Airport
Figari
Southern Corsica
Contact
Webcam

Privacy policy

Data protection policy

The Public Establishment for Trade and Industry (EPCI) of Corsica undertakes to ensure that the processing of personal data carried out on its website https://figari-aeroport.cci.corsica complies with the General Data Protection Regulation (GDPR) and the amended French Data Protection Act.

The purpose of this policy is to set out the policy applied within the Corsican Public Establishment for Trade and Industry (hereinafter referred to as the EPCI of Corsica) regarding the protection of personal data in relation to data processing carried out on its website https://figari-aeroport.cci.corsica.

These explanations are given in the most transparent and accessible way possible, so that you can understand the conditions under which your data is processed.

The collection and processing of personal data relating to users, prospective customers and staff by the EPCI de Corse are necessary for the purposes of its activities.

1 - General protection of personal data

  1. Protection principles
  1. Loyalty and transparency

The Corsican EPCI informs those concerned about each data processing operation carried out by means of information notices.

As far as possible, i.e. excluding cases where data must remain confidential, no data is collected without the knowledge of the persons concerned.

  • Legitimacy and proportionality

Personal data is processed for specific purposes which are intended to be legitimate, specific and explicit.

The Corsican EPCI is committed to upholding the principle of proportionality. All data collection will be adequate, relevant and limited to the data necessary for the purposes of the processing.

As far as possible, data will be kept up to date and procedures will be put in place to enable it to be deleted or rectified (in the case of inaccurate data).

  • Protection features
  1. Purpose and legal basis

Legal basis for processing :

  • Legitimate interest pursued by the Corsican EPCI in relation to the following processing operations:
    • General publications, in particular those relating to the organisation of the Corsican EPCI,
    • Contact forms
    • Complaints management
  • Execution of contractual or pre-contractual measures for the following processing operations:
    • Certain requests from users of the site
  • The consent of the persons concerned
    • Cookies subject to consent,
    • The preparation and publication of certain content,
  • Data specificity
  1. Data processing

The data processing operations carried out by the Corsican EPCI may involve the following categories of data: 

  • Civil status, identity, identification data, images
  • Personal life
  • Economic and financial information
  • Connection data
  • Location data
  • Other
  • Data source

The sources of the data processed may be, depending on the case :

            – staff at the Corsican EPCI,

            - contributors to publications,

            - website users,

            - certain service providers

  • Mandatory data collection and consequences of failure to provide data

Some of the data collected, in particular relating to publications or certain cookies, may be optional.

Data collected for other purposes is mandatory unless otherwise stated at the time of collection.

  • Automated decision-making

The processing carried out does not involve automated decision-making.

  • People concerned

The data subjects of the processing operations are as follows:

            – staff at the Corsican EPCI responsible for publishing content and for the technical administration of the websites.

            - people identified in publications

            – users of the websites managed by the EPCI of Corsica

            - staff in charge of hosting, site maintenance and video broadcasting.

  • Data recipients
  1. Categories of recipients

As regards the content published by the Corsican EPCI, the general public is the intended audience for all or part of the data.

Within the limits of their respective needs, the following are recipients of all or part of the data:

– staff at the Corsican EPCI responsible for publishing content and the technical administration of websites, and their line managers; ;

– staff at the Corsican EPCI responsible for processing enquiries received via the contact forms;

- the service providers in charge of hosting, website maintenance and video broadcasting;

– users of websites managed by the EPCI of Corsica;

- the staff responsible for supervising the security of the CCI de Corse's information systems.

  • Data transfers

We draw your attention to the fact that the publications on our site may be accessible outside the European Union due to their presence on the Internet.

In its capacity as Data Controller, the EPCI de Corse is the recipient of the data collected and subsequently gathered. We would also like to inform you that certain information may be passed on to certain service providers for the purposes of the EPCI de Corse’s remit.

  • Shelf life

Without prejudice to statutory limitation periods, the retention periods are as follows:

- publication preparation data: 13 months

- data relating to exchanges with service providers: 13 months

- data collected via forms: 13 months

- log data: 13 months

- data relating to complaints: 13 months

– information about cookies: please see the cookies policy available on our website ((https://figari-aeroport.cci.corsica/politiques-cookies/))

  • Data security

Data security is a major concern for the Corsican EPCI. To this end, technical and organisational measures have been put in place in line with the sensitivity of the data collected.

The purpose of these measures is to ensure the confidentiality and integrity of the data, and above all to protect it against malicious intrusion, loss, alteration or disclosure to unauthorised third parties.

Despite these measures, data security and confidentiality depend above all on everyone following best practice; this is why the Corsican EPCI strongly urges everyone concerned to remain vigilant.

  • Subcontracting

The Corsican Chamber of Commerce and Industry (CCI) may use service providers in certain areas. Where this is the case, the data provided to such service providers is limited to that which is strictly necessary for the intended purpose. Furthermore, the Corsican EPCI will only disclose such data after receiving a commitment and sufficient assurances from the service provider regarding data security and confidentiality.

Special protection for personal data

  1. Rights of persons concerned

You have certain rights in relation to the processing of your personal data. The EPCI of Corsica takes this matter particularly seriously, with a view to processing your data as transparently and fairly as possible, taking into account the circumstances and the specific context.

  1. How to exercise your rights

For any enquiries or to exercise your data protection rights regarding the processing of personal data managed by the EPCI de Corse, you may contact our Data Protection Officer by emailing dpo@cci.corsica or by post at the following address: DPO, EPCI de Corse, Quai du Nouveau Port, 20200 Bastia, ensuring that you provide proof of your identity and clearly state your surname, first name and address so that we can reply.

  • Diversity of rights
  1. Right of interrogation

By virtue of your right to request information, you may ask whether your personal data is being processed. You may also ask for information about the purpose of any such processing and about any transfers of such data.

You may also ask for this data to be communicated to you, as well as any information relating to its source.

However, this information may not infringe copyright or intellectual property rights.

You may be issued with a copy, but this may be subject to payment of a sum not exceeding the cost of reproduction.

  • Right of access

Under the right of access, you may ask whether or not your data is processed. If so, you may request a copy of the data and information concerning you, namely :

  • Objectives,
  • The categories of personal data concerned,
  • The recipients or categories of recipients and, where applicable, the international organisations to which the data has been or will be communicated, in particular if they are located in third countries,
  • The retention period, or at least, if it cannot be determined, the criteria used to determine it,
  • The existence of your right to rectification, deletion, limitation or opposition,
  • The existence of your right to lodge a complaint with a supervisory authority,
  • Information about the source of personal data if it is not collected directly,
  • The existence of automated decision-making, including profiling (where applicable, useful information about the underlying logic and possible consequences of this processing).
  • Right of rectification

If your personal data is out of date, incorrect or incomplete, you have the right to request that it be corrected or completed.

  • Right to erasure

In certain cases, as provided for by the legislation and regulations in force, you may ask the Corsican EPCI to erase your personal data.

The Corsican EPCI emphasises that this right is not a general right. Indeed, the legislation and regulations provide for restrictions on this right.

  • Right to limitation

You have the right to request the restriction of the processing of your personal data in the cases provided for by the laws and regulations.

  • Right to portability

You may request that your personal data be transferred to another Data Controller. However, this is not a general right and is limited by legislation and regulations.

Firstly, it is limited in terms of the data processing operations concerned, but also in terms of the data itself. Certain data held by the Corsican EPCI are not portable.

  • Right to object

You have the right to object, which means that you can object at any time, for reasons relating to your particular situation, to the processing of your personal data. However, this right is limited to processing based on the legitimate interests pursued by the CCI de Corse.

If you exercise this right, the EPCI de Corse will ensure that your data is no longer processed, unless it can demonstrate the existence of legitimate and compelling grounds for continuing the processing. These grounds must override your interests, rights and freedoms.

If processing is necessary for the establishment, exercise or defence of legal claims, the right to object does not apply.

You may object to personalised solicitation.

  • Right to withdraw consent

Certain processing operations may be based on your consent. Naturally, you may withdraw this consent at any time. In that event, without affecting the lawfulness of any processing carried out prior to such withdrawal, the EPCI of Corsica will cease to process your data.

  1. Right to define directives post-mortem

You may define specific directives concerning the storage, deletion and communication of your data after your death.

These guidelines will apply only to processing carried out by the EPCI of Corsica and will be limited to that area alone.

Once a person has been designated by Decree, you will also be able to define general directives.

  • Right to appeal

You also have the right to lodge a complaint with the CNIL at cnil.fr/plaintes or by post at the following address: Commission nationale de l'informatique et des libertés, Service des plaintes, 3 Place de Fontenoy, TSA80715, 75334 PARIS CEDEX 07.

  • Possible changes

This policy may be subject to updates. The Corsican EPCI therefore encourages you to check it regularly.