Privacy Policy

Last updated: April 18, 2026

Parc Aventure Réallon SASU (hereinafter “we” or “the Park”) places great importance on the protection of your personal data. The purpose of this privacy policy is to inform you about how we collect, use, and protect your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act No. 78-17 of January 6, 1978, known as the “Informatique et Libertés” Act.

1. Data Controller

The controller of your personal data is:

2. Data Collected and Purposes

We collect your personal data for the following purposes:

2.1 Pre-booking Form

When you fill out the pre-booking form on our website, we collect the following information:

• Name: Applicant's identification
• Email address: so we can contact you to confirm or cancel your reservation
• Preferred date: to schedule your visit
• Number of people: to manage capacity

Legal basis: The performance of pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR).

2.2 Customer Relationship Management

We may use your contact information to:

• Respond to your questions or complaints;
• To notify you of changes to your reservation (schedule changes, weather-related cancellations, etc.).

Legal basis: Legitimate interest (Article 6(1)(f) of the GDPR) to ensure the smooth provision of services and to respond to your requests.

2.3 Waiting list / Email sign-up (pop-up)

When you enter your email address in the waiting list sign-up window that appears during your visit, we collect:

• Email address: to notify you on the day the park opens

The sole purpose is to send you a single email when the park opens to the public (summer 2026), in accordance with the commitment stated in the form (“One email only, on opening day”).

Legal basis: Consent (Article 6(1)(a) of the GDPR), given through the active act of submitting the form after receiving clear prior information regarding the sole purpose.

Retention period: until the park reopens plus a maximum of 6 months, after which your address will be removed from our mailing service provider (Resend) unless you have explicitly requested to receive future updates.

Unsubscribe: You can unsubscribe at any time by clicking the unsubscribe link in the email or by sending an email to contact@reallon-aventure.fr.

2.4 Contact Form

When you fill out the contact form, we collect the following information: name, phone number, email address, subject, and message.

Purpose: to respond to you and process your request.

Legal basis: performance of pre-contractual measures or legitimate interest in responding to your inquiry (Article 6(1)(b) and 6(1)(f) of the GDPR).

2.5 Legal Obligations

Certain data may be retained to meet our legal obligations (accounting, dispute resolution, and safety of sports activities as defined by the Sports Code).

Legal basis: Legal obligation (Article 6.1.c of the GDPR).

3. Whether data is required or optional

The information requested in the pre-booking form is required to process your request. If you do not provide it, we will not be able to process your pre-booking.

4. Shelf life

Your personal data is retained for the following periods:

5. Recipients of the data

Your personal data is intended for authorized personnel at Parc Aventure Réallon SASU, strictly limited to what is necessary for the performance of their duties.

Your data is not shared with any third parties for commercial or advertising purposes.

They may be disclosed to the following recipients, strictly within the scope of their duties:

• Website host: Netlify, Inc. (United States) -- data submitted via the form passes through the host's servers. Netlify complies with the data transfer mechanisms governed by the GDPR (standard contractual clauses);
• Email delivery service: Resend, Inc. (United States) — used to send confirmation emails after a contact form is submitted or a user signs up for the waiting list. Resend retains delivery logs for 3 days and then automatically deletes them. Data transfers are governed by standard contractual clauses;
• Mapping service: OpenStreetMap France (European Union, Île-de-France) -- the map tiles in the Contact section are provided by OSM France. No personal data is transmitted beyond the IP address required to load the tiles;
• Judicial or administrative authorities: only in response to a legal request.

No data is sold, rented, or transferred to third parties.

6. Data transfers outside the European Union

Website hosting (Netlify) and the sending of confirmation emails (Resend) are provided by U.S. companies. Some data may be transferred via servers located outside the European Union. These transfers are governed by the European Commission’s standard contractual clauses, in accordance with Articles 46 et seq. of the GDPR, ensuring an adequate level of protection for your data.

7. Cookies and trackers

Our website does not set any third-party cookies and does not currently use any audience analytics tools. Therefore, no cookie consent banner is required.

Technical on-site storage

The site uses localStorage cookies in your browser for a single technical convenience purpose: to remember that you have closed the waiting list registration window so that it is not displayed again.

• Technical key: popup_email_dismissed
• Purpose: To prevent the registration window from reappearing after you close it
• Duration: until you manually delete them (by clearing your browser cache)
• Stored data: no personal data, just a "1" flag

This information is provided in accordance with Article 82 of the French Data Protection Act. Since this tracker is strictly necessary for the user experience (UX) purpose selected by the user (explicitly closing the window), it does not require prior consent.

8. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights regarding your personal data:

• Right of access (Article 15 of the GDPR): to obtain confirmation that your data is being processed and to receive a copy of it.
• Right to rectification (Article 16 of the GDPR): request the correction of inaccurate or incomplete data.
• Right to erasure (Article 17 of the GDPR): Request the deletion of your data, subject to any legal retention obligations.
• Right to restriction of processing (Article 18 of the GDPR): request the temporary suspension of the processing of your data.
• Right to data portability (Article 20 of the GDPR): to receive your data in a structured, commonly used, and machine-readable format.
• Right to object (Article 21 of the GDPR): You have the right to object to the processing of your data on legitimate grounds.

How to exercise your rights

You can exercise these rights by contacting us:

Your request must be accompanied by proof of identity if there is reasonable doubt regarding your identity. We will respond within one month of receiving your request. This period may be extended by an additional two months in the case of complex or numerous requests.

9. Contact -- Data Protection Officer

If you have any questions regarding the protection of your personal data or wish to exercise your rights, please contact:

10. Complaint to the CNIL

If, after contacting us, you believe that your data protection rights have not been respected, you have the right to file a complaint with the French Data Protection Authority (CNIL):

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, destruction, or alteration. These measures include, in particular:

• Encryption of data transmission via the HTTPS protocol (SSL/TLS certificate);
• Restricted access to data is limited to authorized personnel only;
• Secure hosting provided by a professional service provider.

12. Changes to the Privacy Policy

We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page along with an updated date. We encourage you to check this page regularly to stay informed about our data protection practices.