Privacy policy

The purpose of this privacy policy (hereinafter the “Policy”) is to inform you of the conditions under which your personal data (hereinafter “Personal Data”) is collected and processed when you use the website https://skycenter-marseille.com (hereinafter the “Site”), in accordance with Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data (hereinafter the “Regulation”).
The applicable version of the Policy is the one published on the Site at the time of your Browse. It may be modified at any time, notably to take into account legal, regulatory, or technical developments.
For any questions related to this Policy or, more generally, to the management of your Personal Data, you can contact us at the following address: dpo@skycenter-marseille.com

Personal Data Collected and Processed by Sky Center

By using our Site, you may be required to transmit information that allows us to identify you, which constitutes Personal Data. This may notably occur when you make an information request, a ticket reservation, or when you submit an application via the forms provided for this purpose.
The Personal Data that Sky Center may collect and process includes:

Identification data: name, first name, email address, phone number
Banking data: as part of a purchase or reservation
Professional data: information relating to your education, professional background, diplomas, CV, cover letter, etc.
Browse data: such as connection date and time, IP address, browser type and language, pages viewed, user area login identifiers.

If you use social network login features (like Facebook or LinkedIn), we may access certain information from your profile, such as your name, first name, email address, profile picture, and number of friends, in accordance with the terms of use of the social network concerned. We may also collect data when you interact with social features integrated into our Site, such as “Like” buttons.

Joint Processing with a Partner

As part of certain marketing campaigns, Sky Center may collaborate with its parent company or a commercial partner. In this case, both entities may be considered Joint Controllers, and a co-responsibility agreement is established to define their respective obligations.

Sensitive Data

Sky Center ne collecte ni ne traite de données sensibles au sens du Règlement.

Purposes, Legal Bases for Processing, and Retention Periods

Sky Center collects your Personal Data only for specific, explicit, and legitimate purposes. Each processing is based on one of the legal bases provided by the General Data Protection Regulation (GDPR).
The table below transparently presents the purposes of the processing, their legal bases, and the applicable retention periods:

Purpose of Processing	Legal Basis	Retention Period
Provision of services (online booking, customer relationship management)	Performance of contract	5 years after the end of the contractual relationship; 10 years for invoices (Article L.123-22 of the Commercial Code)
Improvement of service quality	Legitimate interest	36 months from collection or last contact
Response to requests for private event or group visit bookings	Legitimate interest or consent	For the duration of the contract or, for prospects, until withdrawal of consent or 36 months after the last contact
Sending promotional emails and data sharing with the parent company for marketing purposes	Consent	For the duration of the contract or, for prospects, until withdrawal of consent or 36 months after the last contact
Processing of job applications	Legitimate interest or pre-contractual measures	Successful candidates: during the recruitment process, then 5 years after the end of the employment contract<br>- Unsuccessful candidates: during the process, then 24 months with consent
Newsletter subscription management	Consent	3 years after the last contact, unless prior objection
Site maintenance and technical improvement (technical cookies)	Legitimate interest	6 months for connection logs
Audience analysis and advertising (measurement and advertising cookies)	Consent	25 months for audience measurement data; 13 months for other cookies

Communication of Personal Data

Sky Center undertakes to limit access to your Personal Data to only those persons authorized to process them, namely:

Sky Center employees and those of its parent company, World Trade Center Marseille Provence
IT service providers in charge of hosting and maintaining the website
The online payment service provider
The communication agency in charge of site management and maintenance and marketing strategy
The editor of the emailing solution used for newsletter management
The editors of technical solutions used on the site, notably for cookie and consent management.

Sky Center never discloses your Personal Data to third parties, except in the following cases:

In case of legal obligation or judicial requisition
If disclosure is necessary to comply with contractual, legal, or regulatory obligations
If you request or expressly consent to it.

The third parties concerned only receive the data strictly necessary for the performance of their missions. They are contractually bound to respect confidentiality, security, and applicable regulations regarding the protection of personal data, and to act only on Sky Center’s instructions.

Transfer of Personal Data Outside the European Union

In the event that Personal Data is transferred outside the European Union, Sky Center undertakes to implement all appropriate safeguards to ensure a level of protection in accordance with the GDPR, notably:

By transferring data to a country recognized as adequate by the European Commission
By framing the transfer with Standard Contractual Clauses approved by the European Commission
By relying on binding corporate rules validated by the competent authorities
Or by implementing any other guarantee provided for in Article 46 of the Regulation.

You can obtain a copy or extract of these safeguards by contacting us at the address mentioned in this Policy.

Security of Personal Data

Sky Center implements appropriate technical and organizational measures to guarantee the security, integrity, and confidentiality of your Personal Data, and to prevent any unauthorized access, loss, alteration, or disclosure.
These measures notably include:

Confidentiality commitments for employees and service providers
The use of encryption and anonymization techniques
The implementation of physical and logical security devices.

Your Rights

In accordance with the GDPR, you have the following rights:

Right of access and information: to be clearly informed about the use of your data and to obtain a copy
Right to rectification: to correct or complete your inaccurate or incomplete personal data
Right to erasure: to request the deletion of your data, unless there is a legal obligation to retain it
Right to restriction of processing: to temporarily restrict the use of your data in certain cases
Right to data portability: to receive your data in a structured format and transmit it to a third party
Right to object: to object at any time to certain processing, notably for prospecting purposes
Right to withdraw your consent: at any time, when processing is based on your consent
Right to lodge a complaint: with the competent supervisory authority (in France, the CNIL)
Right to define post-mortem directives: concerning the fate of your data after your death.

Exercising Your Rights

You can exercise your rights: By email, by contacting the data controller, at the following address: dpo@skycenter-marseille.com By postal mail to:
Sky Center – 2 Bis Bd Euromediterranee Quai D’arenc 13002 Marseille

Your request will be processed within one month, renewable if necessary. Proof of identity may be requested to verify your identity; this document will be kept only for the time necessary to process your request.

If you believe that your rights are not being respected, you can contact the Commission Nationale de l’Informatique et des Libertés (CNIL) via www.cnil.fr or by mail to: CNIL – Service des Plaintes, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

Cookies

Our site uses cookies to improve your Browse experience. You can manage your preferences via our cookie banner or your browser settings.

Security

We implement appropriate technical and organizational measures to protect your data against any unauthorized access, loss, or disclosure.

Modifications

This policy may be updated at any time. We invite you to consult it regularly