Privacy Policy (EU)
Last updated: August 4, 2025

This Privacy Policy applies to citizens and legal permanent residents of the European Economic Area and Switzerland.


1. Introduction

At D-Day Tours in Normandy (“we”, “us”, or “our”), accessible via https://www.ddaytoursinnormandy.com, we are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your personal information when you visit or interact with our website.


2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity and contact information (e.g., name, email address, phone number)
  • Booking and payment information (e.g., PayPal details, transaction history)
  • Technical data (e.g., IP address, browser type, device information)
  • Usage data (e.g., pages visited, time spent, links clicked)
  • Communication data (e.g., messages you send via contact forms or email)

We collect this data through direct interactions (e.g., contact forms), automated technologies (e.g., cookies and scripts), and third-party services.


3. How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your inquiries and provide customer support
  • To process bookings and payments
  • To improve website functionality and user experience
  • To comply with legal obligations
  • For analytics and marketing purposes (with your consent)
  • To send occasional newsletters or promotional content (only if you opt in)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Your consent (e.g., for newsletter subscriptions or analytics cookies)
  • Contractual necessity (e.g., to fulfill tour bookings)
  • Legal obligations (e.g., for accounting and tax purposes)
  • Legitimate interests (e.g., to improve our services, ensure security)

5. Sharing of Personal Data

We may share your data with:

  • Payment processors (e.g., PayPal)
  • Marketing and analytics providers (e.g., Google Analytics, YouTube, Facebook)
  • IT service providers who help manage our website
  • Government authorities, if legally required

We do not sell your personal data to third parties.


6. Third-Party Services and International Transfers

Some of our third-party partners (such as Facebook, Google, and PayPal) may process your data outside the EEA, including in the United States. We ensure that such transfers are made in compliance with GDPR safeguards, such as standard contractual clauses.

Please consult the privacy policies of these third parties for more detail on how they handle your data.


7. Retention of Data

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by applicable laws (e.g., for tax and legal obligations).


8. Your Rights

You have the following rights regarding your personal data:

  • Right to access – Request access to the data we hold about you
  • Right to rectification – Request correction of inaccurate or incomplete data
  • Right to erasure – Request deletion of your data, where applicable
  • Right to restrict processing – Limit how we use your data
  • Right to object – Object to data processing under certain conditions
  • Right to data portability – Receive your data in a transferable format
  • Right to withdraw consent – Withdraw previously given consent at any time

To exercise any of your rights, please contact us using the details provided below.


9. Security

We use appropriate technical and organizational measures to protect your data against unauthorized access, misuse, loss, or alteration.


10. Cookies

For details on how we use cookies and similar technologies, please refer to our Cookie Policy.


11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can reach us at:

REMEMBER
Hérouville-Saint-Clair, France
Email: faisonsle@orange.fr
Website: https://www.ddaytoursinnormandy.com

You also have the right to lodge a complaint with your national Data Protection Authority if you believe your rights under data protection laws have been violated.


This Privacy Policy was synchronized with GDPR guidelines as of August 4, 2025.