Privacy and cookies policy

Effective date: 31-July-2025
Updated on: 31-July-2025

This Privacy Policy explains how destinationgaspe.ca collects, uses, discloses and protects the personal information we collect when you access destinationgaspe.ca (the "Service"). This Privacy Policy defines and describes your privacy rights and how you are protected under applicable data protection laws.

By using our Service, you consent to the collection and use of your personal data in accordance with this Privacy Policy. Please do not access or use our Service if you do not consent to the collection and use of your information as described in this Privacy Policy.

WHAT INFORMATION WE COLLECT, FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS.

The definitions of the legal bases used below are as follows:

• Legitimate interest: interest of the Company or a third party, provided that your interests or your fundamental rights and freedoms do not prevail, and that this use of your data is balanced with regard to your rights and freedoms.
• Contract performance: processing of your personal data where this is necessary for the performance of a contract to which you are a party or to take pre-contractual measures prior to entering into such a contract.
• Legal obligations: processing of your personal data where this is necessary to comply with a legal or regulatory obligation to which we are subject.
• Consent: a free, specific, informed and unambiguous expression of will by which you express your agreement, through a declaration or a clear positive act, to the processing of your personal data. We may seek your consent when we have no other legal basis for processing your data.

USAGE DATA

What we collect: information about how users interact with our website or application, including pages visited, time spent on pages, click paths and browser details.

Purpose: to analyze user behavior, optimize performance and improve the user experience.
Retention period: 180 days
Legal basis: Consent

PERSONAL IDENTIFICATION INFORMATION.

What we collect: Full name, e-mail address, cell phone number
Purpose: to manage user accounts, ensure secure access and provide personalized content.
Retention period: 180 days
Legal basis: Contractual necessity

CONTACT INFORMATION.

What we collect: Postal address
Purpose: to ensure accurate service delivery and facilitate account-related communication.
Retention period: 184 days
Legal basis: Contractual necessity

PAYMENT AND FINANCIAL INFORMATION.

What we collect: Credit card details (collected securely), Billing information, Transaction history
Purpose: To process transactions securely and maintain compliant financial operations.
Retention period: 180 days
Legal basis: Contractual necessity

HOW WE OBTAIN YOUR PERSONAL DATA.

WE COLLECT THE INFORMATION YOU PROVIDE DIRECTLY WHEN YOU :

* Fill in a form
* Use our Services
* Contact us
* Talk to a member of our support team
* Contact us for other reasons

OBLIGATION TO PROVIDE PERSONAL DATA :

In some cases, the provision of personal data is either a legal or contractual requirement, or necessary to enter into a contract.

HOW WE SHARE YOUR INFORMATION.

DESTINATION GASPÉ MAY DISCLOSE YOUR PERSONAL DATA TO THE FOLLOWING CATEGORIES OF RECIPIENTS:

• With your consent. Destination Gaspé will share your information for any purpose with your explicit consent.
• We do not transfer personal data to third countries outside the European Economic Area (EEA).

RIGHTS OF THE PEOPLE CONCERNED.

YOU HAVE THE FOLLOWING RIGHTS CONCERNING YOUR PERSONAL DATA:

• Right of access: you can request a copy of the personal data we hold about you.
• Right of rectification: you can ask us to correct any inaccurate or incomplete information.
• Right to erasure (right to be forgotten): under certain conditions, you can request the deletion of your personal data.
• Right to restrict processing: you may request that we restrict the processing of your personal data in specific circumstances.
• Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to transfer this data to another data controller.
• Right to object: in certain cases, you may object to the processing of your personal data.
• Right to information: you have the right to receive clear, transparent and easily understandable information on how we process your personal data.

WITHDRAWAL OF CONSENT :

You have the right to withdraw your consent to the processing of your personal data at any time. As a
visitor to this website, you can easily adjust or withdraw your consent directly via the consent banner present on the site. You may also, if you wish, contact the website operator using the contact details provided in this privacy policy.
‍

Please note that the withdrawal of your consent does not affect the lawfulness of any processing carried out prior to such withdrawal.

To exercise these rights, please contact us at direction.adjointe@destinationgaspe.ca.

We will exercise your rights only after receiving your written request to exercise a particular right indicated below and only after confirming the validity of your identity.

Your requests will be satisfied, or refusal to satisfy your requests will be notified specifying the reasons for the refusal, within one month from the date of submission of the request complying with our internal rules and the RGPD. This period may be extended by a further two months if the request concerns
a large volume of personal data or other requests being considered simultaneously. We will inform you of any such extension within one
months of receipt of the request, together with the reasons for the delay. A reply will be provided in the form of your choice.

We may refuse to comply with your request if the exceptions and/or limitations to the exercise of data subjects' rights set out in the RGPD
apply, and/or if your request is manifestly unfounded or disproportionate. If we refuse to comply with your request, we will notify you by
in writing of the reasons for such refusal.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that our processing of your personal data breaches applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority. Details of your supervisory authority are generally available on its official website.

Please note that while no technological system is completely secure, we must implement appropriate security measures to minimize the risk of unauthorized access or misuse of your personal information.

SAFETY

Please note that while no technological system is completely secure, we must implement appropriate security measures to minimize the risk of unauthorized access or misuse of your personal information.

• We and our third-party service providers who may be involved in processing personal data on our behalf (for the purposes set out below) are contractually bound to respect the confidentiality of personal data.
• We implement reasonable security practices and procedures to help protect the confidentiality and security of your information, including any non-public personal information. We protect your information using reasonable physical, technical and administrative measures, including limiting access to your information to employees who need it.

MODIFICATIONS TO THIS POLICY

We regularly review this privacy policy and reserve the right to modify it at any time in accordance with applicable laws and regulations. Any changes will take effect immediately upon posting on our website.

Please check this privacy policy from time to time to stay informed of any changes.

CONTACT US

If you have any questions, please contact us using one of the following methods:

• Name: Destination Gaspé
• Address: 8, rue de la Marina, Suite 1 Gaspé (Québec) Canada, G4X 3B1
• E-mail: direction.adjointe@destinationgaspe.ca
• Website: destinationgaspe.ca

‍

If you have any questions or concerns regarding the processing of your information, please contact our Data Protection Officer at Igor Urban, direction.adjointe@destinationgaspe.ca.