PRIVACY
POLICY

Data recipients

As part of our processing activities, we transmit data to the following persons and entities:

• Our internal staff in charge of managing bookings, customers, and recruitment;
• Our subcontractor in charge of managing bookings, customer comments, and payments via the website https://shop.nauticmanager.com, the NAUTIC MANAGER platform of the company MARINE GROUP, located at 145 rue Achard, 33300 Bordeaux, as well as its subsequent subcontractors in charge of payment (Crédit Mutuel ARKEA, Mangopay, Payline) and GOOGLE for managing customer reviews;
• Our subcontractor in charge of maintaining our website and sending promotional emails, Agence Vingt Mille Lieues, located at 439 route de Clisson 44230 Saint-Sébastien-sur-Loire;
• Our subcontractor in charge of hosting the website data, OVH, located at 2 rue Kellermann in Roubaix (59100).

Data retention period

We retain data only for the time necessary to fulfill the purpose for which it was collected. It may be kept in intermediate archives until the expiry of the legal statute of limitations or to meet our legal obligations.

We retain data necessary for order management and invoicing for the duration of the commercial relationship and for ten (10) years for accounting obligations.

Data necessary for prospecting actions is kept for the duration of the commercial relationship and for three (3) years from the last order.

Data you provide to us through the use of various contact forms is kept for three (3) years from the validation of the contact form.

Payment method data is not used by MARINE GROUP beyond the transaction. It is kept in intermediate archives for complaint management purposes for 13 months following the debit date, or 15 months for deferred debit cards, in accordance with the provisions of Article L. 133-24 of the Monetary and Financial Code. The CVV is never stored.

Data concerning lists of objections to receiving prospecting is kept for three (3) years from the date of objection.

Recruitment data is kept for the duration of the application review and deleted in the event of rejection. It may be kept for two (2) years from the rejection of the application, unless the person objects.

Data security

We ensure that personal data is processed securely to guarantee its confidentiality, integrity, and availability. In particular, we implement technical and organizational measures to achieve this security objective. We use the HTTPS protocol with TLS 1.2 across all our sites to ensure their authenticity and guarantee the encryption of data flows. Our servers are secured at OVH and hosted within the European Union. We also ensure that our payment provider (Payline) provides credit card security guarantees, specifically PCI DSS certification.