privacy.

What data we collect and why

• Account: first and last name, username, email, password (stored encrypted), phone and date of birth. Needed to log in, register and order.
• Brevet and event registrations: participant details, emergency contact, club/team, jersey size, chosen route and payment status. Needed to organise the event, keep you safe on the route and check you in.
• Medical certificate (only for events that require it): this is health data and is specially protected. The file is private: only you and the organising staff can see it, and you can delete it from your account at any time.
• Shop orders: items, delivery and billing addresses, payment method and status. Needed to ship, invoice and handle returns.
• Forms (evenings, invitations, special registrations): your answers, plus IP address and browser at the time of sending, to protect us from abuse.
• Communications: if you allow it, your email for news and events. You can unsubscribe with one click from every email or from your profile; service emails about registrations and orders are always sent.
• Technical data: the server briefly logs data such as IP address, date and page requested, for security and troubleshooting.
• Anonymous statistics: we count page views and clicks on the main buttons to understand what interests people. We use no cookies or external services and do not store your IP address: the visitor becomes a code that changes every day, so we cannot recognise you. From the IP address we only derive the country, using a list stored on our server, and then the IP is discarded. The data is deleted after 15 months.

Who we entrust data to

We do not sell or hand over your data. To run the site we rely on a few providers, who process it only on our behalf:

• Hosting: the server running the site and the database.
• Email delivery: the service that delivers confirmations, tickets and communications.
• Payments: RaiseNow (with TWINT and cards via Stripe). You enter card details directly with them: we never see them.
• Staff notifications: when a registration or order comes in, our staff gets an alert by email and/or Telegram with the essentials (name, contact, what was ordered).
• External content (only if you accept it in the cookie banner): Google Fonts for the typeface and OpenStreetMap for the map background.

Data abroad

Some providers (for example payments, email, Telegram or Google) may also process data outside Switzerland, in the European Union or the United States. In these cases we rely on providers that guarantee an adequate level of protection, for example through standard contractual clauses.

How long we keep it

• Account: until you ask us to delete it.
• Registrations and orders: as long as needed for the event or delivery; accounting records (receipts, payments) for 10 years, as required by law.
• Medical certificate: until it expires or you delete it.
• Forms and technical data: only as long as needed for the purpose they were collected for.

Security

The site uses an encrypted connection (HTTPS), passwords are stored encrypted and private files such as medical certificates cannot be reached from the internet: they can only be downloaded from your account or the staff area.

Your rights

At any time you can ask us what data we hold about you, correct it, have it deleted (except what we must keep by law), object to processing or receive it in a readable format. You can already change much of it yourself in your account. If you believe we handle your data incorrectly, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

Cookies

We only use the necessary technical cookies and, with your permission, some external content. Details are on the cookie page.

Changes

We may update this page when the site or the law changes. The date of the last update is shown at the top.