Privacy & GDPR

1. Who are we?

• Publisher: Throwdown
• Registered office: 6 la boulaie, 79140 Cirières, France
• SIREN: 994 848 299
• Contact email: contact@throwdown.live
• Data controller: Léo Nourrisson

2. What data do we collect?

• First name, last name, email, phone, date of birth, gender
• Payment information
• Sports performance (rankings, scores)
• Custom fields created by the Organiser (e.g. t-shirt size, time slots, experience)
• Prospecting data collected via our contact and demo booking forms (name, email, phone, message)
• Technical data: connection logs, IP address, necessary cookies, browsing preferences

Sensitive data: We do not collect health or medical data without your explicit consent.

3. Why do we use your data?

• Account management (creation, access, support)
• Registrations & payments (ticketing, payouts)
• Custom field management
• Live rankings & results
• Security & fraud prevention
• Communication (transactional emails, info about your competitions)
• Marketing (with consent, e.g. newsletters, contests)

4. Legal basis for processing (GDPR)

• Performance of a contract (registration, event organisation)
• Legal obligation (accounting, invoicing)
• Legitimate interest (security, platform improvement)
• Consent (non-essential cookies, newsletters)

5. Who do we share your data with?

• Stripe (secure payments)
• OVH (site, application and database hosting)
• Cloudflare (CDN and security)
• PostHog (hosted in the European Union), Google Analytics 4 and Hotjar (audience measurement)
• Google Ads (advertising campaign measurement)
• Legal authorities (where required)

Organiser: data is shared for the management of the event and custom fields. Each organiser is responsible for the processing of the data it collects via the platform and must comply with the GDPR within the scope of its own processing.

6. Where is your data stored?

• Hosted in Europe (OVH, Cloudflare)

Some data may be transferred outside the EU via our providers (notably Stripe for payments, as well as Google (Analytics 4 and Ads) and Hotjar for audience measurement). These transfers are governed by standard contractual clauses approved by the European Commission, ensuring a level of protection equivalent to the GDPR.

7. Retention period

• Account data: as long as the account is active, then deleted within 3 years after inactivity
• Legal/tax data (invoices, transactions): 10 years
• Prospects (contact, demo booking): 3 years from the last contact
• Cookies: 13 months maximum

8. Your GDPR rights

At any time, you can:

• Access your data
• Request rectification or erasure
• Withdraw your consent (marketing)
• Request portability

Exercising your rights: To exercise your rights, contact us by email at contact@throwdown.live. We undertake to respond to your request within a maximum of 30 days from receipt.

9. Security

• SSL/TLS encryption
• Access limited to authorised employees
• Banking data handled exclusively by Stripe

10. Cookies & trackers

We use a GDPR-compliant cookie management system that lets you precisely control which cookies you accept.

• Essential cookies: Necessary for the site to work and for your preferences (authentication, security, payments, language, display settings) - always on
• Analytics cookies: Help us understand site usage (PostHog, Google Analytics 4, Hotjar) - optional. These tools only activate after your explicit consent via our cookie banner.
• Marketing cookies: Personalise advertising and measure advertising campaign effectiveness (Google Ads) - optional

You can change your preferences at any time via our cookie banner or in your browser settings.

To learn more, see our Cookie Policy.

11. Children's data

Creating an account on the Platform is reserved for people aged at least 15, the age at which a person can consent alone to an online service under article 8 GDPR and article 45 of the French data protection act.

A minor athlete can be registered for a competition from the age of 8. The registration is then made by their legal guardian, from the guardian's own account. In that case we collect the guardian's identity and contact details (first name, last name, email, phone number) together with their consent, timestamped and kept as proof for as long as the registration data is retained.

The legal guardian can at any time access the minor athlete's data, request its rectification or erasure, and withdraw their consent, by writing to contact@throwdown.live.

We do not knowingly collect any data about a child under 8. Should such data reach us, it would be deleted as soon as we became aware of it.

12. Changes to the policy

We may update this privacy policy at any time to reflect changes in our practices or for legal or regulatory reasons.

In the event of a substantial change, we will inform you by email (at the address associated with your account) or via a notification on the platform. The date of the last update is shown at the top of this page.

We encourage you to review this page regularly to stay informed of any changes. The version in force is always the one published on this page.