Privacy.

01Data controller

The controller of the processing described below is TECHNODROP, operating the DRAXX SPORTS brand, a single-member SARL (EURL), RCS Chartres 883 205 221, with its registered office at 34 rue du Général de Gaulle, 28500 Charpont, France.

For any question about your data: contact@draxx-sports.com (subject ‘Personal data’) or by post to the address above.

This policy applies to the draxx-sports.com website, its services (customer account, newsletter, DRAXX Club, reviews) and communications with our customer service.

02Data collected

• Identity and contact details : surname, first name, e-mail address, phone number, delivery and billing addresses.
• Customer account : login details (the password is stored in encrypted form), preferences, date of birth or age bracket if requested for the club.
• Orders : products purchased, amounts, history, invoices, returns and exchanges.
• Payment : transaction status and reference. Card details are entered and processed directly by our payment providers; we do not have access to them.
• Unfinished baskets : email address, first name, country, language and basket contents, when you enter your email address on the checkout page without completing your order.
• Customer and after-sales service : messages, product photos sent for diagnosis.
• Community : DRAXX Club and newsletter sign-ups, published customer reviews (username, playing level, rating, comment).
• Browsing : IP address, device and browser type, pages viewed, cookie data depending on your choices (see the cookie policy).

Required fields are marked on forms; without them, we cannot process your request.

03Purposes and legal bases

04Recipients

Your data is intended for authorised TECHNODROP staff. It is also shared, strictly to the extent necessary, with our processors and partners, who are bound by confidentiality and security commitments:

We do not sell your data. It may be disclosed to the authorities where required by law.

05Transfers outside the European Union

Some service providers may process data outside the European Economic Area, in particular in the United States (Stripe, PayPal, Google, Amazon and the publisher of MailPoet). These transfers are governed by an adequacy decision of the European Commission (for example the EU–US Data Privacy Framework for certified companies) or, failing that, by the European Commission’s standard contractual clauses, supplemented where necessary by additional measures. You can obtain a copy of these safeguards by writing to us.

06Retention periods

07Your rights

Under the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• Access : obtain confirmation that your data is being processed and receive a copy of it;
• Rectification : correct inaccurate or incomplete data;
• Erasure : ask for your data to be deleted, subject to our legal retention obligations;
• Objection : object to processing based on legitimate interest and, at any time and without giving a reason, to direct marketing;
• Portability : receive the data you have provided to us in a structured, machine-readable format;
• Restriction : ask for processing to be temporarily suspended;
• Withdrawal of consent at any time, without affecting processing carried out beforehand;
• Post-mortem instructions : decide what happens to your data after your death (article 85 of the French Data Protection Act).

To exercise them: contact@draxx-sports.com or by post to our registered office. We reply within one month, which may be extended by two months for complex requests. If there is reasonable doubt about your identity, we may ask you for proof. Every marketing e-mail contains an unsubscribe link.

08Complaints to the CNIL

If, after contacting us, you believe your rights have not been respected, you can lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.

09Security

We implement appropriate technical and organisational measures: encrypted connection (HTTPS), passwords stored in encrypted form, payments handled by PCI-DSS-certified providers, data access limited to authorised people, backups, security updates and contracts governing our processors. In the event of a data breach posing a risk to your rights, we notify the CNIL and, where necessary, the people concerned.

10Minors

A large share of our players are teenagers. In France, a minor can consent alone to the processing of their data for online services from the age of 15. Under 15, signing up to the newsletter or the DRAXX Club, or publishing a review, requires the joint consent of the minor and their legal guardian. Purchases by a minor must be made with their legal guardian’s approval. A parent can exercise the rights described above on behalf of their child.

11Cookies and changes

Our use of cookies is detailed in our cookie policy. We may update this policy; the date of the latest update appears at the top of the page and you will be notified of any significant change.