This page explains how Les Compagnons du Sentier uses information submitted through its website and the data needed to organise walks.
Who is responsible for your data?
Les Compagnons du Sentier, 3 rue du Colonel Lefèvre, 61700 Champsecret, France. For questions or requests about your data: contact@lesentier.org.
When you contact us
We use your email address, message and the name you choose to provide to answer your enquiry and follow up our correspondence. An email address is needed to receive a reply; providing your name is optional. Please share only relevant information and avoid sensitive information, particularly medical data.
For general enquiries, processing is based on the association’s legitimate interest in responding to people who contact it. Messages are sent to contact@lesentier.org and handled by Valérie or Bertrand. Providers needed to run the website and email service also participate in their transmission.
Correspondence about a straightforward enquiry is retained for 12 months after the last exchange. If an enquiry becomes a booking, billing or dispute file, the necessary information follows the retention rules for that file.
The contact form does not subscribe you to any newsletter or mailing list.
When you book a walk
Online bookings are made through HelloAsso. The association uses the information needed to organise your walk: identity and contact details, date of birth, chosen departure, options and payment status. This information is used to prepare the walk, contact you and manage your booking.
The association’s coordinators and authorised members of the accompanying team use the preparation spreadsheets. Preparing and managing bookings is based on providing the service requested; documents subject to a legal retention obligation follow the corresponding rules.
The association has adopted the following retention rule for data in walker preparation and follow-up spreadsheets: until the annual review, and no later than 12 months after the end of the relevant walk. After this period, it must be deleted or anonymised, except for information needed in supporting documents that must be retained.
Only documents required by a legal retention obligation or needed to deal with a complaint or dispute may be retained beyond this period. Retention must be limited to the period required by the relevant obligation or necessary to exercise or defend a right, taking account of applicable limitation periods. These documents must be kept separately from the preparation spreadsheets, with access limited to people who need them. Historical statistics may be retained on a lasting basis in this form only if they are anonymous and aggregated, so that no individual can be identified.
Online services and recipients
Webdomain hosts the website. HelloAsso handles online bookings and payments. The association uses Gmail for email, Google Sheets for preparation spreadsheets and Google Apps Script for certain automations and synchronisations.
Some pages include Google Maps, YouTube videos, Polarsteps travel routes, HelloAsso forms or a subscription form for the newsletter published on Substack. The contact form uses Google reCAPTCHA to limit automated submissions. Google Analytics is used for audience measurement.
If you choose to join a WhatsApp group, other members may see your telephone number and profile information according to WhatsApp’s rules and settings. Sending a contact enquiry does not sign you up to a group or newsletter.
These providers are involved depending on the service used and the information sent to it. Some processing is carried out for their own purposes and under their own rules, described in their privacy information: HelloAsso, Google, Substack, Polarsteps and WhatsApp. The arrangements specific to reCAPTCHA are described in the Google Cloud service documentation.
Processing and transfers outside the European Economic Area
Using some of these services may involve processing data outside the European Economic Area, particularly in the United States. The conditions and safeguards depend on the provider and the service concerned. The hosting provider’s contact addresses do not indicate the physical location of its servers.
Google, Substack, WhatsApp and HelloAsso describe in their public information the conditions of their international transfers and the mechanisms they state they rely on, as applicable: adequacy decisions, the EU–US Data Privacy Framework for the organisations concerned, or standard contractual clauses. See Google’s information on transfers and the providers’ privacy policies linked above.
You can write to contact@lesentier.org to request more information about transfers involving your data and the applicable safeguards.
Cookies and embedded content
Loading third-party services or content may involve sending technical data, such as an IP address and browser information, and using cookies or other trackers. The presence and lifespan of these trackers depend on the service, its settings and the browser.
For information about the declared services and their purposes, see the cookie policy. The providers’ own privacy information supplements this overview.
Your rights
Depending on the processing and the conditions set out in the law, you can request access, correction, deletion or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies where provided by law. Where processing relies on consent, you can withdraw it for the future.
Write to contact@lesentier.org or to the association’s postal address, explaining your request. You can also lodge a complaint with the CNIL, the French data protection authority.