Privacy Policy
This policy describes how personal data is collected and used in the CSSA mobile application (supporter space of CS Sedan Ardennes).
1. Data controller
The data controller is Club Sportif Sedan Ardennes (CS Sedan Ardennes), in connection with the CSSA application intended for supporters.
For any question about your personal data, you can contact us using the support address shown on the app listing (App Store / Google Play) or through the club.
2. Data we collect
Depending on how you use the app, we may process in particular:
- Account: email address, first name, last name, membership number, password (stored hashed).
- Authentication: session tokens, magic login / registration links (one-time use, limited validity).
- Push notifications: device identifier (Expo / platform token) to send you alerts (e.g. match day).
- Sporting life & engagement: match attendance, predictions, experience points (XP), badges.
- Subscription / tickets: information related to your subscription or tickets synced via Weezevent ticketing (linked by email).
- Cashless wallet: balance and WeezPay / Weezevent wallet information needed for display and top-up.
- Shop: navigation to the club’s online shop (Shopify); payment and order processing are handled by that provider.
- Technical data: server logs needed for security and proper operation (possibly IP addresses, timestamps), with secrets masked in logs.
We do not request access to your contacts, photos, or precise location for core app functionality.
3. Purposes
- Create and manage your supporter account;
- Allow you to sign in securely;
- Display your membership card, stand, calendar, and benefits;
- Send club- and match-related notifications (with your system permission);
- Provide gamification (XP, badges) and predictions;
- Display the cashless balance and facilitate shop access;
- Ensure security, prevent abuse, and improve the service.
4. Legal bases
Depending on the case: performance of a contract (providing the CSSA service), legitimate interest (security, improvement), and/or consent (device-level push notifications).
5. Recipients and processors
Data may be accessed by authorized club / app-publisher teams and by technical providers as needed:
- API and database hosting (e.g. Vercel / PostgreSQL);
- transactional email delivery (e.g. Resend);
- push notifications (Expo / Apple / Google);
- Weezevent / WeezPay (ticketing and cashless);
- Shopify (online shop), when you access it.
These providers act on behalf of the service under appropriate instructions. Your data is not sold.
6. Transfers outside the EU
Some providers may process data outside the European Economic Area. In that case, appropriate safeguards (standard contractual clauses, etc.) are sought in accordance with applicable regulations.
7. Retention periods
- Account: for the duration of use, then deletion or anonymization after a request or prolonged inactivity, subject to legal obligations;
- Magic links / tokens: short duration (minutes to hours) then invalidation;
- Push tokens: while the device remains registered, or until sign-out / deletion;
- Technical logs: limited period needed for security and diagnostics.
8. Security
Reasonable measures: hashed passwords, token-based sessions, rate limiting, HTTPS communications, hashed admin secrets on the server, token masking in logs.
9. Your rights
Under the GDPR, you have rights including access, rectification, erasure, restriction, objection, and portability where applicable. You may also withdraw notification consent in your phone settings.
To exercise your rights (including account deletion), use the “Delete my account” button in the app (Profile), or contact the support address shown on the app listing. You may also lodge a complaint with a supervisory authority (in France: www.cnil.fr).
10. Children
The app is intended for the general supporter public. If you are under 15 (or the age required in your country), use of the app requires parental authority consent where the law so requires.
11. Changes
This policy may be updated. The update date appears at the top of the page. In case of a material change, information may be provided in the app or by email.
12. Contact
CS Sedan Ardennes — CSSA application
Support: via the App Store / Google Play listing for the CSSA app