PRIVACY POLICY

Preamble and data controller

The company CARIBBEAN TRIP attaches great importance to protecting your privacy. The purpose of this policy is to inform you, clearly and transparently, about how your personal data is collected and processed when you use the website authentique-excursion.com (hereinafter “the Site”), in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of January 6, 1978, known as the “Data Protection Act”.

The data controller is the company CARIBBEAN TRIP (SARL), whose registered office is located at 14 Route de Fonds Vapeur, 97180 Sainte-Anne (Guadeloupe). For any question relating to your data, you can contact it at bcauzot@gmail.com.

Data we collect

We only collect the data necessary for the purposes described below. Depending on your use of the Site, this may include the following categories:

  • Identification and contact data: last name, first name, postal address, email address, phone number.
  • Booking or order data: chosen services or accommodations, dates, number of people, amount, and history.
  • Payment data: information necessary for payment, processed by a secure provider (see below).
  • Browsing data: IP address, browser type, pages viewed, date and time of connection, collected in particular by means of cookies.
  • Data from your requests: information you provide to us via the contact forms or by email.

Booking and payment

The Site allows the online booking and purchase of services (excursions and activities). When placing an order, we collect the information necessary to process it: chosen services, dates, number of participants, contact details, and amount. Payments are processed securely by our payment provider; your credit card data is neither collected nor stored by the publisher.

Purposes and legal bases of processing

Your data is processed for the following purposes, each based on an appropriate legal basis:

  • Manage your bookings and orders and ensure customer relations (performance of the contract).
  • Establish invoicing and comply with our accounting and tax obligations (legal obligation).
  • Respond to your requests sent via the forms or by email (legitimate interest).
  • Send you, where applicable, commercial communications or a newsletter (consent).
  • Ensure the security, proper functioning, and audience measurement of the Site (legitimate interest and, for non-essential cookies, consent).

Data recipients

Your data is intended for the authorized departments of CARIBBEAN TRIP and, within the limits of their respective missions, for the following providers:

  • the Site’s host, the company OVH (European Union);
  • the payment provider ensuring the secure payment of your orders;
  • the technical providers (maintenance, email sending, audience measurement) acting on behalf of the publisher;
  • the administrative or judicial authorities when required by law.

Your data is never sold, rented, or transferred to third parties for commercial purposes.

Transfers outside the European Union

Your data is, in principle, processed and stored within the European Union. When certain providers (in particular for audience measurement or social networks) involve a transfer of data outside the European Union, this transfer is governed by appropriate safeguards, such as the standard contractual clauses adopted by the European Commission.

Retention period

Your data is kept for the period strictly necessary for the purposes pursued:

  • Booking, order, and invoicing data: for the duration of the contractual relationship, then archived in accordance with legal obligations (accounting documents being kept for ten years).
  • Customer relationship management and prospecting data: up to three years from our last contact.
  • Browsing data and cookies: thirteen months maximum.
  • Requests via the contact forms: the time necessary to process them.

Data security

CARIBBEAN TRIP implements appropriate technical and organizational measures to protect your data against loss, alteration, disclosure, or unauthorized access. Payment data is processed using secure protocols by specialized providers.

Cookies

A cookie is a small file placed on your device when you visit the Site. The Site may use different types of cookies:

  • Strictly necessary cookies: essential to the functioning of the Site (navigation, cart, security); they do not require your consent.
  • Audience measurement cookies and third-party cookies: intended to analyze traffic to the Site or linked to social networks; they are only placed after your consent.

You may express and change your choices at any time via the cookie management banner and/or by configuring your browser. The validity period of your consent does not exceed thirteen months.

Your rights

In accordance with applicable regulations, you have the following rights over your data:

  • a right of access and rectification;
  • a right to erasure (“right to be forgotten”);
  • a right to object and a right to restriction of processing;
  • a right to portability of your data;
  • the right to withdraw your consent at any time;
  • the right to set guidelines regarding the fate of your data after your death.

To exercise these rights, simply send your request to bcauzot@gmail.com; proof of identity may be requested. You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, or at www.cnil.fr.

Changes to the policy

This privacy policy may be amended to take account of legal, regulatory, or technical developments. The applicable version is the one in force at the time you consult the Site.