Personal data protection
The association processes members' data to manage memberships, licences and the safety of everyone training. This page sets out exactly what is collected, why, and how to exercise your rights.
What we collect and why
- Managing your membership
- Name, date of birth, address, email and phone number. Needed to set up the membership and the federation licence.
- Legal basis: Performance of the membership contract
- Parental authorisation for minors
- The legal guardians' identity and contact details, and their electronic signature on the parental authorisation. Where a teenager registers on their own, a link is sent to their guardian to collect that signature.
- Legal basis: Legal obligation and performance of the contract
- Medical information
- A medical certificate and, if you choose to provide it, information that matters in an emergency (allergies, medication). Visible only to the committee and the relevant coaches, never published.
- Legal basis: Vital interests and the legal requirements of sport
- Membership payment
- Amount due, payment method, reference and date received. The club stores no bank details belonging to members.
- Legal basis: Performance of the contract and accounting obligations
- Profile photo
- Optional. Used for the internal roster so coaches can recognise who they are training. Stored privately, never publicly accessible, and removable at any time.
- Legal basis: Consent
- Image rights
- Your choice about publishing photos taken at training and competitions: allowed, refused, or allowed with your face blurred. Changeable at any time.
- Legal basis: Consent
- Training attendance
- Attendance history, used to follow groups, to know who was present if there is an accident, and to count sessions on the pay-per-session option.
- Legal basis: Legitimate interests of the association
No biometric data
The club collects no biometric data today: no facial recognition, no fingerprints. A check-in terminal is under consideration for later; if it goes ahead it will come with specific information, separate explicit consent, and an equivalent alternative (badge or code) for anyone who would rather not use it.
How long we keep data
Membership data is kept for the season and then three years, so re-registration and licence obligations can be handled. Accounting records are kept for ten years, as the law requires. Medical certificates and photos are deleted when membership ends, or on request.
Who can see the data
Only committee members and, for what they need, the coaches. Data is hosted with Vercel Inc. and stored with Supabase (AWS eu-west-3, Paris). The federation receives strictly what it needs to issue licences. No data is sold or passed on for commercial purposes.
The site carries no advertising trackers and no analytics tools. The only cookies used keep you signed in when you log in.
Your rights
- See the data the club holds about you or your child
- Have inaccurate information corrected
- Ask for your data to be deleted, subject to accounting and legal obligations
- Ask for processing to be restricted
- Receive your data in a readable format
- Withdraw consent for your photo or image rights, without affecting your membership
To exercise these rights, email the committee: mma.saintlouis.fr@gmail.com
If the club's answer does not satisfy you, you can complain to the CNIL (www.cnil.fr).