Last updated: April 2026

1. Data Controller

The data controller for personal data collected via the website www.squash-yvon-mau.com is:

Body	Yvon Mau Squash Association
Legal representative	Mr. Jérôme Boison, President
Address	Multisports Hall, Rue du Stade, 33190 Gironde-sur-Dropt
E-mail	contact@squash-yvon-mau.com

2. Data collected

2.1 Identity and contact details

First and last name
Date of birth
Mailing address
Email address
Phone number

2.2 Membership data

Type of plan chosen (Adult, Youth, Student)
Date and history of memberships
French Squash Federation license number
Health data limited to the medical certificate (if requested)

2.3 Payment details

Transaction amount
Date and time of the transaction
Transaction reference (identifier provided by the payment provider)

Bank details: No bank details (card number, security code) are collected or stored by the Association. This data is processed exclusively by our PCI DSS certified payment provider.

2.4 Navigation Data

IP address (anonymized after 13 months)
Connection and browsing data (pages visited, session duration)
Browser type and operating system

3. Purposes of the processing

The personal data collected is processed for the following purposes:

Membership management: processing and monitoring membership applications, issuing access badges and sports licenses
Payment processing: collection of contributions, issuance of receipts or supporting documents, management of any refunds
Communication with members: membership confirmation, club information (calendar, events), notices of the general meeting
Legal and accounting obligations: maintaining the Association's accounts, compliance with regulatory obligations
Facility security: access management via badge
Website improvement: analysis of traffic statistics

4. Legal basis for processing

In accordance with the GDPR (EU Regulation 2016/679) and the amended French Data Protection Act, the processing is based on the following legal grounds:

Performance of a contract (Art. 6.1.b GDPR): for the processing of memberships and payments
Legal obligation (Art. 6.1.c GDPR): for accounting and tax obligations
Legitimate interest (Art. 6.1.f GDPR): for the security of facilities and the improvement of services
Consent (Art. 6.1.a GDPR): for sending optional communications and certain cookies

5. Data Recipients

Personal data is intended for authorized personnel of the Association (members of the Board) and may be transmitted to the following third parties strictly within the scope of their duties:

French Squash Federation : for registration and issuance of the sports license
Online payment provider : for the secure processing of bank transactions
Website host : within the framework of technical data hosting
Email provider : for sending confirmations and communications

No personal data is sold or transferred to third parties for commercial purposes. Data is not transferred outside the European Union without appropriate safeguards in accordance with the GDPR.

6. Shelf life

Data category	Shelf life
Membership details (identity, contact information)	Membership duration + 3 years after the last membership
Payment details	10 years from the date of the transaction (accounting obligations)
Navigation data / logs	13 months maximum
Health data (medical certificate)	Duration of the membership concerned only
Analytical cookies	13 months maximum

At the end of the retention periods, the data is securely deleted or anonymized.

7. Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

Right of access (Art. 15 GDPR): to obtain confirmation that data concerning you is being processed and to obtain a copy of that data.
Right to rectification (Art. 16 GDPR): to have inaccurate or incomplete data corrected
Right to erasure / “right to be forgotten” (Art. 17 GDPR): request the deletion of your data, within the limits of legal obligations.
Right to restriction of processing (Art. 18 GDPR): request the temporary suspension of processing
Right to data portability (Art. 20 GDPR): to receive your data in a structured and readable format
Right to object (Art. 21 GDPR): you have the right to object to processing based on legitimate interest or for direct marketing purposes.
Right to withdraw consent: withdraw your consent at any time for processing activities that depend on it

How to exercise your rights?

Send your request by email to contact@squash-yvon-mau.com or by registered mail with acknowledgement of receipt to: Association Squash Yvon Mau — Salle Multisports, Rue du Stade, 33190 Gironde-sur-Dropt, attaching a copy of proof of identity.

The Association undertakes to respond to your request withinone month of receiving it.

Right to lodge a complaint with the CNIL

If you believe that the processing of your data does not comply with regulations, you can lodge a complaint with the National Commission for Information Technology and Freedoms (CNIL) : www.cnil.fr — 3, Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

8. Cookies and trackers

8.1 What is a cookie?

A cookie is a small text file placed on your device when you visit a website, allowing that website to remember information about your visit.

8.2 Cookies used by this site

Essential technical cookies: necessary for the operation of the site (session management, preferences). No consent required.
Payment cookies: placed by our secure payment provider for the duration of the transaction. No consent required.
Analytical cookies: measure website traffic. Subject to your prior consent.

8.3 Managing your preferences

You can change your cookie preferences at any time via your browser settings. However, disabling technical cookies may affect the website's functionality.

9. Data Security

The Association implements appropriate technical and organizational measures to guarantee the security and confidentiality of your personal data:

Access to data is restricted to authorized personnel (members of the Bureau)
Secure connection to the site via HTTPS protocol (SSL/TLS certificate)
Encrypted payment transactions, processed by a PCI DSS certified provider
Regular updates to computer systems

10. Contact

For any questions relating to this privacy policy or the processing of your personal data:

By email: contact@squash-yvon-mau.com
By mail: Association Squash Yvon Mau — Salle Multisports, Rue du Stade, 33190 Gironde-sur-Dropt

This policy is subject to updates. The current version is always accessible on this page.