Politique de confidentialité

Pursuant to French legislation and European Regulation 2016/679 (hereinafter, the "Privacy Regulation"), the Data Controller, STIGA SAS, with registered office in 54 avenue du Général Leclerc, 92100 Boulogne-Billancourt (hereinafter, referred to as “STIGA” or “Company”), provides this privacy notice to inform you about the processing of the personal data (name, surname, e-mail address, zip code) provided when completing the Participation Form to the initiative called “STIGA x Stade Toulousain” (the “Initiative”) and on the rights that are granted to You.

Your personal data (name, surname, e-mail address, zip code) will be processed to manage your participation in the Initiative, including prize delivery; the legal basis is the performance of contractual obligations and related legal requirements. Providing this data is mandatory; failure to do so will make participation impossible. Your personal data will be retained for a period of 90 days following the end of the Initiative, after which it will be destroyed or rendered anonymous, unless a longer period is required by applicable law.

With your consent, STIGA may process your contact data to provide promotional information on products and services via emails and newsletters. Providing data for marketing purposes is optional; refusal will not affect your participation in the Initiative but will prevent you from receiving updates. Your data will be retained for this purpose for a maximum period of three (3) years from your last interaction with STIGA, or until you withdraw your consent, whichever occurs first. You may withdraw consent at any time by emailing unsubscribe@stiga.com or clicking the link in any promotional email. Upon withdrawal or expiry of the retention period, the data will be destroyed or rendered anonymous.

Personal Data will be processed primarily using electronic means under the authority of the Data Controller, by specifically designated, authorized, and trained individuals (pursuant to Article 29 of the Privacy Regulation). We inform you that appropriate security measures have been implemented, also pursuant to Articles 5 and 32 of the Privacy Regulation, to prevent data loss, unlawful or improper use, and unauthorized access.

Without prejudice to disclosures made in compliance with a legal, regulatory, or EU law obligation; disclosure, even though simple consultation or provision, of your personal data may be made to the following entities:

a. entities, supervisory bodies, authorities, or public institutions, where required by law or upon their request

b. external consultants, agencies, individuals, and companies utilized by the Controller to perform activities connected, instrumental, or consequential to the fulfilment of the processing purposes mentioned above;

c. subsidiaries, controlling entities, or affiliates of our Company, located in European Countries, including STIGA S.p.A. (Italy), acting as Data Processor for marketing activities.

The entities referred to in points a) operate as independent data controllers; while the entities referred to in points b) and c) operate as external data processors. The updated list of designated Data Processors can be provided upon request by the data subjects by contacting us at privacy@stiga.com.

You may exercise the rights set forth in Articles 15 et seq. of the Privacy Regulation at any time, including access, rectification, transformation, blocking, erasure, and restriction of processing, in the manner established by Article 12 of the Privacy Regulation, by contacting us at privacy@stiga.com.

In the event of failure to provide a timely response or an inadequate response from the Company, or if you believe there has been a violation of the Privacy Regulation, you may lodge a complaint with the French data protection authority (Commission Nationale de l’Informatique et des Libertés – CNIL), by sending a notification to: CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07; or via their website www.cnil.fr.

We remain at your disposal for any clarification or request for information regarding the processing of your data.