Privacy Policy

Interbourse 2027 • Courchevel, France

Last updated: 8 October 2026

This policy explains how personal data is collected, used, shared, protected and deleted in connection with Interbourse 2027, its website and related application services. It covers Participants, accompanying guests, people making enquiries and users of those services.

1 Who is responsible for your data

Team Paris/Comité Interbourse (the “Organiser”, “we”, “us” or “our”) organises Interbourse 2027 in Courchevel. The Organiser is responsible for the Event-related processing described in this policy.

Data controller: Comité Interbourses
Registered address: 61 rue des Grands Champs, 78300 Poissy, France
Privacy contact: interbourse2027@gmail.com

We process personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable French data protection laws. We do not sell personal data.

This policy applies to processing for which the Organiser is responsible, including Event-related data handled on its behalf through the website or application. Where an application operator or another supplier determines its own purposes for processing, it must identify itself and provide its own privacy information.

Website and application services covered: www.interbourse.net and the Interbourse App (Apple App Store; Android by direct download). Both are operated by Interbourse USA, a non-profit organisation incorporated in Utah, United States. For Event-related processing, Interbourse USA acts on behalf of and on the instructions of the Organiser. Interbourse USA is separately responsible, as data controller, for the “Who’s Who” attendee directory, which it maintains across Interbourse editions so that returning participants can stay in touch. Requests concerning the “Who’s Who” directory or the application may be sent to info@interbourse.net; other requests to interbourse2027@gmail.com.

Reading this policy, visiting the website, installing an application or creating an account does not itself constitute consent to optional marketing, tracking or promotional use of images. Where consent is required, we ask for it separately.

2 Information we collect

We collect information relevant to your participation or use of our services. Depending on the services requested, this includes:

• Identity and contact details: name, email address, telephone number, postal address and other details needed for registration.
• Registration and sporting details: team or organisation, activity choices, competition entries, categories and results; age or date of birth only where needed for eligibility or a requested service.
• Accommodation details: selected property, dates, room requirements and accompanying guests where required.
• Payment and refund details: amounts, payment status, transaction references, billing information and bank details where necessary for payment or reimbursement.
• Account and application information: profile details, account identifiers, information you choose to submit or upload, service requests and communications.
• Consent records and Event photographs, video and audio recordings, subject to section 7.
• Technical information about website or application use, subject to section 8.

3 How we obtain information

We normally collect information directly from you through registration, account creation, accommodation requests, payments, enquiries and correspondence. Technical information is collected through the website or application as explained in section 8.

We may also receive relevant information from a team representative or person registering on your behalf, Courchevel Tourisme (the “Tourist Office”), Accommodation Providers, activity organisers and registration or payment providers.

If you submit another person’s information, ensure you are authorised to do so and give that person access to this policy. Where we obtain information indirectly, we provide the privacy information required by law, including information about its source.

4 Why we use your data

Registration, accommodation, accounts and services

We use information to process registrations, administer Event participation and accounts, coordinate accommodation, manage payments and refunds, provide requested website or application services, and send essential Event communications. The legal basis is performance of our contract with you or steps taken at your request before entering into a contract.

Legal obligations

We process records where required to meet accounting, tax, regulatory or other applicable legal obligations. The legal basis is compliance with the relevant legal obligation.

Event administration, security and disputes

We use information to answer general enquiries, support users, protect our systems, prevent fraud and misuse, arrange recovery of services, and establish or defend legal claims. We also manage sporting competitions and publish names and results in Event result lists and reporting. The legal basis is our legitimate interests in administering a safe and orderly Event, providing reliable services and protecting our operations and legal rights. We assess those interests against your rights and expectations.

Optional communications, images and tracking

We rely on separate consent for newsletters and promotional emails, promotional use of identifiable photographs and recordings, and disclosure to sponsors for their marketing. Optional cookies or application tracking are used with consent where required. Website measurement that qualifies for a legal exemption is explained in the relevant tracking notice.

Accepting the Terms & Conditions does not authorise these optional uses. We explain any new purpose and its legal basis before processing data for that purpose.

5 Required information and sensitive data

Mandatory fields are identified when information is collected. Without information needed for registration, payment, accommodation or an account service, we may be unable to provide that service. Optional consent can be refused without affecting Event participation.

Please do not send medical records or detailed health information with your registration. If you need to disclose accessibility needs or other information revealing health, contact us first. We explain what is necessary, who needs access and how it is protected. Where required, we obtain explicit consent separately. Necessary information may be shared with emergency services to protect vital interests where the legal conditions are met.

6 Who receives your information

Information is shared only to the extent necessary for the relevant purpose, with:

• Authorised organising team members, volunteers and persons supporting Event administration.
• The Tourist Office and Accommodation Providers, for accommodation requests, bookings, payments and related communications.
• Activity organisers, transport companies, ski schools and other suppliers providing requested services.
• Providers of registration systems, payment services, website and application hosting, email, technical support, storage and recovery services.
• Accountants, auditors, legal advisers, insurers and competent authorities where necessary or legally required.
• Sponsors identified in the Event programme, only with your separate consent for the relevant marketing disclosure.

Service providers acting on our behalf receive only the information needed for their tasks and are subject to appropriate contractual confidentiality, security and data protection requirements. Access by team members and volunteers is limited according to their responsibilities.

The Tourist Office, Accommodation Providers, payment providers and other suppliers may also act as independent data controllers for their own services and legal obligations. Their own privacy notices apply to that processing. Where services are jointly controlled, the responsible organisations and their respective roles must be explained to you.

Providers and roles: the website and the registration and booking system (WordPress/WooCommerce) are hosted by HDK (wearehdk.com) on servers in London, United Kingdom. Card payments are processed by Stripe, which also acts as an independent controller for its own legal obligations (stripe.com/privacy); bank transfers are made to the Organiser’s bank account. Organiser email correspondence uses Google Gmail (policies.google.com/privacy). The Interbourse App is operated by Interbourse USA with its backend on Google Firebase (firebase.google.com/support/privacy). Contact management, email communications and website visit tracking use HubSpot (legal.hubspot.com/privacy-policy). Website analytics use Google Analytics 4 via Google Tag Manager and Jetpack/WooCommerce Analytics by Automattic (automattic.com/privacy).

7 Newsletters, sponsors, photographs and recordings

Newsletters and promotional communications

If you opt in, we use your contact details to send Interbourse newsletters or promotional communications within the scope explained when you subscribe. Each promotional email includes an unsubscribe option. You may also unsubscribe by contacting interbourse2027@gmail.com. Essential registration, payment, accommodation and safety messages are service communications and may still be sent where necessary.

Sponsor communications

We share your name, email address or image with sponsors for advertising or promotional purposes only where you have given separate, voluntary consent. The sponsors and intended purposes are identified when that consent is requested. Sponsors are responsible for their own subsequent processing and must provide their own privacy information.

Photographs, video and audio

With your separate consent, identifiable Event photographs, video and audio recordings may be used free of charge for documentation, reporting and promotion, including on the Event website, social media and in print. Publication of competition names and results is addressed separately in section 4.

You can withdraw any consent at any time by emailing interbourse2027@gmail.com. Withdrawal does not affect processing lawfully carried out before withdrawal. We stop future consent-based use under our control and remove relevant online material under our control where applicable. Printed material already distributed cannot always be recalled. Refusing or withdrawing consent does not affect registration or participation.

8 Website, application and tracking technologies

Technical information can include IP addresses, browser and operating system details, device information, approximate location derived from an IP address, pages viewed, navigation, access times and usage patterns. The information actually collected, its purposes and retention periods are specified in the website or application tracking notice.

Cookies are small files stored on your device. Similar technologies include analytics tools, pixels and application software development kits. Session cookies normally expire when you close your browser; persistent cookies remain for their stated duration unless deleted earlier.

Strictly necessary technologies support functions such as security, sign-in and remembering privacy choices. Optional technologies for analytics, personalisation or advertising are activated only after consent where required. Any legally exempt audience measurement must meet the applicable conditions.

You can accept or refuse optional tracking and withdraw consent through the privacy settings. Browser or device settings offer additional controls. Blocking necessary cookies may prevent some requested functions from working. A browser “Do Not Track” signal does not replace the site’s consent controls.

Tracking details: the website uses strictly necessary cookies for the shopping basket, checkout, sign-in and recording your cookie choices, and, subject to your consent, Google Analytics 4 (via Google Tag Manager), Jetpack/WooCommerce Analytics and HubSpot tracking cookies. The full list of cookies, their purposes, providers and durations is available on our Cookie List page (www.interbourse.net/cookies-list/), and you can change your choices at any time through “Cookie Settings” on the website. The Interbourse App uses Google Firebase for its backend services, including sign-in and data storage.

External links and third party platforms have their own privacy notices. Visiting those services may involve processing by their operators. Public posts and content you choose to share with other users may be visible to those recipients; account deletion cannot automatically remove independent copies they have lawfully retained.

9 Security and incident response

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. These include restricted access, confidentiality requirements and security arrangements appropriate to the systems and information concerned.

No online service can guarantee absolute security. This does not limit our legal data protection responsibilities. Please report suspected unauthorised account access or disclosure to interbourse2027@gmail.com and protect your sign-in credentials.

If a personal data breach occurs, we assess and contain it, take appropriate remedial action and notify the relevant authority and affected individuals where legally required.

10 Storage and international transfers

Our website, application, email or service providers may process information in countries outside the European Economic Area (“EEA”). Where this occurs, we use a lawful transfer mechanism, such as a relevant adequacy decision or approved standard contractual clauses with additional measures where necessary.

Use of the website or application is not blanket consent to overseas transfers. A provider being subject to foreign law does not remove our obligation to ensure appropriate safeguards. You may request information about the safeguards and how to obtain a copy.

Hosting and transfer arrangements: the website is hosted in London, United Kingdom, which benefits from an EU adequacy decision. The Interbourse App backend runs on Google Firebase. Google, Stripe, HubSpot and Automattic may process personal data in the United States; these transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses. Interbourse USA, which operates the website and application and maintains the “Who’s Who” directory, is based in the United States; transfers of personal data to it are made under standard contractual clauses. The website and application are administered remotely from Canada, which benefits from an EU adequacy decision.

11 Retention, account closure and deletion

We keep personal data only for as long as needed for its stated purpose, including any applicable legal retention period. Access to records retained solely for legal obligations or disputes is restricted.

• Registration, accommodation and operational records: until Event arrangements, payments, refunds and outstanding requests are completed, then only where needed for legal obligations or claims.
• Account and application data: while the account is active and the information is needed to provide the service, subject to account closure, applicable inactivity rules and lawful retention exceptions.
• Enquiries and correspondence: until resolved, with further retention only where justified for follow-up, obligations or claims.
• Accounting and payment records: for the period required by applicable law.
• Competition results: for the stated publication and Event archive period.
• Marketing data and images: for the stated subscription or publication period, subject to withdrawal of consent; minimal suppression records may be retained to respect an unsubscribe request.
• Consent records, technical logs and tracking data: for their specified verification, security or tracking periods.

Retention schedule: registration, accommodation and operational records are kept for 3 years after the Event; accounting and payment records for the period required by French law (up to 10 years); “Who’s Who” profiles and application accounts are kept for up to 5 years after your last participation in an Interbourse edition, unless you ask for their removal earlier; competition results are kept indefinitely as part of the Interbourse historical archive; images are kept until consent is withdrawn; technical logs for up to 12 months; backups for up to 30 days.

You may request closure of your account and deletion of associated personal data at any time by contacting interbourse2027@gmail.com. Where available, you may also use the account deletion function. We delete or anonymise data that is no longer needed, while explaining any information that must be retained and why. Account closure does not itself cancel an Event registration or accommodation booking.

Deleted data may remain temporarily in restricted backups until overwritten under the backup schedule. Genuinely anonymised information may be retained for statistics or research because it no longer identifies you.

12 Your rights and complaints

Subject to applicable conditions and exceptions, you may request access, correction, deletion or restriction of your personal data; object to processing based on legitimate interests; and obtain portability of eligible data processed automatically on the basis of consent or a contract. You may object to direct marketing at any time and withdraw consent without affecting prior lawful processing. French law also provides for instructions concerning your data after death.

Send requests to interbourse2027@gmail.com, identifying the relevant account or registration where helpful. We may request proportionate information to verify identity. Requests are normally free of charge. We respond within one month; where a lawful extension is necessary, we explain the reasons within that first month.

You can complain directly to the CNIL at www.cnil.fr, or to the competent authority in your country of habitual residence, workplace or the alleged infringement. You do not have to contact us first.

13 Automated decisions and policy updates

Automated decisions and profiling: no such decisions are made.

We may update this policy as services, Event arrangements or legal requirements change. The current version is available through the website and relevant application service. Material changes are brought to your attention where required. Updates do not replace any fresh consent required for a new purpose.

For privacy enquiries or complaints, contact Team Paris/Comité Interbourse at interbourse2027@gmail.com or the postal address in section 1.