This page is a translation provided for information purposes only. In the event of any discrepancy, the French version shall prevail.
Privacy Policy bridge-training.com — Version dated 17 October 2026 This policy describes the processing of personal data carried out in connection with bridge-training.com, its subdomains, interfaces and associated applications (the “Site”). It supplements the Terms and Conditions of Use and, for paid services, the Terms and Conditions of Sale.
1. Data controller and data protection contact
Bridge for Good SAS61 rue Youri Gagarine, Building B, 7th floor, apartment 707, 94800 Villejuif, FranceCréteil Trade and Companies Register (RCS) 929 281 012 — SIRET 929 281 012 00021Email: contact@bridge-training.com — Telephone: +33 (0)9 53 57 10 37 Data protection contact: Jean-Pierre DESMOULINS — contact@bridge-training.com Contact by email should be preferred.
2. Bridge for Good’s role according to the processing activity
Bridge for Good acts as controller for the data required to manage the Site, Accounts, Subscriptions, billing, security, support, Player progress, recommendations and personalisation specific to the Site, usage measurement and, where applicable, advertising and trackers. Where a Teacher, club, federation, company or other Account Holder determines the persons being monitored and the teaching or organisational purposes pursued, that Account Holder will in principle act as controller for those purposes. Bridge for Good may then process the data on its behalf as processor, in particular for organising groups, assigning sessions and Content, and displaying Practice Data and statistics. The corresponding obligations are set out in the GDPR appendix to the Terms of Sale. Where a Player creates their own Account and establishes a Teaching Link with a Teacher, Bridge for Good remains controller for management of the Player Account, operation of and evidence relating to the link, security, progress, recommendations and the Site’s other own purposes. For making data available in the Teacher area so that the Teacher can use it for their own teaching or organisational monitoring, the respective roles are determined according to the purpose concerned, in accordance with the Terms of Use and, where the Teacher is a Client, the GDPR appendix to the Terms of Sale. Bridge for Good may also process certain data as controller where justified by a legal obligation, Site security, prevention of abuse or the defence of its rights. Statistics that have been irreversibly anonymised are no longer personal data.
3. Data that may be processed
Account data: surname, first name, email address, telephone number where provided, language preferences, age indication or date of birth where necessary for the management of minors, and information required to manage the Account. Billing and subscription data: identity or company name, billing address and country, VAT number where applicable, Offer subscribed to, due dates, invoices, payment references and payment status. Connection and security data: IP address, access logs, technical identifiers, browser, device, timestamps and security events. Usage, Practice Data and teaching data: Content created or viewed, deals played, relevant URLs, dates and frequency of use, attempts, results, auctions or cards played where such information is recorded, stars, errors, playing time, progress, XP points, internal level or ranking, badges, themes viewed or selected, learning paths followed, sessions and Content received, assigned or recommended, and other indicators made available by the features used. Data entered by Account Holders about third parties: in particular surname, first name, email address, telephone number, group or class, assigned Content and progress data where such information is voluntarily recorded in the service. Teaching Link data: the identity of the Player and Teacher, requests and invitations, dates of acceptance and end of the link, associated groups and sessions, and records necessary to evidence and secure the mechanism. Parental validation data where necessary: the email address of the holder of parental responsibility, the date and record of validation, and any information reasonably necessary to evidence that validation. Content and files: deals, collections, texts, comments, visuals, imported files, settings and other items supplied to the Site. Communications with Bridge for Good: support requests, complaints and correspondence. Cookies and trackers: identifiers and information associated with technical, audience measurement or advertising cookies, according to the choices expressed through the consent management platform (CMP). Payment data: card or bank account data required for payment is processed directly by Stripe or the payment provider used; Bridge for Good does not intend to retain full payment-card numbers. The Site is not designed to receive special categories of personal data under Article 9 GDPR (for example health data, political opinions, religion or biometric data), or data relating to criminal convictions and offences. Users are asked not to enter such data unless a feature expressly provides for it and specific safeguards have been put in place.
4. Purposes and lawful bases
Where processing is based on legitimate interests, the interests pursued are primarily the security and integrity of the service, improvement of the service, prevention of abuse and defence of Bridge for Good’s rights, subject to the rights and freedoms of the persons concerned.
5. Mandatory or optional nature of data
Fields marked as mandatory are required to create an Account, subscribe to a service or provide the relevant feature. Failure to provide them may prevent Account creation, payment or use of the requested service. Other information is optional unless a specific legal obligation applies.
6. Player Account and Teaching Link
A Player may use their Account without being linked to a Teacher. Where the Player requests a link to a Teacher and the Teacher accepts it, or accepts an invitation from a Teacher, the Player requests activation of the data sharing provided by this feature. A Player may have only one active Teaching Link at any one time. During the link, the Teacher may have access to the Player’s surname, first name, email address and, where provided, telephone number, together with all data available concerning the Player’s bridge activity on the Site. This access may include history predating the link and activity carried out outside sessions directly assigned by the Teacher, including deals played, attempts, results, stars, errors, playing time, progress, XP points, internal level or ranking, themes, learning paths, sessions and Content received or viewed. Passwords, full banking data, internal security logs and support communications unrelated to teaching monitoring are not disclosed through this mechanism. The purpose of making this data available is to enable overall teaching monitoring and management. The Teacher is responsible for the uses they make of the data for their own purposes and must comply with their obligations relating to information, security, retention periods and, more generally, the law applicable to them. The Player or the Teacher may end the link. From that time, the Teacher ceases to have access through the Site to the Player’s data and no new session or information is transmitted under that link. The Player may retain in their Account a record of sessions and Content that had already been assigned to them, subject to the Site’s retention and evolution rules. Bridge for Good cannot delete copies, exports, printouts or notes that a Teacher lawfully made outside the Site before the link ended. Their retention and use are then the responsibility of the Teacher.
7. Minors
The Site may ask the Player for information about their age. The User must provide accurate information. For a Player declaring that they are under fifteen, Bridge for Good may make activation of the Account subject to joint validation by the minor and at least one holder of parental responsibility, in accordance with the procedures provided by the Site. Bridge for Good implements reasonable and proportionate measures to collect and retain evidence of this validation. Additional validation may be requested where justified by a feature, a change in processing or applicable law. Information intended for minors is, where necessary, presented in appropriate and understandable terms.
8. Data relating to third parties entered by a Client
An Account Holder who enters data relating to third parties remains responsible for the lawfulness of its collection, determining the lawful basis, data minimisation and informing the persons concerned where required by law. Where minors are concerned, the Account Holder is in particular responsible for complying with the information, authorisation or representation requirements applicable in its circumstances. For data processed exclusively on behalf of the Client, Bridge for Good does not use it for purposes incompatible with the service. Requests to exercise rights should in principle be addressed to the relevant controller; Bridge for Good assists that controller in accordance with the GDPR appendix to the Terms of Sale.
9. Recipients and service providers
Data is accessible only to authorised persons at Bridge for Good and to service providers necessary for operation of the service, within the limits of their duties. Where a Teaching Link is active, the data described in Section 6 is also made available to the relevant Teacher. Depending on the features used, service providers may in particular be involved in hosting and infrastructure, payment, messaging, support, audience measurement, consent management and advertising. Services currently used include, in particular, OVH for hosting, Stripe for payments, Matomo for audience measurement and, for advertising, Ezoic and/or the relevant Google services. The current list of tracker partners is shown in the CMP and may change as the Site’s features evolve. Depending on the processing activity, Stripe may act as Bridge for Good’s processor or as an independent controller, in particular for certain obligations specific to the payments sector, fraud prevention and regulatory compliance. Data may also be disclosed to authorities, courts, advisers or authorised professionals where required by law or where necessary to defend Bridge for Good’s rights. Bridge for Good does not sell its users’ personal data.
10. Transfers outside the European Economic Area
Some service providers may process data from countries outside the European Economic Area. Where a transfer is subject to the GDPR, it is based on a mechanism recognised by applicable law, such as an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another appropriate safeguard. Further information on the applicable safeguards may be requested at contact@bridge-training.com.
11. Retention periods
Account data and data required for the service: for as long as the Account is in use; after closure or inactivity, data required to manage a potential dispute may be placed in restricted archives for the applicable limitation period and then deleted or anonymised. Billing data, invoices and accounting records: ten years from the end of the relevant financial year, in accordance with applicable accounting obligations. Payment data: Bridge for Good retains the references and statuses required to manage the transaction; full banking details are retained by the payment provider in accordance with its own obligations. Technical and security logs: in principle for up to twelve months, unless a longer period is required in connection with an incident, fraud, a legal obligation or litigation. Support communications and complaints: for the time required to handle them and then, where necessary, in restricted archives for as long as useful to establish or evidence rights and obligations. Data processed on behalf of a Client: for as long as necessary to provide the service and in accordance with the Client’s instructions, the export and retention mechanisms provided by the Site and the GDPR appendix to the Terms of Sale. Teaching Link data: for the duration of the link for current access; records of the invitation, acceptance and end of the link and information required for evidence, security or the defence of legal rights may subsequently be retained in restricted archives for the necessary period or the applicable limitation period. Parental validation data: for as long as necessary to manage the minor’s Account and then, where necessary, in restricted archives for the period required to evidence compliance with applicable obligations. Cookies and trackers: for the period applicable to each tracker as stated in the CMP; consent or refusal choices are retained for an appropriate period and may be changed at any time. Data may be retained for longer where required by a legal obligation, a request from an authority, or the establishment, exercise or defence of legal claims. Data that has been irreversibly anonymised may be retained without any GDPR-related time limit.
12. Cookies and trackers
Cookies strictly necessary for operation of the Site may be placed without consent where permitted by law. Trackers requiring consent are placed only after the user has made a choice in the CMP. It must be as easy for the user to accept as to refuse, and the user must be able to change their choice at any time through the cookie-management tool available on the Site. The CMP provides the current list of partners, purposes and retention periods associated with the relevant trackers. If there is any discrepancy concerning the technical list of trackers actually active, the information displayed in the CMP at the time the user makes their choice shall prevail for that operational list.
13. Security
Bridge for Good implements technical and organisational measures proportionate to the risks, including access controls, secure communications, permission management, backups, logging and security maintenance. As no information system can guarantee absolute security, these measures are intended reasonably to reduce the risks of unauthorised access, alteration, loss or disclosure.
14. Data subject rights
Depending on the processing activity and its lawful basis, any person concerned may exercise rights of access, rectification, erasure, restriction, objection and, where the relevant conditions are met, data portability. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal. Requests may be sent to the data protection contact at contact@bridge-training.com. Bridge for Good may request such information as is reasonably necessary to verify the requester’s identity and prevent disclosure of data to an unauthorised third party. Where a request concerns data processed exclusively on behalf of a Teacher, club, federation or other Client, Bridge for Good may forward the request to that controller or invite the person to contact the controller directly. A Teaching Link may be ended using the Site’s features without prejudice to the other rights provided for by the GDPR. Any person also has the right to lodge a complaint with the French Data Protection Authority (Commission nationale de l’informatique et des libertés — CNIL), www.cnil.fr.
15. Automated decision-making and future AI features
As at the date of this policy, Bridge for Good does not, on the basis of data covered by this policy, make decisions based solely on automated processing that produce legal effects concerning an individual or similarly significantly affect an individual. The Site may use automated processing to calculate progress indicators, rank or recommend Content and personalise the learning experience, without those functions constituting an official ranking or a decision producing such effects. Bridge for Good may in the future offer features using artificial intelligence or other automated techniques, including as separate services or Subscriptions. If their operation involves new or substantially different processing, the required information concerning the data used, purposes, lawful basis, recipients and, where applicable, the choices available to the user will be provided at the appropriate time, in particular upon activation or subscription. This policy does not constitute general advance authorisation for processing that has not yet been defined.
16. Changes to this policy
Bridge for Good may update this policy to reflect changes to the Site, processing activities, service providers or applicable law. Material changes will be brought to the attention of the persons concerned by an appropriate means. The version published on the Site states its date of update.