PERSONAL DATA PROTECTION POLICY

AEROCAMPUS Aquitaine attaches particular importance to respecting your rights with regard to your personal
data, i.e. data that makes it possible to identify you, directly or indirectly (hereinafter
the "Data").

In this document, you will find all the information you need to understand the conditions under which
we use your Data when you browse and/or use certain features of our website,
accessible at the url https://aerocampus.com (hereinafter, the "Site").

In the event of any difficulty or if you require further information, we invite you to contact our Data Protection Officer by e-mail or post at:
AEROCAMPUS Aquitaine
Data Protection Officer (DPO)
1, route de Cénac - 33360 LATRESNES
dpo@aerocampus.com

WHO PROCESSES MY DATA?

Your Data is collected and used by the association AEROCAMPUS Aquitaine (hereinafter "AEROCAMPUS Aquitaine"), which publishes the Site and whose full contact details are reproduced below.

AEROCAMPUS Aquitaine is therefore responsible for processing your Data within the meaning of the European Data Protection Regulation (or "RGPD") and its Data Protection Officer (or "DPO") is your privileged contact regarding them.

Name of the Association	AEROCAMPUS AQUITAINE
Address	1, route de Cénac
SIREN number	532 050 549
RNA number	W332011898
Email address DPO	dpo@aerocampus.com
Telephone number	0556210101
APE code	85.59A Formation continue d'adultes

In summary: AEROCAMPUS Aquitaine is responsible for the use of your Data.

HOW IS MY DATA COLLECTED?

We collect your Data from you in different ways:

When you browse the Site after accepting audience analysis and marketing cookies, and via technical cookies necessary for the Site to function;
When you fill in an accommodation booking form, to make a request for availability and/or rate;
When you send us an e-mail directly to the e-mail addresses shown on the Site in order to obtain information about our services;
When you make a request to exercise your rights regarding your Data;
When you browse the Site, insofar as we need to monitor its proper operation and ensure its security.

In summary: We collect your Data in various ways.

FOR WHAT PURPOSES IS MY DATA USED BY AEROCAMPUS?

The purpose of using your Data is to manage the Site published by AEROCAMPUS Aquitaine

In this context, using your Data allows us to:

To compile statistics on the audience and use of the Site
To manage your requests for information about our range of services via our contact forms and published email addresses
To ensure the security of our Site (logging)
To manage your requests for information about our range of services via our contact forms and published email addresses
To ensure the security of our Site (logging)
To manage the technical administration of the Site and its proper technical operation (hosting for example)

Finally, we will use certain Data as part of the management of your requests to exercise your rights regarding your Data.

We undertake not to use your Data for purposes other than those specified in this document.

In summary : We use your Data for specific purposes as part of the management of our Site.

WHAT DATA ABOUT ME IS USED?

When you fill in our accommodation booking form or send us a request for information by email, we will collect:

Data enabling us to identify you (surname, first name, address, town, telephone number, email address, type of customer, nature of request);
Professional data (company);
where applicable, Data that you take the initiative of communicating to us by filling in the free field "details of your request" and Data necessary for the management of your requests (subject of the request, timestamp, follow-up, any statistics)

When you browse the Site, we will use connection and browsing Data (timestamp, IP address, equipment data) necessary for its security, technical management and, with your consent, for the analysis of its audience.

When you exercise your rights to your Data, we will collect identification Data (surname, first name and proof of identity in the event of legitimate doubt on our part), as well as Data that you provide to us voluntarily.

The collection of certain Data is compulsory (unless otherwise stated on the collection form), insofar as they are sometimes necessary for the purposes in question. Data collected via cookies is optional. You will find more information on this subject in the "SUMMARY" section.

This Data will be collected from you or, as the case may be, from the staff responsible for the technical administration of the Site and authorised service providers

In summary: We use the Data strictly necessary for the purposes identified

IS THE USE OF MY DATA AUTHORISED?

Any use of your Data must be lawful, i.e. based on one of the assumptions listed by the GDPR (or "legal bases").

For example, the use of your Data is justified:

by the performance of pre-contractual measures or a contract when you request information via our online form or by email;
by your consent when you authorise the deposit of cookies not necessary for the operation of our Site;
by our legitimate interest when we deploy measures necessary for the security and technical management of our Site;
by compliance with a legal obligation, when you make a request to exercise rights with us.

In summary:We collect your Data on the basis of identified legal grounds

FOR HOW LONG WILL MY DATA BE USED?

We are required to keep your Data for a period of time compatible with the purposes for which we collect it.

For example, if you send us a request for information by email or via our contact form, we will use your Data for the time necessary to respond to you, and then delete it without further correspondence from you within 12 months of your last correspondence.

Full information can be found in the "IN SUMMARY" section below.

In summary:We use your Data for as long as is strictly necessary for the purposes for which it was collected.

IN SUMMARY (SUMMARY TABLE)

GOALS (Why do we collect your Data?)	DATA COLLECTED (What Data do we collect?)	LEGAL BASIS (By what right do we collect your Data?)	HOLDING TERMS (How long do we keep your Data?)
Responding to your requests for information (contact form, emails)	Identification Identification data* Professional data* Message* Timestamp*	Pre-contractual measures taken at your request (Art. 6, b) RGPD)	Time needed to respond to your request and max. 12 months from your last correspondence.
Site audience analysis	Navigation / connection Pages visited on the Site Source of navigation Google ID Any other information retrieved by Google Analytics and Youtube	Your consent (Art. 6, a) RGPD)	13 months maximum.
Management of your requests and complaints regarding your Data	Identification First name and surname* Email address (if requesting by email)* Complaint message* Justification of identity (in case of legitimate doubt about your identity only)*	Compliance with a legal obligation (Art. 6, c) RGPD)	Duration necessary to process your request determined according to its nature. Intermediate archiving the time of the applicable statute of limitations.
Fighting fraud and securing the Site	Navigation / Connection IP address* Connection logs Any other information retrieved by our host IONOS	Our legitimate interest (Art. 6, f) RGPD)	6 months maximum

*The collection of this Data is mandatory, i.e. we will not be able to act on your request if you do not fill in this information.

Where the processing of your Data is based on your consent, you have the option of withdrawing it at any time.

who has access to my data (recipients)?

Your Data will be processed, depending on the case, by our dedicated staff :

managing your requests for information (sales department, communications department, AEROCAMPUS Junior department or training department)
managing your hosting requests (hospitality department)
securing our Site (IT department and/or CISO)
managing any requests you may have regarding your Data (DPO).

Certain Data will also be transmitted to our following service providers and subcontractors:

The host of our Site (IONOS company)
Our host/email solution provider
The publisher of our management software
Third-party publishers of cookies, whether functional or not, who may, where applicable, use your Data on their own behalf under the conditions set out in their own confidentiality policies.

We ensure that our subcontractors and service providers have limited access to your Data, present the necessary guarantees, and make a contractual commitment to process your Data in compliance with the regulations applicable to your Data.

In Summary : We will transfer certain Data to third-party service providers.

WILL YOU TRANSFER MY DATA TO A COUNTRY OUTSIDE THE EUROPEAN UNION?

Some partners and subcontractors may store information about you anywhere in the world, including countries outside of the European Union.

However, in such cases, these third parties undertake to take the necessary measures to ensure that your rights with regard to your Data are respected (standard contractual clauses and additional measures such as encryption, for example).

Warning : Certain countries such as the United States are not considered by the European authorities to respect your rights and freedoms with regard to your Data. By accepting certain audience analysis cookies (Google Analytics for example), your Data will thus potentially be transferred to the United States.

In résumé: Some of our partners have the option of transferring your Data outside the EU.

WHICH RIGHTS DO I HAVE WITH REGARD TO YOUR DATA?

In accordance with the regulations, you have the right:

to request access to the Data we hold about you;
to request rectification of your Data;
to exercise your right to portability;
to exercise your right to object when your Data is used for commercial prospecting purposes.
under certain conditions, to exercise your right to limit the processing of your Data;
in certain cases, to request the erasure of your Data;
to withdraw your consent at any time when your Data is used on this basis;
to exercise your right to define general and specific directives defining how you intend these same rights to be exercised, after your death.

Some rights or their exercise may be subject to conditions (as part of the performance of a contract, for example).

Further information about your rights can be found on the CNIL website (https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees- personnelles) or on the website of any other supervisory authority established in your country of residence.

In Summary: You have control over your Data!

HOW CAN I EXERCISE MY RIGHTS?

To exercise your rights with regard to your Data or to ask us any questions about the processing we carry out on your Data, we invite you to contact our DPO, whose contact details are given in the introduction to this notice.

If we have legitimate doubts about your identity, we will request proof of identity. In this case, please remember to include a document with a specific watermark on the proof before sending it to us.

To sum up: a question, a problem? Contact us!

WHAT TO DO IN THE EVENT OF A DISPUTE WITH REGARD TO YOUR DATA?

If you believe, after contacting us, that your rights with regard to your Data are not being respected, you may submit a complaint to a supervisory authority.

For example, if you live in France, you can send your complaint to the Commission Nationale Informatique et Libertés (CNIL - More information by following the link: https://www.cnil.fr/fr/adresser-une-plainte).

To sum up: we're not up to scratch? Turn to the authorities who ensure your rights are protected.

HOW IS MY DATA SECURED?

We undertake to comply with the regulations applicable to the processing of your Data and to implement the appropriate technical and organisational measures in order to guarantee a level of security appropriate to the processing we carry out on your Data.
The measures implemented include, among others:

Restricting access to personal data to employees only, employees, service providers and subcontractors concerned by the purpose of the processing
Securing access to our premises
Installing firewalls and network security equipment to prevent unauthorised access to our IT infrastructure
High standards of data protection when selecting our subcontractors and partners,

We store your personal data within the European Union and with service providers who comply with the provisions of the European Union Privacy Shield or implement a measure authorised by the legislation in force (BCR, Standard contractual clauses, certification, etc.) and which guarantees their level of security and respect for privacy.

HOW DO COOKIES WORK?

Presence of cookies and other tracers ("Cookies"). When you browse our Site, information is likely to be recorded or read in your terminal (computer, smartphone) by tracers.

These tracers take the form of "Cookies" and will collect a certain amount of Data about you, personal or otherwise.

Interest of Cookies.

Regulations: your consent. In accordance with the regulations, the deposit of Cookies requires your prior consent in principle, with the exception of Cookies strictly necessary for the provision of an online communication service at your request (functional Cookies). In any event, the lifetime of a Cookie may not exceed 13 months. For more information on this subject, we invite you to follow the following information link: https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs.

Withdrawing your consent. You may withdraw your consent regarding the use of non-functional Cookies at any time by clicking on the button on our consent management tool. This circular button appears at the bottom left of each page of the Site.

Cookies used by the Site. We use several categories of Cookies on our website, grouped below by purpose.

COOKIES REQUIRED FOR THE OPERATION OF THE SITE
These Cookies are absolutely necessary for the operation of the Site.
They are therefore systematically installed on your terminal, without you being able to object to them.

COOKIE NAME

FINALITY(S) (+link privacy policy)

DURATION

tarteaucitron

This cookie stores your cookie preferences (consent manager).

1 year

hCaptcha

__cf_bm

This cookie enables anti-robot protection on contact forms. It uniquely and anonymously identifies the user.

when the page is changed

AUDIENCE ANALYSIS COOKIES
These Cookies enable us to measure the audience for our Site.
They will only be installed if you expressly consent to them via the banner or our consent management tool.
You may withdraw your consent at any time by clicking on the icon located at the bottom left of each page of the Site.

COOKIE NAME	FINALITY(S) (+link privacy policy)	DURATION
Hubspot hubspotutk	Keeps track of a visitor's identity. It is passed to HubSpot when the form is submitted and used when contacts are deduplicated. It contains an opaque GUID to represent the current visitor. https://legal.hubspot.com/privacy-policy
Hubspot __hstc	The main cookie used to track visitors. It contains the domain, HubSpotutk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit) and session number (incremented for each subsequent session). https://legal.hubspot.com/privacy-policy	6 months
Hubspot __hssrc	Each time HubSpot changes the session cookie, this cookie is also set to determine whether the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered to be a new session. It contains the value "1" when present. https://legal.hubspot.com/privacy-policy	Expires when browser closes
Hubspot __hssc	Session tracking. It is used to determine whether HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and the session start timestamp. https://legal.hubspot.com/privacy-policy	30 minutes
Hubspot __cfduid	Detection of malicious actors. https://legal.hubspot.com/privacy-policy

Parameterisation. You can manage your choices with regard to Cookies on the dedicated button located at the bottom left of all pages of the Site. You will then be able to:

Accept all Cookies ("Accept all")
Refuse all unnecessary Cookies ("Reject all")
Or manage your consent purpose by purpose by clicking on each one.

Setting your browser.Most Internet browsers on the market also allow you to delete Cookies from your hard drive, block them or receive a warning message before a Cookie is copied. Lastly, you can set your browser parameters by following the links below:
Google Chrome: https://support.google.com/chrome/answer/95647?hl=fr&hlrm=en
Apple Safari: https://support.apple.com/kb/PH19214?locale=fr_FR&viewlocale=en_FR
Microsoft Edge: https://privacy.microsoft.com/fr-fr/windows-10-microsoft-edge-and-privacy
Mozilla Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies
Opera: https://help.opera.com/Windows/10.20/fr/cookies.html

Responsibility. However, we would like to point out that refusing certain Cookies may limit access to the Site or some of its functionalities, without us being held liable in this respect

To sum up: You can accept or not accept non-functional Cookies.

Any questions? If you have any questions about this Privacy Policy or our Site, please send us an e-mail or a letter to our registered office.