Data Protection Policy

The policy set out below applies to the processing of personal data carried out by the company “MABG INTERNATIONAL”, a simplified joint stock company with a single shareholder and a capital of 10 000 euros, whose registered office is located at 14 avenue de l’Opéra 75001 Paris, registered at the Paris Trade and Companies Register under number 880 041 959, represented by its Chairman, Mr. Alain AMIRKHANIAN (hereinafter referred to as “MABG“), in the context of the sale of works of art and collector’s items from the world of boxing, presented on the website www.megtheartofboxing.com (hereinafter the “Website“).

 

1 – General provisions

The following provisions apply to all processing of personal data carried out by the data controller, unless otherwise specified in the specific provisions.

Legal framework – compliance with GDPR and French law

The data controller declares that it processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) and with French Law No. 78-17 of 6 January 1978 on Data Processing, Data Files and Individual Liberties (as amended).

Data controller and other stakeholders

The data controller is identified below. Its contact details are:

The company “MABG INTERNATIONAL”, a simplified joint stock company with a single shareholder and a capital of 10 000 euros, whose registered office is located at 14 avenue de l’Opéra 75001 Paris, registered at the Paris Trade and Companies Register under number 880 041 959, represented by its Chairman, Mr. Alain AMIRKHANIAN (hereinafter referred to as “MABG“), Tel : +33 1 77 69 65 64 , email : contact@megtheartofboxing.com, Website : www.megtheartofboxing.com  .

The representative of the data controller is Mr. Alain AMIRKHANIAN, Tel: +33 634557414, email: aamirkhanian@hotmail.com,

Recipients of personal data

The data collected is only accessible to authorized personnel of the www.megtheartofboxing.com website and to our partners. All staff members are subject to a privacy policy covering all activities carried out. Our partners undertake to comply with the regulations concerning the methods of personal data processing that we transmit to them.

Data transfer

Some of your personal data may be transmitted to our various partners whom we call upon to provide you with our service. Your personal data will never be sold to a third party. All of your data is kept in France.

Data retention period

The data will be kept for a period of 5 (five) years from the date of collection.

Rights of the person whose data are collected

The person whose data is collected has the right to:

– ask the controller for access to, correction or deletion of personal data, or a limitation of the processing relating to the data subject,

– oppose the treatment,

– the portability of his/her data,

– lodge a complaint with a supervisory authority,

– withdraw his/her consent at any time, without prejudice to the lawfulness of the processing operation based on the consent given prior to the withdrawal of consent, this right existing exclusively where the processing is based on Article 6(1)(a) or Article 9(2)(a) of the GDPR, i.e. on the data subject’s consent to the processing of his or her personal data for one or more specific purposes.

2 – Specific provisions

The following provisions are specific to each data processing.

Management of relationship with our contacts and prospects

Processed data – We process the following data: title, first name, surname, phone number, email address, postal address.

Purposes – The processing of personal data is intended for the management of the relationship with our contacts and prospects. In particular, this processing is intended to provide the concerned person with information on news about our company, our products and our services.

Legal basis – This processing of personal data is based on the consent of the data subject (Article 6(1)(a) of the GDPR). The request for data is of a contractual nature. The data subject is not obliged to provide the data. If the data subject does not provide the data or withdraws his or her consent to data processing, he or she will not be able to receive information about news on our organization, products and services.

Acceptance procedure for our professional customers

Personal data processed – We process the following data: title, first name, surname, telephone details, e-mail address, postal address, organization (company, firm or other), functions, if applicable percentage of company ownership, valid official identity document (nature, date and place of issue, name and capacity of the authority or person who issued the document and, where applicable, authenticated it), product or service requested, distribution channel, transaction conditions, territory of origin of the funds, territory of destination of the products, identity of the beneficial owner, any special risks (within the meaning of Article L. 561-10 2° of the Monetary and Financial Code).

Purposes – This data processing is intended to meet our customer due diligence requirements in accordance with French law, in particular Articles L. 561-4-1 and R. 561-5 of the French Monetary and Financial Code.

Legal basis – This processing is necessary to comply with the legal obligations to which the data controller is subject. It is based on Article 6(1)(c) of the GDPR. The request for data is a condition for the establishment of a business relationship, in accordance with the applicable legal and regulatory provisions. The data subject is obliged to provide these data if he or she wishes to establish such a relationship. If the data subject does not provide the data, we will not be able to continue a business relationship with him/her.

Management of the relationship with our customers

Personal data processed – We process the following personal data: title, first name, surname, telephone details, e-mail address, postal address, product or service purchased, purchase price, possible discount, possible promotional offer, date and place of purchase, place of delivery, distribution channel, terms of payment, payment information.

Purposes – The processing of personal data is intended for the management of the relationship with our customers. In particular, this processing is intended to carry out pre-contractual measures taken at the request of the person concerned, to execute the contract to which the person concerned is a party, to comply with our legal, tax and accounting obligations.

Legal basis – The processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject. It is based on Article 6(1)(b) of the GDPR. The request for data has a contractual character. The data subject is obliged to provide this data if he or she wishes to benefit from our products or services. If the data subject does not provide the data, he or she will not be able to become a customer, acquire our products or benefit from our services.

Execution of orders

Personal data processed – We process the following personal data: title, first name, surname, telephone number, e-mail address, postal address, delivery address, billing address, terms of payment, payment information.

Purposes – Processing is intended for the execution of orders placed through contact with us and for the management of the relationship with our customers.

Legal basis – This processing is necessary for the execution of pre-contractual measures taken at your request and for the execution of the contract concluded between us. It is based on Article 6(1)(b) of the GDPR. The request for data is a condition for the conclusion of the contract. It has a contractual character. The data subject is obliged to provide the data. Otherwise he or she will not be able to place an order against us.

Use of Google Analytics

Processed data –  Google processes the data mentioned in its privacy policy (https://support.google.com/analytics/answer/6004245?hl=fr / https://policies.google.com/privacy?hl=fr#infocollect). These data include the IP address of the devices used to consult the Website.

Purposes – This processing is used for the purposes of analysis and statistical study of the use of our Website.

Legal basis – The processing is necessary for the purposes of the legitimate interests we pursue, which are to improve and optimize our website for the benefit of users. It is based on Article 6(1)(f) of the GDPR. The request for data is of a contractual nature. The data subject is not obliged to provide these data and can object to their processing at any time. In order to prevent the collection of data relating to his or her use of the website and the processing of this data by Google, the data subject must follow Google’s instructions: http://tools.google.com/dlpage/gaoptout .

Marketing and advertising messages

Personal data processed – We process the following data: surname, first name, information on opened messages and links followed (including date and time of consultation).

Purposes – The purpose of the processing is to improve our communication and to send you relevant content at the right time.

Legal basis – The processing is based on the consent of the data subject (Article 6(1)(a) of the GDPR) and is necessary for the purposes of the legitimate interests we pursue, namely to improve our communication and to avoid inappropriate communication (Article 6(1)(f) of the GPDR). The request for data is of a contractual nature. The data subject is not obliged to provide the data and can object to their processing at any time. If the data subject does not provide the data or withdraws his/her consent to the processing of data, he/she will not be able to receive appropriate communications.

Updating of the personal data policy

If the personal data policy is amended, you will be informed via our Website or via any of our other usual communication channels.

The supervisory authority

The supervisory authority designated by French law is the “Commission Nationale de l’informatique et des libertés”, which you may refer to in the event of a dispute in the exercise of your rights or if you believe that your complaint concerns a breach of the regulations.

You will find the terms and conditions of this seizure on the CNIL website https://www.cnil.fr