Your data, clearly explained
Le formulaire sert uniquement à traiter votre demande de renseignement, de visite ou d’accompagnement.
Informations du proprietaire
Texte distant conserve sans remplacement confidentialite
Your account and profile
KEF SPORT BANDOL uses your last name, first name, e-mail address, address-verification status and account-creation and sign-in dates to provide and secure the account service you request. Your password is stored as an Argon2id hash, never in plain text. Phone number and profile photo are optional and can be changed or removed in your personal area. The photo is re-encoded without metadata and stored privately; it is accessible to the signed-in account holder and, if you choose to display it, visitors to your public comments. Creating an account is neither a gym membership nor a purchase. Google sign-in is offered when the service is configured. Apple is not enabled yet. Managing the account, profile, requests and essential messages relies on performing the requested service (Article 6(1)(b) of the GDPR). First name, last name, e-mail and a password are required to create an account; without them it cannot be created. Fraud prevention and secure access rely on the legitimate interests of the club and users (Article 6(1)(f)).
Your communication choices
The newsletter, new-article alerts, SMS offers and SMS news have four separate choices, disabled by default. Adding a phone number to your profile does not consent to advertising. You can change or withdraw each choice in your personal area without losing account access. Consent and withdrawal are timestamped with their source and the version of the text shown. Commercial communications rely on your consent. An e-mail alert is sent when a new article is published only to active accounts with a verified address and article notifications enabled. Each alert includes a link to withdraw this choice. Account and security notifications, verification, welcome and reset e-mails, and verification codes operate and protect your account; they are separate from commercial marketing.
Your requests in the member area
When you send a new request while signed in and the mail service accepts delivery to the club, the website keeps a copy in your personal area: sending date, topic, message and any preferred date. This lets you find your own requests; it creates no processing tracking, messaging exchange or confirmed booking. Older anonymous requests and messages in Gmail are not imported. The copy stops being accessible 12 months after sending. It is automatically deleted on the next account-API use; without use, cleanup waits. It is also deleted with the account. Originals sent to both club inboxes follow the separate arrangements above, including 12 months after the last exchange for enquiries that lead to no contract.
Two-step verification and recovery codes
You may add e-mail-code verification after your password. The SMS service is not configured yet. The website stores the chosen method, destination, activation and verification dates, challenge and code hashes and attempt counters to secure accounts and prevent abuse. An OTP lasts five minutes, can be used once and allows five attempts. Codes and recovery codes are stored as HMAC hashes with a private key; raw values are kept neither in the database nor website logs. Expired challenges are cleared after one additional day on the next account-API use. Recovery codes become unusable after use, regeneration or disabling protection; remaining hashes are deleted on regeneration, disabling or account deletion. This security processing relies on the legitimate interest in protecting the service and users. You may separately verify an additional e-mail or SMS channel: no second channel is enabled automatically. Sign-in delivery choices are limited to verified account methods. Changing channels invalidates the previous challenge without resetting attempts or extending expiry. Adding a method requires your password, existing active two-factor authentication and a code sent to the new channel; the current method and recovery codes are kept. A channel may be removed after reauthentication if another method stays active; otherwise disabling all protection is a separate action. The additional channel’s contact details and confirmation dates are stored in a table linked to protection and deleted with it or the account. The SMS service still needs configuration.
Changing your e-mail address
Changing your address requires your current password, two-step verification if active, then two separate codes: one to your current address and the other to the new one. The account keeps its current address until both proofs are confirmed. The website temporarily retains the current and proposed addresses, the originating session, code hashes and attempt counters. Each code is valid for five minutes; its raw value is kept neither in the database nor in logs. Expired flows are cleared after one additional day on the next API use; they are also deleted when their session is revoked or with the account. After confirmation, all sessions close and a security notification is recorded. The profile and preferences stay on the same account; two-step verification remains active.
Retention of account data
Your profile, photo, communication settings, consent and withdrawal history, notifications and welcome e-mail delivery record are kept while the account exists to provide the features you choose and retain a record of settings and service messages. They are deleted with the account. Unverified registrations are deleted after seven days on the next use of the service. Verification links last 24 hours and reset links 30 minutes; expired links and sessions are cleared after one additional day when the service is used. Attempt limits use pseudonymised IP-address or e-mail hashes; counters are deleted after 24 hours without an attempt on a new use of the service. These rules do not replace the separate retention period for request copies described above. An account with no sign-in for two years is deleted with its associated data, based on the last sign-in or, failing that, its creation. This cleanup runs in batches at the next API use; without service use it waits for the next use. No automatic reminder e-mail is currently sent. To preserve club-management access, the last active administrator must transfer their permissions before deletion.
Deleting your account
You may delete your account under Security in your personal area after verifying your password and, if two-step verification is active, a security or recovery code. Deletion covers your website account and associated data: profile and private photo, preferences and choice history, request copies, notifications, sessions, links and security data. It does not cancel gym membership or delete form e-mails already in club inboxes. Temporary protection counters and technical backups follow their own rules; account deletion does not ensure their immediate erasure. For a request about that data or club correspondence, contact killianvitabandol@gmail.com.
Necessary cookies and animation choice
Two strictly necessary cookies protect the account area: vl_account_csrf prevents fraudulent requests during the browser session, and __Host-vita_auth recognises your sign-in. They are secure, inaccessible to JavaScript and are not used for advertising. Ordinary sign-in expires after no more than 12 hours or one hour of inactivity. With “Keep me signed in”, it lasts up to 30 days and expires after seven days of inactivity. Signing out invalidates the session; resetting or changing your password or e-mail address from your personal area invalidates all account sessions. The animation choice is saved only in the browser’s session storage. The form also uses the secure, JavaScript-inaccessible vl_contact session cookie to prevent fraudulent submissions. These necessary cookies are not advertising trackers.
Recipients of account data
The database, PHP processing and private photo storage are hosted by OVHcloud. Only people authorised to administer the service should access the data. Verification, reset and welcome e-mails and e-mail codes are sent by OVHcloud’s SMTP service to your address only, without being sent to contact-form recipients. Welcome e-mail images are embedded; no tracking pixel is added. Partner logos give those businesses no access to account data. Apple and the SMS service are not enabled. Choosing Google sign-in involves the specific processing described below. Form requests retain their own recipients and arrangements described above.
Google sign-in and linking
When you choose Google, you are redirected to its authentication service. The website verifies the sign-in proof and receives a stable Google identifier, a verified e-mail address and, when available, your first and last names. It does not read Gmail messages, receive your Google password, import your Google photo or retain Google access or refresh tokens. The stable identifier and linking date are stored in the database with your account to provide this requested sign-in method; they are deleted with the account. Google data is used for identification and personal-area management, without sale or advertising targeting based on your Google profile. An existing account is never linked simply because e-mails match: linking takes place in your personal area using your password and two-factor authentication if active. When direct creation is possible, marketing preferences remain disabled. For an address whose current control Google does not attest (outside Gmail or a verified Workspace domain), first create and verify an e-mail account before linking Google. A Google-created account has no local password until you set one through the personal link sent to your address. Two-factor authentication is still requested after Google sign-in if active. The temporary flow stays in the server session for ten minutes, then becomes invalid; its data is removed on return, a new start or session cleanup. Google receives data needed for authentication, including IP address and browser information, under its policy and transfer safeguards: https://policies.google.com/privacy?hl=fr. You can unlink Google under Security after your local password and two-factor authentication if active. The Google identifier is removed from the website account; profile, e-mail, preferences and two-factor authentication remain. Other sessions and pending verifications are invalidated. An account without a local password must first set one to keep access. Unlinking does not delete your Google account or change authorisations managed separately in Google.
Website technical backups
Full database snapshots made by our maintenance process are kept for no more than 30 days; deletion runs in batches at the next account-API use. Without use, cleanup waits for the next use. They remain in the hosting’s private storage and cannot be viewed from the website. Deleting an account does not immediately delete its copies in these snapshots. A restoration must reapply deletions made since the snapshot before reopening the service. Any OVHcloud backups follow the hosting offer’s arrangements; their retention periods must be obtained from the host.
Exercising your rights
For access, rectification, erasure, restriction, objection or, where the legal conditions are met, data portability, write to killianvitabandol@gmail.com or KEF SPORT BANDOL, 898 route du Beausset, 83150 Bandol. You may also edit your profile, withdraw communication consent or delete your account in your personal area. You receive a reply within one month; for complex or numerous requests, this may be extended by two months, with the reasons explained within the first month. Additional proof of identity is requested only where reasonably doubtful and proportionately. This personal area performs no profiling or decisions with legal effects on you. You may complain to the CNIL: https://www.cnil.fr/fr/plaintes.
The Club Journal and your contributions
The blog can be read without an account. A signed-in member can like an article, remove their like, publish a comment and remove it. Comments, first names and dates are public; full names, e-mails and named lists of likes are not published. Photos remain private by default. You may choose “Show my photo with my comments”: your current profile photo then becomes visible to all visitors beside your comments. This choice is recorded separately from marketing preferences. You may withdraw it using the same box or remove your photo in your account; comments loaded afterwards then show your initials. Likes and comments are linked to your account in the database to provide those features (performance of the requested service). They remain in active data until removed or until the account or article is deleted. Authorised administrators may moderate comments and access the data needed for that management. Original profile files stay in private storage; only photos chosen for display are served through a dedicated address linked to a comment on a published article. Deleting the comment, archiving the article, disabling the account or removing the photo ends that access. Native sharing or copying a link does not load a social widget; sharing to another service is triggered by your own action. For administrators publishing an article, the account name appears as an editorial byline with the publication date. Photos uploaded for published articles are public; draft photos remain restricted to administrators. Images are re-encoded without EXIF metadata. Unused uploads are cleaned up after seven days on the next upload. The overview counts accounts and recently active member sessions without tracking anonymous visitors.
Website administration and moderation
Permissions, moderation and abuse prevention rely on the club’s legitimate interest in protecting the service and its users. The management log keeps the actor reference, action, date, target type and ID, and where necessary a reason from the moderation choices for six months; it does not keep passwords, codes or copies of deleted text. Cleanup takes place on the next use of administration. An administrator can suspend, reactivate or delete accounts and remove permissions; sensitive actions require recent identity verification. The last active administrator access is protected against automatic or accidental deletion and must be transferred before closure. Club editorial articles may remain without the author’s personal identity after their account is deleted. These periods concern active data and the current log; a legal retention obligation or dispute may justify separate, restricted retention of only the necessary data.
Your browsing language
Your manual language choice is kept for one year in the necessary vita_language cookie and browser local storage. If you are signed in, it is also saved with your account to display the website and send e-mails in your chosen language. You can change it at any time. This setting does not consent to communications.
Your choices for YouTube and Google Maps
Your permissions for YouTube and Google Maps are stored separately for 180 days in this browser’s local storage. They allow the modules to load automatically on subsequent visits. The disable buttons remove the module and withdraw permission without deleting data already received by Google. If loading reaches five seconds, the site turns off embeds and animations only on the affected page, without changing your account preferences or saved permissions. The buttons remain available to open the modules manually. This adjustment is reassessed on each navigation and is not used to track visitors.
Newsletter without an account
You can subscribe to the newsletter without an account, with your consent and email confirmation. The same address is automatically linked to an existing account or one created later. This choice is independent of text messages and article alerts. You can withdraw it in your account or via the unsubscribe link in each newsletter. Unconfirmed requests are kept for up to 30 days; subscriptions without an account for up to three years after their last change. Deleting an account deletes its linked subscription.