PRIVACY POLICY LMEM
Le Mans Endurance Management (the “Company”) places the highest priority on the protection of users’ personal data, which is collected and processed in compliance with the French Data Protection Act of January 6, 1978, and with European Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”).
1. Data Controller and Data Processor
The Company Le Mans Endurance Management acts as the Data Controller with respect to the data collected on the website fiawec.com (the “Site”).
2. Personal Data Processed and Methods of Collection
Personal Data Processed by the Company | Identification | Title, Last Name, First Name, Date of Birth |
Contact Information | Country, Email Address, Phone Number | |
Payment Information | Payment Card Data | |
Browsing Data | IP Address, Date and Time of Site Access, Pages Visited | |
Methods of Collection | Direct Collection | Account Registration and Site Login Forms |
Use of the Site | ||
Online Payment Solution | ||
Contact Form | ||
Newsletter Subscription | ||
Cookies – While browsing the Site, cookies may be installed on your device (see the Cookies Appendix for more information). |
3. Purposes - Legal Bases - Retention Periods
The Company processes the personal data of data subjects for specific purposes, based on different types of legal grounds. The retention periods for personal data depend on the purpose for which the data is processed.
If a data subject’s personal data were to be processed for purposes other than those originally specified, the Company undertakes to inform them and, when required by the GDPR, to obtain their prior consent.
LEGAL BASES | PURPOSES | RETENTION PERIODS |
Performance of Pre-Contractual Measures | Creation of a Customer Account, Customer Relationship Management, and, where applicable, the Creation of a Prospect Record | For the duration of the contractual relationship (until the account is deleted by the user, or after 2 years of account inactivity), or, for users without an account, for three years from the date of collection by the Company or from the last contact initiated by the prospect. |
Performance of Pre-Contractual Measures or of the Contract | Communication with Prospects and/or Customers, in particular for the purpose of responding to inquiries and requests for information regarding the Company’s activities and offered products or services | For the duration of the contractual relationship. |
Creation of an Account on the Site | ||
Performance of the Contract | Conclusion, Execution, Processing, Management, Invoicing, and Payment of Service Orders | For the duration of the contractual relationship. |
Sending Informational Documents via Electronic Communication (Email, SMS, etc.) | ||
Provision by Third Parties of Technical, Logistical, or Other Services on Its Behalf (including Online Payment Solutions, Accounting, etc.) | ||
Consent | Improvement of the Offer, by Inviting Customers to Participate in Surveys, Studies, and Satisfaction Questionnaires | For the duration necessary to achieve the purpose of the study, or until the exercise of the right to object or withdrawal of consent |
Sending Personalized Offers via Electronic Communication (Email, SMS, etc.) | Until the withdrawal of consent or, at the latest, 3 years from the last contact of the individuals with the Company. | |
Sending Newsletters | ||
Commercial Prospecting | ||
Creation and Management of Events Related to the Company’s Activities (Trade Shows, Annual Events, Contests) | ||
Geolocation for the Purpose of Service Accessibility | For the duration of the geolocation necessary for the provision of the Service. | |
Legitimate Interest | Development of Commercial and User Statistics | For the duration necessary to achieve the purpose of the statistics, or until the exercise of the right to object. |
Management of Any Amicable or Contentious Proceedings and Establishment of Proof of Our Obligations | For the duration of the contractual relationship, and the duration of any potential proceedings, extended by the applicable appeal periods. | |
Use of Cookies or Trackers for the Proper Functioning of the Site (see Cookies Appendix) The purposes of each cookie implemented on the Site can be viewed on the consent management platform. | For 06 months | |
Legal Obligation These personal data are retained for a longer period for the purpose of complying with applicable legal and regulatory obligations and/or to ensure the establishment, exercise, or defense of the Company’s legal rights during the applicable limitation period. | Processing of Warranty Claims | In accordance with mandatory legal and regulatory provisions (including limitation periods), for up to 10 years in intermediate storage. |
Management of Users’ Rights Regarding the Processing of Their Personal Data | ||
Compliance with Accounting, Tax, and Social Regulations and Anti-Fraud Measures |
4. Recipients of Your Personal Data
Personal data are processed within the Company.
They may be disclosed to external recipients, solely for the purposes previously mentioned and strictly to the extent necessary to carry out the tasks entrusted to them and/or to comply with legal and regulatory requirements.
This includes, in particular:
· Technical IT Service Providers ;
· Marketing Service Providers ;
· Ticketing Service Providers ;
· Processors, in particular the following categories: accounting firms, banking institutions and online payment service providers, technical IT service providers, and cookie providers (for this, please refer to the Cookies Appendix) ;
· Legally Competent Authorities: social and tax authorities, and any judicial authorities authorized under applicable legal and regulatory provisions.
The data are hosted within the European Union by Google Ireland Limited.
5. Security – Transfer Outside the EU
All necessary measures are implemented to ensure the confidentiality, integrity, and security of personal data, including with respect to processors, taking into account the risks involved, in order to prevent personal data from being altered, damaged, or accessed by unauthorized third parties.
Personal data are stored within the European Union. However, in the context of transferring personal data to certain recipients, transfers outside the European Union may occur. In such cases, appropriate measures in accordance with the GDPR are implemented to ensure that the recipients provide a level of security comparable to that resulting from compliance with the GDPR and offer the required safeguards in this regard.
6. Users’ Rights
Users have the following rights regarding their data processed by the Company on the Site:
· Right to Erasure (Delete Your Data) ;
· Right of Access (Verify the Data the Company Holds About You) ;
· Right to Rectification (Correct Inaccurate Information About You) ;
· Right to Object (Object at Any Time to the Company Using Your Data);
· Right to Restrict Processing (Freeze the Use of Your Data) ;
· Right to Data Portability (Take a Copy of Your Data to Reuse Elsewhere) ;
· Right to Set Post-Mortem Directives Regarding the Retention, Erasure, and Disclosure of Your Data
7. Contact
Rights may be exercised by submitting a complete request to the Company, accompanied by proof of identity, to the following addresses:
CIRCUIT DES 24 HEURES F-72019 LE MANS CEDEX 2 |
The request must include your first and last names and email address. Except in justified exceptional circumstances, this request will receive a response within one month of receipt.
Finally, users have the right to lodge a complaint with the CNIL:
CNIL - 3 PLACE DE FONTENOY, TSA 80715, 75334 PARIS CEDEX 07 |
If users no longer wish to receive the Company’s news, solicitations (by phone, SMS, postal mail, or email), and invitations, they may indicate this via the dedicated link, modify their preferences by contacting the Company as described above, or, if applicable, by adjusting the settings of their online account.
If users do not wish to be contacted for marketing purposes by phone, they can register free of charge on a do-not-call list called BLOCTEL: https://www.bloctel.gouv.fr/.
COOKIES APPENDIX
The Site uses tracking technologies that perform write and/or read operations on the user’s device and collect data. For simplicity, the term “cookies” refers to all tracking technologies that may be used.
There are several categories of cookies, each serving different purposes :
· Technical Cookies: These cookies help make the Site usable by enabling basic functions such as page navigation. The Site cannot function properly without these cookies ;
· Audience Measurement Cookies: These cookies help measure the number of visitors, understand their interaction with the Site, and improve it ;
· Social Media Cookies: These cookies are related to services provided by third-party sites, such as “Like” or “Share” buttons or multimedia content players. The social network providing such a button may be able to identify the user through this button, even if the user does not interact with it while browsing the Site;
· Advertising Cookies: These cookies are used to display advertisements that may match the user’s interests, by personalizing the advertising and the Site’s content.
Cookies may be set by the Company or by third parties. In the latter case, if the user is informed and their consent is obtained prior to their placement on the Site, the Company does not have direct control over these cookies. Users are encouraged to refer to the privacy policies of the third-party cookie providers.
2. Rights Regarding Cookies
a) Consent to the Placement of Cookies
In accordance with applicable provisions and the CNIL’s recommendations, no cookies are placed if the user has not previously consented to their placement (except for strictly necessary cookies). Explicit consent is obtained through a mechanism informing the user of the cookies used, their data controllers, their purpose, how to accept or refuse them, the consequences of refusal or acceptance, and the existence of the right to withdraw consent.
The validity period of the user’s consent to cookies is a maximum of 6 months, and upon expiration, consent is requested again.
Some cookies are considered strictly necessary for the provision of the service and are exempt from consent, including:
Those that store the users’ choices regarding the placement of cookies ;
Those intended for authentication with a service ;
Those that enable load balancing of the equipment of a communication service ;
Certain audience measurement cookies (if they meet specific conditions).
b) Opting Out of Cookie Placement
In any case, the user may withdraw their consent at any time by opting out of cookie placement. When the user objects to the installation or use of a cookie, a refusal cookie is placed on their device.
· Browser Settings
The user can configure their browser regarding cookies, in order to refuse or accept certain categories of cookies via the following links:
§ Safari
§ Android
· Settings for Cookies Placed by Third Parties
The user can object to the placement of third-party cookies. For example, to disable the Google Analytics cookie, it is possible to download an add-on.
· Settings for Personalized Advertising Cookies by the Interprofessional Platform « Youronlinechoices »
The user can access the YourOnlineChoices website, offered by digital advertising professionals grouped within the European Digital Advertising Alliance (EDAA) and managed in France by the Interactive Advertising Bureau France; this allows users to see the companies registered on this platform and to refuse or accept the cookies used by these companies to tailor advertisements displayed on the users’ devices based on their browsing information.
This European platform is shared by hundreds of online advertising professionals and serves as a centralized interface allowing the user to express their refusal or acceptance of cookies that may be used to tailor advertisements to the browsing on their device. This procedure will not prevent advertisements from being displayed on visited websites, but will only block the technologies that allow ads to be personalized.
3. Details of Cookies Used on the Site
For more information about the cookies used, their data controllers, their purpose, and how to accept or refuse them, please click here.
