Privacy Policy

Last updated: March 2026

Introduction

This Privacy Policy describes how Buzzers.fit (published by Joris Gounand, sole proprietor) collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

Data controller

Joris Gounand Sole proprietor Email: joris@gounand.fr Address: [TO BE COMPLETED]

Data collected

As part of the use of our services, we collect the following data:

• First and last name • Email address • Phone number • CrossFit box name (optional) • Competition data (team, results, rankings) • Payment data (processed by Stripe, not stored on our servers)

Purpose of processing

Your data is collected for the following purposes:

• User account management • Competition registration and participation • Display of results and rankings • Competition-related communications (confirmations, reminders) • Event access control via QR code • Service improvement

Legal basis for processing

The processing of your data is based on: • Contract performance: managing your registration and participation in competitions • Consent: voluntary registration to the service • Legitimate interest: service security and user experience improvement

legal.privacy.legalBasisItems

Cookies

This site only uses cookies strictly necessary for the operation of the service:

CookiePurposeDurationType
bf_tokenAuthentication (session token)Session durationNecessary
bf_token_expToken expiration dateSession durationNecessary
bf_langLanguage preference1 yearFunctional

No advertising, analytics or tracking cookies are used.

Data retention

Your data is retained for the period necessary for the purposes for which it was collected: • Account data: retained as long as the account is active, then deleted within 3 years after the last login • Competition data: retained for 3 years after the competition • Payment data: in accordance with legal obligations (10 years for accounting records)

Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data • Right to rectification: correct inaccurate or incomplete data • Right to erasure: request deletion of your data • Right to portability: receive your data in a structured format • Right to object: object to the processing of your data • Right to restriction: restrict the processing of your data

To exercise your rights, contact us at: joris@gounand.fr

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

Data security

We implement appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, disclosure or destruction. Communications are encrypted via HTTPS and authentication data is secured using JWT tokens.

Data transfers

Your data is hosted in France (Scaleway). Payment processing is handled by Stripe, which may transfer data outside the EU under standard contractual clauses approved by the European Commission.

Changes to this policy

This privacy policy may be modified at any time. The date of the last update is indicated at the top of this page. We encourage you to regularly review this page.