Privacy Policy

1. Who we are

nimbletcuriousvalt.com is an independent travel-planning publication operated by Valt Éditions Digitales SAS, a company registered in France under company number (SIREN) 924 617 380, with its registered office at 12 Rue Saint-François de Paule, 06300 Nice, France. For all matters relating to personal data we act as the data controller. Our data protection contact can be reached at [email protected] or by post at the registered office address, marked “Data Protection”.

2. What data we collect

We collect the minimum data needed to publish the site and answer enquiries. Specifically:

• Data you give us directly. When you complete the form on our contact page, we receive the name you provide, your email address, the region your question concerns, an optional travel month and the text of your message. If you email us, we receive whatever is in that email, including your address and signature block.
• Technical data collected automatically. Our hosting infrastructure records server log data for security and reliability purposes: truncated IP address, user agent string, requested URL, response status, referring page and timestamp.
• Consent and preference data. Your cookie choice is stored locally in your browser so the banner does not reappear on every page. This record stays on your device.
• Optional analytics data. If you consent to analytics cookies, we receive aggregated measurements of page views, entry and exit pages, approximate country-level location, device category and referral source.

We do not knowingly collect data from children, we do not ask for payment details because nothing on this site is sold, and we do not collect special category data such as health, religion or political opinions.

3. Why we process it, and on what legal basis

• To answer your enquiry — legal basis: your consent, given when you submit the form, and our legitimate interest in responding to correspondence.
• To keep the site available and secure — legal basis: legitimate interests, specifically preventing abuse, diagnosing faults and protecting infrastructure.
• To understand which guides are read — legal basis: your consent for analytics cookies, which you may withdraw at any time.
• To comply with law — legal basis: legal obligation, for example retaining records needed to demonstrate consent.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use automated decision-making or profiling that produces legal effects.

4. Cookies and similar technologies

Essential storage is used to remember your cookie choice and to protect the site. Analytics and functional cookies are set only after you accept them. A full table of the cookies used, their purposes and their lifetimes is published in our Cookie Policy, together with instructions for blocking or deleting cookies in the major browsers.

5. Third-party processors

We use a small number of specialist suppliers to run the site. Each acts as a processor under a written agreement that limits them to processing data on our instructions, requires appropriate security measures and prohibits onward disclosure. The categories are:

• Web hosting and content delivery — serves these pages and keeps server logs.
• Form handling and email delivery — transmits contact submissions to our mailbox and delivers our replies.
• Privacy-oriented website analytics — produces aggregate readership statistics where consent has been given.
• Backup and security services — protects the site against loss and attack.

Where a processor handles data outside the European Economic Area, the transfer is covered by an adequacy decision or by Standard Contractual Clauses with supplementary technical safeguards. We will name the current suppliers in writing on request to [email protected].

6. How long we keep data

• Contact form messages and email correspondence: 24 months from the last exchange, then deleted, unless the thread is needed for an ongoing matter.
• Server logs: up to 12 months, after which they are deleted or fully anonymised.
• Aggregated analytics: up to 26 months; the aggregate reports contain no directly identifying data.
• Consent records: retained for as long as needed to prove the consent, and no longer than 36 months.

7. Your rights

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you the right to request access to your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to receive your data in a portable format; and to withdraw consent at any time without affecting the lawfulness of prior processing.

If you are a California resident, the California Consumer Privacy Act as amended gives you the right to know what personal information is collected and for what purpose, to request deletion, to request correction, and to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined, so there is no “Do Not Sell or Share My Personal Information” process to complete; you may still make a request and we will respond. We will not discriminate against you for exercising any of these rights.

To exercise a right, email [email protected] with enough detail for us to locate the data. We reply within one month and may ask a question to verify that the request comes from you. If you are unhappy with our response, you may complain to your supervisory authority — in France, the CNIL; elsewhere in the EEA, the authority listed by the European Data Protection Board.

8. Security

The site is served over encrypted connections. Access to the contact mailbox is limited to editorial staff who need it, protected by strong authentication. We keep no separate customer database and hold no payment data. No system is perfectly secure, so if we become aware of a breach likely to result in a risk to your rights, we will notify the relevant authority and affected individuals as required by law.

9. External links

Our guides link to official transport operators, tourist offices and reference sites. Those organisations are independent of us and their own privacy policies apply once you leave nimbletcuriousvalt.com. We have no control over, and take no responsibility for, their data practices.

10. Changes to this policy

We may update this policy to reflect changes in the site, our suppliers or the law. The date at the top of this page shows the current version. Material changes will be highlighted on the home page for a reasonable period. Continuing to use the site after a change takes effect means the updated policy applies to you.