PRIVACY POLICY_
Last updated : 30 janvier 2025
Introduction
This Privacy Policy describes how Ma Box de Cross (hereinafter "we", "our" or "the Company") collects, uses and protects your personal data when you use the MBC Arena platform.
We are committed to respecting your privacy and protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data Controller
Ma Box de Cross
11 cours du Danube, 77700 Serris, France
Email : contact@maboxdecross.fr
Article 1 - Data Collected
1.1 Data You Provide
When registering or using the Platform:
Identification Data
- First and last name
- Email address
- Date of birth
- Gender
- Nationality
Contact Data
- Phone number
- Postal address
Sports Data (Athletes)
- Box/gym affiliation
- Sports level
- Results and rankings
- Profile photo (optional)
Professional Data (Organizers)
- Organization name
- SIRET number
- VAT identification number
- Bank details (via Stripe)
Documents (if required)
- Medical certificate
- ID document (for verification)
1.2 Automatically Collected Data
When browsing the Platform:
- IP address
- Browser type and version
- Operating system
- Pages visited and visit duration
- Traffic source (referring site)
- Actions performed on the Platform
Article 2 - Processing Purposes
Your data is collected for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Managing your user account | Contract performance |
| Processing registrations and payments | Contract performance |
| Sending confirmations and reminders | Contract performance |
| Displaying results and rankings | Legitimate interest |
| Platform communications (newsletters) | Consent |
| Improving our services | Legitimate interest |
| Statistics and audience analysis | Consent |
| Fraud prevention | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
Article 3 - Data Recipients
Your data may be shared with:
3.1 Competition Organizers
When you register for a competition, your registration data (name, email, category, etc.) is transmitted to the Organizer for event management. The Organizer then becomes the data controller for their competition.
3.2 Technical Service Providers
- Stripe - Payment processing (bank details)
- Supabase - Database hosting (EU)
- Netlify - Website hosting
- Resend - Transactional email sending
- Sentry - Technical error monitoring
3.3 Competent Authorities
Your data may be communicated to judicial or administrative authorities upon legal request.
Article 4 - Transfers Outside the European Union
Some of our service providers are located outside the European Union (particularly the United States). In this case, data transfers are governed by:
- Standard contractual clauses of the European Commission
- EU-US Data Privacy Framework (for certified providers)
You can obtain more information on these safeguards by contacting us.
Article 5 - Retention Period
Your data is retained for the following periods:
| Data Type | Duration |
|---|---|
| Account data | Until account deletion + 3 years |
| Competition registration data | 5 years after the competition |
| Billing data | 10 years (legal obligation) |
| Sports results | Unlimited retention (archives) |
| Cookies and browsing data | Maximum 13 months |
| Medical certificates | 1 year after the competition |
Article 6 - Your Rights
In accordance with GDPR, you have the following rights:
Right of Access
Obtain confirmation of processing of your data and receive a copy.
Right of Rectification
Have your inaccurate or incomplete data corrected.
Right to Erasure ("Right to be Forgotten")
Request deletion of your data, subject to legal obligations.
Right to Restriction of Processing
Request temporary suspension of processing of your data.
Right to Portability
Receive your data in a structured format and transfer it to a third party.
Right to Object
Object to the processing of your data for legitimate reasons.
Right to Withdraw Consent
Withdraw your consent at any time for processing based on it.
Right to Define Post-Mortem Directives
Define instructions on the fate of your data after your death.
How to Exercise Your Rights?
Send your request with a copy of your ID to:
Email : contact@maboxdecross.fr
Mail : Ma Box de Cross - 11 cours du Danube, 77700 Serris, France
We will respond within one month maximum.
You can also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr
Article 7 - Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, modification, disclosure or destruction:
- Data encryption in transit (HTTPS/TLS)
- Data encryption at rest
- Secure authentication (hashed passwords)
- Strict data access control
- Access logging
- Regular security updates
- Secure hosting with automatic backup
Article 8 - Cookies
The Platform uses cookies for its proper functioning and to improve user experience. For more information on cookies and managing your preferences, see our Cookie Policy.
Article 9 - Protection of Minors
Creating an account on MBC Arena is reserved for adults. Minors may participate in competitions with the authorization of their legal representative, who creates and manages the account on their behalf.
If we learn that we have collected data from a minor without parental authorization, we will delete this data as soon as possible.
Article 10 - Policy Modifications
We reserve the right to modify this Privacy Policy at any time. Modifications will take effect upon publication on this page.
In case of substantial modification, we will inform you by email and/or notification on the Platform.
Article 11 - Contact
For any questions regarding this Privacy Policy or the protection of your data:
Ma Box de Cross
Email : contact@maboxdecross.fr
Phone : 07 83 15 14 66
Address : 11 cours du Danube, 77700 Serris, France