Personal data
Privacy and personal data protection policy – Last updated: 29 October 2026
This policy informs all data subjects (website visitors, cyclists, partners, tourism professionals) of the conditions under which their personal data is collected, processed and protected on www.laflowvelo.com, in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the amended French Data Protection Act (loi Informatique et Libertés) of 6 January 1978.
When you visit our website, personal data may be collected and information about your device's browsing on our site may be stored in files known as "cookies" placed on your device (computer, tablet, smartphone, etc.), provided you have accepted them. You can change this choice at any time.
1. Data controller
The controller of the personal data collected on www.laflowvelo.com is:
- Entity: La Flow Vélo
- Contact e-mail: coordination@laflowvelo.com
- Data protection officer (DPO): can be contacted directly at the e-mail address above or by post.
2. General principles and method of collection
We are committed to upholding the core principles of the GDPR:
- Data minimisation: only the data strictly necessary for the intended purposes is collected.
- Transparency and fairness: no data is collected without your knowledge. Data is mainly collected directly (forms, creation of a personal account or favourites, newsletter sign-up).
- Indirect collection: where data is obtained from a third party (for example to identify partners or tourism professionals), the data subject is informed within one month at most, in accordance with Article 14 of the GDPR.
- Automated decisions: your data is not subject to any profiling or automated decision-making.
3. Summary of data processing
| Purpose | Data collected | Legal basis (GDPR) | Retention period |
|---|---|---|---|
| Contact form / information requests | Last name, first name, e-mail address, message content | Legitimate interest (responding to requests) | 1 year from your last contact |
| Personal account and favourites (travel planner, reviews) | Last name, first name, e-mail address, saved items | Performance of the service (Terms of Use) | For as long as the account is active; deleted or anonymised after 8 months of continuous inactivity or on request. Can be edited or deleted at any time from your personal account |
| Newsletter subscription | E-mail address | Consent (may be withdrawn at any time via the unsubscribe link) | Until you unsubscribe, or after 1 year without interaction (opening or clicking) |
| Audience measurement and website security | IP address, connection and browsing data | Legitimate interest (anonymous audience measurement, exempt from consent under CNIL guidelines) | Raw data deleted after 6 months; detailed data kept for 25 months maximum, then aggregated anonymous statistics |
| Accueil Vélo professionals and partners | Business address, professional e-mail and phone number | Legitimate interest (partner relationship management) | Duration of the partnership |
4. Recipients, processors and data transfers
The personal data collected is intended solely for the data controller. It is never sold, rented or transferred to third parties for commercial purposes.
Technical processors. To ensure our services run properly, your data may be shared with processors acting on our instructions:
- Website hosting: Scaleway (infrastructure located in the European Union).
- Newsletter delivery: Sendethic (a GDPR-compliant provider).
- Audience measurement: Matomo (open-source solution configured to protect privacy).
Requirements and transfers outside the EU. We require all our processors to provide appropriate security and confidentiality guarantees. Processing within the European Union is preferred. Any transfer to a third country is subject to appropriate safeguards (a European Commission adequacy decision or standard contractual clauses).
5. Data security
We implement appropriate technical and organisational measures (SSL/HTTPS encryption, access control, regular backups, management of access rights) to protect your data against unauthorised access, alteration, disclosure, or accidental or unlawful destruction.
6. Your rights over your data
Under Articles 13 to 21 of the GDPR, you have the following rights:
- Right of access and copy: to know whether your data is being processed and obtain a copy.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure ("right to be forgotten"): to request the deletion of your data, under certain conditions.
- Right to restriction of processing: to request that processing be temporarily suspended.
- Right to object: to object to processing at any time on legitimate grounds.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Post-mortem instructions: to set out what should happen to your data after your death.
How can you exercise your rights? Contact us:
- By e-mail: coordination@laflowvelo.com
- By post: Charentes Tourisme / La Flow Vélo – 21 rue d'Iéna – 16000 Angoulême, France
If there is reasonable doubt about your identity, proof of identity may be requested.
Complaints to the CNIL. If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL) – 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – tel. +33 (0)1 53 73 22 22 – cnil.fr/fr/plaintes.
7. Cookies and audience measurement
To analyse traffic on the website and improve its usability, we use Matomo.
- Consent exemption: in line with CNIL guidelines, this tool is configured to strictly protect your privacy (IP address anonymisation, deletion of raw data within 6 months, compliance with your browser's Do Not Track signal). It therefore does not require your prior consent.
- Your right to object: you can nevertheless object to the tracking of your browsing at any time using the opt-out module below.
For more information on the cookies used by La Flow Vélo, see "Cookie management".
For more information on the cookies used by La Flow Vélo, see "cookies management"