Privacy Policy
PRIVACY POLICY
We attach great importance to the protection of personal data.
The purpose of this privacy policy ("Privacy Policy") is to inform users of our website (the "Site"), our customers, prospects, candidates, partners and co-contractors ("you") of how their personal data may be processed in the context of our relationship.
The Privacy Policy complies with the legal provisions applicable to the protection of personal data and in particular those-defined by law n°78-17 of January 6, 1978, known as the "Loi Informatique et Libertés" and by the General Regulation for Data Protection n°2016/679 ("GDPR").
We reserve the right to modify this privacy policy at any time in order, in particular, to comply with current regulations.
1.WHO IS THE DATA CONTROLLER?
The data controller is the company LegendaryPlays, SAS registered in the Paris Trade and Companies Register under number 912 253 457, and whose registered office is located at 32 rue de Ponthieu, 75008 Paris.
2.HOW DO WE PROCESS YOUR DATA?
Purposes | Legal basis | Retention periods |
Management of commercial prospecting | Our legitimate interest in sending you e-mails relating to products you have already purchased on our Site (the "Client"). Your consent if you have not yet purchased products (the "Prospect"). | For Prospects: your data is kept for a period of three (3) years from the last interaction we have had with you. For Clients: your data is kept for a period of three (3) years from the end of our contractual relationship. |
Responses to information and contact requests | Our legitimate interest in responding to your requests for information. | Your data will be kept for as long as it takes to process your request for information. |
Distribution of information about our latest news | Your consent when you subscribe to our newsletter. | Your data is kept until you unsubscribe from the newsletter. |
Management of the contractual relationship with our Clients. (Site account creation, Client relations follow-up, Plays Pack invoicing, etc.) | Performance of our General Terms and Conditions of Use and Sale (collectively, the “GT&C”). | Your data is kept for the duration of our contractual relationship. It is then stored in an intermediate archive for a period of five (5) years for evidentiary purposes. Invoicing data is kept for ten (10) years in accordance with applicable legal provisions. |
Management of the contractual relationship with our partners and co-contractors (contract management, invoicing) | Performance of the contract. | Your data is kept for the duration of our contractual relationship. It is then stored in an intermediate archive for a period of five (5) years for evidentiary purposes. Invoicing data is kept for ten (10) years in accordance with applicable legal provisions. |
Improvement of the Site (statistics) | Our legitimate interest in improving the functionalities of the Site. Your consent when required. | Cookies and other commercial tracers may be deposited on the User's terminal for a maximum period of thirteen (13) months. Information collected via cookies and tracers is kept for a period of twenty-five (25) months. After this period, the data is deleted or made anonymous. |
Setting up contests and advertising campaigns | Performance of the contract (conditions of the operation or rules of the competition game) | Your data is kept for the duration of our contractual relationship. They are then stored in intermediate archives for a period of five (5) years for evidentiary purposes. |
Candidate recruitment and constitution of a resume database | Our legitimate interest in processing, spontaneous or not, job applications. Your consent to keep your resume in a database. | Your data is kept for the duration of your application and then deleted. With your consent, we may keep your data for a further two (2) years. |
Management of data subject rights requests | Legal obligation | Data relating to the management of requests for rights are kept for as long as is necessary to process the request. It is then archived for the duration of the criminal statute of limitations applicable to intermediate archiving. |
3. HOW IS YOUR DATA COLLECTED?
The personal data processed is collected directly from you.
4.WHO ARE THE RECIPIENTS OF YOUR DATA?
Within the limits of their respective responsibilities and for the purposes set out in Article 2, the categories of recipients likely to have access to your data are:
Authorised staff in our various departments (authorised sales, marketing, IT and accounting staff);
Our payment service provider Shopify (https://www.shopify.com/legal/privacy)
The service provider responsible for hosting the Site (Google Cloud Platform);
The authorised personnel of our subcontractors;
Where applicable, the relevant courts, mediators, chartered accountants, statutory auditors, lawyers, bailiffs, debt collection companies;
Third parties likely to place cookies on your terminals when you give your consent.
Your data may also be made available to our commercial partners listed below, notably for commercial prospecting purposes. For more information on the use of your data by our partners and to exercise your rights with them, you can consult their privacy policy, available below.
We take your preferences into account and do not transfer any personal data without your consent or if you exercise your right to object in accordance with the indications set out in article 7.
Partner's identity | Purpose of transmission | Partner's privacy policy |
United Rugby Championship | Commercial prospecting, improving knowledge of Customers who have purchased URC digital collectibles | https://www.unitedrugby.com/privacy-policy |
Ligue Nationale de Rugby | Commercial prospecting, improving knowledge of customers who have purchased LNR digital collectibles | https://www.lnr.fr/page/politique-de-confidentialite |
5.IS MY DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?
Wherever possible, we give preference to subcontractors located within the European Union. However, we may transfer your data outside the European Union. These transfers are carried out in accordance with the provisions of the GDPR and we put in place all the guarantees required to secure your personal data, in particular by applying the European Commission's standard contractual clauses, supplemented by the implementation of additional guarantees.
For more information on data transfers outside the EU, you can contact us:
By post at the following address: Legendary Plays - 32 rue de Ponthieu, 75008 Paris
By e-mail at the following address: dpo@legendaryplays.com
6.COOKIES POLICY
6.1 – What is a cookie?
A cookie is a small text file stored on the hard disk of your terminal when you visit a website. It records certain information about your browsing or online behavior, enabling us to improve and facilitate your experience.
6.2 - Why do we use cookies?
The cookies used on the site serve to improve your browsing experience and the services we provide.
We use the following types of cookies:
Essential cookies: essential cookies are necessary for the operation of our site. They enable you to browse our site and use its services and features.
Analytical and statistical cookies: Analytical cookies collect or use information about how you use our site, helping us to improve it.
Social network cookies: these cookies provide sharing modules on social networks.
Marketing cookies: these are used to profile your interests and show you relevant advertising.
For more information on the types of cookies used, click here.
6.3 - How do I remove cookies?
Browser software on your computer, smartphone or other Internet terminal accepts cookies from websites by default.
However, you remain in control of how these cookies are installed, as you can configure your browser to:
Accept or refuse site cookies;
Systematically refuse all cookies;
Request your consent for each cookie you encounter while browsing the Internet.
To do this, simply refer to your browser software and follow its instructions. For example:
With Internet Explorer™: Tools (in the browser toolbar) ► Internet Options ► Privacy tab ►choose the desired level.
With Firefox™: Tools menu (in the top toolbar) ► Options ► Privacy tab ►choose the desired options.
With Chrome™: configuration menu (settings logo) ► Settings ► Privacy and security ► Site settings ► Cookies and site data ►Choose the desired options.
With Safari™: Safari menu (settings logo) ► Preferences ► Security ► Show cookies ►Choose the desired options.
With Opera™: Tools menu ► Preferences ► Advanced tab ► Cookies section ► Manage cookies ► Choose the desired options.
As indicated above, by choosing to block our cookies, navigation on the site and/or the use of certain functionalities could be altered. In any case, if you choose to delete all cookies, your user experience will be greatly affected, and your browsing preferences will be erased.
In any case, you can set your cookie preferences and modify them at any time by clicking here.
7.WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
In accordance with applicable legislation, you have rights when your personal data is processed.
Subject to the conditions applicable to the exercise of these rights, you have the following rights:
Right of access: you have the right to obtain confirmation as to whether or not your personal data is being processed, and where if so, to receive a copy of all the data we hold about you.
Right to object to the processing of your data on legitimate grounds.
Right to withdraw your consent at any time where the lawful basis for processing is consent.
Right to portability of personal data: only where the legal basis for processing is the performance of a contract or consent, you may receive your personal data in a commonly used and machine-readable structured format, in particular for the purposes of transmission to a third party. You also have the right to have your personal data transmitted directly to that third party.
Right of rectification: you have the right to request the rectification, as soon as possible, of personal data, if such data is incomplete or erroneous.
Right to limitation of processing: you have the right to request the limitation of processing of personal data concerning you in certain cases defined by law.
Right to erasure: subject to certain conditions detailed in Article 17 of the GDPR,
Right to define the fate of your data after your death and to choose whether we communicate (or not) your data to a third party that you have previously designated. In the event of your death and in the absence of instructions from you, we undertake to destroy your data, unless its retention proves necessary for evidential purposes or to meet a legal obligation.
If you wish to exercise your rights, you may be asked to prove your identity in order to prevent fraudulent requests.
For any questions regarding the processing of your data or to exercise any of your rights, you can contact us:
By post to: Legendary Plays - 32 rue de Ponthieu, 75008 Paris
By e-mail to: dpo@legendaryplays.com
Finally, you have the right to lodge a complaint with the supervisory authority in your country of residence, in France the CNIL: https://www.cnil.fr/.
