Privacy policy
Last updated: August 22, 2026
A professional player entrusts us with sensitive information. This policy describes precisely what we collect, why, for how long, and how you stay in control.
Items in square brackets must be completed before going live.
Data controller
HOLDING R10, a SARL registered with the Rennes Trade and Companies Register under number 994 444 628, which develops and invoices the ThreeSixty activity. Contact for any question about your data: [TO BE PROVIDED BY ENZO: dedicated privacy email address], or agency.3sixty@gmail.com.
Data collected
Contact form: name, email, phone, role, clubs, country, timeline, needs, indicative budget, message, date of consent, anonymised technical fingerprint of the IP address (for abuse prevention).
Client area: identity, contact details, preferences, information relating to assignments (housing, vehicles, travel, bookings, requests), uploaded documents, messages, quotes and invoices, log of sensitive actions.
Entourage data: only what the client chooses to enter or invite, under their responsibility and having informed the people concerned.
Any sensitive data (allergies, health information linked to organising appointments): only with your explicit consent, stored in a restricted-access space.
Purposes and legal bases
Responding to a contact request: legitimate interest and pre-contractual measures.
Carrying out assignments and running the client area: performance of the contract.
Invoicing and accounting obligations: legal obligation.
Website security and abuse prevention: legitimate interest.
Sending unsolicited information: only with your consent, which you can withdraw at any time.
Recipients
The ThreeSixty team, and the partners and suppliers strictly necessary to an assignment (for example the automotive partner for a vehicle search), each receiving only the information relevant to their work and bound by confidentiality.
Technical processors: Supabase (database and storage, European Union), Vercel (website hosting), Resend (email delivery). No data is sold or passed on for advertising purposes.
Retention periods
Contact requests not followed up: 12 months.
Client area data: for the duration of the relationship, then 3 years after the last assignment, unless earlier deletion is requested.
Accounting documents (quotes, invoices): 10 years, as required by law.
Technical and security logs: 12 months.
[TO BE PROVIDED BY ENZO: confirmation of these periods.]
Security
Encryption of data in transit and at rest, document storage in private spaces accessible only through temporary links, strict separation between clients enforced at database level, two-factor authentication available, audit log of sensitive actions, regular backups.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. From your client area, you can export your data and request the deletion of your account. You can also write to the address given above.
You may lodge a complaint with the CNIL (cnil.fr).
Transfers outside the European Union
Client area data is hosted in the European Union. Some technical processors may process technical data from the United States under appropriate safeguards (standard contractual clauses or an adequacy decision).