This is a translation provided for convenience. The French version is the authoritative text.

This page explains what personal data vttfrance.com collects, why, how long it is kept and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR).

Data controller

VTTFrance.com, reachable at info@vttfrance.com or through the contact page.

Data processed, purposes and retention

Publishing contributions

  • Data: name, email, submitted content (text, photo, GPX trail, position).
  • Why: to moderate, publish and credit events, trails, guides and reviews.
  • Legal basis: performance of the terms of use you accept when sending the form.
  • Retention: as long as the content is online; name and email deleted or anonymised on request.

Correspondence with the team

  • Data: name, email, message content (contact form, moderation replies).
  • Why: to answer your requests and tell you whether a contribution was published or refused.
  • Legal basis: legitimate interest in answering and moderating.
  • Retention: 3 years after the last exchange.

Reminders to organisers

  • Data: name, email, published event.
  • Why: about nine months after an event, to invite its organiser to announce the next edition (one email per edition).
  • Legal basis: legitimate interest; you can object at any time by replying to the message.

Newsletter

  • Data: email, language, date of consent.
  • Why: to send you mountain-bike events near you.
  • Legal basis: your consent, confirmed by email (double opt-in); every mailing has an unsubscribe link.
  • Retention: until you unsubscribe; an unconfirmed sign-up is deleted after 30 days.

Analytics and advertising

  • Data: cookie identifiers, pages viewed, browser and device information, IP address.
  • Why: to measure audience (Google Analytics) and show advertising (Google AdSense), which funds the site.
  • Legal basis: your consent, collected through the cookie banner.
  • Retention: cookies 13 months at most; analytics data 14 months.

Security and spam prevention

  • Data: IP address, date and page requested.
  • Why: to protect the site and its forms against abuse.
  • Legal basis: legitimate interest.
  • Retention: a few minutes for rate limiting; 12 months at most for server logs.

What is made public

The name you enter may be shown with your contribution (author of a review, organiser of an event). Your email address is never published. Anything you type into the content itself (phone number, website, description) becomes public once the contribution is approved.

Recipients

Your data is never sold or rented. It is accessible to the VTTFrance.com team and to its technical service providers, within the limits of their tasks:

  • our hosting provider, located in the European Union;
  • our email delivery provider;
  • Google (Google Ireland Ltd) for advertising, analytics and consent collection, together with its advertising partners where you consent. Some data may be transferred to the United States under the EU–US Data Privacy Framework;
  • the OpenStreetMap Foundation (United Kingdom, recognised as adequate) and the unpkg.com content delivery network, which supply the map tiles and map library: your browser sends them your IP address when it displays a map.

Cookies

Cookies needed for the site to work are set without consent. The others are set only once you agree, and you can give, refuse or withdraw consent at any time through the "Cookie settings" link at the bottom of every page.

  • Anti-forgery token (csrf-token_…): protects forms. Necessary; deleted when the form is sent.
  • Session (PHPSESSID): shows the newsletter sign-up confirmation. Necessary; end of the browsing session.
  • Consent choices (FCCDCF, FCNEC, Google): remembers your preferences. Necessary; 13 months.
  • Analytics (_ga, _ga_*, Google Analytics): visit statistics. Requires consent; 13 months.
  • Advertising (__gads, __gpi, __eoi, IDE, Google AdSense): serving, frequency capping and measuring ads, and personalisation if you accept it. Requires consent; 13 months at most.

You can also manage your ad preferences in Google's ad settings.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, write to info@vttfrance.com or use the contact page; we reply within one month. You may also lodge a complaint with the French data protection authority (CNIL) or with the authority of your country of residence.

Minors

The site is not aimed specifically at children. Minors under 15 should not submit content or sign up for the newsletter without a parent's consent.

Changes

This policy may change; the date of the latest update is shown at the top of the page.