Privacy policy

Alentour SAS, trading as MANAWA (thereafter, "MANAWA"), whose registered office is located at 32 rue Paradis 75010 Paris, France, is committed to protecting the privacy of its users, in accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data.

This privacy policy informs you, among other things, about the types of personal data we collect about you as user of our service, as well as the purpose of such collection and how our services use the data collected. MANAWA is concerned about the protection of the data of its users or any user of the services it offers. MANAWA therefore processes the personal data it holds in compliance with data protection legislation.

MANAWA collects the data you submit to us in accordance with purposes defined beforehand. Only data that is strictly necessary for a previously defined purpose is collected.

The purpose of the processing of personal data carried out by MANAWA covers the following:

  • Management of contact forms
  • Bookings management
  • Managing access to the newsletter
  • The implementation of cookies used to track browsing activities
  • Information and communication about the company

To find out about our policy on the use of cookies, including the cookies used, please see the "Our Cookies" section of this website. You will also be able to directly set your choices regarding the use of cookies.

This privacy policy is intended to provide you with answers to the following questions:

1. What data is collected as per MANAWA’s business?

When browsing the MANAWA website, the following information may be collected: the URL of the links through which the user accessed the www.manawa.com website, the user's Internet protocol (IP) address, the browser used by the user, the device used by the user (mobile, desktop, tablet).

In general, when making a booking on www.manawa.com, making a booking request, or purchasing gift vouchers and/or gift cards, MANAWA may collect from you your: family name, first name, e-mail address, telephone number, age. Additionally, MANAWA may collect additional information regarding the participants taking part in the booked activities, and notably specific information (height, weight, shoe size, etc.) which are strictly necessary for a smooth organization of the booked activities.

2. How do we use your personal data?

We use your data for business purposes only, including facilitating the use of the website and related services, interacting with users, and displaying information to the audience of our services. We also collect your data in order to organise activities booked with MANAWA's partnering Providers and to provide our services to our users. In addition, through the available newsletter, we send our subscribers news about our business and the various events in which we are involved.

3. To whom do we pass on the data you entrust to us?

In order to carry out our mission, we transmit certain data to various recipients:

Internally

Your data is entrusted to the competent departments of MANAWA.

Externally

Your data is entrusted to MANAWA's Partnering providers so they can organize the activities your booked.

Service providers and other third parties

When we use other service providers or other third parties to carry out parts of our business or services, we may potentially need to provide them with data that is strictly necessary to perform certain tasks. This may include, but is not limited to:

  • Develop tools on our website;
  • Hosting data in the cloud ;
  • Marketing ;
  • Statistics ;
  • Social networks ;
  • Communications (sending of transactional emails and SMS) ;

4. Do we transfer your data outside the European Union?

The data you entrust to us may be transferred outside the European Union, hereinafter "EU", in particular when you are booking activities carried out by partnering Providers located outside the EU.

In this case, MANAWA undertakes to comply with the provisions of the General Data Protection Regulation "GDPR", relating to data transfers outside the EU. According to the GDPR, if personal data is transferred to a country located outside the EU, it is taken into account whether or not this country belongs to the list of countries offering a sufficient level of guarantee and, in particular, the possibility of including standard contractual clauses in contracts for data transfers outside the EU, or even binding rules known as "BCR".

5. How do we demonstrate that your rights are respected?

The use of your personal data by MANAWA entitles you to certain rights. These rights are directly provided for by the GDPR.

You have the following rights:

5.1 Right to information (Articles 12, 13, 14 GDPR)

You may be aware of the personal data that MANAWA collects and processes about you. To this end, we provide users of our services with information in accordance with regulatory requirements when we collect their personal data on our data collection documents.

5.2 Right of rectification (Article 16 GDPR)

If your personal data is inaccurate, you can ask us to correct it. Similarly, if we have passed on your data to a third party, we will also pass on the requested correction to that third party.

5.3 Right to object (Article 21 GDPR)

In certain cases, you can object to the use of your personal data. We will consider your request to object and determine whether the processing of your personal data is unfairly prejudicial to you and whether this prejudice forces us to stop such use of your data.

In general, you cannot object to the processing of your personal data if:

  • We have a legal obligation to collect and/or process your data
  • It is necessary for the good execution of a contract between you and MANAWA
  • It is necessary for the proper execution of activities booked on www.manawa.com by partnering Providers

5.4 Right to restriction of processing (Article 18 GDPR)

You can ask us to limit the use of your personal data if :

  • You believe that your personal data is inaccurate
  • We process your data incorrectly or such processing is unlawful
  • We are no longer entitled to retain this data but you wish us to retain it for other purposes
  • You objected to the processing of your data based on our legitimate interests.

5.5 Right to data portability (Article 20 GDPR)

You may request that we transfer your personal data to you personally or to a third party organisation.

5.6 Right to be forgotten (Article 17 GDPR)

In the context of the use of the personal data you entrust to us, we are obliged to keep them for a certain period of time in order to comply with the applicable laws and regulations. However, this right can only be validly exercised once the applicable legal and/or regulatory periods have expired. In the event that a legal or regulatory period is not applicable, the right to be forgotten may be exercised if you withdraw your consent.

6. Which processing operations result in automated decisions?

MANAWA does not carry out any automated processing of personal data.

7. How do we secure the data you entrust to us?

We implement technical and organisational measures (policies, procedures, physical security of our premises, logical security of our information systems). These measures aim to guarantee the confidentiality, availability and integrity of data.

In addition, MANAWA employees are subject to an obligation of confidentiality.

8. How long do we keep your data?

Under current data protection regulations, we are required to retain personal data for a defined and limited period of time. When we determine that the data we have about you is no longer necessary for the purposes for which it was collected, we will delete it or make it anonymous.

Our users' data is kept for the duration of the commercial relationship between you and MANAWA and/or partnering Providers. It may be kept for commercial prospecting purposes for a maximum of 3 years from the end of any commercial relationship.

Information stored in users' terminals (e.g. cookies) or any other element used to identify users and enabling users to be traced is kept for a period of 30 days, and in any case, not exceeding 6 months.

The data used for the distribution of newsletters is kept until the user unsubscribes.

Every 13 months we ask for the consent of our website visitors to process cookies.

9. How and where can you exercise your rights?

If you wish to exercise your rights, you can send a written request to the Data Protection Officer (DPO) at the following e-mail address: [email protected].

You can send us your request in the most precise way. Ideally, you should send us a copy of your identity document to confirm your identity. If your request is valid, we will send you a reply within one month from the date of such request. If your application is refused, we will send you a reasoned reply as soon as possible.

10. Right to lodge a complaint

In the event of an unsatisfied complaint on our part, you can send us a complaint directly. If you are not satisfied with our response, you can contact the French authorities in charge of enforcing GDPR:
Commission Nationale Informatique et Libertés (CNIL) - 3 place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 — www.cnil.fr.