This Charter describes the principles applied by the Magora Group to collect, use, retain, secure and share the personal data of its customers, prospective customers and users of its services.
| Document | Magora - GDPR Charter v2.2 |
|---|---|
| Reference version | Magora - GDPR Charter v2.1 |
| Additions included | Tracking pixels |
| Owner | Magora Group DPO / CISO |
Dear customers,
In providing its services, the MAGORA group (hereinafter “MAGORA” or “we”) processes its customers’ Personal Data (“you”) as the Data Controller.
This Charter (hereinafter the “Charter”) is intended to inform you about how we process your Data and about your rights.
MAGORA collects and processes your Personal Data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”), and French Law No. 78-17 of 6 January 1978 on data processing, files and individual liberties, as amended (hereinafter the “French Data Protection Act”), together the “Applicable Regulations”.
This Charter may be updated regularly, in particular to take account of any changes to the Applicable Regulations or to reflect new organisational arrangements within MAGORA.
The implementation of this regulation gives the Magora Group an opportunity to reaffirm, through this Charter, which forms part of its General Terms and Conditions of Sale, the principles that guide its use of your personal data.
This Charter governs the processing of customers’ Personal Data by the companies of the MAGORA group, which includes the following entities:
These entities include the following establishments and brands: Odalys Vacances, Odalys City, Odalys Campus, Odalys Invest, SGIT, Flower Campings, Alpissimmo, Souffle du Monde, Happy Senior. This list is updated regularly and can be viewed on our Magora Group website.
Personal data means any information that makes it possible to identify a natural person, directly or indirectly.
Processing of personal data includes any operation performed on personal data, including:
This Charter applies to all processing carried out by Magora in connection with:
Depending on the circumstances, we may collect the following categories of data:
| Category | Examples of data |
|---|---|
| Identification data | First name, last name, date of birth, nationality, postal contact details, email address, telephone number and vehicle registration number. |
| Data relating to accompanying persons | Names of accompanying persons and data relating to minors travelling with an adult. |
| Contract and stay data | Bookings, stay dates, customer preferences, specific requests and additional services purchased. |
| Payment data | Information required to process payments. |
| Technical data | IP address, browser used, language settings, browsing data and cookies. |
| Security data | Images from video surveillance systems at certain establishments, where they make it possible to identify a person. |
| Electronic tracking data | Data associated with tracking pixels embedded in certain electronic communications: campaign or recipient ID, message opens, timestamps, technical data strictly necessary for tracking, and audience, deliverability or interaction statistics where such processing is permitted. |
Some Magora Group establishments are equipped with video surveillance systems to ensure the safety of people, property and facilities. Recorded images may constitute personal data when they make it possible to identify a person.
| Legal basis | Relevant processing |
|---|---|
| Performance of a contract | Booking management, stay management and after-sales service. |
| Legal obligations | Accounting, taxation, retention of certain data and responding to competent authorities. |
| Legitimate interest | Information system security, fraud prevention, video surveillance and improving service quality. |
| Consent | Sending marketing communications where required, and placing certain cookies and trackers. |
| Consent or exemption under the regulations applicable to trackers | Tracking pixels used in emails or electronic communications: prior consent for individual audience measurement, personalisation or marketing; information and specific safeguards for exempt uses, particularly where the purpose is strictly limited to deliverability or security. |
Data may be disclosed to the following categories of recipients:
All processors are subject to contractual confidentiality and data protection obligations.
Data is retained for limited periods proportionate to the purposes for which it is processed.
| Data category | Retention period |
|---|---|
| Cookies | 13 months |
| Customer data | 5 years after the last transaction |
| Video surveillance images | 1 month, unless required for legal or judicial reasons |
| Telephone conversation with the call centre | 1 month, unless required for legal or judicial reasons. |
| Accounting data | As required by applicable legal obligations |
| GDPR requests | For as long as necessary to handle the request, followed by statutory archiving |
| Data from tracking pixels | For a period limited to the purpose pursued and the obligations to retain evidence of consent or objection; statistics may be aggregated or anonymised where possible. |
Under the GDPR, you have the following rights:
If you have any questions about the protection of your personal data or wish to exercise your rights, you can contact the Data Protection Officer:
| dpo@magora.fr | |
| Postal address | Data Protection Officer Magora 655 rue René Descartes Parc de la Duranne - BP 412 13591 Aix-en-Provence Cedex 3 |
| Proof of identity | Proof of identity may be requested where necessary. |
Where provided for by law, the response time for a complete request is two months.
Magora implements appropriate technical, physical and organisational measures to ensure the confidentiality, integrity, availability and traceability of personal data.
In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, the Magora Group implements the measures required by the GDPR, including:
When you visit our website, we may, subject to your choices, place a text file known as a cookie on your computer through your browser. This file has a limited lifespan and will be deleted automatically once that period expires.
During its validity or storage period, it allows us to recognise your computer on subsequent visits. These cookies do not contain viruses. Magora uses cookies to improve your experience on our website.
Some cookies are essential for the website to function properly; others help us understand which content is most useful to our visitors, enabling us to offer better services and content and to promote the most relevant offers to our users through advertising or communication campaigns.
The Magora Group uses different types of cookies and trackers:
You can change your preferences at any time through your browser settings or the consent management tool available on our websites.
Magora may use tracking pixels or equivalent technologies in certain electronic communications, including information emails, newsletters, marketing communications or certain service messages.
A tracking pixel is generally a very small image, sometimes invisible to the recipient, whose loading makes it possible to measure whether a message has been opened or to record certain interactions with it.
These technologies may be used to measure message deliverability, compile audience statistics, improve the relevance of communications, personalise certain content or measure campaign effectiveness, in accordance with the choices expressed by the data subjects.
Where tracking pixels are used for individual audience measurement, personalisation, profiling or marketing, Magora obtains the prior consent of the data subjects where required.
Certain strictly limited uses, particularly those relating to the deliverability or security of communications, may be implemented without consent when they meet the exemption conditions set out in the regulations applicable to trackers. In such cases, the data collected is limited to what is strictly necessary and is not reused for another purpose.
Data subjects are informed about the use of these technologies and, where consent is required, may withdraw it at any time as easily as they gave it. They may also object to processing based on an exemption where the regulations provide for this.
Choices relating to tracking pixels can be managed using the mechanisms provided in electronic communications, including unsubscribe links, preference centres or consent management forms.
In accordance with the regulations in force, you can object to telephone marketing by registering on the Bloctel.
| Version | 2.2 |
|---|---|
| Effective date | September 30, 2026 |
| Document owner | Magora Group DPO |