Information
Privacy Policy
Last updated: 13 June 2026.
1. Data controller
This policy describes how Kite du Midi, a sole proprietorship owned by Jean Berdagué, registered under number SIRET 824 060 552 00018, with its registered office at 17 allée du Chardonnay, 34490 Lignan-sur-Orb, collects and processes your personal data.
- Data controller: Jean Berdagué
- Contact: kitedumidi@gmail.com — 07 60 76 95 86
For any question about your data, you can write to the address above.
2. Data we collect
Depending on your interaction with us, we may collect:
- Identity data: surname, first name, date of birth (notably to verify legal age or obtain parental consent).
- Contact details: email address, phone number, postal address.
- Booking data: chosen lesson or course, dates, ability level, discipline (kite, wing, foil).
- Safety-related data: swimming ability, weight (gear setup), any contraindications relevant to the activity, emergency contact. *(This health-related information is sensitive data: it is only collected with your consent, limited to what is strictly necessary for your safety.)*
- Payment data: processed by our secure payment provider; we do not keep your full bank details.
- Images: photos and videos taken during sessions (see section 9).
- Browsing data: via the website and cookies (see section 8).
- For trips abroad: information needed for organisation (e.g. identity details requested by the local accommodation or carrier).
3. Why we use your data (purposes) and on what basis
| Purpose | Legal basis |
| Manage your bookings and deliver the service | Performance of the contract |
| Ensure your safety during the activity | Legitimate interest / your consent (health data) |
| Issue invoices and meet accounting obligations | Legal obligation |
| Send you commercial information (newsletter, dates) | Your consent |
| Publish photos/videos for promotional purposes | Your consent |
| Improve and secure the website | Legitimate interest |
4. Who has access to your data (recipients)
Your data is never sold. It may be shared, only to the extent necessary, with:
- our payment provider;
- our website host o2switch (222-224 Boulevard Gustave Flaubert, 63000 Clermont-Ferrand, France);
- our accountant;
- our insurer in the event of a claim;
- for trips, our local partners (accommodation, coaching, transport).
5. Data transfers outside the European Union
As part of our trips abroad (notably to Peru), some of your data may be shared with partners located outside the European Union, solely to organise your stay (accommodation, logistics). These transfers are limited to what is strictly necessary and framed in accordance with the GDPR. You can ask us for details on the safeguards in place.
6. Retention period
- Booking and customer data: during the business relationship, then archived for 3 years for prospecting purposes.
- Accounting documents and invoices: 10 years (legal obligation).
- Prospecting data (newsletter): until you withdraw your consent, then 3 years maximum after the last contact.
- Photos and videos: as long as your consent is not withdrawn.
7. Security
We implement reasonable technical and organisational measures to protect your data against loss, unauthorised access or disclosure.
8. Cookies
The site kitedumidi.com may use cookies:
- necessary cookies for the site to function;
- audience measurement cookies (e.g. traffic statistics), subject to your consent;
- optionally social media cookies if content is embedded.
You can accept or refuse non-essential cookies via the dedicated banner and configure your browser.
9. Image rights (photos and videos)
Our activity involves filming and photography (photos, videos, drone or cameraman footage) during lessons and trips.
- These images may be used for promotional purposes (website, social media, communication materials) only with your prior written consent.
- You can refuse to be photographed/filmed, or withdraw your consent at any time, with no impact on the service.
- For minors, the consent of a holder of parental authority is required.
10. Minors
If you are a minor, authorisation from a parent or legal guardian is required for booking, data collection and any use of images.
11. Your rights
In accordance with the GDPR, you have the following rights over your data: access, rectification, erasure, restriction, objection, portability, and withdrawal of consent at any time.
To exercise them, contact kitedumidi@gmail.com. Proof of identity may be requested.
If you believe your rights are not being respected, you can contact the CNIL (the French data protection authority — www.cnil.fr).
12. Changes to the policy
This policy may be updated. The applicable version is the one published on the site on the date you consult it.
Draft framework provided for information only, not constituting legal advice. To be validated by a professional, particularly on sensitive points: health data, image rights, minors, and data transfers outside the EU for trips.
Insurance
Equipment partner
@kitedumidi