- PRÉAMBULE
STRAIGHT UP, itinerant surf school in Biarritz, is registered with the trade and companies register under number 951612514. Its address is 79 chemin de Behereta 64210 Bidart. As part of managing its website and social media to promote its activities and provide its services, STRAIGHT UP (hereinafter referred to as “We”) processes personal data relating to its users, clients, and subscribers (hereinafter referred to as “You”). Our goal is to respect your privacy. We are committed to processing this data in strict compliance with applicable regulations, including the General Data Protection Regulation (GDPR) and the amended French Data Protection Act of January 6, 1978 (LIL). We have appointed a Data Protection Officer (DPO), who you can contact to exercise your rights or for any questions regarding the processing of your personal data: straightupbiarritz@gmail.com.
- PURPOSE AND SCOPE
This privacy policy reflects our transparency regarding the processing of personal data on our website. It aims to inform Users:
- about how we collect and process their personal data;
- about the rights they have;
- about the person responsible for processing;
- about the recipients of this data.
This policy applies to all personal data processing carried out on behalf of STRAIGHT UP on the website and social media it manages. It supplements the legal notices and general terms available on these platforms.
- WHAT DATA DO WE COLLECT?
Depending on your use of our website, we may collect and process the following information:
| Source of collection | Data processed |
|---|---|
| When you visit our site and accept cookies | IP address, log data (date, time). |
| When you browse without accepting cookies | Browsing data: IP address, browsing history, path, advertising ID, etc. |
| When you use our contact forms | Identity: last name, first name; Contact: email, phone; Details of the request: subject, purpose, message. |
Some data is necessary to provide certain services; without it, these services cannot be delivered. You will be informed at the time of collection whether data is mandatory or optional. We do not collect any information about your origins, religious or philosophical beliefs, sexual orientation, political opinions, union membership, or health status.
- WHY DO WE COLLECT YOUR DATA?
We collect your personal data for several legitimate purposes, based on the following legal grounds:
Our legitimate interests to:
- ensure the security and proper functioning of our website;
- remember your usage preferences*;
- detect bots.
Your consent to:
- track audience and establish statistics to improve our website;
- offer personalized content and an optimal browsing experience;
- share our site’s content on social media;
- process and respond to your contact requests.
- HOW LONG DO WE KEEP YOUR DATA?
Personal data is securely stored for as long as necessary to fulfill the purposes for which it was collected. Specific durations apply depending on legal, regulatory constraints, or recommendations from competent authorities.
Examples of applied durations:
- data collected via cookies: maximum of 13 months;
- your cookie preferences: 6 months;
- data from website usage: during the period of use;
- data from contact forms: during the processing of your request.
- WHO ARE THE RECIPIENTS OF YOUR DATA?
Depending on the processing, your data may be shared with:
Our internal teams:
- only within the scope of their duties and responsibilities.
Our service providers/subcontractors:
- who process your data on our behalf, strictly following our instructions and in compliance with Article 28 of the GDPR;
- examples of outsourced processing: cookie management, hosting, site analysis, bot detection.
For more details on our subcontractors, contact us at straightupbiarritz@gmail.com.
Authorities:
- to comply with legal obligations or to defend our rights in court.
In case of changes to our company:
- your data may be transferred to new owners, who must use it in accordance with this policy.
- IS YOUR DATA TRANSFERRED OUTSIDE THE EU?
Our data is mainly hosted in France or the EU. However, some non-EU service providers may process your data, resulting in transfers. In such cases, we use safeguards (standard contractual clauses, etc.) approved by the European Commission to ensure a level of protection equivalent to that of the EU. - HOW IS YOUR DATA SECURED?
We implement technical and organizational measures to guarantee the confidentiality, integrity, and availability of your data:
- physical security of premises;
- security of our IT systems;
- access control to data limited to what is strictly necessary.
- YOUR RIGHTS REGARDING YOUR DATA
In accordance with the GDPR, you have the following rights, which you can exercise free of charge at any time, subject to proof of identity:
9.1. Right of access – Request access to or a copy of your data.
9.2. Right to rectification – Modify or complete inaccurate or incomplete data.
9.3. Right to erasure – Request deletion of your data in certain situations (outdated data, unlawful collection, etc.).
9.4. Right to restriction of processing – Temporarily restrict processing of your data in specific circumstances.
9.5. Right to object – Object to processing based on reasons relating to your particular situation, except in cases of legal exceptions.
9.6. Right to data portability – Request the transfer of your data to a third party in certain cases (automated processing based on consent or contract).
- HOW TO EXERCISE YOUR RIGHTS?
Send your request by email: straightupbiarritz@gmail.com
We are committed to responding within one month (two months if the request is complex).
- RIGHT TO CONTACT THE SUPERVISORY AUTHORITY
If you believe your rights are not being respected, you can file a complaint with the CNIL: CNIL – Service des plaintes 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07 - POLICY UPDATES
This policy may change due to legislative updates or our activities. We will inform you of updates and invite you to review it regularly.