Last updated on 28 March 2018
Preamble
Amaury Sport Organisation (A.S.O.), a limited company with a capital of €61,200,240, registered with the Nanterre Trade and Companies Register under number 383 160 348, with its headquarters at 40-42 Quai du Point du Jour, 92100 Boulogne-Billancourt (hereinafter "We"), collects and processes data in order to allow the user (hereinafter "You") optimal use of the website www.timeto.com (hereinafter the "Site") and the Services provided on the Site. We take the protection of Your personal data very seriously.
The terms "you", "your" and "yours" refer to you as a user of the Site or as the parent or legal guardian (over 18 years of age) of the user, if said user is a minor in their country of residence.
Important
In this Privacy Policy (“Policy”), we describe the information that we collect from You on our Sites and Applications. By visiting our Site or using any of our Services, you agree that your personal information will be handled as described in this Policy, which is incorporated by reference into the TIME TO Terms and Conditions of Use, available at Terms of Use. The Policy is an integral part of the Terms and Conditions of Use.
In order to use the Site and Services, you must agree to this Policy and the Terms and Conditions of Use, as well as the Additional Terms of Use as communicated at the time of ordering any product or service related to an Event offered on the Site.
Definitions
In this Privacy Policy, words or phrases beginning with a capital letter refer to terms defined in the Terms and Conditions of Use and, failing this, shall have the following meanings:
Data: means any information relating either directly or indirectly to an identified or identifiable natural person, in particular through additional information provided. This Data includes personal data and all other related information that can be used to identify a person.
Rules: means the sporting rules and the terms and conditions applicable to the organization of an Event.
Applicable Regulations: means the French Data Protection and Freedom of Information Act no. 78-17 of 6 January 1978 and its amendments, European data protection regulation no. 2016/679 known as "RGPD", and all other applicable regulations concerning the protection of personal data.
I. Data and information collected
When using the Site, you will be required to provide us with a certain amount of data and information, particularly during the registration process in order to create an account. Some of this data can be used to directly or indirectly identify you and may be considered personal data.
1. What Data do we collect?
By using the Site, you acknowledge that we are able to collect and process the following Data:
1.1. Data required for registration on the Site.
When creating an account on the Site, you are required to provide mandatory Data, identified on the Site by an asterisk:
- Last name;
- First name;
- Date of birth;
- Sex;
- Language;
- Nationality;
- Email address;
- Postal address;
- Mobile number;
- Emergency contact information, should an incident occur while attending an Event (phone number);
This list is subject to change in accordance with A.S.O.'s legal, technical and organizational obligations.
You will also be required to provide a username and password which may also be used to identify you in order to access certain parts of the Site.
Failure to provide us this Data will prevent your registration on the Site.
1.2. Optional Data on the Site.
You may also decide to add further information to your profile in order to benefit from an optimal and personalized use of the Site and its Services. This Data is not essential for the creation of a profile on the Site. This applies in particular to:
- Your photos;- Information about your sporting activities and preferences: Sports practiced, training frequency, use of applications, participation in events, materials and equipment used, etc.);
1.3. Event Registration Data.
We may collect additional data specific to your enrolment in an Event. We recommend that you read the Event Rules and Additional Terms and Conditions carefully for further details. This data will be transferred to the Seller or the Event Organizer, with A.S.O. acting simply as Data Processor.
1.4. Technical Data.
We may collect Technical Data such as connection data or an IP address, in accordance with applicable law and, where appropriate and with your consent, for the use of certain technological features such as Cookies.
1.5 Information relating to use of the Site.
We may collect Data on the use of Services provided through the Site, and in particular your interaction with our Services, the number of Event registrations, and Event results.
1.6. Transaction Data
When ordering a product or service, our payment provider collects and processes the Data regarding your payment method (debit/credit card number, expiry date and security code, though the latter cannot be stored, etc.).
We act (i) as Data Controller when A.S.O. is the supplier of the product or service ordered as part of the Transaction, or (ii) as Data Processor where the Transaction is performed by A.S.O. on behalf of a Seller, such as registration for an Event organized by an Organizer other than A.S.O.
The details of your payment method entered during your Transaction, are never transmitted without being encrypted on the network: they are encrypted using a security protocol.
2. How is the Data used?
We collect Data for specific purposes, and primarily for the purposes of:
2.1. Creating, managing and accessing your account;
2.2. Providing the information and Services requested, so that you may register for Events on the Site, and to allow the sale of products and services on the Site;
2.3. Processing, monitoring and managing your Event registrations;
2.4. Offering personalized services based on the information provided on your profile, including advice and training programs;
2.5. Debt recovery, combating fraud;
2.6. Managing, amending and improving the Site and our Services;
2.7. Sending emails or posting messages on the Site to provide you with:
- confirmation of your account creation;
- information, announcements and updates relating to the Site;
- confirmation of your username and password;
- newsletters about our activities;
- information to correct account errors.
2.8. Sending emails or text messages that provide information, announcements and updates related to the Event for which you have registered;
2.9. Collecting information, in particular through polls, surveys and questionnaires that we send to you. You can opt out of receiving invitations to participate in these polls, surveys or questionnaires at any time on your profile;
2.10. Ensuring compliance with applicable legal and regulatory provisions and our Terms and Conditions of Use available at Terms of Use;
2.11. Sending emails or text messages to notify you of upcoming events that may interest you, based on the information provided on your profile;
2.12. Managing the marketing and promotion of our Services;
2.13. Sending emails and text messages, in accordance with the applicable legal provisions and with your consent, to communicate promotional offers, advertisements or other commercial communications from partners of the Site or Events.
2.14. Allowing Site users to communicate with each other;
2.15. Organizing lotteries and competitions and allowing you to register and participate in them;
2.16. Notifying you of your results, sending you your certificates;
2.17. Enabling any other purpose specified at the time of Data collection.
3. Can we transfer the collected Data?
3.1. We may transfer some of your Data to:
- the Organizers of Events offered on the Site, to ensure optimal organization of the Event and your participation in it. In this case, the Organizers act as Data Controllers and A.S.O. as Data Processor;
- commercial partners of the Site, with your consent, in order to offer products and/or services, alone or jointly with A.S.O., or for marketing and/or advertising purposes;
- data processors working in technical, commercial, legal and financial services as required for the provision of our Services, in particular Data hosting and Transactions. The data processors in question who may need to access your Data will process them on our behalf, according to our instructions, in compliance with this Privacy Policy and all other appropriate security and confidentiality measures.
3.2. The Event Rules define the Organizer(s), who is/are responsible for processing your Data, as entered during the Event registration process or as part of the purchase of products or services on the Site.
The Data controller, as defined in the Event Rules and in the Additional Terms and Conditions of Use, undertakes to comply with applicable regulations in terms of the protection of personal data, and in particular to:
- process Data for the purposes described in Article 2 "How is the Data Used?" and in the Additional Terms and Conditions of Use, where applicable;
- strictly limit the access of employees and authorized staff to the data they need in the context of their duties;
- enter into contracts with the data processors that are likely to access, host and/or process some of your Data. In this case, the data processors will act on behalf of the controller as defined in the Event Rules and according to its instructions and will guarantee the security and confidentiality of the Data.
3.3. When you register for an Event organized by a third party where A.S.O. is not involved in the organization, you authorize us to transmit the Data on your profile to this third party. In this case, the third-party Organizer becomes the data controller and A.S.O. acts as processor for the purposes of the Applicable Regulations.
The third-party Organizer is solely responsible to you for compliance with the Applicable Regulations, and A.S.O. may not be held liable in this regard.
3.4. In connection with your use of the Site, you acknowledge that when you choose to make your profile public by logging into the "My friends" area, other users will be able to freely access your profile, which may include personal information. You may decide to make your profile inaccessible to the public at any time by logging into the "My friends" area and changing the "view my profile" setting.
3.5. By registering and participating in a Sports Event, you understand and agree that your activity, results and athletic performance may be published by the Event Organizer. IF YOU PREFER YOUR RESULTS NOT TO BE PUBLISHED AND WOULD LIKE THEM TO BE REMOVED, YOU MUST CONTACT THE EVENT ORGANIZER DIRECTLY BEFORE THE EVENT.
A.S.O. is not responsible for the publication or removal of this information when the Event is organized by a third party.
3.6. You may well receive promotional offers from A.S.O. by phone and/or post and/or email and/or SMS regarding products and services available on the Site. In this context, A.S.O. can send you messages on behalf of a third-party organizer.
You may also receive promotional offers by post and/or email and/or SMS from partners of the Site and/or A.S.O., to whom we may transmit or assign your Data for the purposes of marketing, provided that you have given your prior consent by checking the box provided for this purpose when you register on the Site.
You can change your preferences by logging into your profile.
When you register for an Event, you will also be asked whether or not you agree to receive promotional offers from the Organizer's partners. A.S.O. cannot be held liable in this regard, since your consent to receiving this type of message is handled directly by the Organizer.
3.6. We do not sell or rent any Data to third parties. If ever this were to become the case, we would ask for your prior consent.
3.7. In accordance with applicable legal and regulatory provisions, we may provide certain Data to judicial authorities upon request.
4. How long is your Data kept?
4.1. Data is retained for the entire period necessary for the provision of the Services concerned.
4.2. If your account remains inactive for a period of 3 years following your most recent use, and if a reminder sent by email results in no action on your part, we will proceed with the definitive deletion of your profile which will no longer be accessible.
4.3. If you delete your profile on our Site, we undertake to delete your Data and Information within thirty (30) days of the deletion of the profile.
We may, however, retain your Data for longer after your profile has been deleted in order to comply with legal and regulatory obligations, to resolve disputes, or for any other purpose specified in the Terms and Conditions of Use and Sale.
As such, following deletion of your profile, your Data may be stored by A.S.O. in a secure format and, where applicable, by the Organizers of Events for which you registered during the applicable legal limitation periods:
We keep your payment ID for a maximum of fifteen (15) months.
Data about your participation in an Event: 10 years after the date of the event.
5. Where and how is your Data kept?
The Data we collect is kept and hosted by ACTIVE Network, a company specializing in online registrations management. The servers hosting your Data are located outside the European Union in the USA.
In general, you expressly agree that your Data may be sent to an Organizer and/or data processing service providers located outside the European Union, for the purposes of providing the Services, conducting statistical studies, supporting users, hosting Data, or organizing an Event when it takes place outside the European Union.
For any processing that falls under our responsibility, we undertake and impose on the Organizer that these transfers take place under conditions that ensure the confidentiality and security of the data, as well as an adequate level of protection in line with Articles 68 and 69 of the French law of 6 January 1978, as amended.
II. Cookies
A cookie is a small information file that the Site can send to the hard drive of a personal computer, allowing us to identify you and recognize you until its expiry.
Cookies are considered as personal data.
When you use our Site, we may collect Data via cookies or tracking cookies in order to:
- Enable use of the Site and its Services, in particular by recognizing you during your visit to the Site or when accessing your profile;
- Establish statistics;
- Allow our teams to gain information on the use of the Site, its performance and its accessibility in order to make improvements to the Site;
- Adapt the Site's presentation according to your display preferences;
- Identify the Services and sections visited and more generally to gain information about your browsing behavior.
- Customize Services, content and banners on the Site;
- Display customized promotions and/or adverts on the Site
The Site may also contain cookies placed by third parties. This Privacy Policy does not contain any information relating to these Cookies, and we recommend that you contact the third parties concerned to find out their own Privacy Policy.
(i) Accepting cookies
In order to run smoothly, some personalized Services on the Site may use temporary cookies or other similar technology that require your consent before they are saved on your personal computer.
You may accept the use of these cookies at any time in accordance with the Applicable Regulations.
(ii) Blocking or disabling cookies
We inform you that if you agree to the use of these cookies, you may withdraw your consent at any time. You can disable or delete cookies in your browser settings.
If your computer's browser is set to refuse them, you can still browse the Site but access to certain Services may be altered or unavailable. A.S.O. cannot be held responsible for any malfunction of the Site or the alteration of Services caused by blocking cookies.
An option to disable third-party cookies but continue to accept the cookies that we place on your personal computer is also available.
(iii) Controlling and managing cookies
To manage the use of cookies on your PC, please consult your browser manual to adjust your settings to suit your needs. Configuration may differ depending on the browser:
-Internet Explorer:
https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
- Safari:
https://support.apple.com/kb/PH21411?locale=en_US
- Chrome:
https://support.google.com/accounts/answer/61416?hl=en
- Firefox:
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
- Opera:
http://help.opera.com/Windows/10.20/en/cookies.html
For other browsers, you are invited to contact the manufacturer and consult the appropriate documentation.
You can also opt out of the following cookies on your personal computer:
- Google Analytics:
https://tools.google.com/dlpage/gaoptout?hl=en
- AT Internet:
https://www.atinternet.com/en/company/data-protection/update-my-preferences/
III. What are your rights in terms of Data protection?
Pursuant to the Applicable Regulations on the protection of Personal Data, and in particular the amended French Data Protection Act no. 78-17 dated 6 January 1978, you are entitled to query, access, correct, oppose and remove any Data held about you, either by A.S.O. for the purposes of your account, or by the Organizer in connection with your participation in an Event, for legitimate reasons, and may also object to unsolicited marketing.
When it comes to your user account Data, you may exercise all of your rights by emailing A.S.O. at the following address: informatique-et-libertes@timeto.com, or by sending a letter to:
Informatique et Libertés
A.S.O.
40-42 Quai du Point du Jour,
92100 Boulogne-Billancourt
You can thus request access to your Data and obtain the details of all the information we hold about you in an accessible and readable format.
You may ask to amend, rectify or update any Data about You that is inaccurate or incomplete. You have the option to change some of your Data directly by accessing your profile.
You can request the deletion or removal of all or part of your Data free of charge, within the limit of the obligations that apply to us, in accordance with the Applicable Regulations. Should you wish to delete any of your Data on your account, please be advised that this deletion can only take place once the Event for which you are registered has taken place. Otherwise, the Organizer will not be able to effectively communicate with you to give you the information your need for the Event or to provide you with Services, which you acknowledge and therefore release the Organizer from any and all responsibility.
As of 25 May 2018, you have the right to Data portability, and to receive your personal Data in a format that can be easily reused.
If you are affected by telephone marketing, you can also object to the use of your phone number by signing up for free on the website www.bloctel.fr.
If you are affected by email marketing, you can change your preferences by logging into your profile or unsubscribing from newsletters by clicking on a dedicated link in each newsletter.
If you are affected by SMS marketing, you can unsubscribe by sending the message "STOP SMS" to 36007.
Your requests will be processed within a maximum of forty-eight (48) working hours, except for requests sent by post, which require a processing time of eight (8) days.
You also have the right to give instructions regarding the storage, deletion and communication of your Data after your death.
Finally, you have the right to lodge a complaint with the Commission Nationale Informatique et Libertés (French Data Protection Authority).
You can exercise these rights by sending:
- a letter to Informatique et Libertés. A.S.O. 40-42 Quai du Point du Jour, 92100 Boulogne Billancourt, France
- or an email to the address informatique-et-libertes@timeto.com
The contact details for the data protection officer are as follows:
You are advised that a copy of your I.D. will be required to verify your identity. This information will be kept for one year after it is sent to A.S.O.
IV. How do we protect your Data?
In accordance with the Applicable Regulations on the protection of personal data, we take all appropriate technical and organizational measures to ensure your Data is protected. We impose the same level of restriction on the providers we work with.
You are responsible for the confidentiality of the username and password that you choose when signing up to the Site.
You agree to take any necessary confidentiality and protection measures to guarantee access to your account, and not to disclose this username or password to third parties.
V. Changes to the Privacy Policy
This Privacy Policy may be subject to change. These changes will come into effect upon publication of the new version of the Privacy Policy on the website www.timeto.com.
You will be notified of the publication of the new Privacy Policy on the Site homepage or by email. We recommend that you read the policy regularly to stay abreast of any changes.
VI. Contact
For any questions relating to this Privacy Policy, please send a letter to Informatique et Libertés. A.S.O. 40-42 Quai du Point du Jour, 92100 Boulogne Billancourt, France or email informatique-et-libertes@timeto.com.
