1. Purpose and scope of the Policy

The Fédération Internationale de Tir aux Armes Sportives de Chasse (FITASC) is committed to protecting the privacy and personal data of all users of its website www.fitasc.com. This privacy policy has been established in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

2. Data Controller

3. Personal data collected

As part of our activities, we collect the following data from athletes licensed by our national member federations:

4. Purposes of processing and legal basis

We collect your personal data for specific purposes and on different legal bases.

Under our general terms and conditions of registration (contract), your Data is processed for the following purposes:

• The creation and management of your shooter account on a declarative basis.
• Registration for competitions in your category and the various rankings (competitions, cups, world rankings).
• Communication of information relating to competitions in which a shooter is registered.

Based on your consent, your Data is processed for the following purposes:

• Management of cookies requiring your consent

In the context of FITASC's legitimate interest, your Data is processed for:

• Establishing anonymous statistics related to the disciplines and weapons of licensed shooters. Please note that once the statistics have been established, FITASC does not have the ability to identify you.
• Occasionally sending general/promotional information from FITASC.

In accordance with the legal and regulatory obligations to which FITASC is subject, your Data is processed for the purposes of general and auxiliary accounting.

5. Recipients of the data

Your Data is intended for authorised FITASC employees in charge of database management, depending on the purposes of the collection and within the limits of their respective responsibilities.

They may be transmitted for certain tasks related to the purposes, and within the limits of their respective missions and authorisations, to the following recipients:

• National federations that are members of FITASC
• Service providers and subcontractors whom we use to carry out a range of operations and tasks on our behalf, in particular Kardol as the website host and Kairios as the developer and maintenance manager.
• Insurer, Xplorassur, if you take out individual registration cancellation insurance;
• CIC Crédit Mutuel in connection with credit card payments on our website;
• Duly authorised public authorities (judicial, supervisory, etc.), in connection with our legal and regulatory obligations;
• Regulated professions (lawyers, bailiffs, etc.) who may be involved in the implementation of guarantees, debt collection or litigation;

When your Data is communicated to our service providers and subcontractors, they are also asked not to use the Data for purposes other than those initially intended.

In all cases, only the necessary Data is provided. We make every effort to ensure the secure communication or transmission of your Data.

We do not sell your Data.

6. Retention period

We only retain your personal Data for as long as is necessary to fulfil the purpose for which we hold it, in order to meet your needs or to comply with our legal obligations.

7. Data security

FITASC undertakes to protect the personal data it collects or processes against loss, destruction, alteration, unauthorized access or disclosure. FITASC cannot guarantee absolute security of the data, but undertakes to make every necessary and proportionate effort to ensure its protection and limit the risk of personal data breaches.

We therefore implement all appropriate technical and organizational measures, depending on the nature of the Data and the risks involved in its Processing. These measures are designed to preserve the security and confidentiality of your Personal Data.

In addition, FITASC's practices and policies, as well as physical and/or IT security measures, are updated as necessary.

8. Data transfers outside the EU

FITASC stores your personal data within the European Economic Area (EEA). In the context of international competitions, when the organizing federation is outside the European Union, the following personal data may be transferred: surname, first name, nationality, date of birth, membership number, affiliated federation.

In the event of your data being transferred outside the European Union, we guarantee that this will be done:

• To a country that ensures an adequate level of protection, i.e. a level of protection equivalent to that required by European regulations;
• Within the framework of standard contractual clauses;
• Within the framework of internal company rules.

9. Your rights

The GDPR provides data subjects with rights that they can exercise. These include:

1. Right to information: the right to clear, accurate and complete information on the use of Personal Data by FITASC
2. Right of access: the right to obtain a copy of the Personal Data that the Data Controller holds about the applicant.
3. Right to rectification: the right to have Personal Data rectified if it is inaccurate or obsolete and/or to have it completed if it is incomplete.
4. Right to erasure/right to be forgotten: the right, under certain conditions, to have the Data erased or deleted, unless FITASC has a legitimate interest in retaining it.
5. Right to object: the right to object to the Processing of Personal Data by FITASC for reasons relating to the applicant's particular situation (subject to conditions).
6. Right to withdraw consent: the right to withdraw consent at any time when Processing is based on consent.
7. Right to restriction of processing: the right, under certain conditions, to request that the processing of personal data be temporarily suspended.
8. Right to data portability: the right to request that Personal Data be transmitted in a reusable format so that it can be used in another database.
9. Right not to be subject to automated decision-making: the right for the applicant to refuse fully authorised decision-making and/or to exercise the additional safeguards offered in this regard.

To exercise your rights, you can contact us at the following address: fitasc@fitasc.com

When you send us a request to exercise your rights, you are asked to specify as much as possible the scope of the request, the type of right exercised, the processing of personal data concerned, and any other useful information, in order to facilitate the examination of your request. In addition, in case of reasonable doubt, you may be asked to prove your identity.

You also have the right to refer any complaint regarding the manner in which FITASC collects and processes your data to the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

10. Updates to this Policy

FITASC reserves the right to modify this privacy policy at any time. The modifications will take effect as soon as they are published on the website. We encourage you to consult this page regularly.

Last updated on 20/11/2025.