PRIVACY POLICY
How we protect your personal information
PRIVACY POLICY
How we protect your personal information
Last updated: 20 February 2025
XPlorers attaches great importance to the protection and respect of the privacy and personal data (“Personal Data”) of the users of its website (hereinafter the “Site”).
XPlorers undertakes to implement adequate measures for the protection, confidentiality and security of Personal Data in accordance with the regulations in force in France and the European Union, in particular the General Regulation on the Protection of Personal Data EU 2016/679 of 27 April 2016 and the rules of national law adopted for its application.
Users are informed by this charter (the “Charter”) of the practices and processing inherent in the collection and use of Personal Data by XPlorers as data controller.
Consequently, XPlorers invites users to read this document carefully in order to know and understand the processing of Personal Data.
By browsing the Site, users accept this Charter and the general conditions of use.
1. PERSONAL DATA COLLECTED
Users are asked to provide their Personal Data in digital format when using the Site.
1.1 PRINCIPLES APPLICABLE TO THE COLLECTION OF PERSONAL DATA
In general, users may browse the Site without necessarily having to provide XPlorers with Personal Data. X Plorers only collects the Personal Data required to carry out the processing that it implements and ensures a high level of protection. In this respect, the processing operations requiring the collection of data are as follows:
Collecting and managing registrations and bookings for the proposed experiences;
Sending confirmations, logistical information and event updates;
Secure payment via our third-party service providers Paygreen and Stripe;
Improving our services and personalising the experience on our site;
Sending marketing communications or promotions, with your consent.
In this case, the personal information collected from users is at least :
Last name ;
First name ;
e-mail address
Telephone number ;
Postal address (if required for booking);
Online payment details (processed via a secure service provider).
This data is collected in several ways:
When registering for our experiences via online forms;
When making a reservation or payment on our site;
This Personal Data is then kept for the time necessary to fulfil the user’s request. If the request is not fulfilled, it is deleted within the period recommended by the CNIL, i.e. after three years from the date of collection by the Site, subject to legal possibilities and obligations in terms of archiving, obligations to retain certain data and/or anonymisation.
1.2 INFORMATION ON SITE USERS’ BROWSING HABITS
When using the Site or certain services linked to the Site, certain data is collected automatically, such as: IP address, reference of the browsing software used, browsing data (date, time, content consulted, search terms used, etc.), operating system references. Among the technologies used to collect this information, XPlorers may use ‘php’ sessions which store each user’s data using a unique session identifier. These php sessions keep the data in memory only as long as the user is browsing. The data collected during browsing is deleted when the user’s browser is closed or, where applicable, within a maximum period of thirteen months from the date of collection.
2. LEGAL BASIS FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA
Personal Data are processed by XPlorers in the cases authorised by the regulations in force and under the following conditions:
Obtaining users’ free, specific, informed and unambiguous consent to the processing of their Personal Data (it should be noted that for minors under the age of 18, consent must be given by the legal representative);
Collection of Personal Data required to fulfil users’ requests;
Compliance with XPlorers’ legal and/or regulatory obligations (such as the fight against fraud and corruption);
Protection of XPlorers’ legitimate interests (such as protecting the security of its IT network).
3. RECIPIENTS OF THE PERSONAL DATA COLLECTED
Only authorised personnel of the XPlorers group and service providers may have access to the Personal Data collected and process it, without prejudice to its possible transmission:
1. The partner organisations required to organise the experiments, such as :
Sports clubs,
Tourist offices,
Transport companies,
Logistics providers and other event partners, to the extent strictly necessary to carry out the events booked.
2. To bodies responsible for control or inspection in accordance with current legislation and/or regulations or for the purposes of responding to a judicial or administrative decision.
All recipients of Personal Data are subject to an obligation of confidentiality and undertake to use such data solely for the purposes mentioned.
X Plorers undertakes not to market the Personal Data collected to third parties.
4. TRANSFER OF PERSONAL DATA
The Personal Data collected from users of the Site is stored exclusively in France and is not transferred outside the European Union. In the event of recourse to affiliates or service providers located outside the European Union, X Plorers undertakes to verify that appropriate measures have been put in place so that users’ Personal Data benefit from an adequate level of protection.
5. DATA SECURITY
X Plorers collects and processes users’ Personal Data with the utmost confidentiality and in compliance with applicable laws. Users are protected against unauthorized access, modification, disclosure or destruction of their Personal Information. When disclosure of Personal Data to third parties is necessary and authorised, X Plorers ensures that these third parties guarantee the Personal Data concerned the same level of protection as that offered to them by X Plorers, and requires contractual guarantees so that the Personal Data is processed exclusively for the purposes accepted by the users, with the required confidentiality and security (in particular thanks to European Commission standard clauses, Internal Company Rules (‘BCR’) or the Data Protection Shield set up between the European Union and the United States of America). X Plorers implements technical and organisational measures to ensure that Personal Data is stored securely and for the length of time necessary to fulfil the purposes for which it is to be used. Users’ attention is drawn to the fact that no transmission or storage technology is totally infallible. Therefore, in the event of a proven breach of Personal Data likely to give rise to a high risk for the rights and freedoms of users, X Plorers will inform the competent supervisory authority of this breach in accordance with the procedures set out in the applicable regulations. Users are responsible for exercising caution to prevent any unauthorised access to their Personal Data and in particular to their computer and digital terminals (computer, smartphone, tablet in particular).
6. LINKS TO OTHER INTERNAL SITES
The Site may occasionally contain links to the sites of partners or third-party companies which have their own data protection charters. X Plorers has no control over the content of these sites and declines all responsibility for the use made of the information collected when users click on these links. X Plorers therefore invites users to read the data protection policies implemented by the publishers of these sites before sending them any personal information.
7. USER RIGHTS
Users are reminded that they have the following rights, subject to the limitations provided for by the legislation in force:
7.1. RIGHT TO INFORMATION ON THE PROCESSING OF PERSONAL DATA
X Plorers undertakes to use its best efforts to provide concise, transparent and accessible information on the conditions under which users’ Personal Data is processed.
7.2. RIGHT OF ACCESS TO PERSONAL DATA
Each user may access the Personal Data being processed by X Plorers and has the right to receive a copy in electronic form (for any additional copy, X Plorers will be entitled to demand payment of a fee based on the administrative costs incurred).
7.3. RIGHT TO ERASURE (‘RIGHT TO BE FORGOTTEN’) AND RECTIFICATION OF PERSONAL DATA
Each user has the right to request the deletion and/or rectification of Personal Data concerning him or her when such data is erroneous or obsolete. It is specified that X Plorers may retain certain Personal Data when required to do so by law or for legitimate reasons.
7.4. RIGHT OF OBJECTION
Users may object at any time for legitimate reasons :
to the use of their Personal Data for direct marketing purposes or to the re-use of their Personal Data for processing other than that consented to, except in the event of X Plorers fulfilling one of its legal obligations.
7.5. RIGHT TO LIMIT THE PROCESSING OF PERSONAL DATA
Users have the right to request that the processing of their Personal Data be limited to that which is necessary. This right is applicable only :
if the user disputes the accuracy of his/her Personal Data;
if the user can establish that the processing of his or her Personal Data is unlawful and requests that its use be restricted rather than erased;
if X Plorers no longer needs the user’s Personal Data but it is still necessary for the user to establish, exercise or defend legal claims;
if the user objects to processing based on the legitimate interest of the controller, during the verification as to whether the legitimate grounds pursued by the controller prevail over those of the user.
7.6. RIGHT OF COMPLAINT TO A SUPERVISORY AUTHORITY
If users consider that the efforts made by X Plorers to preserve the confidentiality of Personal Data do not guarantee respect for their rights, they may lodge a complaint with the competent supervisory authority (CNIL or any other authority mentioned on the list available from the European Commission).
7.7. RIGHT TO PORTABILITY OF PERSONAL DATA
Users have a right to the portability of their data, allowing them to obtain their Personal Data from X Plorers in a structured, commonly used and machine-readable format and to request that this Personal Data be transmitted to another data controller.
7.8. THE RIGHT TO DECIDE WHAT HAPPENS TO PERSONAL DATA AFTER DEATH
Les utilisateurs ont également le droit d’organiser le sort de leurs Données Personnelles après leur mort par l’adoption de directives générales ou particulières que X Plorers s’engage à respecter. En l’absence de telles directives, X Plorers reconnaît aux héritiers la possibilité d’exercer certains droits, en particulier le droit d’accès s’il est nécessaire pour le règlement de la succession du défunt et le droit d’opposition.
7.9. CONDITIONS FOR EXERCISING RIGHTS
To exercise their rights, users are invited to contact the X Plorers Personal Data Protection Officer in accordance with the procedures described in article 10. It is specified that to assist them in exercising their rights, the CNIL provides model letters on its website (www.cnil.fr). Before processing the user’s request(s), X Plorers may verify their identity by requesting proof of identity. The Personal Data Protection Officer will respond to their request(s) as soon as possible and in any event within one (1) month of the proof of identity. If necessary, this period may be extended by a further two (2) months depending on the complexity and number of requests, in which case X Plorers undertakes to inform users of the extension and the reasons for the postponement.
8. MODIFICATION OF THE PERSONAL DATA PROTECTION CHARTER
X Plorers se réserve le droit d’apporter, à tout moment, des modifications à la présente Charte de protection des Données Personnelles afin de respecter les évolutions législatives et règlementaires et/ou d’améliorer sa politique de traitement et de protection des Données Personnelles. En cas de modification, une nouvelle version sera actualisée et mise en ligne avec la date de “Dernière mise à jour”.
9. APPLICABLE LAW AND COMPETENT COURT
This Charter is governed by French law, including the provisions applicable to the rules of private international law. In the absence of amicable agreement, jurisdiction is given to the courts within the jurisdiction of the Paris Court of Appeal, notwithstanding plurality of defendants and/or the introduction of third parties, to hear any dispute relating to the use of the site and/or the validity, performance and interpretation of these GCU.
10. CONTACT
For any questions relating to the present Charter for the purposes of rectification, supplementation or updating, users are invited to contact X Plorers :
By sending an email to the Data Protection Officer at julien@x-plorers.com