[{"data":1,"prerenderedAt":1073},["ShallowReactive",2],{"legal-en-privacy":3},{"id":4,"title":5,"body":6,"description":1065,"extension":1066,"meta":1067,"navigation":1068,"path":1069,"seo":1070,"stem":1071,"__hash__":1072},"legal/legal/en/privacy.md","Privacy policy",{"type":7,"value":8,"toc":1024},"minimark",[9,14,18,23,120,124,155,159,163,166,171,187,192,203,208,231,236,248,253,273,277,280,303,307,310,315,326,331,339,342,346,475,479,486,490,494,504,511,525,531,535,538,603,607,610,614,617,621,624,668,671,675,744,747,751,754,759,779,784,798,803,811,815,818,822,825,829,832,836,839,856,862,866,869,873,876,880,883,887,890,894,897,901,904,918,924,931,934,938,941,946,949,952,955,962,966,969,972,976,979,982,986,989,995,1001,1004,1010,1016,1018],[10,11,13],"h2",{"id":12},"_1-introduction-and-identity-of-the-data-controller","1. Introduction and identity of the data controller",[15,16,17],"p",{},"Protecting your personal data is a priority for RaceUp. This privacy policy explains how we collect, use, store and protect your personal data, in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and amended French Law No. 78-17 of 6 January 1978 (loi Informatique et Libertés).",[19,20,22],"h3",{"id":21},"data-controller","Data controller",[24,25,26,37],"table",{},[27,28,29],"thead",{},[30,31,32,35],"tr",{},[33,34],"th",{},[33,36],{},[38,39,40,52,62,72,82,92,106],"tbody",{},[30,41,42,49],{},[43,44,45],"td",{},[46,47,48],"strong",{},"Controller",[43,50,51],{},"Timothy ALCAIDE",[30,53,54,59],{},[43,55,56],{},[46,57,58],{},"Status",[43,60,61],{},"Sole trader (auto-entrepreneur)",[30,63,64,69],{},[43,65,66],{},[46,67,68],{},"SIREN",[43,70,71],{},"824 385 348",[30,73,74,79],{},[43,75,76],{},[46,77,78],{},"SIRET",[43,80,81],{},"824 385 348 00027",[30,83,84,89],{},[43,85,86],{},[46,87,88],{},"Registered office",[43,90,91],{},"11 rue du Professeur Jean Granier, 34070 Montpellier, France",[30,93,94,99],{},[43,95,96],{},[46,97,98],{},"Email",[43,100,101],{},[102,103,105],"a",{"href":104},"mailto:contact@raceup.org","contact@raceup.org",[30,107,108,113],{},[43,109,110],{},[46,111,112],{},"Website",[43,114,115],{},[102,116,117],{"href":117,"rel":118},"https://raceup.org",[119],"nofollow",[19,121,123],{"id":122},"data-protection-officer-dpo","Data Protection Officer (DPO)",[24,125,126,134],{},[27,127,128],{},[30,129,130,132],{},[33,131],{},[33,133],{},[38,135,136,145],{},[30,137,138,143],{},[43,139,140],{},[46,141,142],{},"DPO",[43,144,51],{},[30,146,147,151],{},[43,148,149],{},[46,150,98],{},[43,152,153],{},[102,154,105],{"href":104},[10,156,158],{"id":157},"_2-personal-data-collected","2. Personal data collected",[19,160,162],{"id":161},"_21-event-participants-data","2.1 Event participants' data",[15,164,165],{},"When you register for a sports event via RaceUp, we collect the following data:",[15,167,168],{},[46,169,170],{},"Identification data:",[172,173,174,178,181,184],"ul",{},[175,176,177],"li",{},"Last name and first name",[175,179,180],{},"Date of birth",[175,182,183],{},"Gender",[175,185,186],{},"Nationality (if required by the Organizer)",[15,188,189],{},[46,190,191],{},"Contact details:",[172,193,194,197,200],{},[175,195,196],{},"Email address",[175,198,199],{},"Phone number",[175,201,202],{},"Postal address",[15,204,205],{},[46,206,207],{},"Event-related data:",[172,209,210,213,216,219,222,225,228],{},[175,211,212],{},"Chosen race, category, options",[175,214,215],{},"Clothing size (t-shirt, etc.)",[175,217,218],{},"Sports club or team",[175,220,221],{},"Sports licence number (FFA, FFTRI, etc.)",[175,223,224],{},"Health Prevention Pass (PPS) or medical certificate",[175,226,227],{},"Health information provided voluntarily (allergies, specific needs)",[175,229,230],{},"Emergency contact (name and phone number)",[15,232,233],{},[46,234,235],{},"Payment data:",[172,237,238],{},[175,239,240,241,244,245],{},"Payment data (card number, etc.) is collected and processed ",[46,242,243],{},"exclusively by Stripe",", our PCI-DSS certified payment provider. ",[46,246,247],{},"RaceUp never stores your bank details.",[15,249,250],{},[46,251,252],{},"Technical data:",[172,254,255,258,261,264,267,270],{},[175,256,257],{},"IP address",[175,259,260],{},"Browser type and version",[175,262,263],{},"Operating system",[175,265,266],{},"Pages visited and length of visit",[175,268,269],{},"Traffic source (referrer)",[175,271,272],{},"Session identifiers",[19,274,276],{"id":275},"_22-event-organizers-data","2.2 Event organizers' data",[15,278,279],{},"If you are an organizer using RaceUp, we also collect:",[172,281,282,285,288,291,294,297,300],{},[175,283,284],{},"Company name or name of the association/business",[175,286,287],{},"Legal form",[175,289,290],{},"SIRET number or RNA number (associations)",[175,292,293],{},"EU VAT number (if applicable)",[175,295,296],{},"Contact details of the legal representative",[175,298,299],{},"Bank details (via Stripe Connect) to receive payments",[175,301,302],{},"Information about the events created",[19,304,306],{"id":305},"_23-cookies-and-trackers","2.3 Cookies and trackers",[15,308,309],{},"We use cookies for:",[15,311,312],{},[46,313,314],{},"Strictly necessary cookies (no consent required):",[172,316,317,320,323],{},[175,318,319],{},"Authentication and keeping you signed in",[175,321,322],{},"Security and fraud prevention",[175,324,325],{},"Remembering technical preferences",[15,327,328],{},[46,329,330],{},"Analytics cookies (with consent):",[172,332,333,336],{},[175,334,335],{},"Analysis of website usage (anonymized statistics)",[175,337,338],{},"Improving the user experience",[15,340,341],{},"You can manage your cookie preferences through your browser settings or the consent banner displayed on your first visit.",[10,343,345],{"id":344},"_3-purposes-and-legal-bases-of-processing","3. Purposes and legal bases of processing",[24,347,348,361],{},[27,349,350],{},[30,351,352,355,358],{},[33,353,354],{},"Purpose",[33,356,357],{},"Legal basis (Art. 6 GDPR)",[33,359,360],{},"Data concerned",[38,362,363,374,384,394,404,414,424,435,445,454,465],{},[30,364,365,368,371],{},[43,366,367],{},"Managing event registrations",[43,369,370],{},"Performance of a contract (6.1.b)",[43,372,373],{},"Identification data, contact details, registration data",[30,375,376,379,381],{},[43,377,378],{},"Passing registrations on to Organizers",[43,380,370],{},[43,382,383],{},"All registration data",[30,385,386,389,391],{},[43,387,388],{},"Payment processing (via Stripe)",[43,390,370],{},[43,392,393],{},"Payment data",[30,395,396,399,401],{},[43,397,398],{},"Sending confirmations and tickets",[43,400,370],{},[43,402,403],{},"Email, registration data",[30,405,406,409,411],{},[43,407,408],{},"Managing user accounts",[43,410,370],{},[43,412,413],{},"Identification data, contact details",[30,415,416,419,421],{},[43,417,418],{},"Managing Organizer accounts",[43,420,370],{},[43,422,423],{},"Business data",[30,425,426,429,432],{},[43,427,428],{},"Customer support",[43,430,431],{},"Legitimate interest (6.1.f)",[43,433,434],{},"Identification data, contact details, history",[30,436,437,440,442],{},[43,438,439],{},"Improving the platform",[43,441,431],{},[43,443,444],{},"Technical data, usage data",[30,446,447,449,451],{},[43,448,322],{},[43,450,431],{},[43,452,453],{},"Technical data, IP",[30,455,456,459,462],{},[43,457,458],{},"Keeping invoices",[43,460,461],{},"Legal obligation (6.1.c)",[43,463,464],{},"Billing data",[30,466,467,470,472],{},[43,468,469],{},"Responding to legal requests",[43,471,461],{},[43,473,474],{},"All relevant data",[19,476,478],{"id":477},"processing-of-sensitive-data","Processing of sensitive data",[15,480,481,482,485],{},"Health data (medical certificate, PPS, medical information) is collected on the basis of your ",[46,483,484],{},"explicit consent"," (Art. 9.2.a GDPR) and is necessary for your participation in the event in accordance with the Organizer's requirements and sports regulations.",[10,487,489],{"id":488},"_4-recipients-of-the-data","4. Recipients of the data",[19,491,493],{"id":492},"_41-the-event-organizer","4.1 The event Organizer",[15,495,496,499,500,503],{},[46,497,498],{},"IMPORTANT",": When you register for an event, ",[46,501,502],{},"all your registration data is passed on to the Organizer",".",[15,505,506,507,510],{},"The Organizer becomes the ",[46,508,509],{},"data controller"," of this data for:",[172,512,513,516,519,522],{},[175,514,515],{},"Organizing the event (participant management, safety)",[175,517,518],{},"Regulatory obligations (insurance, sports federations)",[175,520,521],{},"Communication about the event",[175,523,524],{},"Publishing results (unless you object)",[15,526,527,530],{},[46,528,529],{},"You should consult the Organizer's privacy policy"," to find out about its data protection practices.",[19,532,534],{"id":533},"_42-our-technical-processors","4.2 Our technical processors",[15,536,537],{},"We use the following providers, with whom we have concluded contracts compliant with Article 28 of the GDPR:",[24,539,540,556],{},[27,541,542],{},[30,543,544,547,550,553],{},[33,545,546],{},"Provider",[33,548,549],{},"Service",[33,551,552],{},"Location",[33,554,555],{},"Safeguards",[38,557,558,574,589],{},[30,559,560,565,568,571],{},[43,561,562],{},[46,563,564],{},"Vercel Inc.",[43,566,567],{},"Website hosting",[43,569,570],{},"United States",[43,572,573],{},"Standard Contractual Clauses (SCCs)",[30,575,576,581,584,587],{},[43,577,578],{},[46,579,580],{},"Supabase Inc.",[43,582,583],{},"Database, authentication",[43,585,586],{},"Singapore",[43,588,573],{},[30,590,591,596,599,601],{},[43,592,593],{},[46,594,595],{},"Stripe Inc.",[43,597,598],{},"Payment processing (PCI-DSS)",[43,600,570],{},[43,602,573],{},[19,604,606],{"id":605},"_43-competent-authorities","4.3 Competent authorities",[15,608,609],{},"Your data may be passed on to administrative or judicial authorities upon legal request (tax, judicial, etc.).",[19,611,613],{"id":612},"_44-sports-federations","4.4 Sports federations",[15,615,616],{},"Some events are affiliated with sports federations (FFA, FFTRI, etc.). In this case, your data and results may be passed on to these federations in accordance with their rules.",[10,618,620],{"id":619},"_5-data-transfers-outside-the-european-union","5. Data transfers outside the European Union",[15,622,623],{},"Some of our providers are located outside the European Union:",[24,625,626,638],{},[27,627,628],{},[30,629,630,632,635],{},[33,631,546],{},[33,633,634],{},"Country",[33,636,637],{},"Transfer mechanism",[38,639,640,650,659],{},[30,641,642,645,647],{},[43,643,644],{},"Vercel",[43,646,570],{},[43,648,649],{},"Standard Contractual Clauses (Decision 2021/914)",[30,651,652,655,657],{},[43,653,654],{},"Stripe",[43,656,570],{},[43,658,649],{},[30,660,661,664,666],{},[43,662,663],{},"Supabase",[43,665,586],{},[43,667,649],{},[15,669,670],{},"These transfers are covered by appropriate safeguards in accordance with Chapter V of the GDPR. You can obtain a copy of these safeguards by contacting us.",[10,672,674],{"id":673},"_6-data-retention-periods","6. Data retention periods",[24,676,677,687],{},[27,678,679],{},[30,680,681,684],{},[33,682,683],{},"Type of data",[33,685,686],{},"Retention period",[38,688,689,697,705,713,720,728,736],{},[30,690,691,694],{},[43,692,693],{},"Event registration data",[43,695,696],{},"Until deleted by the Organizer or at your request (after the event)",[30,698,699,702],{},[43,700,701],{},"User account data",[43,703,704],{},"Lifetime of the account + 3 years after the last activity",[30,706,707,710],{},[43,708,709],{},"Organizer account data",[43,711,712],{},"Duration of the contract + 3 years",[30,714,715,717],{},[43,716,464],{},[43,718,719],{},"10 years (legal obligation - French Commercial Code, Art. L123-22)",[30,721,722,725],{},[43,723,724],{},"Payment data (held by Stripe)",[43,726,727],{},"According to Stripe's policy and legal obligations",[30,729,730,733],{},[43,731,732],{},"Technical and security logs",[43,734,735],{},"12 months",[30,737,738,741],{},[43,739,740],{},"Analytics cookies",[43,742,743],{},"13 months maximum",[15,745,746],{},"When these periods expire, the data is deleted or anonymized.",[10,748,750],{"id":749},"_7-data-security","7. Data security",[15,752,753],{},"We implement appropriate technical and organizational measures to protect your data:",[15,755,756],{},[46,757,758],{},"Technical measures:",[172,760,761,764,767,770,773,776],{},[175,762,763],{},"Encrypted communications (HTTPS/TLS 1.3)",[175,765,766],{},"Encryption of sensitive data at rest",[175,768,769],{},"Secure authentication (2FA available via Supabase)",[175,771,772],{},"Role-based access control (Row Level Security)",[175,774,775],{},"Regular, geographically distributed backups",[175,777,778],{},"Monitoring and intrusion detection",[15,780,781],{},[46,782,783],{},"Organizational measures:",[172,785,786,789,792,795],{},[175,787,788],{},"Access to data limited to what is strictly necessary",[175,790,791],{},"Staff awareness and training",[175,793,794],{},"Incident management procedures",[175,796,797],{},"Regular security testing",[15,799,800],{},[46,801,802],{},"Payments:",[172,804,805,808],{},[175,806,807],{},"100% of payments processed by Stripe (PCI-DSS Level 1 certified)",[175,809,810],{},"No bank card data stored by RaceUp",[10,812,814],{"id":813},"_8-your-rights-over-your-data","8. Your rights over your data",[15,816,817],{},"In accordance with the GDPR (Articles 15 to 22), you have the following rights:",[19,819,821],{"id":820},"_81-right-of-access-art-15","8.1 Right of access (Art. 15)",[15,823,824],{},"You can obtain confirmation that data concerning you is being processed and access this data as well as information about the processing.",[19,826,828],{"id":827},"_82-right-to-rectification-art-16","8.2 Right to rectification (Art. 16)",[15,830,831],{},"You can request the correction of inaccurate data or the completion of incomplete data.",[19,833,835],{"id":834},"_83-right-to-erasure-art-17","8.3 Right to erasure (Art. 17)",[15,837,838],{},"You can request the erasure of your data in the following cases:",[172,840,841,844,847,850,853],{},[175,842,843],{},"The data is no longer necessary for the purposes",[175,845,846],{},"You withdraw your consent (if that was the legal basis)",[175,848,849],{},"You object to the processing (legitimate interest)",[175,851,852],{},"The processing is unlawful",[175,854,855],{},"Erasure is required by a legal obligation",[15,857,858,861],{},[46,859,860],{},"Exceptions",": This right does not apply when the processing is necessary to comply with a legal obligation (e.g. keeping invoices for 10 years) or for the establishment, exercise or defence of legal claims.",[19,863,865],{"id":864},"_84-right-to-restriction-art-18","8.4 Right to restriction (Art. 18)",[15,867,868],{},"You can request the restriction of processing in certain situations (contested accuracy, unlawful processing, etc.).",[19,870,872],{"id":871},"_85-right-to-data-portability-art-20","8.5 Right to data portability (Art. 20)",[15,874,875],{},"You can receive your data in a structured, commonly used and machine-readable format (JSON, CSV) and transmit it to another controller.",[19,877,879],{"id":878},"_86-right-to-object-art-21","8.6 Right to object (Art. 21)",[15,881,882],{},"You can object at any time, on grounds relating to your particular situation, to the processing of your data based on legitimate interest.",[19,884,886],{"id":885},"_87-right-to-withdraw-consent","8.7 Right to withdraw consent",[15,888,889],{},"Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.",[19,891,893],{"id":892},"_88-right-to-set-post-mortem-instructions","8.8 Right to set post-mortem instructions",[15,895,896],{},"You can set instructions regarding the retention, erasure and communication of your data after your death.",[19,898,900],{"id":899},"_89-how-to-exercise-your-rights","8.9 How to exercise your rights",[15,902,903],{},"To exercise your rights, contact us:",[15,905,906,909,910,912,913,917],{},[46,907,908],{},"By email",": ",[102,911,105],{"href":104}," (or ",[102,914,916],{"href":915},"mailto:dpo@raceup.org","dpo@raceup.org",")",[15,919,920,923],{},[46,921,922],{},"By post",": Timothy ALCAIDE - DPO, 11 rue du Professeur Jean Granier, 34070 Montpellier, France",[15,925,926,927,930],{},"We will reply within ",[46,928,929],{},"one month"," of receiving your request. This period may be extended by two months for complex requests.",[15,932,933],{},"You may be asked for proof of identity to verify your identity.",[10,935,937],{"id":936},"_9-complaints-to-the-cnil","9. Complaints to the CNIL",[15,939,940],{},"If you consider that the processing of your data infringes your rights, you can lodge a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):",[15,942,943],{},[46,944,945],{},"CNIL",[15,947,948],{},"3 Place de Fontenoy - TSA 80715",[15,950,951],{},"75334 PARIS CEDEX 07, France",[15,953,954],{},"Phone: +33 1 53 73 22 22",[15,956,957,958],{},"Website: ",[102,959,960],{"href":960,"rel":961},"https://www.cnil.fr",[119],[10,963,965],{"id":964},"_10-minors-data","10. Minors' data",[15,967,968],{},"Sports events may be open to minors according to the conditions set by each Organizer.",[15,970,971],{},"For minors under 16, consent must be given by the holder of parental authority. The legal representative making the registration is responsible for the information provided.",[10,973,975],{"id":974},"_11-changes-to-this-policy","11. Changes to this policy",[15,977,978],{},"We reserve the right to modify this privacy policy. Any change will be published on this page with a new update date.",[15,980,981],{},"In the event of a substantial change affecting your rights, we will inform you by email or by a notification on the platform.",[10,983,985],{"id":984},"_12-contact","12. Contact",[15,987,988],{},"For any question about this policy or your personal data:",[15,990,991,909,993],{},[46,992,98],{},[102,994,105],{"href":104},[15,996,997,1000],{},[46,998,999],{},"Post",": Timothy ALCAIDE, 11 rue du Professeur Jean Granier, 34070 Montpellier, France",[1002,1003],"hr",{},[15,1005,1006,1009],{},[46,1007,1008],{},"Last updated",": 13 January 2026",[15,1011,1012],{},[1013,1014,1015],"em",{},"This privacy policy complies with Regulation (EU) 2016/679 (GDPR) and amended French Law No. 78-17 of 6 January 1978 (loi Informatique et Libertés).",[1002,1017],{},[15,1019,1020],{},[102,1021,1023],{"href":1022},"/en/legal/all","← Back to legal documents",{"title":1025,"searchDepth":1026,"depth":1026,"links":1027},"",2,[1028,1033,1038,1041,1047,1048,1049,1050,1061,1062,1063,1064],{"id":12,"depth":1026,"text":13,"children":1029},[1030,1032],{"id":21,"depth":1031,"text":22},3,{"id":122,"depth":1031,"text":123},{"id":157,"depth":1026,"text":158,"children":1034},[1035,1036,1037],{"id":161,"depth":1031,"text":162},{"id":275,"depth":1031,"text":276},{"id":305,"depth":1031,"text":306},{"id":344,"depth":1026,"text":345,"children":1039},[1040],{"id":477,"depth":1031,"text":478},{"id":488,"depth":1026,"text":489,"children":1042},[1043,1044,1045,1046],{"id":492,"depth":1031,"text":493},{"id":533,"depth":1031,"text":534},{"id":605,"depth":1031,"text":606},{"id":612,"depth":1031,"text":613},{"id":619,"depth":1026,"text":620},{"id":673,"depth":1026,"text":674},{"id":749,"depth":1026,"text":750},{"id":813,"depth":1026,"text":814,"children":1051},[1052,1053,1054,1055,1056,1057,1058,1059,1060],{"id":820,"depth":1031,"text":821},{"id":827,"depth":1031,"text":828},{"id":834,"depth":1031,"text":835},{"id":864,"depth":1031,"text":865},{"id":871,"depth":1031,"text":872},{"id":878,"depth":1031,"text":879},{"id":885,"depth":1031,"text":886},{"id":892,"depth":1031,"text":893},{"id":899,"depth":1031,"text":900},{"id":936,"depth":1026,"text":937},{"id":964,"depth":1026,"text":965},{"id":974,"depth":1026,"text":975},{"id":984,"depth":1026,"text":985},"Find out how RaceUp collects, uses and protects your personal data in accordance with the GDPR.","md",{},true,"/legal/en/privacy",{"title":5,"description":1065},"legal/en/privacy","zp2vsj72tqGLKmCvp84ahx-apx98QrS9JatvYUw4iJw",1791055107424]