The objective of this policy is to provide you with information on the processing of personal data that we undertake through our activities of renting electric boats and canoes.

Why do we process personal data and on what basis?

We process personal data mainly for the following purposes:

- Managing boat rental reservations made on-site and through our website (www.base-nautique-lamarqueze.com) as well as contracts, payments, refunds, and gift vouchers: we collect the necessary data for reservation management and communication with our clients, as well as data necessary to establish the rental contract and ensure payment online or on-site through our payment providers. These processes are necessary for the execution of the rental contract.

- Managing customer reviews and news comments on our website: we allow customers to leave publicly available reviews of our services. These processes are carried out based on customer consent.

- Managing requests made through the contact form (group quotes, practical information, complaints, improvements): we use the data to process the request (receipt of the request, response, record-keeping). The processing of data related to group quotes is necessary for the purpose of executing a rental contract. Other processes are necessary for our legitimate interests in communicating with our customers, managing complaints, or receiving improvement suggestions.

- Conducting commercial prospecting operations: we may use the email address and phone number of our customers, who have not objected or have accepted, to send them promotional information about our products or services. This processing is necessary for the pursuit of our legitimate interests in promoting our products and services to our customers.

- Managing employee recruitment: we collect personal information when we receive applications for positions advertised on our website. This processing is necessary for the execution of pre-contractual measures for hiring. CVs may be retained unless the candidate objects based on our legitimate interest in promoting our job offers.

- Responding to the exercise of rights as outlined below. This processing is necessary to comply with obligations arising from the GDPR.

- Conducting audience statistics through cookies for analysis on our website and preventing security incidents on our site. These processes are necessary for the pursuit of our legitimate interests in measuring our audience and securing our site.

What types of information do we collect?

In the course of our processing activities, we collect and process the following categories of personal data:

- Identity: title, last name, first name, postal address, phone number, email address, rental contract number, data related to registration on opposition lists.
- Order-related data: transaction number, order details, amount, invoice payment data (payments, discounts).
- Payment method data: credit card number, credit card expiry date, CVV (which is immediately deleted).
- Data related to the use of our services: comments, ratings.
- Data necessary for loyalty and prospecting actions: purchase history.
- Connection data: operating system of your device (Windows, Mac, Android, iOS, etc.), internet browser used and its language, IP address, timestamp, device type.
- Cookies: as part of audience analysis of our website, we collect personal data through cookies (truncated or non-truncated IP addresses…).
Professional history data in the context of recruitment.

Data recipients

In the course of our processing activities, we disclose data to the following individuals and entities:

Our internal staff responsible for reservation management, customers, and recruitment;
Our subcontractor responsible for reservation management, customer feedback, and payment via the website https://base-nautique-la-marqueze.lokki.rent/en, the company LOKKI, located at 12 RUE PIERRE SEMARD, 38000 GRENOBLE, as well as its subsequent subcontractors responsible for payment (Stripe).
Our subcontractor responsible for hosting website data, the company WIX, located at 500 Terry A Francois San Francisco, CA 94158.

Data retention period

We retain data only for the time necessary to fulfill the purpose for which it was collected. They may be kept in intermediate archives until the legal prescription is exhausted or to comply with our legal obligations.

We retain data necessary for order management and invoicing for the entire duration of the commercial relationship and ten (10) years for accounting obligations.

Data necessary for prospecting actions are retained for the entire duration of the commercial relationship and three (3) years from the date of the last order.

Data that you provide to us through the use of various contact forms are retained for three (3) years from the validation of the contact form.

Payment method data are not used by the company LOKKI beyond the transaction. They are kept in intermediate archives for claims management purposes for 13 months following the debit date or 15 months for deferred debit payment cards in accordance with the provisions of Article L. 133-24 of the Monetary and Financial Code. The CVV is never stored.

Data concerning opposition lists to receive prospecting are kept for three (3) years from the date of opposition.

Recruitment-related data is kept for the duration of the study of the application and deleted in case of refusal. They may be kept for two (2) years from the date of refusal of the application, unless opposed by the individual.

Data security

We ensure that personal data is processed securely to guarantee its confidentiality, integrity, and availability. We implement technical and organizational measures to achieve this security objective. We use HTTPS protocol across our sites to ensure authenticity and encrypt data flows. Our servers are secured with WIX. We also ensure that our payment service provider (Stripe) meets the security standards for bank cards, especially PCI DSS certification.