Privacy

Data controller

HCC Hockey Club Choletais, Avenue Anatole Manceau, 49300 Cholet, France. Contact: [contact email to be completed].

Data we collect

• Account: email, first name, last name, phone number, postcode, language, confirmation that you are 18 or over.
• Auctions: your bids, maximum bids, watched lots.
• Purchases: amount, payment method and date, collection or shipping (postal address only if you choose shipping).
• Security: technical logs (IP address, browser) to prevent fraud and abuse.

Why and on what basis

• Running the auctions and handing over the lots: performance of a contract.
• Accounting records: legal obligation.
• Fraud prevention and site security: legitimate interest.
• Newsletter about new campaigns: your consent, which you can withdraw at any time.

Public display

In the public bid history, bidders are shown by first name and last-name initial only (e.g. “Julien M.”).

Retention

• Inactive accounts are deleted after 3 years.
• Sale and payment records are kept for 10 years (accounting obligation).
• Security and admin action logs are kept for 1 year.

Processors (all within the EU)

• Vercel: website hosting — Frankfurt (DE)
• Neon: database — Frankfurt (DE)
• Vercel Blob: lot photos — Paris (FR)
• Resend: email delivery — Ireland (IE)
• Supabase: real-time bid updates — Germany (DE)

Cookies

We only use cookies required for the site to work (sign-in session). No advertising or tracking cookies.

Your rights

You can access, correct, delete or export your data, and object to its processing, by writing to [contact email to be completed]. You can also lodge a complaint with the CNIL (www.cnil.fr).