Privacy Notice

This Privacy Notice explains how personal information is collected, used, shared, stored and protected when you visit voyagealsace.com, make an enquiry, submit the registration form, pay for or take part in Alsace from the Inside (the tour).

Alliance Française Stellenbosch is the responsible party for the personal information processed for the tour. In this notice, “we”, “us” and “our” refer to Alliance Française Stellenbosch and the authorised tour organisers acting on its behalf.

This notice is intended to comply with South Africa’s Protection of Personal Information Act 4 of 2013 (POPIA). It is a privacy notice, not a waiver of any rights you have under applicable law.

Depending on how you interact with us, we may collect:

Please do not send us unnecessary passport copies, medical records or other sensitive information unless we specifically request them for a legitimate tour-related purpose.

If you provide information about an accompanying guest or emergency contact, you must be authorised to do so and should make this notice available to that person. Please provide only information that is accurate and necessary.

We process personal information only where POPIA permits it, including where processing is necessary to take steps at your request, conclude or perform the booking agreement, comply with a legal obligation, protect a legitimate interest, pursue a legitimate operational interest, or where you have consented.

We use personal information to:

We will not use allergy, emergency-contact or other sensitive booking information for advertising. We will send separate promotional messages only where permitted by law and you may opt out at any time.

Fields marked as required on the registration form are needed to process the booking. You may decline to provide information, but we may then be unable to accept or safely deliver the booking. Optional information can be left blank unless it later becomes reasonably necessary for the tour.

We share personal information only when reasonably necessary and only to the extent required. Recipients may include:

We do not sell or rent your personal information. Suppliers receive only the information reasonably needed for their role. Some suppliers may act as independent responsible parties under their own privacy notices.

The tour takes place in France. It may therefore be necessary to send limited personal information from South Africa to suppliers or service providers in France or another country. We will take reasonable steps to ensure that such transfers are lawful under POPIA and that the information receives an appropriate level of protection, for example through applicable law, contractual safeguards or your consent where required.

The website may use essential technologies and limited analytics to make the site work, maintain security and understand general usage. These technologies may process technical information such as your IP address, browser and pages viewed. You can control many cookies through your browser settings, although blocking essential technologies may affect how the site works.

The website may link to third-party websites or services. Their privacy practices are governed by their own notices, and we are not responsible for their content or privacy practices.

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the size of the tour. These include limiting access to authorised people, using reputable service providers, maintaining appropriate access controls and avoiding unnecessary collection. No internet transmission or storage system can be guaranteed to be completely secure.

If a security compromise affecting personal information occurs, we will investigate it and provide notifications to the Information Regulator and affected people where required by POPIA.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to complete the tour and related administration, and to meet legal, tax, accounting, insurance or dispute-resolution requirements.

As a practical guide, core booking and payment records may generally be retained for up to five years after completion or cancellation of the booking, or longer where law or a genuine dispute requires it. Allergy and emergency-contact information will normally be deleted or de-identified within twelve months after the tour, unless it forms part of an incident, insurance or legal record that must be kept longer. Unsuccessful enquiry records will normally be deleted or de-identified within twenty-four months. Backup copies may remain for a limited additional period before routine deletion.

Subject to POPIA and any applicable limitations, you may:

To protect privacy, we may need to verify your identity before dealing with a request. Some information may have to be retained despite a request, including where it is required by law, needed to complete the booking, or necessary to establish, exercise or defend a legal claim.

Please contact us first so that we can try to resolve your concern:

You may also lodge a complaint with the Information Regulator of South Africa. Current complaint forms and contact details are available from the Regulator’s official website at https://inforegulator.org.za.

We may update this notice when our practices, suppliers or legal obligations change. The current version will be made available on the website or supplied with the booking documents, and its effective date will appear at the top.