PRIVACY AND COOKIE POLICY
A.R.E.N.A, a simplified joint-stock company with a capital of 170,270 euros, registered with the Evry Trade and Companies Register under number 434 657 961, with its registered office at Immeuble Carnot Plaza, 16 avenue Carnot, 91300 Massy (hereinafter “We” or “the Company”) publishes and operates the website alliance-arena.com (hereinafter, the “Site”).
The Company, in its capacity as data controller within the meaning of applicable regulations regarding the protection of personal data, attaches great importance to the protection and respect of your privacy.
This Privacy Policy is intended to inform you, in accordance with Regulation (EU) No. 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”), about our practices regarding the collection, use, and sharing of the information you provide to us through our Site.
The purpose of this document is to inform you about the categories of personal data we collect about you, how we use it, with whom we share it, how we protect it, and the rights you have regarding your personal data in accordance with applicable regulations.
1. THE DATA WE COLLECT
By using our Site, you provide us with information, some of which is capable of identifying you and therefore constitutes personal data (hereinafter referred to as the “Data”).
This information includes the following Data:
• Contact Data: this refers to the Data you provide in contact forms (last name, first name, company, email, personal information in your message).
• Data related to your browsing on our Site: this refers to the Data we collect via cookies and other trackers placed on your device while you browse our Site, such as the date and time of connection and/or browsing, the type and version of the browser, the browser language, your IP address, or data related to your shopping cart. For further information, please refer to Section 8 “Cookie Management” below.
We collect your Data only when it is adequate, relevant, and limited to what is necessary in light of the purpose of its processing (purpose). In this regard, we commit to collecting only the minimum amount of Data necessary for the purposes detailed in Article 2 of this Privacy Policy.
Furthermore, when collecting your Data, you will be informed whether certain Data must be provided or is optional, in accordance with applicable regulations.
2. PURPOSES AND LEGAL BASES FOR THE PROCESSING OF YOUR DATA
We use your Data for the purposes listed below, and in accordance with the following legal bases:
Purposes | Legal Basis |
|---|---|
| Receipt and management of information requests | Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR) |
| Management of the operation and maintenance of our Site | Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR) |
| Implementation of security measures on our Website | Legitimate interest pursued by the data controller (Art. 6.1.f of the GDPR) |
| Management of our administrative obligations | Legal obligation (Art. 6.1.c of the GDPR) |
| Processing requests to exercise your rights regarding your Data | Legal obligation (Art. 6.1.c of the GDPR) |
3. RECIPIENTS OF YOUR DATA
The Data we collect, as well as any Data collected subsequently, is intended for us in our capacity as the data controller.
We ensure that only authorized persons (including our staff members) have access to your Data. Our processors/service providers may receive this Data to perform the services we entrust to them.
3.1. DATA TRANSMITTED TO AUTHORITIES AND/OR PUBLIC BODIES
In accordance with applicable regulations, your Data may be transmitted to competent authorities upon request, as well as to public bodies, court officers, ministerial officers, debt collection agencies, and government agencies, exclusively to fulfill our legal obligations, as well as in the event of investigations into the perpetrators of offenses committed online.
3.2. DATA TRANSMITTED TO THIRD-PARTY RECIPIENTS
We may also be required to share your Data with other recipients, including, in particular, our technical service providers.
We only transmit to these recipients the Data they need to perform their services, and we require that they not use your Data for any other purposes. When acting as processors under the GDPR, these recipients process your Data in accordance with our instructions and are contractually obligated to ensure the same level of security and confidentiality for your Data as we do, as well as to comply with applicable regulations on the protection of personal data.
4. DATA RETENTION PERIODS
Your Data is not retained beyond the period strictly necessary to achieve the purposes set forth in this Privacy Policy, in accordance with the GDPR and applicable regulations.
In this regard, the Data we use to respond to your requests for information is retained for the duration of the processing of your request and then archived for evidentiary purposes.
With regard to cookies and other trackers, the retention period is the statutory period of 13 months.
In any event, your Data is deleted from our active databases or anonymized when their retention periods expire. However, your Data may be archived beyond the specified periods for the purposes of investigating, detecting, and prosecuting criminal offenses, solely to enable, if necessary, the provision of your Data to judicial authorities. Your Data is also archived for evidentiary purposes for the duration of the applicable statutory limitation periods.
Archiving means that your Data will no longer be accessible online but will be extracted and stored on a separate, secure medium.
5. INTERNATIONAL TRANSFERS OF YOUR DATA
Your Data is hosted within the European Union.
However, when using certain technical service providers, your Data may be transferred outside the European Economic Area (EEA).
In the event of a transfer of your Data outside the EEA, we ensure that this transfer is carried out securely and in compliance with applicable regulations:
• Either by transferring your Data to a recipient located in a country that has been the subject of an adequacy decision by the European Commission certifying that it provides an adequate level of protection;
• Either by implementing, or having our service providers implement, the Standard Contractual Clauses approved by the European Commission as ensuring an adequate level of protection for your Data;
• By relying on Binding Corporate Rules validated by the competent data protection authorities;
• Or by relying on any appropriate safeguards referred to in Article 46 of the GDPR.
If you have any questions regarding the international transfer of your Data, please do not hesitate to contact us at the following address: gdpr@alliance-arena.com
6. THE SECURITY MEASURES WE IMPLEMENT
As the data controller, we take all reasonable precautions to preserve the security and confidentiality of your Data by implementing organizational, technical, software, and physical measures, and we require our service providers to do the same.
In this context, we require our staff and service providers to comply with strict rules regarding security and data protection (such as confidentiality obligations, the use of encryption and anonymization techniques, the implementation of logical and physical security measures, etc.).
7. YOUR RIGHTS
In accordance with applicable regulations regarding the protection of personal data, you have a number of rights regarding your Data, namely:
• A right of access and information: through this privacy policy, you are informed in a concise, transparent, intelligible, and easily accessible manner about how your Data is processed by the Company. You also have the right at any time to (i) obtain confirmation that Data concerning you is being processed by the Company and, if applicable, (ii) access such Data and obtain a copy of it.
• Right to rectification: You have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to supplement your Data if necessary, by providing an additional statement. If you exercise this right, we undertake to communicate any rectification to all recipients of your Data.
• Right to erasure: You have the right to have your Data erased. However, this is not an absolute right, and we may retain your Data to comply with our legal obligations or for legitimate reasons that will be communicated to you.
• The right to restrict processing: You have the right to obtain the restriction of processing of your Data. If you contest the accuracy of the Data we use or object to the processing of your Data, we are authorized to verify or review your request for a certain period of time. During this period, you may ask us to suspend the use of your Data.
• Right to data portability: You have the right to receive the Data you have provided to us in a structured, commonly used, and machine-readable format for your personal use or to transmit it to a third party of your choice. This right applies only when the processing of your Data is based on your consent or a contract and is carried out by automated means.
• Right to object to processing: You have the right to object at any time to the processing of your Data for processing based on our legitimate interest. This is not an absolute right, and we may, for legal or legitimate reasons, refuse your request to object. You also have the right at any time to object to the processing of your Data for marketing purposes
• The right to withdraw your consent at any time: you may withdraw your consent to the processing of your Data at any time when such processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on your consent prior to such withdrawal.
• The right to file a complaint with a supervisory authority: You have the right to file a complaint with the competent supervisory authority (in France, the CNIL) if you believe your rights have not been respected.
To exercise these rights, you may contact us at the following address: gdpr@alliance-arena.com
If there is any doubt regarding your identity, we may ask you to provide proof of identity in order to exercise these rights.
8. COOKIE MANAGEMENT
8.1. STATEMENT REGARDING THE USE OF COOKIES
When you visit our Site, cookies are stored on your computer, tablet, or any device you use. This allows us, in particular, to analyze page traffic and improve our Site. Cookies are used differently depending on their nature and the purposes for which they are used, as indicated below.
You have the option to accept or refuse cookies by using the mechanism built into the banner on our Site or the tools described below.
8.2. WHAT IS A COOKIE?
A cookie (hereinafter the "Cookie(s)") is a text file stored on your device when you visit our Site. A Cookie is primarily intended to collect information regarding your browsing activity on the Site.
8.3. WHAT TYPES OF COOKIES DO WE USE AND FOR WHAT PURPOSES?
Various types of Cookies are used on our Site, each serving different purposes. Some are necessary to use the Site, while others are optional depending on your preferences.
a. Strictly necessary technical cookies
These cookies are necessary for the Site to function. They allow you to use the Site’s main features. Without these cookies, you cannot use our Site normally. These cookies require only that users be informed before they are placed on their device and do not track your browsing activity. These include cookies that:
• Save your preferences regarding the placement of cookies;
• Authenticate you with a service, including services designed to ensure the security of the authentication mechanism (for example, by limiting automated or unexpected access attempts).
b. Functional personalization cookies
These cookies personalize your experience on our Site by remembering your preferences, and in particular allow:
• Adapting the presentation of our Site to your device’s display preferences (language used, screen resolution, operating system, etc.) during your visits, depending on your hardware and browser;
• Implementing security measures, for example when you are asked to log in again to access content or a service after a certain period of time has elapsed.
c. Audience Measurement Cookies
Audience measurement cookies help compile statistics on traffic and usage of the various elements comprising our Site (sections and content visited, navigation paths). They allow us, in particular, to improve the Site’s relevance and usability.
8.4. HOW CAN YOU MANAGE COOKIES?
a. Managing the placement of third-party cookies
When you first log in, you are informed that our partners and any other identified third parties may place cookies via the Site. Only the issuer of a cookie can read the information contained therein, and we have no access to cookies that third parties may use. The placement and use of cookies by third parties are subject to those third parties’ privacy policies in addition to the provisions of this privacy policy. Consequently, you are invited to visit the websites of these third parties for more information about the cookies they store and how you can manage them.
b. Managing the placement of first-party cookies
Users can manage the placement of cookies as follows:
• The placement of strictly necessary technical cookies is enabled by default and cannot be disabled by you, as these cookies are essential for the operation of our Site;
• You can disable or enable the placement of cookies subject to consent (such as audience measurement cookies) via the information banner on our Site. Any disabling constitutes the user’s refusal of the placement of the cookie in question.
If you enable the storage of cookies on your device, cookies embedded in the pages and content you have viewed may be temporarily stored in a dedicated space on your device. They will be readable there only by their issuer. Your consent is valid for a period of six (6) months from the first time a cookie is placed on your device.
If you disable cookies on your device or browser, or if you delete those stored there, please note that your browsing experience on our Site may differ from that of other users who have enabled cookies (non-personalized content).
c. For more information
You can visit the CNIL website to find information about cookies, particularly on the following page: www.cnil.fr/fr/site-web-cookies-et-autres-traceurs.
You can also visit the Youronlinechoices website, provided by digital advertising professionals who are members of the European Digital Advertising Alliance (EDAA) and managed in France by the Interactive Advertising Bureau France. You can then choose to accept or decline the cookies used by the companies listed on the site, in order to customize the ads displayed on your device, via the following link: www.youronlinechoices.com/fr/controler-ses-cookies/.
9. CHANGES TO OUR PRIVACY POLICY
We may occasionally modify this policy to comply with any regulatory, legal, editorial, or technical changes. If so, we will update the “Last Updated” date and indicate the date on which the changes were made. We recommend that you check this page regularly to review any changes or updates to our privacy policy.
10. CONTACT
For any questions regarding this policy or for any requests regarding your Data, you may contact us at the following address: gdpr@alliance-arena.com
*
Version updated on: 01/01/2026