‘nosymitsio.org’ attaches great importance to the protection of your personal data. This privacy policy explains what data is collected on the nosymitsio.org website, why it is collected, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data Controller
nosymitsio.org
Email: contact@nosymitsio.org
Telephone: +261 32 05 699 01
2. Data Collected
a) Via the “Booking & Contact” form
When you submit a booking request, quote request or contact enquiry via the website, we collect the data you voluntarily provide:
- Full name
- Email address
- Telephone number
- Country of residence
- Name of your hotel in Nosy Be
- Preferred holiday package, number of nights, dates (and any flexibility)
- Number of guests (adults / children)
- Information regarding snorkelling equipment and interest in diving
- **Allergies or dietary requirements**, where applicable
- Any message or additional information you choose to provide
⚠️ Information relating to allergies or dietary requirements constitutes sensitive personal data within the meaning of Article 9 of the GDPR (health). It is collected only if you choose to provide it, solely for the purpose of tailoring your stay (meals, safety), and is not used for any commercial purposes.
b) Data collected automatically
Whilst you are browsing, certain technical data may be collected automatically via cookies and similar technologies (see section 6): IP address, browser type, pages viewed, duration of visit, audience statistics.
3. Purposes of processing
Your data is used to:
- Process and respond to your booking, quotation or enquiry requests
- Organise your stay under the best possible conditions (including taking into account any allergies or dietary requirements)
- Contact you again within the stated timeframe (24 hours)
- Compiling website traffic statistics (Google Analytics)
- Measuring the effectiveness of our social media marketing campaigns (Facebook Pixel)
No automated decision-making or profiling is carried out using your data.
4. Legal basis
- Performance of pre-contractual measures / the contract: processing your booking or quotation request
- Consent: setting of audience measurement and advertising tracking cookies (Google Analytics, Facebook Pixel), as well as for sensitive data (allergies/dietary requirements) which you provide voluntarily
- Legitimate interest: improving the website and our services
5. Recipients of the data
Your data is intended for [name of the association] and, where applicable, local service providers (accommodation, catering, excursions) strictly necessary for organising your stay in Nosy Mitsio.
This data may also be processed by our technical data processors:
- Hostinger International Ltd (website hosting) – Cyprus
- Google** (Google Analytics) – data may be transferred outside the EU
- Meta / Facebook (Facebook Pixel, Facebook page) – data may be transferred outside the EU
Your data is not sold, rented or disclosed to third parties for commercial purposes.
6. Cookies and trackers
The website uses cookies, including:
| Cookie type | Purpose | Retention period |
|---|---|---|
| Technical cookies | Website functionality (language, preferences) | Session-based or up to 13 months |
| Google Analytics | Traffic statistics | Up to 13 months |
| Facebook Pixel | Audience measurement, targeted advertising | Up to 13 months |
In accordance with the CNIL’s recommendations, cookies that are not strictly necessary for the website to function (Google Analytics, Facebook Pixel) are only set once your consent has been obtained via the cookie banner displayed on your first visit. You may change your preferences or withdraw your consent at any time via this banner or your browser settings.
*Note: if a cookie consent banner (CMP) has not yet been installed on the website, it must be implemented to comply with the GDPR and the CNIL’s guidelines, as soon as non-essential cookies (Analytics, Pixel) are set.*
7. Retention periods
- Data relating to a booking or quotation request: retained for the duration of the request’s processing and then, if no further action is taken, for a maximum of 3 years
- Data relating to an actual booking: for the period necessary to manage the customer relationship and to fulfil applicable accounting and tax obligations
- Sensitive data (allergies/dietary requirements): deleted at the end of the stay, unless there is a legal requirement to retain it
- Cookies: maximum 13 months
8. Security
[Name of the association] implements reasonable technical and organisational measures to protect your data against loss, unauthorised access, disclosure or destruction.
9. Your rights
In accordance with the GDPR and the French Data Protection Act, you have the following rights in relation to your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restriction of processing
- Right to data portability
- Right to set out instructions regarding the handling of your data after your death
To exercise these rights, you may contact us at: contact@nosymitsio.com, providing proof of your identity.
If, after contacting us, you feel that your rights have not been respected, you may lodge a complaint with the **CNIL** (Commission Nationale de l’Informatique et des Libertés): [www.cnil.fr](https://www.cnil.fr).
10. Transfers outside the European Union
Some of our service providers (Google, Meta) may transfer data outside the European Union, in particular to the United States. These transfers are governed by the European Commission’s standard contractual clauses or any other recognised mechanism ensuring an adequate level of protection.
11. Changes to the privacy policy
This privacy policy may be updated at any time, in particular to comply with any regulatory, technical or case-law developments. We encourage you to review it regularly.
12. Contact
If you have any questions regarding this privacy policy or the processing of your personal data:
nosymitsio.org
Email: contact@nosymitsio.org
13 July 2026