PRIVACY STATEMENT
Last updated: 11 August 2026
RUSH Action Game places great importance on protecting your personal data and respecting your privacy. This statement explains how your data is collected, used, stored and protected when you visit the rushactiongame.fr website, contact a RUSH Action Game centre, make a booking, purchase a gift card or subscribe to our communications.
Personal data is processed in accordance with Regulation (EU) 2016/679 of 27 April 2016, known as the “GDPR”, and the amended French Data Protection Act No. 78-17 of 6 January 1978.
1. Identity of the data controller
For processing related to the general operation of the website and services managed at national level, the data controller is:
SAS RUSH
41 rue des Époux Lesgourgues 33400 Talence – France
RCS Bordeaux : 841 552 722
E-mail : contact@rushactiongame.fr
When you select a centre or make a booking, your data may also be processed by the company operating the relevant RUSH Action Game centre. This company acts as the data controller for the local management of your request, booking and customer relationship. Its contact details are available on the page of the selected centre and, where applicable, in the terms and conditions relating to the booking.
2. Personal data collected
Depending on how you use the website and the services offered, we may collect the following categories of data:
Identification and contact details: surname, first name, email address, telephone number, company, job title or represented organisation;
Booking and order information: selected centre, chosen activity, date and time, number of participants, group composition, selected options, amount, booking number, communication history and information required to organise the service;
Billing and payment information: billing address, billing details, payment status and transaction history. Full bank card details are processed directly by the payment service provider and are not stored by RUSH Action Game;
Information submitted through forms: the content of a contact request, quotation request, event-related request, application to join the network, complaint or any other information voluntarily provided;
Marketing communication data: newsletter subscription, promotional code request, preferences, consent, unsubscribing and interactions with the messages sent;
Technical and browsing data: IP address, device type, browser, operating system, technical identifiers, pages viewed, source of the visit, connection date and time, interactions with the website and information collected through cookies or similar technologies;
Images and content: photographs or videos taken with your express permission during an activity or event.
Please do not submit sensitive information through free-text forms unless it is strictly necessary to process your request, particularly detailed information concerning your health.
3. Data relating to minors
Bookings must be made by an adult. When information concerning a minor participating in an activity is required, it must be provided by their legal representative or by the adult responsible for the group. RUSH Action Game limits the collection of this information to what is strictly necessary for the organisation and safety of the activity.
The publication of a photograph or video in which a minor can be identified requires prior permission from their legal representative.
4. Purposes and legal bases for processing
| Purpose | Legal basis |
|---|---|
| Responding to contact, information or quotation requests | Pre-contractual measures taken at your request and, depending on the nature of the request, RUSH Action Game’s legitimate interest in responding to users |
| Creating, confirming, modifying and managing a booking, order or gift card | Performance of a contract or pre-contractual measures |
| Organising the arrival of participants and monitoring the provision of the service | Performance of a contract and legitimate interest in ensuring the safety and proper operation of the activities |
| Managing payments, refunds, invoices and accounting obligations | Performance of a contract and compliance with legal obligations |
| Processing complaints, unpaid amounts, disputes and requests to exercise data protection rights | Compliance with legal obligations and legitimate interest in establishing, exercising or defending legal rights |
| Sending newsletters, promotional codes or commercial offers | Your consent or, where permitted by law for similar services offered to an existing customer, RUSH Action Game’s legitimate interest |
| Managing unsubscribing and objections to direct marketing | Compliance with a legal obligation |
| Reviewing a request to join the network, open a centre or establish a partnership | Pre-contractual measures taken at your request |
| Ensuring the operation, maintenance and security of the website and preventing abuse and fraud | RUSH Action Game’s legitimate interest in securing its services |
| Measuring website traffic, improving the website and personalising content | Your consent when processing relies on cookies or trackers that are not strictly necessary |
| Measuring advertising performance and offering personalised promotional content | Your consent |
| Publishing an identifiable photograph, video or testimonial | Your permission or consent, depending on the circumstances |
5. Mandatory data
Fields marked as mandatory in forms are required to process your request or provide the requested service. If you do not provide this information, RUSH Action Game may be unable to respond to your request, complete your booking or provide the service.
6. Recipients of the data
Within the scope of their responsibilities and depending on the relevant purpose, your data may be accessed by:
Authorised RUSH Action Game teams;
The company operating the centre you selected;
Service providers involved in booking management, customer relationship management, email delivery, hosting, maintenance, audience analysis, advertising or technical support;
Payment service providers, particularly Stripe, to secure and process transactions;
Professional advisers, insurers and administrative or judicial authorities when required by law or necessary to defend RUSH Action Game’s rights.
Data is neither sold nor rented to third parties. It is only shared with recipients who require it to perform their duties, in accordance with applicable regulations and appropriate confidentiality and security obligations.
7. Service providers and services used
The RUSH Action Game website and services may rely on:
OVHcloud, for website hosting;
4escape, for managing availability and bookings;
Stripe, for the secure processing of certain payments;
Mailjet, for sending confirmations, transactional messages, promotional codes and communications to which you have chosen to subscribe;
Google, particularly for audience measurement, advertising, mapping and protection against automated submissions, subject to your cookie preferences;
Meta and other advertising platforms, when their trackers are activated with your consent;
Complianz, for recording and managing your cookie preferences.
This list may change depending on the tools actually used by the different centres. A detailed and up-to-date list of the cookies and services used on the website is available in our Cookie Policy.
8. Data retention periods
Data is retained only for as long as necessary for the purposes for which it was collected. It may then be archived for the periods required by law or necessary to defend RUSH Action Game’s rights.
| Data category | Indicative retention period |
|---|---|
| Contact requests, quotation requests and prospect data | For the time required to process the request, then for up to three years from the individual’s last contact |
| Booking and customer relationship data | For the duration of the contractual relationship, then archived for the period required to comply with legal obligations and manage any disputes |
| Data used for marketing to customers | For the duration of the business relationship, then for up to three years from its end or from the customer’s last contact |
| Newsletter subscription data and promotional code requests | Until consent is withdrawn or, at the latest, three years after the last active contact |
| Data required to record an objection to direct marketing | For at least three years from the date the right to object is exercised |
| Invoices and accounting documents | For 10 years from the end of the relevant financial year |
| Data required as evidence of a contract or to manage legal proceedings | For the duration of the contractual relationship, followed by the applicable limitation periods, generally five years |
| Data relating to a request to join the network or establish a partnership | For the duration of the discussions, then for up to three years after the last contact if no agreement is reached |
| Photographs and videos published with permission | For the period specified in the relevant permission or until it is withdrawn, where withdrawal is possible |
| Cookies and trackers | Depending on their nature and the periods specified in the Cookie Policy |
9. Cookies and other trackers
The website uses cookies and similar technologies to ensure its operation, remember your preferences, secure its services, measure its audience and, subject to your consent, measure campaign effectiveness or personalise advertising content.
Cookies that are strictly necessary for the website to operate may be placed without consent. Non-exempt audience measurement, personalisation and marketing cookies are only placed after obtaining your consent.
You can accept, reject or customise your choices using the banner displayed during your first visit. You can modify or withdraw your consent at any time by clicking the “Manage consent” link or button available on the website.
For more information about the cookies used, their purpose, duration and the relevant service providers, please read our Cookie Policy.
10. Data transfers outside the european economic area
Some technical service providers or platforms used by RUSH Action Game may process data from countries located outside the European Economic Area. When such transfers occur, RUSH Action Game ensures that they are based on a mechanism recognised by the applicable regulations, such as an adequacy decision from the European Commission, the European Commission’s Standard Contractual Clauses or any other appropriate safeguard.
You can contact RUSH Action Game for further information about the safeguards applicable to a particular transfer.
11. Data security
RUSH Action Game implements appropriate technical and organisational measures to protect personal data against loss, unauthorised access, disclosure, alteration or destruction. Access to data is limited to the individuals and service providers who require it to perform their duties.
As no system can offer absolute security, RUSH Action Game regularly adapts its protective measures to reflect risks, practices and technological developments.
12. Your rights
Under the conditions established by the applicable regulations, you have the following rights:
The right to access your personal data;
The right to rectify inaccurate or incomplete data;
The right to have your data erased;
The right to restrict processing;
The right to object, particularly to direct marketing;
The right to the portability of the data you have provided, where this right applies;
The right to withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal;
The right to provide instructions regarding the use of your data after your death, under the conditions established by French law.
To exercise your rights, you can contact:
contact@rushactiongame.fr
or
SAS RUSH – Data Protection
41 rue des Époux Lesgourgues
33400 Talence – France
To help us process your request, please provide your name, contact details, the relevant RUSH Action Game centre and the precise nature of your request. Proof of identity may only be requested when necessary to verify your identity.
You also have the right to lodge a complaint with the French Data Protection Authority, the Commission Nationale de l’Informatique et des Libertés (CNIL):
CNIL
3 place de Fontenoy – TSA 80715
75334 Paris Cedex 07
Website: www.cnil.fr
13. Links to third-party websites
The website may contain links to websites or services operated by third parties. RUSH Action Game is not responsible for the privacy practices of these third parties. We recommend reviewing their own privacy policies before providing them with personal data.
14. Changes to this statement
RUSH Action Game may amend this statement to reflect legal, regulatory or technical developments or changes to its services. The applicable version is the one published on the website on the date of your visit. The date of the latest update is shown at the top of this page.
