Privacy policy
Last updated: 26.09.2026
This English version is provided for information only; the French version prevails.
1. Who processes your data?
The data controller is SAS Accroche-toi, which operates the Le Triangle climbing gym: 22 rue François Truffaut, 75012 Paris, France, SIREN 849 989 744.
For any question about your data, email us at letrianglebercy@gmail.com or call +33 7 77 94 60 05.
This policy explains what data we collect, why, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
2. What data, why and for how long?
We only collect the data needed for each purpose below. We never sell your data.
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Online and on-site purchases (entries, passes, memberships, courses, camps, birthday parties) | Last name, first name, email, phone, address, date of birth, service purchased | Performance of the contract | Duration of the contract, then 3 years for customer relations |
| Invoices and accounting | Identity, amounts, date, payment method | Legal obligation | 10 years |
| Payment and monthly payment by registered card | Card details, processed only by our payment providers | Performance of the contract; consent for registering the card | Until the last instalment, then 13 months for bank disputes |
| Access to the gym and membership management | Name, plan, visit dates, parental authorisation for minors | Performance of the contract; legitimate interest (safety) | Duration of the contract, then 3 years |
| Corporate events | Contact’s name, job title and contact details, company | Pre-contractual measures and contract | 3 years after the last contact |
| “Une question ?” contact form and emails | Name, email, message | Legitimate interest (replying to your request) | 3 years after the last exchange |
| Newsletter and marketing offers | Email, first name | Consent (or legitimate interest for our customers, with the right to object in every email) | Until you unsubscribe, or 3 years without interaction |
| Audience measurement and online advertising | Cookies and identifiers (see section 4) | Consent | 13 months maximum |
Data marked as mandatory in our forms is needed to process your request or order. Without it, we cannot follow up.
3. Who has access to your data?
Your data is accessible to the Le Triangle team, to the extent needed. It is also entrusted to service providers acting on our behalf and bound by confidentiality:
| Provider | Role | Location |
|---|---|---|
| OVH SAS (OVHcloud) | Hosting of the website and database | France |
| Déciplus | Management software for all our services (memberships, courses, camps, registered cards) and sending of our emails, including newsletters | European Union |
| Stripe | Online card payment | European Union (Ireland); possible transfers to the United States |
| Google (Gmail, Google Analytics, Google Ads, Google Fonts) | Team email; visitor statistics and advertising campaign measurement, only with your consent; display of the website’s fonts | European Union and United States |
| Meta (Facebook, Instagram) | Meta Pixel and product catalogue: ad measurement and targeting, only with your consent | Ireland and United States |
When data is transferred outside the European Union, in particular to the United States, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
We may also disclose data to the authorities where required by law.
4. Cookies
The website uses cookies that are strictly necessary for it to work: cart, checkout, account login, language choice and remembering your cookie choices. They do not require your consent.
Other cookies (audience measurement, advertising, social media content) are only placed with your consent, collected through the banner shown on your first visit. You can accept, refuse or choose by category, and change your choice at any time via the cookie settings link at the bottom of each page. Your choice is kept for 6 months, after which you are asked again; the cookies themselves last no longer than 13 months.
5. Video surveillance
The gym is equipped with CCTV cameras to ensure the safety of people and property and to prevent theft. The cameras do not film the changing rooms, showers or toilets. A sign at the entrance indicates their presence.
The legal basis is our legitimate interest in keeping the gym secure. Footage is viewed only by the management and, in the event of an incident, by the police. It is kept for a maximum of 30 days, unless legal proceedings are under way. You can ask to access footage concerning you by writing to letrianglebercy@gmail.com.
6. Photos and videos at events
We sometimes take photos and videos at our events (competitions, evenings, camps) to publish on our website and social media. We favour wide shots. You can tell the team that you do not wish to be photographed, or ask us at any time to remove a post in which you appear: we will remove it as soon as possible.
No photo of a child is published without the written authorisation of their legal guardian.
7. Your rights
You may at any time access your data, have it rectified or erased, request restriction of its processing, object to its use, receive the data you provided to us (portability) and withdraw your consent. You may also set instructions for what happens to your data after your death.
Write to us at letrianglebercy@gmail.com or at 22 rue François Truffaut, 75012 Paris, France. We reply within one month. We may ask you to prove your identity if there is reasonable doubt.
To stop receiving our offers, click the unsubscribe link in any of our emails. If you believe your rights have not been respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
8. Minors
Purchases are made by an adult. For a minor, data is provided by their legal guardian, in particular in the parental authorisation.
9. Security
We protect your data with appropriate measures: secure website connection (HTTPS), payments processed by certified providers, and access limited to the team and providers who need it.
10. Changes
We may update this policy, for example if we start using a new tool. The date of the latest update is shown at the top of the page.