Data Protection Policy

Protection de vos données personnelles

1. Preamble and Data Controller

This service is implemented by the Office de l'Environnement de la Corse (OEC), a Public Industrial and Commercial Establishment (EPIC). The OEC is committed to ensuring that the collection and processing of your data comply with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Purpose and Legal Basis

Data is collected for the management of maritime passage authorisations within the perimeter of the UNESCO-listed Gulf of Porto site (Calanques de Piana, Gulf of Girolata, Scandola Reserve).

Legal Basis: The processing is necessary for the performance of a task carried out in the public interest (environmental protection, Environment Code) entrusted to the OEC. :

3. Collected Data and Retention Period

We limit the collection to strictly necessary data:

  • Identity and Vessel data (Surname, First Name, Email, Registration): Retained for the duration of the current tourist season + 3 years (for evidential purposes and management of re-offending).
  • Technical connection logs: Retained for 1 year (Legal security obligation).
  • Statistical data (Anonymised): Retained for a maximum of 13 months.

4. Recipients and Data Sovereignty

Your data is processed by authorised OEC agents. We guarantee its storage within the European Union: Database: Supabase (AWS eu-west-3 Paris - GDPR Certified). Hosting: Vercel.

No personal data transfers are made outside the European Union. No data is resold.

5. Your Rights and Remedies

In accordance with the GDPR, you have a right of access, rectification, erasure, and objection for legitimate grounds.

Exercise your rights: Contact our DPO at DPD@oec.fr. :

Complaint: If you believe, after having contacted us, that your rights are not being respected, you may lodge a complaint with the CNIL (cnil.fr). :

6. Management of Cookies and Trackers

  • Essential Cookies (Technical): Indispensable for operation (session, security). They cannot be deactivated.
  • Functional Cookies: To remember your preferences (language). Activated only with your consent.
  • Sovereign Audience Measurement: Statistics are managed by an internal OEC solution, without third-party trackers (such as Google). We do not store your full IP address. This data is used solely to monitor traffic to the protected site.

7. Use of Google Data (OAuth)

To facilitate your access to the service, the Label OEC - E Sintinelle portal allows authentication via Google OAuth. Here are the details regarding this processing:

  • Data Accessed: We exclusively access your email address, surname, first name, and profile picture as registered on your Google account.
  • Purpose of Use: This data is used solely to create and secure your access to the portal, to pre-fill your application form (UX), and to verify your identity during the SIRET check.
  • Storage and Sharing: Your data is securely stored in our database (EU). No Google data is shared with third parties or used for advertising purposes.