The protection of your personal data is essential for Reeviera.

Our privacy policy determines what personal data we collect and for what purposes this data is processed.

Controller and contact

The controller for purposes of processing your personal data is:

Eduthera
154, Boulevard Eugène Gazagnaire
06400 Cannes – France

If you have any questions or suggestions regarding data protection or would like to exercise your rights, please contact us at

dpo@reeviera.com

Any data processing by activity providers who offer their services on the Reeviera platform is subject to their respective privacy policies. Activity providers act as separate data controllers.

Subject of data protection

The subject of data protection is personal data, i.e. all information relating to an identified or identifiable natural person. Personal data is also referred to simply as data in the following.

Automated data collection

When accessing our website, your end device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us. We store this data for the following purposes:

for load balancing, i.e. to distribute access to our website across several devices and to be able to offer you the fastest possible loading times.

to ensure the security of our IT systems, e.g. to defend against specific attacks on our systems and to recognise attack patterns.

to ensure the proper operation of our IT systems, e.g. if errors occur that we can only rectify by storing the IP address.

to enable criminal prosecution, averting of danger or legal prosecution in the event of specific indications of criminal offences.

Your IP address is only stored for a period of 60 days.

In this case, the processing is carried out to ensure the security of the processing in accordance with Art. 32 GDPR, as well as based on our legitimate interest in protecting ourselves against misuse of our service (Art. 6 para. 1 lit. f GDPR).

Reeviera account

Registration
Surname/first name
E-mail address
ID and Password.

Your registration data is required to set up and manage a user account for you. In this case, you conclude a (free) user agreement with us, based on which we collect this data (Art. 6 para. 1 lit. b GDPR).

To conclude the agreement, you must provide us with this data. However, you are neither contractually nor legally obliged to conclude the agreement and thus to provide the data.

Wish list

After you have created an account, you have the option to create wish lists with activities and tours and to share these wish lists with other users. Your data is processed for these purposes to be able to provide you with the corresponding functions.

Customer support

Customer service

To continuously improve our customer service, we analyse enquiries by email to contact@reeviera.com or hello@reeviera.com  sent to us. Although, as a matter of principle, no analysis is carried out based on personal data, it cannot be ruled out that, in individual cases, personal data may also be processed within this context. The processing required within this context serves our legitimate interest as well as that of our customers in the continuous improvement of our customer service.

Translations

In certain cases, it is necessary for us to translate incoming requests into a specific language. This may require the processing of personal data necessary to protect our legitimate interest in providing international customer service.

Technical service providers

We use technical service providers for hosting and some of the services required for the website. Accordingly, the processing of data takes place on the servers of these service providers.

Hosting of the website

For the hosting of our website, we use the services of OVH Cloud Services based in France and Cognix Outsourcing services.

For sending emails, we use the Brevo services: https://landing.brevo.com/fr

Newsletter

You have the option on our website to register for our newsletter. With our newsletter, we would like to send you information on offers, experiences or special promotions that is as personalised as possible.
By registering for our newsletter, you therefore consent to us processing your email address for the purpose of sending the newsletter. The legal basis for this processing is compliant to GDPR and French CNIL.

You can revoke your consent at any time by unsubscribing from our newsletter. To do this, you can use the unsubscribe link contained in every email or send us a message using the link: https://www.Reeviera.com/contact/ .

To verify your e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). When you register for the newsletter, we store the IP address and the date and time of registration. The processing of this data is necessary to be able to prove that consent has been given.

If you have booked an experience through our website or created a Reeviera account, we will send you our newsletter based on our legitimate interest in promoting similar services to your bookings or account unless you have objected to this use. If cookies are used for personalisation, we will obtain your separate consent.

You can object to this at any time – even during registration – by deselecting the corresponding checkbox or clicking the unsubscribe link in the respective emails.

For the dispatch of our newsletter and the personalisation of content, we use the services of Brevo: https://www.brevo.com/gdpr/

Bookings & payments

Bookings

When you book an experience or similar on our site, we collect the data required to carry out the activity. This usually includes the following information: First and last name, billing address, email address, telephone number, number of participants, date, and time. Depending on the experience booked, it may also be necessary for us to collect further information, such as the age of the participants.

The processing that takes place in connection with this is based on https://www.privacy-regulation.eu/en/index.htm To the extent necessary, we will transfer your data to the provider responsible for the tour or activity who will process your personal data as set out in their privacy policy as an independent data controller. If a transfer to a third country outside the European Economic Area is necessary.

If you make bookings via partner sites, you will be redirected to provide your personal data and conclude the booking process on the Reeviera website, as described above. On some partner sites, your data is collected by the partner as a separate data controller, in accordance with their privacy policy, and we receive the data required to make the booking from the partner.

On other websites who have partnered with us to integrate the booking offers directly on their own website, both the partner and Reeviera act as separate data controllers for the processing of your personal data.

Booking confirmations

To keep you updated on your bookings we will send you booking confirmations as well as reminders and updates for upcoming bookings (e.g. changed times or meeting points) to make sure that you have all information you need to attend your booked services. Booking confirmations are sent to your email address, and/or by SMS to the phone number you provide during the booking process and/or through a push notification.

We process your personal data in order to be able to provide you with these features of our service: https://www.privacy-regulation.eu/en/index.htm

Payments

You have various options for paying for your booking. In doing so, we will process the data required in each case depending on the selected payment method. Within this context, your personal data will be processed as described below, which is based on https://www.privacy-regulation.eu/en/index.htm  and is necessary to carry out the payment method you have chosen.

Credit card payment

For the processing of payments by credit card, we use the following service providers, STRIPE and PAYPAL.

The data provided during your payment will be forwarded by to the respective banks or financial institutions for the purpose of processing the payment. In the case of payments by credit card, we only receive the information that a payment has or has not been made, along with the last 4 digits of the credit card number. We therefore have no knowledge of your full credit card number.

Payment via PayPal

If you have a PayPal account, you can also process your payment via PayPal. In this case, we receive from PayPal not only the information that a payment has been made, but also the e-mail address and address you have registered with PayPal.

Payment by invoice

If you pay by invoice, we will transfer your personal data to QONTO Bank based in Paris, France. Qonto will process the data first for the purpose of credit assessment and then, if necessary, for payment processing.

Chargebacks

In the event of chargebacks, we will collect data including your name, booking information, telephone number and payment information. The chargeback will then be processed with your bank or PayPal or Ayden. The processing is carried out within the context of the execution of the contract https://www.privacy-regulation.eu/en/index.htm as well as based on our legitimate interest in the effective processing of chargebacks https://www.privacy-regulation.eu/en/index.htm

Booking Cancellation Insurance

If you visit our website from certain regions, you will be able to also book activities with extended cancellation rights covered by insurance. The insurance coverage is offered to you by HISCOX : https://www.hiscox.com  If you book this option, your personal data will be processed based on https://www.privacy-regulation.eu/en/index.htm.

With regards to the data processing connected to offering these insurances on the Reeviera website, Reeviera and HISCOX as joint data controllers. With regards to the data processing directly connected to the insurance contract (such as eligibility, decision making process, claim processing etc.), HISCOX as an independent data controller.

You can exercise your data subject rights towards either Reeviera or HISCOX and we will ensure the requests is forwarded to the responsible party.

Fraud prevention

To protect ourselves and the activity providers from fraudulent bookings, we evaluate the information provided by our customers during the booking process, including the data technically transmitted by their device, insofar as this is necessary to protect our legitimate interest and that of the activity providers in reliable bookings https://www.privacy-regulation.eu/en/index.htm.

Protection against bots

To protect us from bots and similar technologies, we check the data automatically transmitted by your device to determine whether the request most likely originates from a human. No further storage of the data will take place.

The processing is carried out in order to ensure the security of the processing in accordance with Art. 32 GDPR and on the basis of our legitimate interest in protecting ourselves against misuse of our service https://www.privacy-regulation.eu/en/index.htm.

Google services

We use the services of Google LLC, 1600 Amphitheatre Pkwy Mountain View, California 94043, USA (“Google”) described below. There is no EU Commission adequacy decision for the USA. We have therefore concluded the standard contractual clauses approved by the EU Commission with Google in accordance with Art. 46 para. 2 lit. c GDPR.

Basic information on the processing of your personal data by Google can be found here: https://policies.google.com/privacy?hl=en  

You also have the following setting options with Google:

You can disable personalised advertising on a device-by-device basis: https://support.google.com/ads/

Google Analytics

If you have consented, we use Google Analytics, a web analytics service. Google Analytics collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transmitted to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Your data will be stored by Google Analytics for a period of 12 months. After this period, the data is deleted, and only aggregated statistics are kept.

The use of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR).

You can revoke your consent at any time and deactivate Google Analytics using a browser add-on. You can download this here:  https://support.google.com/analytics/answer/1009696?hl=en

Google Remarketing & Advertising Personalisation on the Google Network

If you have consented, we use remarketing services from Google. Google uses cookies to record your usage behaviour on our website to display interest-based advertising for our products on other pages within the Google advertising network across devices. This includes Google search and other sites operated by Google and its subsidiaries, as well as sites operated by Google’s advertising partners.

The information is transmitted accordingly to Google and Google’s partners. Additional data processing will only take place if you have consented to Google linking your browsing history to your Google Account and using information from your Google Account to personalise the ads you see on the web. In this case, Google will use your data together with Google Analytics data to create and define target group lists for remarketing. To do this, your personal data will be temporarily linked by Google with Google Analytics data to form target groups.

The use of these services is based on your consent (Art. 6 para. 1 lit. a GDPR).

You can revoke your consent via our consent manager. This does not affect the lawfulness of the processing carried out until your revocation. Furthermore, the remarketing cookie is automatically deleted as soon as it is no longer necessary for the purposes for which we collected or used it in accordance with the above paragraphs.

Integrated third-party content

We have integrated third-party content on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third-party provider. It cannot be ruled out that these providers may take note of the IP address assigned to you. Insofar as personal data is processed, this is done based on the privacy policies of the respective third-party providers.

The integration by us is based on our legitimate interests in being able to provide our users with the corresponding content and functionalities and to be able to operate our website economically, Art. 6 para. 1 lit. f GDPR.

Reeviera on Instagram

Our Instagram page can be found at: https://www.instagram.com/reeviera06/

Instagram is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The Instagram privacy policy can be found at: https://help.instagram.com/519522125107875 . In it you will also find information on the settings options for your account.

Your personal data may also be made available to other Facebook or Instagram companies. This may involve the transfer of personal data to the USA and other third countries for which there is no EU Commission adequacy decision. In this case, Facebook will use the standard contractual clauses approved by the EU Commission. Further information can also be found in the Instagram Privacy Policy.

In addition, as part of the operation of our Instagram page, we are jointly responsible with Facebook for the processing of so-called Instagram Insights. With the help of these Instagram Insights, Facebook analyses the behaviour on our Instagram page and provides us with this information in non-personal form. For this purpose, we have concluded a joint data protection responsibility agreement with Facebook, which you can view at the following link: https://facebook.com/legal/terms/page_controller_addendum. In it, Facebook undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Instagram Insights and to fulfil all obligations under the GDPR about the processing of Page Insights.

Personalisation of website content

We also process your data to display personalised content on our website. The legal basis for this is our legitimate interest in showing you tours and activities that are relevant to you, Art. 6 para. 1 lit. f GDPR.

Further sharing of data

Beyond the cases described, your personal data will only be passed on without your express prior consent in the following cases:

If it is necessary for the clarification of an illegal use of our services or for legal prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are specific indications of unlawful or abusive behaviour. A transfer may also take place if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities.

This data is disclosed based on our legitimate interest in combating abuse, prosecuting criminal offences, and securing, asserting, and enforcing claims and provided that your rights and interests in the protection of your personal data are not overridden, Art. 6 para. 1 lit. f GDPR or based on a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.

We disclose personal data to auditors, accounting service providers, lawyers, banks, tax consultants and similar bodies insofar as this is necessary for the provision of our services (Art. 6 para. 1 lit. b GDPR) or the proper operation of our business (Art. 6 para. 1 lit. f GDPR) or we are obliged to do so (Art. 6 para. 1 lit. c GDPR).

We rely on contractually affiliated third-party companies and external service providers (“processors”) to provide the services. In such cases, personal data is passed on to these processors to enable them to continue processing. These processors are carefully selected and regularly reviewed by us to ensure that your rights and freedoms are protected. The processors may only use the data for the purposes specified by us and are also contractually obliged by us to treat your data exclusively in accordance with this privacy policy and the German data protection laws.

The transfer of data to processors takes place on the basis of Art. 28 para. 1 GDPR.

As part of the further development of our business, it may happen that the structure of eduthera Holding, that owns the brand Reeviera, changes by changing the legal form, founding, buying, or selling subsidiaries, parts of the company or components. In such transactions, customer information is passed on together with the part of the company to be transferred. Whenever personal information is disclosed to third parties to the extent described above, we will ensure that this is done in accordance with this privacy policy and the relevant data protection laws.

Any disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances as necessary (Art. 6 para. 1 lit. f GDPR).

Automated individual decisions or profiling measures

We do not use any automated processing processes to bring about a decision or profiling.

Erasure of your data

We delete or anonymise your personal data as soon as it is no longer necessary for the purposes for which we collected or used it in accordance with the above paragraphs. We also continue to retain your data if we are obliged to do so for legal reasons or if the data is needed for a longer period for criminal prosecution or to secure, assert or enforce legal claims.

If you delete your user account, your profile will be deleted completely and permanently. However, we will retain backup copies of your data to the extent and for as long as this data is required for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims.

If data must be retained for legal reasons, processing will be restricted. The data is then no longer available for further use.

Storage beyond the contractual relationship is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR.

Your rights as a data subject

You have the rights described below about the processing of your personal data. To exercise your rights, you can make a request here, by post or by email to the address above.

Right of access to information

You have the right to receive information from us at any time, upon request, about the personal data we process that concerns you, to the extent and subject to the conditions of Art. 15 GDPR and § 34 BDSG.

Right to correct incorrect data

You have the right to request that we correct personal data relating to you without delay if it is inaccurate.

Right to erasure

You have the right to demand that we delete the personal data concerning you under the conditions described in Art. 17 GDPR and § 35 BDSG. These conditions provide for a right to erasure if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erasure under Union law or the law of the Member State to which we are subject.

Right to restriction of processing

You have the right to demand that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the duration that the verification of the accuracy requires, as well as in the event that the data subject requests restricted processing instead of erasure in the case of an existing right to erasure; furthermore, in the event that the data is no longer required for the purposes pursued by us, but the user requires it for the assertion, exercise or defence of legal claims, as well as if the successful exercise of an objection is still disputed between us and the user.

Right to data portability

You have the right to receive from us the personal data relating to you that you have provided to us in a structured, commonly used, machine-readable format in accordance with Art. 20 GDPR.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data which is carried out, inter alia, on the basis of Art. 6 para. 1 lit. e or f GDPR, in accordance with Art. 21 GDPR. We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right of appeal

You have the right to contact a supervisory authority of your choice in case of complaints.

Data processing when exercising your rights

Finally, we would like to point out that we process the personal data provided by you when exercising your rights pursuant to Art. 15 to 22 GDPR for the purpose of implementing these rights and to be able to provide evidence thereof. This processing is based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and § 34 para. 2 BDSG.23

Access to Specific Information Rights.

You have the right to request that we disclose certain information to you about how we collected and used your personal information. Once we have received a valid request from you, we will disclose to you, to the extent permitted by law:

The categories of personal information we collected about you.

The categories of sources for your personal information we collected about you.

The business or commercial purpose for collecting, selling, or sharing your personal information, if applicable.

The categories of third parties with whom we share your personal information.

If we disclosed your personal information for a business purpose, the personal information categories that each category of recipient obtained.

Deletion Right

Residents of certain states have the right to request that we delete the personal information that we have collected about them, subject to certain exceptions described in Section 23.3 of this Privacy Policy and as set forth in applicable law(s).

Correction Right. Residents of certain states have the right to request that we correct inaccurate personal information that we maintain about them as explained in Section 23.2 of this Privacy Policy, subject to certain exceptions set forth in applicable law(s).

No Discrimination

We will not discriminate against you for exercising any of your privacy rights.

We Do Not Sell or Share Any Personal Information. You are free to change your cookie preferences at any time and request to opt out of sharing of your personal information to third parties, subject to certain exceptions set forth in applicable law(s). By “sharing”, we refer to the processing of personal data as described above in Section 12 Cookies and

Opt Out of Targeted Advertising

Certain data collection and processing on our website for purposes of interest-based advertising may be deemed “targeted advertising,” or a “sale” or “sharing” of personal information by some state laws, like under the CDPA. Depending on your cookie preferences and to the extent permitted by law, we may disclose your personal information to our trusted partners for targeted advertising. You may request that we stop using and sharing your personal information for such targeted advertising by clicking on the Preference Center link and change your preferences by opting out of “Share or Sale of Personal data”.

Do not share or disclose my sensitive personal information

You have the right to limit how your sensitive personal information is disclosed or shared with third parties. To exercise your rights described in this Privacy policy, please contact us at the following link: https://www.Reeviera.com/contact

Exercising Your Rights

You can exercise any of your rights as described in this Privacy Policy to the extent permitted by applicable law(s).

Please provide enough information and describe your request with sufficient detail to enable us to properly respond to your request. We will take reasonable steps to verify your identity before we can respond to your request.

Changes to this privacy policy

The current version of this privacy policy is always available at

https://reeviera.com/terms-privacy/

Status at 24 April, 2024.