This Personal Data Privacy Policy documents the processing of personal data collected via the website https://www.skipass-2alpes.com/fr/ by SATA Group, headquartered at Rue du Pic Blanc, 38750 Alpe d’Huez, in compliance with the provisions of French Law No. 78-17 of January 6, 1978, as amended (known as the "Loi Informatique et Libertés" or "LIL"), and the General Data Protection Regulation (GDPR) No. 2016/679.
SATA Group collects your personal data when you visit the website https://www.skipass-2alpes.com/fr/. As such, SATA Group acts as the Data Controller for your data.
SATA Group is committed to limiting the collection of personal data to what is strictly necessary (data minimization principle).
SECTION 1 – What Types of Personal Data Do We Collect and for What Purposes?
Cookies (Axeptio):
To enhance the interactivity of the website and our services, connection markers known as "cookies" are placed on your computer, mobile device, or tablet. You may technically block them using your browser settings, but this may degrade your experience on the site. Additionally, you may opt out of audience measurement trackers (e.g., Facebook Pixel, Google Advertising Products, Google Analytics, YouTube).
However, you cannot opt out of cookies that are strictly necessary for the operation and routine administration of the website via the cookie management interface.Account Creation (Primary Contact):
Email address, password, title, first name, last name, date of birth, address, optional secondary address, postal code, city, country of residence, mobile phone number, and optional landline phone number.Purchases:
Domain, length of stay, start date of the ski pass, number of people, type of ski pass requested, and other options (e.g., intermediate passes by customer category, ice cave pedestrian access), cancellation insurance, Assur’Glisse insurance option, payment method, AEON Pass card support number, discount details, purchase of a rechargeable medium, and photos on passes (in case of seasonal pass or free pass purchases).Newsletters:
First name, last name, age, origin, email, history of sent emailings, technical consultation data, and unsubscribe status.Contact Form:
First name, last name, phone number, email address, postal address and postal code, country, compensation data (if applicable), type of compensation requested, IBAN (if refund is required), request date, request status, incident date (if applicable), and purchase data (if the request is related to a purchase: order date, products purchased, order reference, keycard numbers, etc.).Other Data:
Customer number, purchase history, request history, benefits (promo codes and vouchers), QR codes linked to orders, sub-contact data, number of activities, date of last account activity, and customer tenure.
SECTION 2 – What Is the Legal Basis for Processing Your Data?
We collect and process your personal data in compliance with applicable regulations and solely on the following legal bases:
When you provide personal information via the contact form, reservation forms, audience measurement cookies, or for various bookings, you consent to us collecting and using this data solely for the purposes detailed in Section 1.
When necessary to pursue our legitimate interests (e.g., functional cookies, data specific to the use of mechanical ski lifts).
SECTION 3 – How Long Do We Retain Your Personal Data?
SATA Group retains your personal data only for as long as reasonably necessary:
Customer satisfaction surveys and studies: 3 years from the last customer contact or 2 years from the closure of the user account by the customer, or until you exercise your right to erasure.
Contact form: Data is retained for 3 years after the request is closed or deleted upon receipt of an erasure request. The client communication interface is unpublished within 7 days of the request’s closure.
User navigation tracking: Cookie consent is valid for 6 months, and data is retained for 2 years or until consent is withdrawn and/or you exercise your right to erasure.
Newsletters: Until you withdraw consent (unsubscribe) or exercise your right to object or request the deletion of your personal data.
Billing data: Retained for 10 years from the date of invoice issuance.
Bank details used for deferred payments are destroyed once the payment is processed.
Customer accounts: Inactive accounts are deleted 3 years after the last activity on the account or upon exercise of your right to deletion.
SECTION 4 – To Whom Do We Disclose Your Data?
Your personal data may be disclosed to the following recipients, in addition to the various SATA Group services:
Internal departments of SATA Group.
Third-party service providers necessary for the provision of services offered by SATA Group (e.g., cookie providers, IT service providers, and technical providers).
Third-party service providers necessary for CRM services.
Under no circumstances do we sell or rent your personal data to third parties, and there is no transfer of data outside the European Union.
SECTION 5 – What Are Your Rights?
We guarantee your right to:
Access the personal information we hold about you.
Request the rectification, restriction, or deletion of this information.
Request a copy of your personal data or object to its processing.
We have appointed a Data Protection Officer (DPO) whom you may contact for any questions regarding the processing of your personal data or to exercise your rights at the following addresses:
By email: dpo@sataski.com
By postal mail: Alpe d’Huez Vacances, SATA Group Rue du Pic Blanc, 38750 Alpe d’Huez, France
For any request or information regarding the exercise of your rights, you must provide your first and last name. We may contact you for further details and, if necessary, request proof of identity (which will be destroyed immediately after your request is processed). You must clearly specify the right you wish to exercise, as well as your email or postal address so we can respond. We will respond to your request within one month, unless there are exceptional circumstances.
SECTION 6 – Complaints
You retain the right to lodge a complaint with the supervisory authority (CNIL):
By postal mail: Service des Plaintes – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, France
SECTION 7 – Amendments to the Privacy Policy
SATA Group may modify or update this Privacy Policy as necessary to reflect changes in the law, regulations, or current practices. We therefore encourage you to review it periodically. For any questions regarding this Privacy Policy, you may contact us by email at: dpo@sataski.com.