Privacy and Personal Data Protection Policy

AIGOIN RACING
Last updated: August 2026

Preamble

AIGOIN RACING (“we”, “our”, “the Company”), a French limited liability company (SARL) with share capital of €5,000.00, whose registered office is located at Rue du Carreau de la Mine, Impasse du Lavoir, 13590 Meyreuil, France, operates the website https://www.aigoinracing.com, an e-commerce website accessible in France and internationally.

This Privacy Policy describes how we collect, use, retain and protect the personal data of our customers and visitors, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the French Data Protection Act of 6 January 1978, as amended.

As our business serves an international customer base, we apply the principles of the GDPR as the reference framework for all our data processing activities and adapt certain practices (consent banners, specific notices) depending on the visitor’s location, particularly for the United Kingdom (UK GDPR) and, where applicable, other jurisdictions such as California (CCPA/CPRA).

1. Data Controller

The data controller responsible for the personal data collected through the website is:

AIGOIN RACING (SARL AIGOIN RACING)
Rue du Carreau de la Mine, Impasse du Lavoir
13590 Meyreuil, France
SIREN : 499 319 614 – RCS : 499319614

Contact : info@aigoinracing.com / +33 4 42 65 49 81

Website hosting provider : OVH – 2 rue Kellermann, 59100 Roubaix, France
Technical service provider : WEBPERFECT (website design and development)

Aigoin Racing has not appointed a Data Protection Officer (DPO). For any questions relating to your personal data, you may contact us at the address above.

2. Data Collected

Depending on how you use the website, we may collect the following categories of data :

·         Identity and contact information : surname, first name, postal address, email address, telephone number

·         Customer account data : username, password (encrypted), order history, products viewed or added to wish lists

·         Order and billing data : delivery address, billing address, order details, amounts

·         Payment data : payment information is transmitted directly to our PCI-DSS-certified payment service providers and is not stored on our servers

·         Browsing data : IP address, browser type, pages viewed, cookies (see dedicated section)

·         Communications : messages exchanged through our contact form or customer service

3. Purposes, Legal Bases and Retention Periods

We process your personal data for the following purposes:

·         Order and billing management : based on the performance of the contract; retained for 10 years (accounting and legal requirements)

·         Creation and management of customer accounts : based on the performance of the contract; retained for 3 years after the customer’s last activity

·         Sending newsletters and promotional offers : based on your consent ; retained until consent is withdrawn

·         Audience measurement and website improvement : based on your consent for non-essential cookies ; retained for a maximum of 13 months

·         Advertising retargeting: based on your consent ; retained for up to 3 months depending on the cookie concerned

·         Fraud prevention: based on our legitimate interest; retained for the period necessary to fulfil this purpose

·         Responding to customer service requests : based on our legitimate interest or your consent ; retained for 3 years after the last contact

4. Data Recipients

Your data may be accessed by authorised internal departments of AIGOIN RACING (sales, logistics and accounting departments), as well as by our service providers, including :

Online Payment Providers

·         CB Monetico : 4 rue Frédéric-Guillaume Raiffeisen, 67000 Strasbourg, France — +33 3 88 14 88 14

·         PayPal : 22-24 Boulevard Royal, L-2449 Luxembourg — https://www.paypal.com/ca/cshelp/contact-us/privacy

Technical Service Provider and Hosting

·         WEBPERFECT (website design and technical maintenance)

·         OVH (hosting)

Delivery and Transport Providers

·         DPD France : 1-13 rue René Jacques, Immeuble Vivaldi, 92130 Issy-les-Moulineaux, France — information@dpd.fr

·         UPS Europe : Avenue Ariane 5, 1200 Brussels, Belgium — https://www.ups.com/fr/fr/support/shipping-support/legal-terms-conditions/privacy-notice

·         Chronopost : 3 Boulevard Romain Rolland, 75014 Paris, France — +33 1 83 11 60 00

·         La Poste: 9 rue du Colonel Pierre Avia, 75015 Paris, France — +33 1 55 44 00 00

Emailing / Newsletter Service

·         Sendinblue (Brevo) : 137 rue d’Aguesseau, 92100 Boulogne-Billancourt, France - dpo@brevo.com

Audience Measurement Tool

·         Google Analytics (Google Ireland Limited) : Gordon House, Barrow Street, Dublin 4, Ireland -  https://support.google.com/policies/troubleshooter/9009584

Advertising Retargeting Tool

Meta Platforms Ireland Limited (Facebook / Instagram) : 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The Facebook Pixel allows us to provide you with personalised advertising on Facebook and Instagram based on your browsing activity on our website (offers, products viewed, etc.). This tracking is only activated after you have given your consent through the cookie banner.

Each of these service providers is contractually required to maintain the confidentiality and security of your data under a Data Processing Agreement (DPA).

5. Transfers of Data Outside the European Union

As our website is accessible internationally, certain data may be transferred to countries located outside the European Union, particularly through our US-based service providers (Meta Platforms for the Facebook Pixel and Google for Analytics).

Where this occurs, we ensure that such transfers are based on one of the following safeguards: the EU-U.S. Data Privacy Framework, an adequacy decision issued by the European Commission, Standard Contractual Clauses (CCT) approved by the European Commission, or any other mechanism recognised under the RGPD.

6. Cookies and Tracking Technologies

When you first visit our website, a banner allows you to accept or refuse cookies that are not strictly necessary for the operation of the website. No non-essential cookies are placed without your consent.

We use the following cookies in particular:

Strictly necessary cookies (shopping cart, session, security, storage of your cookie preferences) do not require consent and cannot be disabled.

Marketing cookies (personalised emailing, targeted Facebook/Instagram advertising) are only placed after you have given your explicit consent.

You may change your preferences at any time in two ways:

• Via the cookie management link available at the bottom of the website

• From your personal account area, when creating or managing your account

7. Data Security

AIGOIN RACING implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure, including:

• encryption of passwords ;

• secure HTTPS connections ;

• restricted access to data for authorised employees ;

• regular updates to the platform and its modules.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the French Data Protection Authority (CNIL) within 72 hours and, where necessary, the affected individuals.

8. Your Rights

In accordance with the RGPD and the French Data Protection Act, you have the following rights regarding your personal data :

·         Right of access : to obtain confirmation that your data is being processed and to receive a copy of your data

·         Right to rectification : to correct inaccurate or incomplete data

·         Right to erasure (“right to be forgotten”) : to request the deletion of your data, subject to legal retention requirements

·         Right to restriction of processing

·         Right to data portability : to receive your data in a structured and commonly used format

·         Right to Right to object : in particular to direct marketing

·         withdraw consent : you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

To exercise these rights, please contact us via https://www.aigoinracing.com/fr/nous-contacter form and provide proof of identity.

We undertake to respond within a maximum period of one month.

If you believe that your rights have not been respected, you may lodge a complaint with the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés – CNIL) at www.cnil.fr.

9. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect legal, technical or organisational developments.

The date of the latest update is indicated at the beginning of this document. We encourage you to review this policy regularly.

10. Contact

For any questions relating to this Privacy Policy or the processing of your personal data, you may contact us:

Via our contact form: https://www.aigoinracing.com/fr/nous-contacter

By post:
AIGOIN RACING
Rue du Carreau de la Mine, Impasse du Lavoir
13590 Meyreuil, France