Privacy.

Terra Phi is a brand of Togezer SAS, which also operates the Terra Gaïa brand and its network of local agencies. Togezer SAS is the controller of your personal data. This policy applies to the data collected via the Terra Phi website and in connection with our services.

01About this privacy policy

As the controller of your personal data, Terra Phi wishes, through this privacy and cookie policy (« Privacy Policy »), to explain how we may collect, use and process the personal data (« Personal Data ») transmitted when the website(s) (the « Site ») or our services (our « Services ») are used by users, customers or prospects.

02How is personal data collected?

We may collect your Personal Data directly from you: when you book a trip with one of the member agencies of the Terra Gaïa network; when you communicate with our teams by email, or during our telephone conversations with our advisers.

We may also collect information appearing on your profile on a third-party social network when you download or interact with one of our applications on a social network site (LinkedIn, Facebook). To find out more about how your social network information may be obtained by us, please consult the terms of use of the relevant third-party social network.

03What personal data do we collect?

Personal Data is any information about a person from which that person can be identified directly or indirectly. The Personal Data we collect from users of the Site or from customers or prospects using our Services is as follows:

• your surname(s) and first name(s),
• your date of birth,
• your gender,
• your postal address,
• your email address,
• your telephone number(s),
• a copy of your identity document, only if you entrust us with the booking of your flights,
• your booking history,
• where applicable, special category data such as health data (disability, allergy or specific conditions) or data that may indirectly allow us to obtain information concerning the religion, beliefs or personal convictions of the persons concerned (in the case of dietary requirements),
• any other information you may provide when using the Site or our Services.

We may also collect Personal Data from third parties. When you use our Services, you have the option of providing the contact details of one or more other persons (other participants in the trip, a person to notify in an emergency, or persons who have taken part in a gift list) or for other events (for example, a wedding or a birthday). In doing so, you guarantee to the agencies of the Terra Gaïa network that the other persons whose data you provide are informed of this transmission concerning them and accept it.

04For what reasons do we collect personal data?

The processing carried out and the legal bases on which we collect your Personal Data are as follows:

• The building of a travel history in order to improve customer knowledge, within the limits of the retention periods referred to in article 8;
• The provision of access to the Site and access to your dedicated Customer Area to allow you, in particular, to consult your quotes and/or any information relating to your trips and to our Services;
• The performance of the Services (organisation of the trip, booking with our partners, drawing up your sales contract, monitoring the delivery of the services of your trip, handling any requests from you regarding your trip including after your return, in accordance with the legal limitation periods, etc.);
• The collection of your special category data solely for the purpose of organising your trip;
• The performance of statistical calculations concerning in particular the traffic to the Site;
• The retention of Personal Data in order to meet our legal obligations and manage requests for the disclosure of data from authorised authorities;
• The sending of marketing communications concerning our Services (such as newsletters) and any other documentation (in particular brochures) that you have requested in order to establish a commercial relationship;
• The communication of information relating to Terra Phi and its partners: news, products and services, commercial prospecting and personalised offers;
• The handling of complaints and claims in connection with the Services.

05Who are the recipients of your personal data?

Your Personal Data is intended for the departments of Terra Phi and the local network agencies concerned by your requests. We ensure that only duly authorised persons can access your Personal Data where necessary for the aforementioned purposes. Terra Phi undertakes not to transfer or sell Personal Data concerning you to non-partner third parties.

We may share your Personal Data with the following third parties in compliance with the applicable Legislation:

• with the member agencies of the Terra Gaïa network in order to provide you with the requested Services;
• with our commercial partners, in particular the providers of the booked services (hoteliers, carriers, activities, excursions, etc.) or the technical service providers (IT, hosting, email delivery, online payment provider, etc.). We take particular care to ensure that these third parties offer sufficient guarantees to ensure the protection and security of your Personal Data;
• with duly authorised French or foreign authorities (for example the tax administration or the CNIL), in particular in connection with legal proceedings or a request for the disclosure of information.

06Security of personal data

As the controller of your Personal Data, Terra Phi implements all the technical and organisational measures necessary to comply with the protection of your Personal Data and takes care to limit the quantity of data processed with regard to the purposes pursued. We have put in place procedures to deal with any suspected data security breach and we will notify you, as well as any competent supervisory authority, of a suspected breach where we are legally required to do so.

Nevertheless, the security of data transmissions over the Internet or of data storage systems cannot be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you think that the security of an account you have with us has been compromised), please inform us immediately by contacting us at the details below.

07Processing of data outside the European Union

We may transfer your Personal Data to countries located outside the European Economic Area (« EEA ») solely for the purposes described in this Privacy Policy. In the event of a transfer of Personal Data outside the EEA, we will take appropriate measures to ensure that the recipient protects your Personal Data adequately, in accordance with this Privacy Policy. These measures may include: (a) requesting your consent; (b) ensuring that an adequacy decision of the European Commission exists; (c) entering into a data transfer agreement compliant with the European Union's standard contractual clauses; or (d) entering into the standard contractual clauses published by the European Commission.

08For how long do we retain your personal data?

We will retain your Personal Data only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal or accounting requirements. We retain the following information for the periods indicated below:

• For prospects registered for the newsletter: 5 years from the date of the last contact between the prospect and Terra Phi;
• For prospects who requested a quote that was not followed up: 10 years from the date of the last contact;
• For customers: 15 years from the date of the last contact; 1 month after the return from the trip for copies of identity documents; 10 years for travel contracts, registration forms and invoices (legal obligation); 10 years after the return from the trip in the event of personal injury related to the trip (legal obligation); in the event of legal proceedings, until the complete conclusion of the proceedings.

After the set periods, the data is either deleted or retained after being anonymised, in particular for statistical use purposes. Deletion or anonymisation are irreversible operations.

09Rights of data subjects

As a data subject, you have various rights, subject to certain conditions in accordance with the GDPR and the applicable national laws:

• the right of access: to obtain confirmation as to whether or not your Personal Data is being processed, and to request a copy of it;
• the right to rectification: to have your inaccurate or incomplete Personal Data corrected;
• the right to erasure (« right to be forgotten »): to request the deletion of your Personal Data, subject to the legal exceptions;
• the right to restriction of processing: to « block » the use of your Personal Data in certain cases;
• the right to data portability: to obtain and reuse certain of your Personal Data in a structured format;
• the right to object: to object to certain processing, and at any time to direct marketing;
• the right to withdraw your consent at any time, without affecting the lawfulness of the prior processing;
• the right to set out guidelines on the fate of your data after your death.

If you have any questions or wish to exercise one of your rights, please send an email to contact@terra-phi.com or a postal letter to: Togezer SAS (Terra Phi), 46 avenue Paul Dalbret, 13013 Marseille. The exercise of your rights incurs no charge; proof of identity may be requested from you. If you are not satisfied with our response, you may lodge a complaint with the CNIL (www.cnil.fr), the competent supervisory authority.

10Third-party sites

The Site may contain links to other websites operated by third parties. This Privacy Policy applies only to the Personal Data collected by Terra Phi. We are not responsible for the Personal Data that third parties may collect on their own sites or applications. We recommend that you read carefully the privacy policy of each site you visit.

11Cookies and audience measurement

The Site has been designed with respect for your privacy. It places no advertising cookie, no marketing tracker and does not track your browsing across different sites. The only information stored or processed is as follows:

• Technical and operational data: strictly necessary for the operation of the Site and for remembering your preferences (for example your choice of light or dark display). It is stored locally in your browser and does not require consent.
• Privacy-friendly audience measurement: we use a statistics tool without cookies and without personal data, which produces anonymous and aggregated traffic measurements (page views, general origin), without identifying visitors or cross-referencing their browsing between sites.

As this audience measurement is anonymous and cookie-free, it does not require your prior consent and no cookie consent banner is necessary. You may at any time configure your browser to block the local storage of data; blocking some of this information may however limit the use of the Site.

12Contact details

For any question relating to this Privacy Policy, you may contact us by email at contact@terra-phi.com or by postal letter at Togezer SAS (Terra Phi), 46 avenue Paul Dalbret, 13013 Marseille.

13Amendment of this privacy policy

Terra Phi may amend this Privacy Policy periodically in order to reflect changes in its practices. The last-updated date appearing above is then updated. We invite you to consult this Privacy Policy regularly.