Privacy Policy

1. Introduction

sibaqui takes the protection of the personal data of Organizers and Participants who use the Platform seriously. This Privacy Policy explains what data we collect, why, how it is protected, and what rights you have.

It applies in addition to the Terms of Service and has been drawn up in accordance with Law No. 18-07 of June 10, 2018 on the protection of individuals with regard to the processing of personal data.

2. Data controller

The controller responsible for data collected through the Platform is:

For a given Event, the Organizer is responsible for processing the data of Participants registered for their Event, within the limits described in section 6 below. sibaqui then acts as a technical processor on the Organizer's behalf.

3. Data we collect

Depending on how you use the Platform, we collect:

• Account data: first and last name, email address, phone number, password (stored encrypted), preferred language (French, Arabic, English).
• Race registration data: date of birth, sex, wilaya of residence, sports club, personal best time, emergency contact, bib/apparel size when requested by the Organizer.
• Identity document: when identity verification is enabled for an Event, an image of a national ID card may be submitted to confirm the identity of the Participant or Organizer and to prevent registration fraud. This image is processed solely for that purpose and is not kept longer than strictly necessary for verification.
• Payment data: registration fees are processed by [payment provider name]. sibaqui does not collect or store full bank card numbers; it retains only the transaction metadata needed for accounting and support (amount, status, reference).
• Content and messages: messages exchanged through the built-in messaging between an Organizer and a Participant, an Organizer profile's logo and description.
• Location and route data: Event wilaya and location, GPX route traces published by Organizers.
• Technical data: IP address, device and browser type, pages visited, connection timestamps, error logs, for security and service-improvement purposes.

4. Purposes of processing

• creating and managing your user account;
• processing Race registrations and associated payments;
• verifying users' identity and preventing registration fraud;
• enabling communication between Organizers and Participants;
• displaying Events, their Races, and their routes on the interactive map;
• ensuring the security of the Platform and preventing misuse;
• complying with our legal and accounting obligations;
• sending you service-related communications (registration confirmation, Event reminder, status change) and, with your consent where required, marketing communications.

5. Legal basis

Depending on the case, processing of your data relies on:

• performance of the contract between you and sibaqui or an Organizer (account creation, Race registration, payment);
• your consent, in particular for identity verification via an ID document and for marketing communications;
• our legitimate interest in ensuring the Platform's security and preventing fraud;
• compliance with legal obligations (accounting, retention of certain transaction records).

6. Who we share data with

Your data may be shared with:

• the Organizer of the Event you register for, limited to the data needed to manage their Race (identity, contact details, emergency contact, payment status);
• our payment provider, for secure transaction processing;
• our data host, [Supabase / provider name], for secure storage of the database and files (see section 9);
• competent authorities, where required by law.

sibaqui never sells your personal data to third parties for advertising purposes.

7. Retention period

• Account data: for as long as your account exists, then [duration] after its deletion, unless a longer legal retention period applies.
• Race registration data: retained by the Organizer for as long as needed to organize the Event and meet their accounting obligations, then archived or deleted according to their own policy.
• Identity document: deleted as soon as verification is complete, unless legally required otherwise, and no later than [duration] after submission.
• Transaction data: retained for the period required by applicable accounting and tax regulations.
• Technical logs: retained for [duration, e.g. 12 months] for security purposes.

8. Data security

sibaqui implements reasonable technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure, including: password encryption, encrypted connections (HTTPS/TLS), role-based access control for Organizer teams (owner, manager, editor, viewer), and restricting access to identity documents to what is strictly necessary.

As no system is entirely fail-proof, we encourage you to use a strong password and avoid reusing it on other services.

9. Hosting and data transfers

Platform data is hosted by [Supabase / hosting provider name], on servers located in [hosting region, e.g. the European Union]. Where a transfer of data outside Algeria is necessary for the service to function, it is carried out under the safeguards provided for by applicable law.

10. Your rights

In accordance with Law No. 18-07 on the protection of personal data, you have the following rights over your data:

• right of access: obtain a copy of the data we hold about you;
• right to rectification: correct inaccurate or incomplete data;
• right to erasure: request deletion of your data, within the limits of our legal retention obligations;
• right to object: object to certain processing, in particular for direct marketing;
• right to withdraw consent at any time, where processing is based on your consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, contact us using the details in section 14. We may ask you to prove your identity before acting on your request.

11. Cookies and trackers

The Platform uses cookies strictly necessary for it to function (keeping you signed in, remembering your language preference) as well as, where applicable, audience-measurement cookies. You can configure your browser to refuse non-essential cookies; some Platform features may then be limited.

12. Minors

Some Races are open to children. In that case, registration and submission of the minor's data must be carried out by their parent or legal guardian, who remains responsible for the accuracy of the information provided and may exercise the rights described in section 10 on the child's behalf.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to our practices or to applicable regulations. The date of the last update appears at the top of this document. In the event of a material change, you will be notified via a notice on the Platform or by email.

14. Contact

For any question about this policy, or to exercise your rights, contact: