General data protection regulation

This Privacy Policy documents the processing of personal data collected via the website https://skipass.alpedhuez.com by SATA Group, whose registered office is located at Rue du Pic Blanc, 38750 Alpe d’Huez, in accordance with the provisions of French Data Protection Act No. 78-17 of January 6, 1978 (as amended, known as the “Loi Informatique et Libertés” or “LIL”) and the General Data Protection Regulation (GDPR) No. 2016/679.

SATA Group collects your personal data when you visit the website https://skipass.alpedhuez.com. As such, SATA Group acts as the data controller for your personal data.

SATA Group is committed to limiting the collection of personal data to what is strictly necessary (data minimization principle).

SECTION 1 – What Types of Personal Data Do We Collect and for What Purposes?

1 – Cookies (Axeptio)

To improve the interactivity of the website and our services, cookies are placed on your computer, mobile device, or tablet. You can technically block them using your browser settings, but this may degrade your experience on the site. Additionally, you have the option to opt out of audience measurement trackers (Facebook Pixel, Google Ads, Google Analytics, Xandr, YouTube, Google Marketing Platform, Hotjar). However, you cannot opt out of strictly necessary cookies that are essential for the website’s operation and routine administrative tasks via the cookie management window.

 

2 – Account Creation

We collect the following data: Email, Password, Title (Mr./Ms.), First name, Last name, Date of birth, Address, Additional address (optional), Postal code, City, Country, Mobile phone number (optional)

 

3 – Purchases

When you purchase a pass or service on our website, we collect the following data:

  • Type of pass: Ski (daily, seasonal, etc.), pedestrian pass, mountain biking pass, activities (summer/winter), or combined pass (e.g., ski pass + activity such as sledding or paragliding).
  • Purchase history
  • Associated options and services: Ski insurance, luggage storage, ski locker rental.
  • Payment method: MasterCard, VISA, CB, American Express, Alma.
  • Benefits and discounts: Applied promo codes, discount details (e.g., early bird rate, group discount).
  • Physical support: Purchase or recharge of a rechargeable card.
  • For seasonal, annual, or Supernova passes, we require an ID document (national ID card or passport) and a photo to validate your subscription.

 

5 – Newsletters

SATA Group uses your data to send you personalized newsletters and commercial offers (ski passes, activities, promotions). Below is the mandatory information in accordance with the General Data Protection Regulation (GDPR):

Data Collected:
To send you tailored communications, we collect the following information:

  • Identity: First name, last name.
  • Contact details: Email, phone number, postal address.
  • Preferences: Commercial or informational preferences (e.g., types of passes, desired activities, or information).

Source of Data:
Your data may be collected:

  • After your first purchase: Your information is automatically recorded to offer you tailored promotions.

Purposes of Processing: Your data is used to:

  • Send you personalized newsletters and offers (ski passes, activities, promotions).
  • Adapt our communications based on your declared preferences.
  • Analyze the performance of our campaigns (open rates, clicks) to improve our services.

 

6 – Management of Reservations for Access to Pic Blanc (“Direct au Pic”)

  • First name, last name (holders and companions)
  • Reserved date and time
  • Email
  • Rechargeable card number

 

7 – Contact Form

The SATA Group contact form allows users to submit a complaint, question, or suggestion regarding the Alpe d’Huez ski area or the passes offered. The data is processed solely to respond to the user’s request, in accordance with SATA Group’s Privacy Policy. Data Collected:

  • Type of request: Complaint (with a mention of the one-month deadline for complaints), question, or suggestion.
  • Identity: First name, last name, address (street, postal code, city, country), phone number (optional), email.
  • Status: Indication of whether the user is a customer of the ski area (yes/no).
  • Request details: Date of the event (if applicable), description of the complaint, question, or suggestion.
  • Attachments: Supporting documents (proof of purchase, photo, reservation confirmation) in PDF, JPG, or PNG format (max size: 5 MB).

ECTION 2 – What Is the Legal Basis for Our Data Processing?

We collect and process your personal data in compliance with regulations and only under the following legal bases:

  • When you provide us with personal information via the contact form, reservation forms, audience measurement cookies, or for various bookings, you consent to us collecting and using this data solely for the purposes detailed in Section 1.

  • When it is necessary to safeguard our legitimate interests (functional cookies, data specific to the use of ski lifts).

  • When it is necessary for the performance of a contract between you and SATA Group in the context of purchasing a service or product.

SECTION 3 – How Long Do We Retain Your Personal Data?

SATA Group retains your personal data only for a reasonably necessary period:

  • Customer satisfaction surveys and studies: Data is retained for 3 years from the last customer contact or 2 years from the account closure by the customer, or until you exercise your right to erasure.

  • Contact form: Data is retained for 5 years after the request is closed.

  • User navigation tracking: Cookie consent is valid for 6 months, and data is retained for 2 years or until you withdraw consent and/or exercise your right to erasure.

  • Newsletter: Your data is retained as long as you are subscribed to our newsletters. After your first purchase, your data is recorded to personalize our offers. If you unsubscribe, your data is deleted within 30 days, unless you are also a SATA Group customer (in which case certain data may be retained for other purposes, such as account management).

  • Billing data: Retained for 10 years from the invoice date.

  • Bank details: Used for deferred payments are destroyed once the payment is processed.

  • Customer accounts: Inactive accounts are deleted 3 years after the last activity on the account or upon your request for deletion.

SECTION 4 – Who Do We Share Your Data With?

Your personal data may be shared with the following recipients, in addition to the various SATA Group services:

  • Internal SATA Group services
  • Third-party service providers necessary for delivering the services offered by SATA Group (cookie providers, IT service providers, etc.)

We use Brevo (formerly Sendinblue), an ISO 27001-certified platform, to manage our email communications. Brevo acts as a data processor in compliance with GDPR. Your data is stored on secure servers located within the European Union.

We do not sell or rent your personal data to third parties under any circumstances, and no data is transferred outside the European Union.

SECTION 5 – What Are Your Rights?

We guarantee you the right to:

  • Access the personal information we hold about you,
  • Request that this information be corrected, restricted, or deleted,
  • Request a copy of your personal data, or
  • Object to the processing of your data.

We have appointed a Data Protection Officer (DPO) whom you can contact for any questions regarding the processing of your personal data and to exercise your rights at the following addresses:

You can exercise these rights by contacting SATA Group:

  • By email: dpo@sataski.com
  • By postal mail:
    Alpe d’Huez vacances, SATA Group Rue du Pic Blanc, 38750 Alpe d’Huez, France

For any request or information regarding the exercise of your rights, you must provide your first and last name. We will contact you to obtain further details and, if necessary, proof of identity (which will be destroyed once your request is processed). It is essential to clearly specify the right you wish to exercise, as well as your email or postal address so we can respond to you.

We will respond to your request within one month, unless there are exceptional circumstances.

SECTION 6 – Complaints

You retain the right to file a complaint with the supervisory authority (CNIL):

SECTION 7 – Changes to the Privacy Policy

SATA Group may modify or update this Privacy Policy when necessary to reflect changes in applicable laws, regulations, or practices. Therefore, we encourage you to review it periodically.

For any questions regarding this Privacy Policy, you can contact us by email at: dpo@sataski.com