Privacy Rules and Personal Data

Preamble

The company (nineteen)² designs digital business solutions for companies operating in the sports and events industry, enabling individuals to register for sports events, test sports equipment during these events, secure the loan of equipment, and collect data from these product tests (hereinafter referred to as "the Services"). In this context, and in order to offer Participants an optimal experience, it collects a certain amount of personal data that Participants agree to provide.

1. Definitions

Each of the terms mentioned herein shall have the meaning given in its definition, namely:

"Organizer": Creator or organizer of sports events for Participants.

"Participant": An individual wishing to participate in an event organized by the Organizer.

2. Purpose

By using the Services, the Participant agrees to provide a certain amount of personal data.

This privacy policy aims to ensure compliance with the collection and processing of Participant data, carried out on the Digital Test Center platform (hereinafter "the platform"), with the General Data Protection Regulation (GDPR) and the Data Protection Act for the purpose of using the Services.

It is specified that the processing of personal data has been declared to the CNIL (French Data Protection Authority), registered under number 1957848.

3. Data Controller

The data controller of the Participant's personal data is: Laurent Beauvisage, SARL (nineteen)², 78 chemin de la croze, 38410 Vaulnaveys-le-Haut - FRANCE.

4. Purpose of Processing

(nineteen)² collects the Participant's data strictly necessary for the provision and execution of the Services.

4.1. (nineteen)² collects the Participant's data strictly necessary for the provision and execution of the Services. This processing is necessary for the performance of the contractual obligations of both parties and for the protection of the legitimate interests of (nineteen)². Thus, the collected personal data:

  • Allow the Participant to register on the platform;
  • Enable the Participant to fully use the Services;
  • Allow (nineteen)² to comply with its legal obligations;

4.2. (nineteen)² collects the Participant's data to improve the use of the Services. The collected data:

  • Enable (nineteen)² to create aggregated statistical studies and marketing analyses;
  • Allow (nineteen)² to manage, protect, enhance, and optimize the Services;

4.3. (nineteen)² collects the Participant's data to personalize and tailor their experience according to their preferences. Depending on the settings chosen by the Participant, the collected personal data:

  • Allow (nineteen)² to inform the Participant of changes to the Services, such as the existence of new features;
  • Enable (nineteen)² to provide a summary of the products tested during the event;
  • Allow (nineteen)² to inform the Participant of promotional offers on the products that have been tested.

5. Data Collected

For the purposes of the processing described above, (nineteen)² collects and processes several categories of data.

5.1. Information provided directly by the Participant and necessary for the use of the Services:

  • Profile information: gender, name, first name, language, date of birth, phone number, email address, address, company identification (if applicable);
  • Additional profile information: a photograph of the Participant taken during the event;
  • Information necessary for equipment loan: shoe size, clothing size, sports practice, skill level, etc.;
  • Information necessary for identity verification: proof of identity.

5.2. The information mentioned in the previous paragraph may also be collected from Organizers or third parties. In this case, the information may vary and is controlled by the Organizer or third party, or depends on the permissions that the Participant has granted to them via privacy settings.

5.3. Information collected automatically when using the Services:

  • When submitting a review of products tested by the Participant: connection and device data, IP address.

6. Data Retention Period

The data collected by (nineteen)² is retained for the entire duration of the use of the Services and for five (5) years from the last use of the Services.

7. Data Recipients

The recipients of the Participant's personal data are:

  • (nineteen)² teams;
  • The Organizer of the event in which the Participant registers;
  • The exhibitors at the event in which the Participant registers;
  • (nineteen)² technical service providers: hosting provider, email and SMS delivery service provider, backup and bug tracking service provider. These parties have limited access to information as part of their tasks and only for specific purposes and in accordance with (nineteen)² instructions.

8. Data Security

(nineteen)² implements all reasonable administrative, technical, and physical measures to protect the Participant's personal data and ensure that data is not lost, misused, accessed, disclosed, altered, or destroyed inappropriately.

Data transmissions are encrypted using the SSL security protocol and stored with AES-256 encryption.

It is expressly agreed that the Participant is responsible for the confidentiality of the chosen password to access the Services. The Participant agrees to keep this password secret and not to disclose it.

9. Participant's Rights

9.1. Right of Access: The Participant has the right to receive a copy of their personal data held by (nineteen)² ("right of access").

9.2. Right to Erasure and Right to Rectification: The Participant can also request the erasure of their personal data as well as the rectification of inaccurate or outdated personal data.

9.3. Right to Object: The Participant has the right to object at any time, for reasons related to their particular situation, to the processing of their personal data for direct marketing purposes or for processing carried out on the basis of (nineteen)²'s legitimate interest.

9.4. Right to Restriction: The Participant has the right to restrict the processing of their personal data.

9.5. Right to Data Portability: The Participant also has the right to data portability, which means the right to receive the personal data they have provided in a structured, commonly used, and machine-readable format and the right to transmit this data to another data controller.

9.6. The Participant has the right to define directives regarding the fate of their data after their death.

9.7. If the Participant wishes to exercise these rights, they simply need to make a request by attaching a copy of an identity document to the following address: SARL (nineteen)² - 78 chemin de la croze - 38410 Vaulnaveys-le-Haut - FRANCE.