Privacy Policy

Updated on September 04, 2025

Preamble

Welcome to the Covoiturage Liga Portugal website (https://boleias.ligaportugal.pt/), the carpooling platform dedicated to the Allianz Cup, a competition organized by Liga Portugal (hereinafter the “Site”).

While browsing our Site, for the management of your information requests and to use the features and services of our Site, StadiumGO will collect and process personal data concerning you.

Particularly concerned about protecting Users’ privacy, StadiumGO intends to provide you with precise information about all its processing operations.

This Privacy Policy is therefore addressed to Users of the Site in application of the French Data Protection Act of January 6, 1978 (hereinafter “FDPA”), as amended, and the General Data Protection Regulation of April 27, 2016 (hereinafter “GDPR”).

Article 1. Who collects and manages your data?

StadiumGO, a Simplified Joint-Stock Company registered with the Paris Trade and Companies Register under number 850 950 965 and headquartered at 9 rue des Colonnes, 75002 Paris (“STADIUMGO”), acts as Data Controller for the following processing operations:

• Management of Member accounts;
• Management of information requests;
• Management of payments;
• Sending news and commercial offers;
• Proper functioning and continuous improvement of the Site;
• Management of GDPR and Data Protection Act rights requests.

Article 2. Definitions

• “Member(s)”

  :
  means the person who can authenticate on the Site via the “Login” tab (https://www.boleias.ligaportugal.pt/connexion).

• “Data”

  or

  “Personal Data”

  : refers to the personal data processed under this Privacy Policy as defined in Article 4(1) of the GDPR.

• “General Data Protection Regulation”

  or

  “GDPR”

  : means Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC.

• “Processor”

  :
  means any natural or legal person, public authority, agency or other body that processes Personal Data on behalf of and according to the instructions of StadiumGO in accordance with Article 4(8) of the GDPR.

• “Processing/To Process”

  :
  means any of the operations listed in Article 4(2) of the GDPR performed on Personal Data within the execution of this Privacy Policy.

• “User”

  :
  means any person browsing the Site published by StadiumGO, whether a simple visitor or a Member.

Article 3. What are the purposes and legal bases of the processing operations?

StadiumGO collects only the Data necessary for the explicit and specific purposes described below:

a. Management of Member accounts and their activity

• Registration of Members;
• Management of Member activities;
• Trip tracking;
• Reservation of parking spaces;
• Favorite club;
• Messaging management;
• Activity statistics;
• Management of rewards issued by our commercial partners.

Legal basis: Performance of a contract or pre-contractual measures

b. Management of information requests

• Processing information requests;
• Responding to information requests;
• Request tracking;
• Informative follow-up;

Legal basis: Performance of a contract or pre-contractual measures.

c. Management of payments

• Payment processing;
• Billing tracking;
• Record-keeping and legal accounting documentation;

Legal basis: Legal obligation (French Tax Procedure Code article L. 102 B et seq.).

d. Sending news and commercial offers

• Newsletter subscription management;
• Sending commercial offers;

Legal basis: StadiumGO’s legitimate interest or the User's consent.

f. Proper functioning and continuous improvement of the Site

• Our legitimate interest in ensuring the best level of operation and quality of the Site, in particular through visit statistics.
• User consent when required.

g. Management of GDPR and Data Protection Act rights requests

Article 4. What data is collected?

The mandatory or optional nature of the personal data collected and the consequences of failing to provide it are indicated at the time of each interaction with the data subjects.

You can consult the details of the personal data we may have about you below.

For Member account management:

• First and last name;
• Email address;
• Mobile phone number;
• Photograph;
• Personal description;
• Trip departure and arrival points;
• Carpooling profile (driver and/or passenger);
• Postal address;
• If applicable, vehicle/fuel type;
• Reservation details;
• Details of posts made on the Site;
• Details of reviews of other Members;

Management of information requests:

• Exchanges with StadiumGO;
• Data related to the request.

Management of payments:

• Bank card number, expiration date, security code;
• Data required to issue invoices.

Sending news and commercial offers:

• First and last name;
• Email address;

For proper functioning and continuous improvement of the Site:

Data collected via cookies and other trackers on our Site; for more details, see Article 9 of this Policy.

Management of GDPR and amended Data Protection Act rights requests:

• First and last name;
• Email address;
• Where applicable, a copy of an identity document;

Article 5. Who do we send your data to?

StadiumGO is responsible for processing your personal data related to carpooling and associated services. StadiumGO may transfer the data it processes to us if you consent. If you have questions, concerns, or wish to make a data request, please contact StadiumGO. For more information about the processing of your personal data, please consult StadiumGO’s privacy policy.

Only authorized persons listed below may access User data.

• Authorized StadiumGO personnel;
• Service providers managing, hosting, and maintaining StadiumGO’s Site and IT system;
• The payment service provider (STRIPE);
• Authorized personnel of our processors, where applicable;
• Courts, mediators, accountants, auditors, lawyers, bailiffs, debt collection agencies, police authorities in case of theft or judicial requisition;
• Our client/partner SFL may obtain your data for prospecting activities and statistical purposes when you have consented.

Your data is not communicated, exchanged, sold, or rented to any other person than those listed above.

Article 6. How long do we keep your data?

StadiumGO commits to keeping the Data collected in a form allowing your identification only for the duration necessary for the purposes for which it is collected and processed.

Article 7. What are your rights?

In accordance with the French Data Protection Act and the GDPR, you have the following rights (learn more):

• Right of access (Article 15 GDPR), rectification (Article 16 GDPR), and updating;
• Right to erasure of your Personal Data (Article 17 GDPR) when they are inaccurate, incomplete, ambiguous, outdated, or collected in violation of the law;
• Right to withdraw your consent at any time (Article 7-3 GDPR);
• Right to restrict processing (Article 18 GDPR);
• Right to data portability for data you provided when processing is automated and based on your consent or a contract (Article 20 GDPR);
• Right to object to processing (Article 21 GDPR);
• Right to lodge a complaint with the CNIL (Article 77 GDPR);
• Right to define what should happen to your data after your death and designate a third party to receive it, if applicable (Article 85 FDPA). In case of death without instructions, we commit to destroying your data unless necessary for legal purposes.

These rights may be exercised via a simple request sent by email to contact@stadiumgo.fr or by post to StadiumGO SAS - A l'attention de Mr Lauvergnat Romain - 9 rue des colonnes - 75002 PARIS.

To learn more about your rights, you can also consult the website of the French Data Protection Authority at http://cnil.fr.

Article 8. Connection data and cookies

StadiumGO uses connection data (date, time, IP address, device protocol, visited pages) and cookies (small files stored on your computer, tablet or phone) that allow you to be identified, remember your visits, and benefit from analytics and audience statistics of the Site, in particular regarding the pages visited.

You can accept, refuse, or choose the type of cookies you allow to be stored on your devices.

A cookie is a text file stored and accessed when browsing an Internet site, regardless of the terminal used.

To provide you with the clearest information possible, you will find below a description of the first-party cookies used on the Site and their purpose:

Functional and technical cookies mainly used to improve your browsing experience. They send information to the Site and your device, such as form information (login, address), display preferences (language, resolution), security measures, session expiration, etc.

• User language (interface display preferences), stored from 1 hour to 30 days depending on the “remember me” choice;
• User session (display preferences + security), stored from 1 hour to 30 days depending on the “remember me” choice;
• Forms (registration, ride offer, login) to ensure secure handling of User data;

Audience measurement cookies help us understand the use of the Site to improve service quality.

• Google Analytics
• Facebook Pixel

Article 9. Social networks

While browsing the Site, Users may click on Facebook, Instagram, Tiktok, LinkedIn, and X (formerly Twitter) social network icons.

Social networks enhance the Site’s user experience and help promote it through sharing.

When Users use these buttons, StadiumGO may access personal information that Users have marked as public on their Facebook or Instagram profiles. However, StadiumGO does not create or use any independent database from Facebook, Instagram or YouTube, and does not exploit any Private Data through these channels.

Article 10. Transfer of data outside the European Union

As a principle, StadiumGO processes your data within the European Union.

Given the nature of its activities, StadiumGO may transfer your data outside the European Union. In such cases, these transfers include appropriate safeguards in accordance with regulations.

These safeguards are available upon request by email at contact@stadiumgo.fr or by post at StadiumGO SAS - A l'attention de Mr Lauvergnat Romain - 9 rue des colonnes - 75002 PARIS.

Article 11. Security

StadiumGO and its potential processors commit to implementing all technical and organizational measures necessary to ensure the security of personal data processing and the confidentiality of your data, in accordance with current technology and the FDPA and GDPR.

StadiumGO takes all useful precautions, considering the nature of your data and processing risks, to preserve data security and prevent alteration, damage, or unauthorized third-party access (physical protection of premises, user authentication methods with personal and secure access).

Article 12. Updating our Privacy Policy

This Privacy Policy may be modified according to legislative and regulatory developments. Users may consult updates directly on the Site.