Privacy

Privacy policy

This policy informs you how we collect, use and protect your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and French data protection law.

Last updated: 11 May 2026

1. Data controller

The controller of your data is:

  • Demela Group
  • 200 rue de la Croix-Nivert, 75015 Paris, France
  • SIREN: 914 159 736
  • Email: hello@grandretourdiaspora.com

2. Data collected

We collect only data strictly necessary for the purposes below:

  • Identification data: surname, first name, title.
  • Contact data: email address, phone number, country of residence.
  • Request-related data: pass type, motivations, optional professional information.
  • Technical data: IP address, browser type, pages viewed, visit duration (via cookies, subject to your consent).

3. Purposes and legal bases

  • Process your booking or contact request — legal basis: performance of pre-contractual measures at your request (Art. 6.1.b GDPR).
  • Manage the customer relationship and file follow-up — legal basis: contract performance (Art. 6.1.b GDPR).
  • Send you information about the event — legal basis: legitimate interest in informing prospects (Art. 6.1.f GDPR).
  • Measure site audience and improve content — legal basis: your prior consent (Art. 6.1.a GDPR).
  • Comply with legal and tax obligations — legal basis: legal obligation (Art. 6.1.c GDPR).

4. Recipients

Your data is intended for authorized internal services of Demela Group / Esther Boua Consulting. It may also be shared with:

None of your data is sold or transferred to third parties for commercial purposes.

  • Our technical processors (hosting: Vercel Inc.; email service; audience analytics tool).
  • Operational partners strictly necessary to execute your file (airline, partner hotel, on-site logistics operator).
  • Competent authorities where legally required.

5. Transfers outside the European Union

Some processors (including our host Vercel Inc., based in the United States) may store or process your data outside the EU. These transfers are governed by appropriate safeguards under Articles 44 et seq. of the GDPR (EU Standard Contractual Clauses or equivalent protection frameworks).

6. Retention period

  • Booking and contract data: 5 years after the end of the contractual relationship (legal commercial period).
  • Prospect data with no follow-up: 3 years from last contact.
  • Accounting and invoicing data: 10 years (tax obligation).
  • Audience data (cookies): 13 months maximum, in line with CNIL recommendations.

7. Your rights

Under the GDPR, you have the following rights at any time:

You may exercise these rights by emailing hello@grandretourdiaspora.com with proof of identity.

If you are unsatisfied with our response, you may lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

  • Right of access to your data;
  • Right to rectification;
  • Right to erasure (« right to be forgotten »);
  • Right to restriction of processing;
  • Right to object to processing;
  • Right to data portability;
  • Right to withdraw consent at any time where processing is based on consent;
  • Right to define directives regarding your data after your death.

8. Security

Demela Group implements appropriate technical and organizational measures to ensure confidentiality, integrity and availability of your data (TLS encryption, access control, regular backups).

9. Cookies

The site uses cookies, as detailed in our cookie policy.

10. Changes

This policy may be updated at any time. The applicable version is the one published on this page.