Privacy Policy

1. Introduction

AGEM Excursions is committed to protecting the privacy of the users of its website. This privacy policy describes how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the amended French Data Protection Act (loi Informatique et Libertés) of January 6, 1978.

2. Data controller

• Controller: Entreprise individuelle Nathalie One (trading name: AGEM Excursions)
• Address: 749 rue Epineux, 97230 Sainte-Marie, Martinique
• Email: hello@agem-excursions.mq
• Phone: +596 696 08 40 82

3. Data collected

We collect the following data:

• Identification data: last name, first name, email address, phone number; for a business booking, company name, SIRET number and billing address
• Booking data: requested date, boat trip or flight chosen, number of participants, options chosen, specific remarks. For ultralight flights, the passenger's weight and height are also collected, solely to meet the safety requirements set by the operator
• Technical data: IP address and connection logs, collected by our host for the security and proper operation of the site
• Traffic data: pages viewed, referring site, country, type of device and browser, page load times. They are collected on the public site by Cloudflare Web Analytics, without cookies or identifiers, and are used only to produce aggregate statistics
• Payment data: processed directly by Stripe (we do not store any bank card data)

4. Purposes of processing

Your data is collected to:

• Process and confirm your boat trip and flight bookings
• Contact you about your booking
• Answer your requests sent through the contact form
• Send you marketing communications (with your consent)
• Measure traffic to the public site and the speed of its pages, as aggregate statistics
• Comply with our legal and accounting obligations

5. Legal basis for processing

• Performance of a contract: processing of bookings and payments
• Consent: sending marketing communications
• Legitimate interest: site security, fraud prevention and measurement of traffic to the public site
• Legal obligation: retention of accounting data

6. Retention period

• Booking data: 3 years after the last service
• Contact data: 3 years after the last contact
• Accounting data: 10 years (legal obligation)
• Marketing data: 3 years from the last contact
• Cookies: the length of the session (strictly necessary cookies)
• Traffic statistics: available for 6 months

7. Recipients of the data

Your data may be shared with the following service providers, strictly for the purposes described above:

• Stripe: for secure payment processing (PCI DSS certified)
• Cloudflare, Inc.: for hosting and serving the site, detecting and diagnosing its technical errors from the server logs, and measuring traffic to the public site (Cloudflare Web Analytics): without cookies, profiling or cross-site tracking
• Resend (Resend, Inc.): for delivering transactional emails (booking confirmations and follow-up) and, where applicable, our marketing communications
• Dtek: air partner operating the flights under the name WanakAéro, which receives your contact details to organize the flights booked through the site

No data is sold or rented to third parties.

8. Data location and hosting

Your data is hosted and processed within the European Union. Our technical service providers (Cloudflare, Stripe, Resend), although headquartered in the United States, are configured to process the site's data in their infrastructure located in the European Union. Should a transfer outside the European Union nevertheless occur, it would be governed by appropriate safeguards within the meaning of the GDPR (standard contractual clauses of the European Commission or an adequacy decision).

9. Your rights

Under the GDPR, you have the following rights over your personal data:

• Right of access: obtain a copy of your data
• Right to rectification: correct your inaccurate data
• Right to erasure: request the deletion of your data
• Right to restriction: restrict the processing of your data
• Right to data portability: receive your data in a structured format
• Right to object: object to the processing of your data

To exercise these rights, contact us at: hello@agem-excursions.mq. We reply within one month of receiving your request.

In the event of a dispute, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés, the French data protection authority): www.cnil.fr

10. Cookies

The public site sets no audience measurement, tracking or advertising cookies, and its traffic measurement (Cloudflare Web Analytics) stores nothing on your device: no consent is therefore required to browse it. Only strictly necessary cookies are used, in the following cases:

• Contact form: the Cloudflare Turnstile anti-bot service may be called to check that the request is not automated, without advertising tracking or profiling
• Payment: when you pay, you are redirected to Stripe's secure pages, which use their own cookies strictly necessary to secure the transaction and prevent fraud

You can delete or block these cookies at any time in your browser settings, bearing in mind that this may affect how the site works.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration. The site uses the HTTPS protocol to encrypt data exchanges. Payments are processed by Stripe, which is PCI DSS certified.