fr.

Security

The form is checked on the server. Messages are stripped of HTML tags. Sending is limited in order to reduce abuse. No automated decision that produces a legal effect is taken from this data.