Last updated: 10/22/2026
Preamble
This policy explains what personal data TESSIER collects on the website www.tessier.sport (the «Site»), why, how long it is kept, and how to exercise your rights. It applies in accordance with Regulation (EU) 2016/679 (GDPR) and French Law No. 78-17 of January 6, 1978, as amended (the «Data Protection Act»).
In this document, «we» refers to TESSIER and «you» refers to anyone who visits the Site or contacts us.
1. Data controller
The controller of your data is:
| Company name | TESSIER |
| Legal form and share capital | SASU (single-shareholder simplified joint-stock company) with share capital of €400,000 |
| Registered office | 336 voie Thomas Edison, 73800 Sainte-Hélène-du-Lac, France |
| Registration | RCS Chambéry 432 840 932 – SIRET 432 840 932 00037 |
| Legal representative | HELTYS, President |
| contact@tessier.sport |
For any question about this policy or to exercise your rights, write to the e-mail address above or by post to the address indicated.
2. Data collected
We only collect the data necessary for the purposes described in section 3.
Data you provide to us via the contact form, a quote request through our form, newsletter sign-up, or an order: last name and first name;
- Structure
- e-mail address;
- phone number
- postal address
- content of your message.
- configuration of your product
Required fields are marked with an asterisk. Without them, we cannot process your request; the other fields are optional.
You are responsible for the accuracy of the information you provide to us. If it concerns another person, for example a child or a relative, you warrant that you are authorized to provide it to us and that you have informed them of this policy. Data of a minor under 15 must be provided by the holder of parental authority.
Data collected automatically, with your consent where required by law (see section 8):
- device type, browser and operating system;
- IP address, anonymized before any statistical processing;
- pages viewed, visit duration and referring page.
We do not make any decision based solely on automated processing, including profiling, within the meaning of Article 22 of the GDPR.
3. Purposes and legal bases
Each processing activity relies on a specific legal basis under Article 6 of the GDPR.
| Purpose | Legal basis |
| Responding to your contact or quote requests | Pre-contractual measures at your request (Art. 6.1.b) |
| Fulfilling an order or a service | Performance of a contract (Art. 6.1.b) |
| Issuing and keeping invoices | Legal obligation (Art. 6.1.c) |
| Sending the newsletter and information about our activities | Consent (Art. 6.1.a), which may be withdrawn at any time |
| Measuring Site audience with Matomo | Legitimate interest (Art. 6.1.f), Matomo being configured in line with the CNIL exemption conditions |
| Ensuring the security of the Site and preventing fraud | Legitimate interest (Art. 6.1.f) |
| Handling a dispute or enforcing our rights | Legitimate interest (Art. 6.1.f) |
| Keeping a record of our exchanges and of your consents | Legitimate interest (Art. 6.1.f) and obligation to prove consent (Art. 7.1) |
You may withdraw your consent at any time, using the unsubscribe link included in every email or by writing to us. Withdrawal does not affect the processing already carried out.
4. Health and disability data
In order to adapt a sporting activity, you may need to provide us with information about a disability or a health condition. This data is considered «sensitive» within the meaning of Article 9 of the GDPR.
We process it only with your explicit consent, collected through a separate checkbox, and solely to tailor our advice or services. It is accessible only to those who need it and is not used for commercial purposes. However, it may be retained and used for the establishment, exercise or defense of our legal claims (Art. 9.2.f of the GDPR).
We invite you to provide only the information strictly necessary for your request. You may request its deletion at any time, subject to its retention for the defense of our rights.
5. Recipients and processors
We neither sell nor rent your data. It is accessible to authorized TESSIER staff and to the service providers listed below, who act on our behalf and on our instructions.
| Service provider | Role | Data location |
| Here We Com, 1014 route de Plainpalais, 73230 Saint-Alban-Leysse | Design, maintenance of the Site and hosting management | France |
| OVHcloud (OVH SAS), 2 rue Kellermann, 59100 Roubaix | Site hosting | France |
| Matomo Cloud (InnoCraft) | Audience measurement | European Union |
| Mailjet | Sending the newsletter and emails | European Union |
| PayPlug | Secure online payment | European Union |
Your data may also be disclosed to authorities where required by law, and to our advisers (lawyer, accountant, insurer) for our legal obligations or the handling of a dispute.
6. Transfers outside the European Union
Our service providers store your data within the European Union. Should a transfer outside the EU occur, for example to a subprocessor of one of them, it would be covered by one of the safeguards provided for by the GDPR:
- an adequacy decision by the European Commission, including the EU–US Data Privacy Framework for certified companies;
- failing that, the standard contractual clauses adopted by the European Commission.
You may obtain a copy of these safeguards by writing to us.
7. Retention periods
Your data is kept for a limited period, then deleted or anonymized.
| Data | Retention period |
| Contact requests with no follow-up | 3 years after the last contact |
| Newsletter subscribers | Until unsubscription |
| Customer data | Duration of the contractual relationship, then 5 years in archive (statute of limitations) |
| Invoices and accounting records | 10 years (Commercial Code) |
| Health or disability data | Duration of the service, then 5 years in restricted-access archive (statute of limitations) |
| Proof of consent and exchanges | Duration of processing, then 5 years |
| Matomo statistics | 25 months maximum |
| Strictly necessary cookies | 13 months maximum |
| Requests to exercise rights | Record of the request and the response kept for 5 years |
At the end of these periods, data is deleted or anonymized, unless ongoing proceedings justify retaining it until their conclusion.
8. Cookies and trackers
A cookie is a small file placed on your device when you visit a website. The Site uses only strictly necessary cookies and audience measurement exempt from consent under Article 82 of the French Data Protection Act. It uses no advertising cookies or social network trackers.
| Category | Purpose | Consent required |
| Strictly necessary | Operation and security of the Site | No |
| Matomo audience measurement | Anonymous traffic statistics, anonymized IP address, not cross-referenced with other processing | No, in accordance with CNIL guidelines |
You can opt out of audience measurement using the Matomo opt-out module at the bottom of this page.
You can also configure your browser: Chrome, Firefox, Safari, Edge.
9. Security
We implement technical and organizational measures appropriate to the risks, including encryption of communications (HTTPS) and restriction of access to authorized persons only.
As no transmission over the Internet is completely secure, we ask that you share only the information necessary for your request, particularly by e-mail.
10. Your rights
You have the following rights regarding your data:
- access : obtain a copy of the data we hold about you;
- rectification : have inaccurate or incomplete data corrected;
- erasure : request the deletion of your data, subject to our legal obligations and the defense of our rights;
- restriction : request a temporary freeze on their use;
- objection : object to processing based on our legitimate interest, unless there are compelling legitimate grounds or the processing is needed to defend our legal rights, and object at any time to marketing;
- portability : receive the data you have provided to us in a machine-readable format;
- withdrawal of consent at any time, without affecting past processing;
- post-mortem directives : define what happens to your data after your death.
To exercise these rights, write to contact@tessier.sport or to the postal address given in section 1. We respond within one month, which may be extended by two months for complex requests; we will inform you if this is the case. Proof of identity will only be requested if there is reasonable doubt about your identity. We may refuse requests that are manifestly unfounded or excessive, in particular because of their repetitive nature (Art. 12.5 of the GDPR).
If you believe your rights are not being respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at www.cnil.fr.
11. Changes to this policy
We may update this policy to reflect changes in our services or in regulations. The version in force is the one published on the Site, with its update date at the top of the page. If a change requires your consent, we will obtain it beforehand.