Privacy policy

DEFINITIONS

Capitalised terms refer to the following definitions:

The "Company" or "we DESERT ONLY MAROC" means DESERT ONLY MAROC operating as a sole proprietorship, with REGISTRE DU COMMERCE number 003064919000021 and registered office at CDR SHIB TAMESLOUHTE TAHANOUTE EL HAOUZ CP 42312 MARRAKECH. 

The Site means the website(s) accessible via the URL link https://atlasenduroadventure.com and any sub-sites providing access to a content consultation area, an area reserved for customers, etc., which are provided by the Company.

"You "refers to the persons concerned by the Processing carried out on the Site (users, prospects, customers, etc.).

The " Policy "means this Privacy Policy.

A " Data is any information about an identified or identifiable natural person (the "individual"). concerned ") directly or indirectly, in particular by reference to an identifier (name, identification number, location data, online identifier, etc.) or to one or more elements specific to its identity.

A " Treatment "Any operation applied to Data (collection, recording, organisation, storage, adaptation, communication by transmission, dissemination, deletion, etc.).

A " Data controller The "controller" is the person who, alone or jointly with others, determines the purposes and means of the processing and a "data controller" is the person who, alone or jointly with others, determines the purposes and means of the processing. subcontractor The "data controller" is the person who processes the Data on behalf of the data controller. On the Site, unless otherwise stated, we are responsible for processing the Data.

A " Recipient The "data controller" is the natural or legal person, public authority, department or any other body that receives personal data, whether or not it is a third party.

The " Regulations "means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (''RGPD''); Law No. 78-17 of 6 January 1978 on information technology, files and freedoms; the rules applicable to commercial canvassing set out in the French Post and Telecommunications Code, and more generally the laws and regulations applicable to the Data Processing that we carry out.". 

SHOWCASE SITE AND SALES PROSPECTING

The Site presents the activities of our Company and various forms (contact, rental contract, etc.). By completing the forms and communicating with us via the Site, you send us the following categories of information:

• Identity data : title/gender; surname; first name; and optionally, we may ask you for your date of birth to propose birthday offers;
• Data Contact and correspondence : e-mail address; postal address (address, postcode, town); telephone number; in the event of a customer service request, the nature of your request and the content of your request.
• Data on opinions and contributions : pseudonym, date of the review, content of the review, product or service concerned, and any profile photo attached to the review; The Company may enrich its Site by collecting and republishing the reviews and contributions issued in relation to its offers by its customers on other sites (in particular social networks) when these contributions are freely accessible to the public;
• Data required for loyalty-building, canvassing, research, surveys, product testing and promotional activities;
• Data relating to the organisation and processing of competitions, lotteries and all promotional operations;
• Data collected through the exercise of rights enshrined in the Regulations.

In accordance with our legitimate interests, and where necessary for the performance of pre-contractual measures taken at your request or of a contract, we process the aforementioned Data for the following purposes:

• Presentation of the Company's products and services ;
• Management, processing and follow-up of requests and exchanges with the Company, via the Site (if necessary by offering you a chatbot, a call reservation tool, etc.);
• Prospect relationship management;
• Management of people's opinions on the Company's products, services or content;
• Canvassing and/or sending information, management of technical canvassing operations, selection of people to carry out loyalty campaigns, canvassing, surveys, product testing, etc;
• Organisation of competitions, lotteries or any other promotional operation on the Site.

Data used to manage commercial prospecting is kept for a maximum of three years from the last active contact from the prospect or customer, and earlier if you withdraw your consent to receive messages from us. Notice and contribution data is kept for as long as the notice is accessible to the public on the Site.

In accordance with our legal obligations, identity and contact data will also be processed for the following purposes:

• Updating of its canvassing files by the organisation responsible for managing the "no cold calling" list, in accordance with the provisions of the French Consumer Code.
• Management of requests for rights of access, rectification and opposition, and more generally of the rights described in the Policy.

ONLINE SALE

The Site allows you to make purchases, which leads us to Process the following Data:

• Identity and contact details
• Data relating to the contractual and commercial relationship : Details of the contents of the order; Pre-contractual exchanges and exchanges relating to the order (purpose, date, etc.); Communications with the Company.
• Payment details and transactional : transaction date, amount, payment method, order number, billing details ;

This information is required for the management of our prospective customer file, and more specifically for the following purposes in accordance with our General Terms and Conditions accepted at the time of ordering on the Site and with our legal obligations:

• To carry out operations relating to the management of files concerning: contracts, including registrations; orders; the delivery of the product or service; legal and commercial guarantees; invoices; accounting and the monitoring of commercial relations (after-sales service), including opinions on the Company's offers;
• Preventing and combating fraud and payment card fraud; 
• Management of unpaid invoices and disputes, provided that they do not relate to offences and/or do not result in the exclusion of a person from a right, service or contract.

Secure payment. All transactions carried out on our Site are secure. Credit card payments are handled by our payment service providers ("PSP"), as indicated in our general terms and conditions or on the order page for our products and services. We use an SSL encryption system to protect your personal data and the payment methods used. At no time do we have direct access to your bank details through this process.

Shelf life. The personal data we process is kept for the periods shown in the table below.

Data concerned	Shelf life
Data processed for commercial prospecting purposes	3 years from the prospect's last active behaviour or the collection of the Data
Data required to process your order and manage contractual and commercial relations	3 years from the customer's last active behaviour or, failing that, from the end of the contractual relationship. For accounting documents (purchase orders, delivery notes, customer invoices): 10 years as from the end of the financial year
Contracts for orders under 120.00 euros	5 years from the date of conclusion of the contract.
Contracts for orders over 120.00 euros	10 years from the date of delivery or provision of the service.
Bank details: in the case of a single payment	13 months for immediate debit cards and 15 months for deferred debit cards, from the debit date (for the purposes of responding to any dispute)
Bank details: if you take out a tacitly renewable subscription	13 months for immediate debit cards and 15 months for deferred debit payment cards, from the date of debiting of the last payment due at the end of the subscription period (for the purposes of responding to any dispute)

DIGITAL CONTENT PROVISION 

The legal basis for Processing for the purpose of supplying digital content is contractual and, if not provided for in the GTCs, meets our legitimate interest. For this purpose, we may process the following Data:

• Identity and contact details
• Content access data : Identifier and password, which may be automatically recorded on the Site only if you give your consent via your browser settings and information on connection to the access area (IP address, connection time, duration of connection, use of any tools available from this dedicated area, etc.). 
• Data relating to content : Content consultation and tracking data: data on module consultation, time spent on content; information on audio files downloaded and/or listened to.
• Monitoring data : Progress indicators, statistics and tracking of progress; any grades, surveys and quizzes completed, past assessments, etc.
• Publication data : Content of the publication of your contribution (comments, questions, publications, opinions, etc.), date, time, response rate, information on the publication space concerned.

The Site from which the content is accessible may include technical devices that enable the use of the Site to be tracked (user account connected, IP address, type of applications used, various logs of connection and use of the User account, etc.). Data from these devices may be used in the fight against counterfeiting and/or to identify and/or prevent any illicit or non-compliant use of the Site and/or breach of the applicable GTC.

PERSONALISED SUPPORT SERVICES 

The legal basis for Processing for the purpose of providing a personalised support service is contractual and, in the absence of provision in the GTCs, meets our legitimate interest.

We offer personalised support services in the context of which we may collect and process the following Data:

• Organisational data : Identity data, contact details, information on booked, cancelled and used slots, and all the information needed to organise this type of service;
• Monitoring data : Progress indicators, any notes taken during the support, data from audits, surveys and quizzes carried out, past assessments, information needed to produce a report.

This data may be archived for five years after the end of the support service order contract.

SOCIAL NETWORKS AND THIRD-PARTY SITES

Social networking. We may contact you or answer your questions via social networks, if you have first contacted us by this means. You are informed that the use of social networks involves the processing of personal data by the providers of these networks (see their privacy policy).

Public information. The information about you that you have sent us may be enhanced for commercial, canvassing, communication, solicitation or marketing purposes by means of other sources of information such as social networks. This includes so-called "public" information or information to which we may have access as administrator of a page or group. The legal basis for this processing is our legitimate interest as a commercial company.

Interconnection. In the event that your member area is able to connect to another service (for example, a social network) for cross-posting purposes, then the third party service may provide us with information that you have authorised to be disclosed. You are informed that publishers of third-party services may also collect information concerning consultation and/or use of the Site, in accordance with their own personal data processing policy. For more information about registering on the Site using a third-party account, see :

Facebook: https://www.facebook.com/help/223184117694507 ; https://developers.facebook.com/docs/facebook-login/overview

Google: https://support.google.com/accounts/answer/112802?co=GENIE.Platform%3DDesktop&hl=fr

EXERCISING YOUR RIGHTS

If you wish to exercise any of the aforementioned rights or require further information, please contact the Company at : hello@atlasenduroadventure.com or by post to the address of the Company's registered office shown at the top of the page.

In accordance with the Regulations, you have the following rights with regard to your Data:

• Right of access to your Data, including the right to request a copy, and to the information provided in this privacy policy (art. 15 GDPR). Where the lawful basis for data processing is our legitimate interests, you have the opportunity to request information about the balancing we have carried out between the interests of our customers and those of the Company prior to such processing.
• Right of rectification (art. 16 RGPD) and update the data we hold about you.
• Right to erasure of your Data (art. 17 RGPD) when the data is no longer necessary for us, you have withdrawn your consent to its Processing (if it was based on our consent) or you object to Processing based on our legitimate interest or to Processing carried out for canvassing purposes or for profiling purposes linked to canvassing.
• Right to withdraw your consent at any time (art. 13-2c RGPD) for all data processing based on the legal basis of your consent. Furthermore, with regard to commercial prospecting, you have the option of unsubscribing from our mailing lists at any time by clicking on the unsubscribe link in our communications or by contacting us to stop receiving solicitation messages.
• Right to limitation of the Processing, which, except for compelling reasons, may only be carried out with your consent (art.18 RGPD) when:
• You may dispute the accuracy of the data for as long as it takes to verify it,
• If the data processing is unlawful, but you object to the deletion of the data and opt instead for the restriction of processing,
• When we no longer need the data, but it is still necessary for you to establish, exercise or defend your legal rights.
• Where you have objected to processing based on our legitimate interests, for the time necessary to balance our respective interests. 
• Right to portability Data directly provided by the data subject where it is subject to automated processing based on your consent or on a contract (art. 20 RGPD). This right means that you have the possibility of requesting the communication of this data in a structured, commonly used and machine-readable format so that it can be communicated to another data controller.
• Right to object (art. 21 RGPD) to the processing of your data where the legal basis for such Processing is our legitimate interest.
• The right to determine what happens to your Data after your death (art. 40-1 of law 78-17 of 6 January 1978) and to choose a trusted third party to whom the Company will entrust them.

You can also obtain more information on the CNIL website.

In the event of a request, the Company reserves the right to ask you to specify your request and to provide proof of identity (which will be kept for one year in the event of exercising the right of access or rectification and for three years in the event of exercising the right of opposition). If you are not completely satisfied with our response, you will still be entitled to possibility of lodging a complaint to the authority responsible for controlling and protecting your personal data (in France, the CNIL).

SHELF LIFE

Commitments. Means for the effective deletion of Data are put in place as soon as the storage or archiving period necessary for the fulfilment of the purposes determined or imposed is reached, in particular after deletion of your account with our Company or at the end of the contract with our Company. 

Minimisation. In any event, Data subject to Processing is not kept beyond the time required to fulfil the obligations defined when the contract was concluded, or laid down by current legislation. Beyond that time, it may be rendered anonymous and kept for statistical purposes, particularly in aggregate form.

Litigation. Similarly, we may archive information demonstrating the performance of our contractual obligations until the expiry of the limitation/forclosure periods applicable to legal proceedings, in order to defend our interests properly before the courts in the event of subsequent litigation. This applies in particular, but not exclusively, to the periods set out in the French Commercial Code, the French Civil Code and the French Consumer Code.

MAILING ADDRESSES

Commitments. We undertake to ensure that any Data Recipient provides sufficient and appropriate contractual safeguards to respect your rights, so that processing meets the requirements of the GDPR where that regulation applies (particularly in relation to subcontracting). On the basis of our legal obligations, your Data may be disclosed pursuant to a law, regulation or decision of a competent regulatory or judicial authority.

The information you give us is for internal use by authorised persons. It is strictly confidential and may not be disclosed to third parties, except under the conditions provided for by the Regulations in the case of express agreement or if you have decided to make it public.

Subcontracting. Our external service providers (e.g. suppliers, transporters, etc.) may, as part of the processing described above, receive personal data when this is necessary for the performance of their tasks.

Transfer outside the EU. We undertake to ensure compliance with the applicable regulations relating to the transfer of data to countries outside the European Union, in particular in the following ways:

• We will transfer the data of visitors, prospects and customers to countries recognised as offering an adequate level of protection;
• When the country of destination does not have an adequate level of protection, we use transfer tools that comply with the regulations (in particular the European Commission's standard contractual clauses).

Aggregation of non-personal data. We may publish, disclose and use aggregated information (information relating to site users, prospects, customers, etc.) which we combine in such a way that no natural person is individually identifiable. This processing is carried out in accordance with our legitimate interest for statistical purposes, sector and market analysis, presentation of our activities, promotional and advertising purposes and other commercial purposes.

COMPUTER SECURITY

Commitments. We undertake to implement appropriate technical and organisational measures using physical and logistical security measures to limit the risks of accidental, unauthorised or illegal access, disclosure, alteration, loss or destruction of your personal data.

Warnings. Please be careful about what you publish on the Internet. With regard to personal data including those relating to your private or sensitive life made public on your initiative or deducted via your contributions, comments and opinions of any kind whatsoever on the Site, or on social networks in groups and/or conversations with other users of the Site.

Https protocol. The URL address of the Site is accompanied by a closed padlock or a key appears at the bottom right of your browser indicating the existence of the Https security protocol, applicable to data storage in particular. This means that you are in a secure browsing zone, especially when you are asked for your bank card number.

Data breach. In the event of an event giving rise to the risks of modification, disappearance or unauthorised access to the Data, we undertake to :

• Examine the causes of the incident;
• Take the necessary measures to limit the negative effects and damage that may result from the incident;
• Notify the competent authority and/or the persons concerned of the incident as soon as possible where this is required by law.

Under no circumstances may the undertakings set out in the point above be assimilated to any acknowledgement of fault or responsibility for the occurrence of this incident.

GENERAL

Compulsory or optional. On the Site, you are informed of the compulsory nature of the answers by the presence of an asterisk or any other type of indication. In the event of an incomplete request (for example: online registration or order, request for information, etc.), the Company reserves the right to request additional information or to use any technical means to prevent the form concerned from being validated.

Hypertext links. The Site may provide links to sites, applications and services other than its own, which may be operated by third-party companies. We are not responsible for the processing of personal data carried out by these third party sites, or the sites linking to the Site, whose personal data protection policies the user is invited to consult for further information. The Policy applies solely to the activities of the Company, which may not be held liable for the failure of a third party to comply with its obligations in terms of the protection of personal data.

Scope of application. The Policy is not exhaustive of all processing operations and we reserve the right to add to it by any means.

Language. The Policy is written in French. In the event that it is translated into one or more languages, only the French text will be deemed authentic in the event of a dispute. 

No waiver. The temporary or permanent non-application of one or more of the clauses hereof shall not constitute a waiver of the other clauses hereof, which shall continue to have full effect.

Modifications - Updates. We reserve the right to modify this confidentiality policy. The persons concerned will be notified where this is provided for by the applicable regulations. The date of the update is indicated in the header and we invite you to consult it regularly.

INFORMATION ON COOKIES

Presentation: Cookies are connection cookies and, more generally, any file deposited when a website or mobile application is consulted, or when software is installed or used on the user's terminal equipment, the purpose of which is to read or write information to this equipment. Cookies enable us to collect Site consultation data (IP address, Internet service provider, hardware configuration, software configuration, browser type and language, etc.). 

Cookies may be placed by the Company or by third-party companies without your consent when they are strictly necessary for the operation of the site or to facilitate communication with the online public, for example when they are used for authentication, to store the contents of a shopping basket, to generate visitor statistics, or to limit free access to a sample of content requested by users.

Duration: Cookies are kept for a maximum of 13 months after they are first placed on your terminal, and this period is not extended with each visit. 

Consent to cookies : You are informed of the presence of non-strictly necessary cookies by an information banner on the Site. With the exception of cases of use not subject to consent, cookies and tracers will only be deposited on your terminal with your express consent. You may be asked periodically to reiterate your consent, to ensure that it is still valid.

Cookie settings : You can always change your preferences via your browser settings (Firefox with enhanced protection against tracking ; Firefox with cookies deleted ; Chrome Internet Explorer ; Safari ; Opera ; Microsoft Edge). You can also configure your terminal's browser to activate the "Do Not Track" option, which will indicate to the sites visited, advertising agencies or applications that you do not wish to be "tracked". This function is available for the following browsers in particular: Firefox ; Chrome ; Internet Explorer ; Safari ; Opera ; Microsoft Edge.

If you refuse cookies that are not essential to the operation of the Site : Certain functions on the Site, such as video players or interactive content, use services offered by third parties and deposit cookies enabling them to identify your consultation of the content. If you refuse to accept these cookies, the personalisation features will not work and the content offered to you (in particular suggested videos or advertisements) will still be present but will not be related to your areas of interest.