ALTERED attaches the utmost importance and care to the protection of privacy and Personal Data, as well as to compliance with the provisions of the applicable Legislation.

Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such Data (hereinafter “GDPR”) affirms that Personal Data must be processed lawfully, fairly, and transparently. Thus, this privacy policy (hereinafter the “Policy”) aims to provide you with simple, clear information on the Processing of Personal Data concerning you, in the context of your browsing and operations carried out on our website.

As part of your activity on the https://www.altered.gg/en-us website and et https://support.altered.gg/hc/en website (after-sales service), we collect and use personal data relating to you, an individual (hereinafter referred to as the “Data Subject”).

For all Processing, SAS Equinox (ALTERED) with a share capital of €300,000 (SIREN: 894382746 - Registered with the RCS or RM: Paris B 894 382 746) and whose registered office is located at 36 rue Vaugelas - 75015 Paris, determines the means and purposes of the Processing. As such, Société Equinox acts as a Data Processor, within the meaning of the Regulations relating to Personal Data, and in particular Regulation (EU) 2016/679 on the protection of individuals with regard to the Processing of Personal Data and on the free movement of such Data.

When you use our website or subscribe to our services, you provide us with a certain amount of information about yourself, some of which may identify you (“Personal Data”). This is the case when you browse our site, fill in online forms or simply become a member.

The nature and quality of the Personal Data collected about you will vary depending on your relationship with EQUINOX (ALTERED):

• Identification and contact data: this includes all information relating to your identity and means of contacting you, such as your first name, last name, telephone number etc. We may also collect your e-mail address, as well as your postal address (in the event of payment, the postal address will be required to generate an invoice and to deliver your print card). In the case of a subscription or order, you may also be asked to provide proof of identity.

• Connection data: this is any information that may allow us to identify you indirectly for maintenance or statistical purposes, such as your IP address.

• Financial data: this corresponds to bank details such as a bank statement, an invoice or bank details for any order placed on our website.

• Documents of different kinds (PDF, Office format, Image) with titles, contents, folder names, or information linked to a document.

• Browsing information: when you browse our website, you interact with it. As a result, certain information relating to your browsing is collected.

• Data collected from Third Parties: Personal Data that you have agreed to share with us or on publicly accessible social networks and/or that we may collect from other publicly accessible Data bases.

• Commercial Data: any data that relates to orders placed such as order content or purchase history.

We collect your Personal Data for specific purposes and on different legal grounds.

In the context of contract performance or pre-contractual measures, your Data is processed for the following purposes:

• Customer account management (player account, Market Place account, Print On Demand account, Altered after-sales service) ;

• Contract management (buyer, seller) ;

• Management of orders and purchases (purchase contracts);

• Billing management ;

• Event pre-registration management ;

• Claims and after-sales service management;

With your consent, your Data will be processed for the following purposes:

• Transmission of your Data to our commercial partners for marketing purposes (cookies);

• Management of cookies requiring your consent (consent or refusal on your part for the deposit of computer cookies);

• Newsletter management

In the context of EQUINOX's (ALTERED) legitimate interests, your Data is processed for the following purposes:

• Management of pre-litigation and litigation ;

• Management of contact requests

As part of EQUINOX's (ALTERED) legal and regulatory obligations, your Data is processed for the following purposes:

• General and auxiliary accounting ;

• Know Your Customer (KYC) procedure for user identification to fight fraud and money laundering

Your Data is intended for authorized EQUINOX (ALTERED) employees in charge of managing and executing contracts and legal obligations, according to the purposes of collection and within the limits of their respective responsibilities.

It may be transmitted to the following recipients for certain tasks related to these purposes, and within the limits of their respective missions and authorizations:

EQUINOX (ALTERED) Group entities in the event of outsourcing to another Group entity;

Service providers and subcontractors we use to carry out a range of operations and tasks on our behalf, such as :

• Online payment infrastructure provider

• Service and customer relations software

• User authentication

• Business partners (Google, Doubleclick) only when you have expressly consented to this via a checkbox on our Data collection forms;

• Duly authorized public authorities (judicial, supervisory, etc.), as part of our legal and regulatory obligations;

• Regulated professions (lawyers, bailiffs, etc.) who may be involved in the implementation of guarantees, debt collection or litigation;

When your Data is communicated to our service providers and subcontractors, they are also asked not to use the Data for purposes other than those initially intended. We make every effort to ensure that these third parties maintain the confidentiality and security of your Data.

In all cases, only the necessary Data is provided. We make every effort to ensure secure communication or transmission of your Data.

We do not sell your Data

EQUINOX (ALTERED) endeavors to keep Personal Data in France, or at least within the European Economic Area (EEA).

However, it is possible that the Data we collect when you use our platform or services may be transferred to other countries. This is the case, for example, if some of our service providers are located outside the European Economic Area.

In the event of such a Transfer, we guarantee that it will be carried out :

• To a country ensuring an adequate level of protection, i.e. a level of protection equivalent to that required by European Regulations;

• Within the framework of standard contractual clauses;

• Within the framework of internal company rules.

We retain your Personal Data only for as long as is necessary to fulfill the purpose for which we hold it, to meet your needs or to comply with our legal obligations.

Retention periods vary according to several factors, such as:

• EQUINOX (ALTERED) business needs;

• Contractual requirements;

• Legal obligations;

• Recommendations from supervisory authorities.

The retention periods for your Data are as follows:

EQUINOX (ALTERED) is committed to protecting the Personal Data we collect or process against loss, destruction, alteration, unauthorized access or disclosure.

Accordingly, we implement all appropriate technical and organizational measures, depending on the nature of the Data and the risks involved in processing them. These measures must preserve the security and confidentiality of your Personal Data. They may include practices such as restricted access to Personal Data by authorized persons, by virtue of their functions, pseudonymization or encryption.

In addition, our practices and policies and/or physical and/or logical security measures (secure access, authentication procedure, back-up copy, software, etc.) are regularly checked and updated if necessary.

The GDPR provides Data Subjects with rights that they can exercise. These include:

• Right to information: the right to clear, precise and complete information on EQUINOX's (ALTERED) use of Personal Data.

• Right of access: the right to obtain a copy of the Personal Data that the Data Controller holds on the applicant.

• Right of rectification: the right to rectify Personal Data if it is inaccurate or obsolete and/or to complete it if it is incomplete.

• Right to erasure / right to be forgotten: the right, under certain conditions, to have Data erased or deleted, unless EQUINOX (ALTERED) has a legitimate interest in keeping it.

• Right to object: the right to object to EQUINOX's (ALTERED) Processing of Personal Data for reasons relating to the applicant's particular situation (under certain conditions).

• Right to withdraw Consent: the right at any time to withdraw Consent where Processing is based on Consent.

• Right to limit Processing: the right, under certain conditions, to request that Processing of Personal Data be temporarily suspended.  

• Right to Data Portability: the right to request that Personal Data be transmitted in a re-exploitable format enabling it to be used in another database.

• Right not to be the subject of an automated decision: the right for the applicant to refuse fully authorized decision-making and/or to exercise the additional guarantees offered in this respect.

• Right to define post-mortem directives: the right for the applicant to define directives concerning the fate of Personal Data after his/her death.

Additional rights may be granted to Data Subjects by Local Regulations.

To this end, EQUINOX (ALTERED) has implemented a procedure for managing People's rights that complies with the requirements of the applicable Legislation. This procedure establishes:

• The standards to be met to ensure that Data Subjects are provided with transparent information;

• The legal requirements that must be met;

• The authorized means of submitting a request for each right, according to the category of Data Subject;

• The operational processes for handling these requests in accordance with the above requirements;

• The parties involved in these processes, their roles and responsibilities.

To exercise your rights, you can contact the Data Protection Officer (DPO): [email protected].

When you send us a request to exercise a Right, you are asked to specify as far as possible the scope of the request, the type of Right exercised, the Personal Data Processing concerned, and any other useful information, in order to facilitate the examination of your request. In case of reasonable doubt, you may be asked to provide proof of your identity.

You also have the right to complain to the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, about the way in which EQUINOX (ALTERED) collects and processes your data.

This Policy may be updated from time to time to reflect changes in the Personal Data Regulations.

Date of last update February 2025