Privacy & GDPR

1. Who are we?

• Publisher: Throwdown
• Registered office: 6 la boulaie, 79140 Cirières, France
• SIREN: 994 848 299
• Contact email: contact@throwdown.live
• Data controller: Léo Nourrisson

2. What data do we collect?

• First name, last name, email, phone, date of birth, gender
• Payment information
• Sports performance (rankings, scores)
• Custom fields created by the Organiser (e.g. t-shirt size, time slots, experience)
• Technical data: connection logs, IP address, necessary cookies, browsing preferences

Sensitive data: We do not collect health or medical data without your explicit consent.

3. Why do we use your data?

• Account management (creation, access, support)
• Registrations & payments (ticketing, payouts)
• Custom field management
• Live rankings & results
• Security & fraud prevention
• Communication (transactional emails, info about your competitions)
• Marketing (with consent, e.g. newsletters, contests)

4. Legal basis for processing (GDPR)

• Performance of a contract (registration, event organisation)
• Legal obligation (accounting, invoicing)
• Legitimate interest (security, platform improvement)
• Consent (non-essential cookies, newsletters)

5. Who do we share your data with?

• Stripe (secure payments)
• OVH (site, application and database hosting)
• Cloudflare (CDN and security)
• Google Analytics 4, Hotjar, Google Tag (audience measurement)
• Legal authorities (where required)

Organiser: data is shared for the management of the event and custom fields. Each organiser is responsible for the processing of the data it collects via the platform and must comply with the GDPR within the scope of its own processing.

6. Where is your data stored?

• Hosted in Europe (OVH, Cloudflare)

Some data may be transferred outside the EU via our providers (notably Stripe for payments). These transfers are governed by standard contractual clauses approved by the European Commission, ensuring a level of protection equivalent to the GDPR.

7. Retention period

• Account data: as long as the account is active, then deleted within 3 years after inactivity
• Legal/tax data (invoices, transactions): 10 years
• Cookies: 13 months maximum

8. Your GDPR rights

At any time, you can:

• Access your data
• Request rectification or erasure
• Withdraw your consent (marketing)
• Request portability

Exercising your rights: To exercise your rights, contact us by email at contact@throwdown.live. We undertake to respond to your request within a maximum of 30 days from receipt.

9. Security

• SSL/TLS encryption
• Access limited to authorised employees
• Banking data handled exclusively by Stripe

10. Cookies & trackers

We use a GDPR-compliant cookie management system that lets you precisely control which cookies you accept.

• Essential cookies: Necessary for the site to work (authentication, security, payments) - always on
• Functional cookies: Improve your experience (preferences, language, settings) - optional
• Analytics cookies: Help us understand site usage (Google Analytics 4, Hotjar, Google Tag) - optional. These tools only activate after your explicit consent via our cookie banner.
• Marketing cookies: Personalise advertising and measure campaign effectiveness - optional

You can change your preferences at any time via our cookie banner or in your browser settings.

To learn more, see our Cookie Policy.

11. Changes to the policy

We may update this privacy policy at any time to reflect changes in our practices or for legal or regulatory reasons.

In the event of a substantial change, we will inform you by email (at the address associated with your account) or via a notification on the platform. The date of the last update is shown at the top of this page.

We encourage you to review this page regularly to stay informed of any changes. The version in force is always the one published on this page.