This policy describes the processing of personal data carried out as part of the service, in accordance with the General Data Protection Regulation (GDPR) and the French "Informatique et Libertés" act.
The data controller is Stéphane KRAUS, 12 Pl. Georges Pompidou, Noisy-le-Grand 93160.
The password is never kept nor logged: it only passes through for the time of authenticating you with the federation. No tracking or advertising cookie is used (see Cookies).
The data can be reached by the operator of the server and the organisers of the competitions concerned, for the sole needs of the organisation. They are neither sold nor transferred to third parties for commercial purposes.
When an organiser records the payments of a competition on this service, the amounts still owed 30 days after its end (unpaid), the accounts settled more than 7 days after its end (late payments) and the rejected payments (cheque refused, card payment disputed) are recorded against the licence of the archer, or against the club when the registration was made by the club. Purpose: to let the organisers of the competitions of this service secure the payments made later (registration, purchases on account), by warning them or by refusing such credit to an archer or a club with unpaid debts; a payment made on the spot is never refused. Legal basis: the legitimate interest of the organisers in being paid. The organisers of other competitions only see a level (green, orange, red) and a generic reason, never the amount nor the club. Retention: 24 months after the competition, a debt settled late being kept as a late payment. Every archer sees their level and its reasons in their space ("My registrations") and may ask the operator of the service for a correction; the administrator can correct a level, and an organiser can accept an archer or a club for their competition.
At the points of sale of a competition: volunteers without a licence give their family name, given name and a password, erased automatically the day after the competition (the history then says “Volunteer no. X”); licensed volunteers use their licensee account; the organiser may also add a licensee to the team from the licence file (licence, family and given name). A visitor who orders gives a nickname: it is kept with their orders, so that the organiser knows which orders were collected and paid, but the access of their phone is closed the day after the competition. When a customer asks for it, their browser gives the address of its notification service and two keys, used only to say that an order is ready, and deleted the day after the competition. On the public screen of the orders, the given name and the initial of the family name of a licensee, or the nickname of a visitor, are shown next to the order number until the order is collected. No payment card data is ever recorded.
At the check-in of a competition, the organiser and their volunteers record for each participant whether their documents and equipment comply, the draw weight measured by the judges and any comments; every decision is kept with its author and updates the participation status in ianseo. This information is visible only to the organisers and the check-in volunteers of the competition; it is deleted with the competition, or when the licensee is anonymised.
An archer of another federation creates their account themselves. If the federation of their country publishes the file of its licensees (Italy, Canada, Slovenia, Baltic countries), they give their licence number: their names, sex, date of birth and club are taken from that file, loaded each night. Otherwise their names, sex and country are searched in the public database of World Archery, which only knows the archers who took part in an international competition; if they pick themselves there, their names and sex are taken over, otherwise they give the licence number of their federation; they then give their year of birth and their club. Their sign-in identifier is made of the code of their country and their licence number, or of their World Archery identifier. They choose a password (stored hashed). The photos of the World Archery list are loaded by the archer's browser straight from the World Archery site: they do not go through this server and are never kept. No way of contacting them is asked. The account is erased automatically one month after the archer's last sign-in and last competition, and never while they are registered for a competition to come; their sports results stay in the competitions shot.
You have a right of access, rectification, erasure, restriction and objection over your data. To exercise them, contact s.kraus@ffta.fr. You may also lodge a complaint with the CNIL (www.cnil.fr).
You may also delete your account yourself from your space ("Delete my account"): your registrations for the competitions not started and your waiting-list requests are then erased for good; the competitions started, the past results and the sums due or paid stay unchanged.
Part of the data comes from the federation (licence file): requests about this original information may also be sent to the federation.
Liability. This service is run by Stéphane KRAUS. The software that makes it work (ianseo and the online registration module) is provided "as is", without warranty. Only the operator of the server is responsible for how it is set up, for its content, for the security and for the processing of data carried out on this server; the authors of the software used cannot be held liable for the use made of it here.