Privacy policy

Rémi Conte — Atrypical, Villa Saint Louis, 12 avenue René Maurice, Nice, reachable at contact@rivieraendurance.com. No data protection officer has been appointed; requests are handled directly at that address.

When booking: name, email address, phone number, self-declared ability level, free-text message, chosen outing, date and number of participants.

When leaving a review: display name, rating and review text.

When a booking is made, a cryptographic fingerprint of the IP address is recorded to limit abusive requests. It cannot be reversed to the address and is used for no other purpose.

No card data is collected or stored by the provider: payment is handled end to end by Stripe.

The site uses no advertising trackers and no third-party analytics.

Managing bookings, payments and the customer relationship: performance of the contract.

Answering enquiries and sending practical details for the outing: performance of the contract.

Keeping accounting records: legal obligation.

Publishing moderated customer reviews: legitimate interest, with removal on request.

Publishing identifiable photographs: consent, collected separately and revocable.

Data is accessible only to the provider's athletes and to the following processors: Stripe (payment), Resend (email delivery), Vercel (site hosting), Neon (database hosting).

Booking data is hosted within the European Union: database in Frankfurt, email delivery from Ireland. Only payment processing by Stripe involves a transfer outside the European Union, covered by the European Commission's standard contractual clauses. No data is sold or shared for advertising purposes.

Customer records and outing history: 3 years from the last outing.

Accounting records and invoices: 10 years, as required by the French Commercial Code.

Published reviews: until their author requests removal.

Customer area access links: 30 days, the validity period of the link.

Declined or abandoned booking requests: 12 months.

IP fingerprint attached to a request: deleted together with the request.

Customers have the right to access, rectify, erase, restrict, object to and port their data, and to withdraw consent at any time.

These rights can be exercised by writing to contact@rivieraendurance.com. A response is provided within one month.

In case of disagreement, a complaint may be lodged with the CNIL — 3 place de Fontenoy, 75334 Paris Cedex 07, France, cnil.fr.

The site sets a single strictly necessary cookie, used to keep the athletes' admin session open. It does not require consent.

Stripe sets its own cookies during the payment process, on its own pages, for security and fraud prevention.

Access to the admin area is protected by a password and a signed session. Customer area links are cryptographically signed and expire automatically. All traffic to the site is encrypted over HTTPS.