Privacy Policy
and Personal Data Protection Policy
Last updated: January 2026
1. Purpose of the Privacy Policy
We attach particular importance to the protection of your privacy and are committed to ensuring the confidentiality and security of the personal data we may collect.
The purpose of this Privacy Policy is to inform you, in a clear and transparent manner and in compliance with applicable regulations, in particular Regulation (EU) 2016/679 of 27 April 2016 (GDPR), of the conditions under which your personal data may be collected and processed when visiting the Polo Club Saint-Tropez website, when contacting us, and, where applicable, when subscribing to communications or events.
It also applies to data collected in connection with events organized at the Haras de Gassin site, including photographs or videos that may depict participants, as well as any data collected offline in connection with the activities presented.
We invite you to read this policy carefully. For any questions, you may contact us using the details provided in Article 9.
2. Data Controller
The terms “we”, “us”, and “our” refer to SCA HARAS DE GASSIN, operating the activities presented under the trade name “Polo Club Saint-Tropez”, in its capacity as data controller for the personal data processing carried out via the website.
SCA Haras de Gassin, a civil company registered under SIREN number 320 401 870 (head office SIRET 320 401 870 00011), with its registered office at Lieudit Médecin de Campagne – 83580 Gassin, determines the purposes and means of processing relating to:
– browsing the website
– contact requests
– subscription to communications
– and, where applicable, information relating to organized events
Where certain events, services, or activities involve separate contractual operations, particularly regarding registration or payment collection, such operations may be carried out either by a legally distinct entity acting for the relevant organization or by a specialized third-party platform.
In such cases, the data processing necessary for managing those operations is governed by the contractual terms and privacy policies specific to the entities concerned, which independently determine how the data transmitted to them is processed.
This policy exclusively covers processing carried out within the framework of the website and activities directly managed by SCA Haras de Gassin.
3. Categories of Personal Data Collected
When visiting the Polo Club Saint-Tropez website, the following data may be collected and processed:
– identification data voluntarily provided by the user, such as first name, last name, and email address, particularly via a contact form or, where applicable, a newsletter subscription form
– information freely provided by the user when making an inquiry, contacting us, or during subsequent exchanges
– technical data automatically collected while browsing the site, such as IP address, technical connection logs, and information relating to the device and browser used, to the extent necessary for the operation and security of the website
– data strictly necessary for the proper technical functioning of the website and audience measurement where an appropriate tool is activated
As of the date this policy is published, the website does not allow direct reservations, contractual registrations, or payments via its own interface.
Should such services be activated in the future, this policy will be updated to specify the categories of data collected in that context.
Only data strictly necessary for the purposes described in Article 4 is collected.
4. Purposes of Processing and Legal Bases
Your personal data may be collected and processed for the following purposes:
– responding to requests submitted via the contact form or by email
– managing communications with users and tracking requests
– where applicable, enabling subscription to newsletters or communications relating to organized events
– ensuring the proper technical functioning, security, and improvement of the website
These processing activities are based on the following legal grounds:
– the legitimate interest of the data controller in managing requests, institutional communication, and website security
– the user’s consent when voluntarily subscribing to a newsletter or accepting certain non-essential cookies
As of the date of publication of this policy, the website does not allow the direct conclusion of a contract, nor online reservation or payment via its own interface.
Should such services be offered in the future, the corresponding processing would be based on the performance of pre-contractual or contractual measures, and this policy would be updated accordingly.
5. Data Retention Period
Personal data is retained for periods appropriate to the purposes for which it was collected.
– Data submitted via the contact form or during exchanges is retained for the time necessary to process the request, then archived for a maximum period of three (3) years from the last contact initiated by the user
– Data used for communications or newsletters is retained for the duration of the subscription and, in the event of inactivity, for a maximum period of three (3) years from the last contact
– Technical connection and browsing data is retained for a maximum period of twelve (12) months
If the website evolves to include contractual or transactional services, certain data may be retained for longer periods in order to comply with applicable legal and accounting obligations. This policy would then be updated accordingly.
You may request the deletion of your data at any time under the conditions provided by applicable regulations.
6. Destinataires et sous-traitants
Personal data collected via the website is intended exclusively for authorized personnel within SCA Haras de Gassin involved in website management and communications, as well as technical service providers acting on behalf of the data controller and strictly within its instructions.
The website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. As Israel benefits from an adequacy decision by the European Commission, data transfers to this country are carried out in compliance with applicable regulations.
Electronic communications and newsletter management may be handled through the Brevo platform, a service provider specialized in email distribution, acting as a data processor and contractually bound to comply with personal data protection regulations.
Occasional technical assistance or maintenance operations may be carried out by the agency R Numérique, acting exclusively under the instructions of the data controller and only to the extent necessary for the performance of its technical services.
Ticketing for certain events may be provided via the Eventim Light solution, operated by France Billet. In this context, data collected during ticket purchases and payment operations is processed by this platform in accordance with its own privacy policy.
No personal data is sold, rented, or transferred to third parties.
7. Data Security
SCA Haras de Gassin implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data processed via the website.
These measures are designed to prevent any destruction, loss, alteration, unauthorized disclosure, or access to data.
Access to personal data is strictly limited to authorized personnel within the organization and technical service providers acting on behalf of the data controller, within the limits of their respective responsibilities and subject to confidentiality obligations.
The tools and service providers used are carefully selected to ensure a level of security appropriate to the risks presented by the processing activities.
However, as the transmission of information via the Internet cannot be completely secure, absolute security of data transmitted online cannot be guaranteed.
8. Rights of Data Subjects
In accordance with applicable personal data protection regulations, you have the following rights:
– right of access, allowing you to obtain confirmation that data concerning you is being processed and to receive a copy
– right to rectification, allowing you to request correction of inaccurate or incomplete data
– right to erasure, under the conditions provided by regulations
– right to object, on legitimate grounds, to certain processing of your data
– right to restriction of processing, where you contest the accuracy of the data or the lawfulness of the processing
– right to data portability, for processing based on consent or the performance of a contract and carried out by automated means
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
You also have the right to lodge a complaint with the French Data Protection Authority (CNIL), which may be contacted via its website www.cnil.fr or by post at:
CNIL – 3 Place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07 – France.
9. Exercising Your Rights
For any request relating to the exercise of your rights or any question concerning this Privacy Policy, you may contact us at:
Or by post at:
SCA Haras de Gassin
LD Médecin de Campagne
83580 Gassin
France
To preserve the confidentiality and security of personal data, proof of identity may be requested where necessary to verify the identity of the applicant.
SCA HARAS DE GASSIN undertakes to respond to any request within the time limits provided by applicable regulations.
10. Updates to the Privacy Policy
This Privacy Policy may be modified at any time to reflect legal or regulatory developments or changes in the operation of the website.
In the event of substantial modifications affecting users’ rights or the nature of the processing carried out, users will be informed by any appropriate means, including publication on the website.
The applicable version is the one in force on the date of consultation and accessible on the Polo Club Saint-Tropez website.