INFORMATION RELATING TO THE PROTECTION OF PERSONAL DATA FOR THE YUGE APPLICATION

Protecting the personal data of our customers is at the heart of our concerns.

This document applies to personal data collected when you use the "YUGE" mobile application, as well as, where applicable, when you interact with our services in connection with your stay, your orders, your requests for information or your participation in our marketing operations.

We want to provide you with all the information you need to understand how your data is used:

1. Services related to the "YUGE" mobile application«
2. Purposes and legal bases for processing your data
3. Who is responsible for the use of your data?
4. With whom is your data shared?
5. On what occasion(s) is/are your personal data collected?
6. What data do we collect?
7. Retention periods for your data
8. Specific concerns for children?
9. Where is your data stored?
10. How is your data secured?
11. Your rights regarding the processing of your data
12. A question about your personal data? Contact us!

1. Services related to the "YUGE" mobile application«

When you use the "YUGE" mobile application and enable the necessary permissions on your device, location data may be processed to provide you with services such as geolocation, personalized content, relevant recommendations, location-based services, and certain tracking features related to application usage.

Aggregated or anonymized location data can also be used to compile statistics, analyze application usage, and improve its performance and functionality.

For mobile application services such as geolocation, geofencing, tracking of time, distance, speed or performance, data retention is limited to the duration of use of the mobile application and this data is stored only on the user's terminal.

2. Purposes and legal basis for processing your data

Your personal data may be processed for the following purposes:

• Create and manage your customer account, based on the execution of the contract; ;
• To process your orders and ensure the follow-up of your contractual relationship, on the basis of the execution of the contract; ;
• Sending you newsletters, prospecting campaigns, commercial offers or marketing solicitations, based on your consent or, where permitted by law, on legitimate interest when you are already a customer and have purchased a product or service on our sites, our self-service kiosks or our mobile application; ;
• Managing competitions, based on the execution of the game; ;
• To conduct satisfaction surveys and compile statistics, based on legitimate interest; ;
• Implement web marketing and communication campaign management operations, based on your consent; ;
• Responding to your complaints and requests related to our services, on the basis of the performance of the contract when your request is related to an order or a subscribed service.

Unless otherwise stated, information identified as mandatory is necessary to enable the provision of services or the processing of your request.

3. Who is responsible for the use of your data?

When you book and/or access our services, your personal data is processed by:

• The Compagnie des Alpes, parent company of the Compagnie des Alpes Group, with a capital of €25,266,567.50, registered with the Paris Trade and Companies Register under number 349 577 908, having its registered office at 50-51 boulevard Haussmann 75009 Paris,

• Les Arcs Mountain Area / Peisey-Vallandry « ADS », an affiliate of the Compagnie des Alpes group and operator of the Les Arcs/Peisey-Vallandry ski area, with a share capital of 17,756,460 Euros, registered with the Chambéry trade and companies register under SIREN number 076 520 568, whose registered office is at 22 rue Porte des Villards – Arc 1800 – 73700 Bourg-Saint-Maurice
• The Plagne resort development company "SAP"« affiliated company of the Compagnie des Alpes group and operating the Grande Plagne area, with a capital of €2,157,776, registered with the RCS of Chambéry under the siren number 076 220 011, having its registered office at 54 Impasse de la Cembraie Plagne Centre 73210 La Plagne Tarentaise.

In this policy, "we" refers to these three companies, which act as joint or independent controllers for the processing activities referenced below.

While Compagnie des Alpes is responsible for managing and overseeing the IT system used to collect and process your data, it is solely the responsibility of ADS and SAP, as an independent data controller, to manage the contractual relationship with you, to provide you with the services ordered, and to carry out marketing and advertising operations on its services and brands or ancillary services on the ski area (wifi, photos, ski storage).

4. With whom is your data shared?

Internal recipients within the Compagnie des Alpes Group:

Your data is processed jointly by ADS, SAP and Compagnie des Alpes, the parent company of the Compagnie des Alpes Group.

Within these two companies, your data is only accessible to a limited number of people, within specific departments (customer service, sales, accounting, IT department, etc.), only if access to the data is necessary for the needs of their functions.

Your data is not shared with other member companies of the Compagnie des Alpes group, unless you have expressly authorized it.

External recipients to the Compagnie des Alpes Group :

Your data may also be shared with recipients outside the Compagnie des Alpes Group:

• To all our technical service providers whose intervention is necessary to carry out the processing mentioned below (IT service providers, payment provider, etc.), for the purpose of processing your order and improving our services and exclusively within the limits of our instructions; ;
• Only if you expressly consent, to our partners, To receive more promotional offers and other deals (e.g., tourist office, ski school, etc.) by email from these partners, the list will be provided to you upon request.
• You may also receive communications related to the activities of the resort where you purchased your lift passes. These communications are sent to you through our partnership with the tourist offices, with whom we create newsletters about the destination, as the ski lifts are a key element of resort life. Your data is neither shared nor reused by these partners for this purpose.
• If applicable, to national or local authorities, if required by law or as part of an investigation and in accordance with regulations.
• To our advertisers, in order to optimize targeting within the framework of web marketing campaigns.

He When making purchases on our app, you may be offered alternative payment methods such as Apple Pay or Google Pay. Using these payment methods is optional and entirely at your discretion. Please note that your bank card number is never transmitted. To process your payment, we receive the following information:

• From Apple: your postal code, your email address, your Apple account number, and, if necessary, your delivery address.
• From Google: your postal code, virtual account number, payment method information, your personal information

Furthermore, as part of the payment process, we will need to share the following information:

• To Apple: the existence of the transaction, but not the nature of the items you purchased, nor their amounts.
• To Google: the existence of the transaction, its date, time and amount, the merchant's location and description, a description of the goods and services purchased, the name, email, and payment method used.

For more information, you can refer to the Apple's privacy policy and to Google's general terms of service as well as to Additional terms and conditions of use for Google Pay. »

5. On what occasion(s) is/are your personal data collected?

When using our mobile application, for your ski lift pass orders, to receive our newsletters, or for the needs of connecting to your account, or to benefit from our digital services.

Within our resorts and ski areas: When you enjoy our facilities, alone or with your loved ones

6. What data do we collect?

We only collect data that is strictly necessary for the purposes described above:

• the data required to create your customer account (name, surname, email address, date of birth, postal address); ;
• order and payment data; ;
• the telephone number (if provided); ;
• photographs when these are necessary for certain services or products; ;
• data relating to the passage or use of certain services; ;
• browsing data on the website or mobile application; ;
• location and geofencing data for mobile application services; ;
• where applicable, the supporting documents necessary to access certain rates or benefits.

7. Retention periods for your data

The data collected is kept for the following periods:

• Data used for mobile application services (geolocation, geofencing, time tracking, distance, speed, performance measurements) : during the duration of the use of the mobile application, it being specified that this data is stored only on the user's terminal.
• Data used to create and manage your personal account (customer account): for as long as your customer account is active, and then for up to two years after the last login to your account.
• Data used to process your order :
  • for online purchases, for five years from the date of purchase if the order amount is less than €120, and for ten years if the order amount is equal to or greater than €120; ;
  • for transactions carried out at the till, for five years.
    Your bank card details are kept by our payment providers for thirteen months after the last debit date for evidentiary purposes in case of a transaction dispute, or fifteen months in the case of a deferred debit card. The security code is never stored beyond the transaction.
• Data used for sending newsletters, email or SMS marketing campaigns, invitations to participate in games or competitions, and satisfaction surveys: for three years from your last contact with us.
• Data used for web marketing purposes (management of communication campaigns) The data is transmitted to the relevant platforms, then anonymized and used for profiling purposes. It is deleted at the end of the campaigns.
• Data used to respond to your inquiries, comments and complaints : for the time necessary to process these requests, comments and complaints.
• Data used for compiling statistics: for the duration necessary to achieve the objective pursued, then anonymization.

8. Specific concerns for children?

While the family dimension of our activities is central to our concerns, we do not direct any data processing specifically towards children.

If our services are used by someone under the age of 15, we recommend that they be accompanied by an adult. Parental or legal guardian consent may be obtained when their personal data is collected, if necessary.

9. Where is your data stored?

All your personal data is stored exclusively on servers located within the territory of the European Union.

Although hosted within the European Union, this data may be accessible from third countries when we use technical service providers (e.g., AWS, Microsoft, Google) located abroad (namely, the United States and Israel). Access from these countries is considered a data transfer but is necessary for the proper functioning and maintenance of the IT tools they provide. These providers possess genuine expertise that justifies their use. We work closely with these providers to ensure that your data is protected in accordance with European regulations. These providers act only on our instructions. A contract is systematically concluded with them, and transfers of personal data are governed by the signing of enhanced contractual clauses specifically designed for this purpose (standard contractual clauses - SCCs - issued by the European Commission) whenever the laws of the country in question do not offer protection equivalent to the GDPR (so-called "adequate" countries). Where necessary, additional technical or legal measures are implemented.

10. How is your data secured?

The security of your personal data is a central concern for the companies in the Compagnie des Alpes group, which pool their resources to ensure you have an appropriate level of security that is up-to-date with the state of the art.

To preserve the confidentiality and security of your personal data, and in particular to protect it against unlawful or accidental destruction, accidental loss or alteration, or unauthorized disclosure or access, the Compagnie des Alpes Group takes appropriate technical and organizational measures and requires the same level of rigor from its subcontractors. These measures are adapted according to the sensitivity of the data processed and the level of risk.

The Compagnie des Alpes Group has implemented procedures to detect, analyze, and monitor security incidents and any suspected breaches of your personal data, and to block access to that data at any time. Furthermore, procedures for managing user access rights have been established to ensure that data access is restricted as much as possible.

Despite our efforts, vulnerabilities may still exist in our systems. If you believe you have detected a vulnerability, please contact us using this form. Policy | Compagnie des Alpes (vulnerability disclosure page), respecting the principles described therein.

11. Your rights regarding the processing of your data

You have several rights regarding your personal data held by us:

• Your right to object You no longer wish to receive our marketing communications, object to a decision related to your profiling, or withdraw your consent.
• The right to rectify your data Moving house? Changing your email address? Let us know by keeping your details up to date!
• The right to access your data: You can request, in an understandable format, a copy of all the personal data concerning you that we hold.
• The right to erase your data You wish to delete your entire customer account and erase all your personal data in our possession. We will comply with your request with the exception of accounting and tax records relating to your transactions, as well as those necessary for the creation of our evidence files (in the event of potential legal proceedings), the retention of which is mandatory.
• The right to freeze the use of your data : you are facing a contentious situation and wish to prevent the deletion of your data, your data will therefore be kept without being used.
• The right to take your data with you You wish to recover some of your data. You are then free to store it elsewhere or easily transfer it from one system to another, for reuse for other purposes.

You will find all our contact information below to exercise these rights. Remember that you can enable or disable these features at any time from your device settings and that you can modify your permissions at any time from your phone's settings, for each of your applications.

12. A question about your personal data? Contact us!

We have appointed a data protection officer responsible for answering all your questions about personal data and ensuring the protection of your personal data.

• SAP:
  • By email to the following address: privacy.sap@compagniedesalpes.fr;
  • By mail to the following address: Mr. Nicolas PROVENDIE, Data Protection (Data Privacy) Department, 54 Impasse de la Cembraie, Plagne Centre, 73210 La Plagne Tarentaise
• ADS
  • We invite you to fill out the form provided for this purpose, Your request will be processed within a maximum of one month.

You can also contact him:

• By mail to the following address: DPO – Chalet des villards – Arc 1800 73700 BOURG-SAINT-MAURICE
• By email to the following address: ads.privacy@compagniedesalpes.fr

In the interest of confidentiality and protection of your personal data, SAP and ADS reserve the right to ask you for proof of identity before responding to your request. You may therefore be asked to produce a copy of an identity document mentioning your date and place of birth and bearing your signature.

In case of serious doubt about your identity, and if it cannot be done otherwise, you may be asked to produce proof of identity for the execution of your request, simply to ensure that we are dealing with the correct person.

For more information on the use of cookies and other trackers, you can consult our cookie policy.

If, despite our efforts, you consider our response incomplete, you can contact the CNIL https://www.cnil.fr/fr