Privacy Policy
Castres Olympique (“we”, “our”, or “us”) is committed to safeguarding the privacy and personal data of our users. This Privacy Policy outlines our practices regarding the collection, use, storage, and disclosure of personal information obtained through our website, castresolympique.com, in compliance with the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws. We are resolutely devoted to transparency and the protection of your personal information.
1. Scope of Policy and Data Controller Role
This policy governs all data processing activities associated with castresolympique.com and any related services, communications, or platforms offered by Castres Olympique. For the purposes of applicable data protection laws, Castres Olympique acts as the Data Controller for the personal information described herein. If you are located in the European Economic Area or the United Kingdom, we are responsible for determining the purposes and means of processing your personal data.
2. Categories of Data We Process
We process several categories of personal data to improve our services, enhance user experience, fulfill contractual obligations, and meet legal standards. These data categories include:
– Usage Data: Includes information such as IP address, browser type and version, device identifiers, geographical location, time zone setting, referring pages, navigation history, session duration, and other analytical data generated through your interaction with castresolympique.com.
– Account Data: Encompasses personal identifiers such as your name, billing and shipping addresses, email address, telephone number, and password when you register or log in to your user account.
– Profile Data: Includes user-generated profiles, preferences, purchase history, behavior on castresolympique.com, and other interests or choices related to products and services.
– Communication Data: Covers information obtained when you contact us, such as support inquiries, emails, and messages through our contact forms or support system.
– Technical Data: Includes details collected from your device such as device type, operating system, system configurations, browser language, and other technical diagnostics.
– Transaction Data: Refers to your purchase records, payment details (handled securely by third-party processors), billing data, shipping logistics, and order history.
– Preference Data: Includes your marketing preferences, opt-in/opt-out status, and interests as indicated through forms or during browsing.
3. Legal Bases for Processing
We rely on the following legal grounds under the GDPR and CCPA to process your personal information:
– Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into such contract (e.g., creating user accounts, fulfilling orders).
– Legitimate Interests: We process data to improve user experience, enhance site functionality, prevent fraud, analyze trends, and conduct analytics in ways that do not override your fundamental rights.
– Consent: Where legally required, we obtain your explicit consent to process personal data, particularly in relation to cookies, marketing communications, and third-party data sharing.
– Legal Obligation: Processing is necessary for compliance with legal obligations, regulatory requirements, or law enforcement requests.
4. Your Data Rights
As a data subject under applicable laws, including GDPR and CCPA, you are entitled to the following rights:
– Right of Access: You have the right to receive a copy of your personal data and information related to how it is processed.
– Right to Rectification: You may request that we correct any inaccuracies or incomplete data about you.
– Right to Erasure (“Right to be Forgotten”): You may ask us to delete your personal data where there is no longer a lawful basis for retaining it.
– Right to Restriction of Processing: You may request that we restrict the processing of your data under certain conditions.
– Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format and transfer that data to another controller.
To exercise any of the above rights, please contact us at [email protected]. We may require verification of identity before processing your request.
5. Security Measures
We implement robust physical, technical, and administrative safeguards to ensure the integrity, confidentiality, and availability of your personal information. These include:
– Data encryption at rest and in transit,
– Role-based access control and secure user authentication,
– Regular security audits and vulnerability scans,
– Frequent backups and disaster recovery protocols,
– Employee confidentiality agreements and GDPR-compliant data handling training.
6. International Data Transfers
As a France-based organization, your data may be stored and processed in jurisdictions outside the country of your residence, including the European Economic Area (EEA). When transferring personal data internationally, we rely on:
– Standard Contractual Clauses (SCCs) approved by the European Commission,
– Adequacy decisions by the European Commission,
– Binding corporate rules, and other protective measures in accordance with GDPR.
7. Data Retention
We retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, including:
– Account and Profile Data: Retained for the duration of your user relationship and up to 36 months after inactivity or account deletion, unless otherwise required by law.
– Transaction and Payment Data: Retained up to 7 years for financial audit, compliance, and fraud prevention purposes.
– Communication Data: Retained for 18 months following the last interaction, unless a legal dispute or request requires longer storage.
– Preference and Technical Data: Retained for up to 24 months for analytical and marketing optimization unless you withdraw consent.
8. Cookie Policy
Our website, castresolympique.com, uses cookies and similar tracking technologies to enhance user experience and analyze site performance. The categories of cookies used include:
– Essential Cookies: Required for core site functionality (e.g., login, navigation, security).
– Functional Cookies: Enable personalization and improved functionality (e.g., language preferences, saved settings).
– Analytics Cookies: Help us understand site usage, traffic sources, and interaction trends using aggregated data.
– Performance Cookies: Enhance site speed, adapt content delivery, and assess technical issues.
By continuing to browse our site, you consent to the use of cookies under this Privacy Policy unless you opt out or modify your browser settings.
9. Cookie Management and Compliance
You have the right to manage your cookie preferences at any time. We provide a Cookie Settings banner upon your first visit, allowing you to:
– Accept or reject non-essential cookies,
– Withdraw consent for cookie use,
– Access detailed information per cookie category.
Under both GDPR and CCPA, we honor your right to opt out of targeted advertising and data sharing with third parties. You may also configure your browser to block or delete cookies, though some site functionality may be compromised.
10. Protecting Children’s Privacy
The services on castresolympique.com are not intended for, nor directed to, children under the age of 13. We do not knowingly collect or solicit personal data from children under 13. If we become aware that such data has been collected without verifiable parental consent, we will take appropriate steps to delete it. If you believe we have collected such data, please contact us immediately at [email protected].
11. Changes to This Privacy Policy
We reserve the right to amend or update this Privacy Policy to reflect changes in legal, regulatory, or service terms. All changes will be posted to castresolympique.com. Where appropriate or legally required, we will notify you via direct communication or prominent notice on our site. Continued use of the website signifies your acceptance of any updates.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our data processing practices, please contact us at:
Email: [email protected]
Website: castresolympique.com
We are committed to addressing privacy-related inquiries promptly and in accordance with applicable law.
This Privacy Policy upholds Castres Olympique’s compliance with global data protection regulations and reflects our ongoing commitment to respecting and protecting your privacy rights.