PRIVACY POLICY

Last updated: 12 September 2025

Profession Croisières ("Profession Croisières", "we", "us" or "our") is committed to protecting the privacy and personal data of visitors to its website, clients, prospects, partners and other individuals whose personal data it processes.

This Privacy Policy explains how Profession Croisières collects, uses, stores and protects personal data, and how you can exercise your rights under applicable data-protection legislation.

Profession Croisières processes personal data in accordance with the Regulation (EU) 2016/679 of 27 April 2016 ("GDPR" or "RGPD"), the French Data Protection Act of 6 January 1978, as amended, and applicable guidance issued by the French Data Protection Authority (CNIL).

1. Data Controller

The data controller responsible for processing your personal data is:

Profession Croisières
Legal form: SAS
Registered office: 6 Rue d'Armaillé, 75017 Paris, France
SIREN: 980568174
SIRET: 98056817400018

Email: admin@professioncroisieres.com

For questions concerning the processing of your personal data, you may contact us using the details above.

2. Personal Data We Collect

Depending on how you interact with Profession Croisières, we may collect the following categories of personal data:

Information you provide directly

For example, when you contact us, request information, subscribe to communications, or become a client, we may collect:

first and last name;
professional title or position;
company name;
professional email address;
telephone number;
postal or business address;
information contained in your messages or enquiries;
information relating to your business requirements or consulting project;
contractual and billing information;
any other information you voluntarily provide to us.

Please do not provide sensitive personal information through our website unless we specifically request it and there is an appropriate legal basis for processing it.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, such as:

IP address;
browser type and version;
device type;
operating system;
pages visited;
date and time of visits;
referring website;
technical logs and security information.

Where required by law, non-essential cookies and similar technologies will only be used with your consent.

3. How We Collect Personal Data

We may collect personal data:

directly from you through contact forms, emails, telephone calls or other communications;
when you request our services;
when you enter into a contractual relationship with us;
when you communicate with our consultants or employees;
through our website and its cookies or similar technologies;
from publicly available professional sources, where permitted by law;
from business partners or other third parties where they have a lawful basis to provide the information.

4. Purposes of Processing

We process personal data only for specified and legitimate purposes, including where applicable:

Providing our services

We use personal data to:

respond to enquiries;
prepare proposals and quotations;
provide consulting and advisory services;
manage client relationships;
communicate with clients and project contacts;
perform contractual obligations;
manage project administration and documentation.

Business administration

We may process data to:

issue invoices and manage payments;
maintain accounting records;
manage suppliers and professional partners;
comply with legal and regulatory obligations;
establish, exercise or defend legal claims.

Website operation and security

We may process technical information to:

operate and maintain our website;
monitor website security;
prevent fraud, abuse or unauthorized access;
diagnose technical problems;
improve website performance.

Communications and marketing

Where legally permitted, we may use professional contact details to send information concerning Profession Croisières, our services, events, publications or other business communications.

Where consent is required, we will obtain it before sending marketing communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting us.

5. Legal Bases for Processing

Under the GDPR, we process personal data on one or more of the following legal bases:

Performance of a contract – Article 6(1)(b) GDPR
Where processing is necessary to enter into or perform a contract with you.

Legal obligation – Article 6(1)(c) GDPR
Where processing is necessary to comply with a legal or regulatory obligation, such as accounting or tax requirements.

Legitimate interests – Article 6(1)(f) GDPR
Where processing is necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.

These interests may include managing professional relationships, improving our services, securing our systems and website, and developing our business.

Consent – Article 6(1)(a) GDPR
Where we ask for your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies may be used for purposes such as:

ensuring the technical operation of the website;
remembering preferences;
measuring website audience and performance;
understanding how visitors use the website;
providing or measuring certain services;
other purposes described in our cookie-management interface.

Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by applicable law.

For non-essential cookies, we will request your consent where required.

You can manage your cookie preferences through the cookie banner or cookie-management tool available on our website.

You can also configure your browser to refuse or delete cookies. Disabling certain cookies may affect website functionality.

Important: The specific cookies and third-party technologies used by Profession Croisières should be listed in a separate Cookie Policy or in the website's cookie-consent interface.

7. Recipients of Personal Data

Access to personal data is limited to individuals who need it for legitimate professional purposes.

Depending on the circumstances, personal data may be shared with:

authorized employees and consultants of Profession Croisières;
professional advisers, such as accountants, lawyers or auditors;
IT, hosting, cloud and website service providers;
communication and email service providers;
payment or banking service providers, where applicable;
public authorities or regulators where required by law;
other professional service providers acting on our behalf.

Where third-party providers process personal data on our behalf, we require them to provide appropriate contractual and technical safeguards in accordance with applicable data-protection law.

We do not sell your personal data.

8. International Transfers

Some of our service providers may process personal data outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, Profession Croisières will ensure that the transfer is carried out in accordance with the GDPR.

Depending on the circumstances, appropriate safeguards may include:

an adequacy decision adopted by the European Commission;
European Commission Standard Contractual Clauses ("SCCs");
another lawful transfer mechanism recognized by applicable data-protection law.

Information concerning specific international transfers may be provided upon request.

9. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected and, where applicable, for the duration required by law.

Retention periods may vary depending on the nature of the information and our relationship with you.

For example:

Client and contractual information: generally retained for the duration of the business relationship and subsequently for the applicable statutory limitation or legal retention period.
Accounting and invoicing records: retained for the periods required by applicable French accounting and tax legislation.
Prospect information: retained for the period permitted by applicable data-protection rules, unless you object or request deletion where applicable.
Marketing preferences: retained as necessary to respect your choices and demonstrate compliance.
Website technical and security logs: retained for an appropriate period based on security and operational requirements.

Specific retention periods may be communicated to you when your data is collected.

10. Your Rights

Subject to applicable legal conditions and limitations, you have the following rights concerning your personal data:

Right of access

You may request confirmation as to whether we process your personal data and, where applicable, obtain a copy of that data.

Right to rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where the legal conditions for exercising this right are met.

Right to restriction of processing

You may request that we restrict the processing of your personal data in certain circumstances.

Right to object

You may object to certain processing based on our legitimate interests. You may also object at any time to the processing of your personal data for direct marketing purposes.

Right to data portability

Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, or ask that it be transmitted to another controller.

Right to withdraw consent

Where processing is based on your consent, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Right to define instructions concerning your data after death

Under French law, you may provide instructions concerning the retention, deletion and communication of your personal data after your death.

11. How to Exercise Your Rights

To exercise your rights, please contact:

Profession Croisières
6 Rue d'Armaillé, 75017 Paris, France
Email: admin@professioncroisieres.com

Please provide sufficient information for us to identify your request and respond appropriately.

We may need to request additional information where necessary to verify your identity and protect personal data against unauthorized disclosure.

We will respond to requests within the timeframe required by applicable law, generally one month from receipt of the request. This period may be extended where permitted by the GDPR, particularly for complex requests.

12. Right to Lodge a Complaint with the CNIL

If you believe that your personal data has been processed in violation of applicable data-protection legislation, you have the right to lodge a complaint with the French supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Website: https://www.cnil.fr/

We nevertheless encourage you to contact us first so that we can attempt to resolve your concern directly.

13. Data Security

Profession Croisières takes appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

These measures may include, where appropriate:

access controls;
authentication mechanisms;
encryption or secure transmission technologies;
confidentiality obligations;
security monitoring;
backups;
procedures for handling security incidents.

No method of transmission or storage can guarantee absolute security. We nevertheless continuously assess and improve our security measures in accordance with the risks associated with our processing activities.

14. Third-Party Websites

Our website may contain links to websites operated by third parties.

Profession Croisières is not responsible for the privacy practices or content of those third-party websites. We recommend reviewing their privacy policies before providing them with personal information.

15. Children's Privacy

Our services are intended primarily for businesses and professional users.

Our website is not specifically directed at children, and we do not knowingly collect personal data from children through our business services.

If you believe that a child has provided personal data to us, please contact us so that we can assess and, where appropriate, delete the information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, services, technology or applicable legislation.

The latest version will always be made available on our website, with the date of the most recent update indicated at the beginning of the policy.

Where required by law, we will notify you of material changes.

17. Contact

For any question concerning this Privacy Policy or the processing of your personal data, please contact:

Profession Croisières
Daniel Louvet
6 Rue d'Armaillé
Paris, France
Email: admin@professioncroisieres.com

Last updated: 12 September 2025