Data protection policy

In particular, the purpose of the present document is to provide the User with the legally required information, which is as follows (said information also being notified to the User before his or her personal data is collected, and separately from any other information, in accordance with the provisions in force):

1. Identity and contact details of the personal data controller (hereinafter the “controller”
   The identity and contact details of the data controller are as follows: Association Athletes For Transparency, registered in the Lyon Trade and Companies Register under SIRET number 493 582 282 000 23 and whose registered office is located at 03 cours Herbouville 69004 Lyon.
2. Contact details for the Data Protection Office
   The contact details of the data protection delegate are as follows: Nicolas Gehin, 6 boulevard des Monts d'Or - 69580 SATHONAY-CAMP
   Users' requests concerning personal data may be addressed via the Personal Data Access page.
3. Purposes of processing
   The purposes of the processing of personal data are as follows:
1. identification of persons ordering and/or using Documents via the Site and/or services accessible via the Site
2. production and/or delivery by VERITABLE® of Documents and/or services used and/or ordered by the User
3. administration of the services and/or Documents ordered and/or used by the User
4. prospecting and/or sending information to Users.
   
   
4. Legal basis for processing
   
   The legal basis for processing is as follows:
   
   
   1. processing is necessary for the performance of the contractual relationship that the User wishes to enter into with VERITABLE® by ordering and/or using services and/or Documents, said personal data being necessary for the performance of the services ordered by the User.
   2. the processing is also necessary to protect the legitimate interests of VERITABLE® by enabling it to keep proof of transactions with the User and/or, where applicable, to proceed with debt collection
   3. processing is based on the consent of the User wishing to order and/or use Documents and/or services via the Site
   4. the processing being administered in accordance with the provisions of Law n°78-17 of January 6, 1978 and EU Regulation 2016/679 of April 27, 2016 (RGPD) and other legal provisions in force (hereinafter the “Regulations in force”).
      
      
5. Recipients of personal data
   
   The recipients of personal data are : VERITABLE® staff in charge of carrying out and/or administering the services and/or Documents ordered and/or used by the User, the carrying out and/or delivery by VERITABLE® of the Documents and/or services and/or services ordered and/or used by the User and, where applicable, VERITABLE®'s subcontracted service providers participating in the carrying out of these missions and being brought to intervene in this respect on the processing (only when necessary), it being specified that in such a case this is carried out in compliance with the Regulations in force applicable to subcontractors.
   
   
6. Transfer of personal data
   
   The User is informed that the data controller may, if necessary, transfer his/her personal data to a third country or to an international organization subject to an adequacy decision issued by the European Commission, it being specified that, in the event of a transfer to a country or international organization not subject to an adequacy decision, then this may only be carried out on condition that appropriate safeguards are put in place and that the Users concerned have enforceable rights and effective means of redress, under the conditions of the Regulations in force.
   
   
7. Duration of storage of personal data :
   
   Personal data is stored for the following periods: as personal data is required for the provision, administration and/or delivery of services and/or orders placed via the Site, the User's personal data is stored for the following periods
   
   
   1. as long as the User is likely to be able to place orders, i.e. as long as the User has not expressed his or her intention to no longer be a VERITABLE® customer or to no longer have his or her personal data stored, by means of a request made by the User via the Personal Data Access page. 
   2. within the limit of a period of 36 (thirty-six) months from the last use of the Site by the User, at the end of which time the personal data will no longer be kept.
      
      
8. User rights that may be exercised with the data controller (as identified above)
   
   The purpose of the present document is also to inform the User of the existence of his right to ask the data controller (as identified above) :
   
   
   • access to your personal data and any available information about its source;
   • rectification or deletion of personal data;
   • limitation of the processing of personal data
   • the User's opposition to the processing of his/her personal data;
   • the User may object at any time to the processing of his/her personal data for canvassing purposes, including profiling;
   • the portability of their personal data under the conditions of current regulations, which stipulate in particular that persons concerned by the processing of personal data have the right to receive the personal data concerning them that they have supplied to a data controller, in a structured, commonly used and machine-readable format, and have the right to transmit this data to another data controller without the data controller to whom the personal data has been communicated being able to prevent this, where:
     
     
     1. the processing is based on consent in application of the regulations in force, or on a contract in application of the regulations in force, and
     2. where the processing is carried out using automated procedures, it being specified that when the data subject exercises his/her right to the portability of his/her personal data, he/she has the right to have his/her personal data transmitted directly from one data controller to another, where technically possible.
        
        
   • the withdrawal by the User, at any time, of his/her consent to the processing of his/her personal data (without affecting the lawfulness of the processing based on the consent given prior to the withdrawal of such consent);
     
     The exercise by the User of his rights as identified in the present (h) is carried out by means of a request made by him on the Access to Personal Data page. 
     
     Insofar as necessary, it is stipulated that the exercise by a User of his right to the deletion of his personal data and/or the exercise of his right to object to the processing of his personal data and/or the exercise of his right to a limitation of the processing of his personal data and/or his right to withdraw his consent at any time to the processing of his personal data (in accordance with the aforementioned stipulations) leads to the delivery of the services and/or Documents ordered and/or used by the User not being possible and, more generally, to make it impossible to provide the services ordered and/or used, so that, in such cases
     
     
     • once the User has exercised said rights, he/she will no longer be able to access the services provided by VERITABLE via the Site
     • if these rights are exercised at the time of ordering services or Documents, then the said order cannot be placed by the User
     • and, if the User is the holder of a subscription contract, the User's account containing his/her personal data will be deleted.
       
       
9. Complaints to the CNIL
   
   The User is informed of the right to lodge a complaint with the supervisory authority, which is the Commission Nationale de L'Informatique et des Libertés (CNIL): 3 Place de Fontenoy - TSA 80715 - 75334 Paris 07.
   
   
10. Information on the contractual nature of the supply of personal data
    
    In order to provide the User with information on whether the requirement to provide personal data is of a regulatory or contractual nature or whether it is a condition for the conclusion of a contract and whether the person concerned is obliged to provide personal data, as well as on the possible consequences of not providing such data, the User is informed of the following:
    
    
    1. the request to provide personal data is contractual in nature (within the framework of the relationship that the User wishes to establish with VERITABLE® by placing an order for services or Documents and/or by using said services)
    2. the provision of this data, insofar as it is necessary for the provision of the services ordered, is a condition for the conclusion of this contractual relationship.
    3. in this respect, the User is obliged to communicate his personal data if he wishes to order and/or use services and/or Documents from VERITABLE® and via the Site
    4. failure to provide this personal data will not allow the User to order services and/or Documents from VERITABLE®.
       
       
11. Automated decision-making
    
    The personal data collected is not used to make automated decisions within the meaning of current regulations.
    
    
12. Possible further processing of personal data
    
    In the event of further processing of personal data for purposes other than those for which the personal data was collected and as identified above, the data controller (identified above) will provide the data subject with prior information about this other purpose and any other relevant information required by law.