Privacy policy
Last updated: May 27, 2026
1. Data controller
QLCsystem is the data controller for personal data collected through CrossCompet (organizers and athletes). For any GDPR question or to exercise your rights, write to us at crossplanner.contact@gmail.com
2. Data collected
We collect:
• Identification data: name, first name, email, phone
• Payment data: processed by Stripe (we never store your bank details)
• Competition data: team, division, t-shirt size, results, scores
• Technical data: IP address, browser, pages visited
• Cookies: see section 5
• Identification data: name, first name, email, phone
• Payment data: processed by Stripe (we never store your bank details)
• Competition data: team, division, t-shirt size, results, scores
• Technical data: IP address, browser, pages visited
• Cookies: see section 5
3. Purposes and legal bases
• Competition registration and management (contract performance)
• Payment processing via Stripe (contract performance)
• Event communication and sending the charter/rules (contract performance)
• Anonymized audience measurement via Google Analytics (consent)
• Accounting obligations and invoice retention (legal obligation)
• Payment processing via Stripe (contract performance)
• Event communication and sending the charter/rules (contract performance)
• Anonymized audience measurement via Google Analytics (consent)
• Accounting obligations and invoice retention (legal obligation)
4. Recipients
Your data is accessible to:
• QLCsystem (authorized technical team)
• Stripe (payments, transaction data processing and storage)
• Google LLC (Google Analytics — anonymized audience measurement)
• The competition organizer you register with (name, team, email for communication)
We never sell your data.
• QLCsystem (authorized technical team)
• Stripe (payments, transaction data processing and storage)
• Google LLC (Google Analytics — anonymized audience measurement)
• The competition organizer you register with (name, team, email for communication)
We never sell your data.
5. Cookies and trackers
On your first visit, a banner introduces the cookie categories. You can accept, refuse, or customize per category. You can change your choice anytime via the "Manage cookies" link in the footer.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Anonymized audience measurement | 13 months |
cookie_consent | QLCsystem | Storing your preferences | 13 months |
__stripe_* | Stripe | Payment security (anti-fraud) | 1 year |
6. Transfers outside the EU
Some of your data is transferred to the United States via:
• Google Analytics (Google LLC) — audience measurement
• Stripe (Stripe Inc.) — payments
These transfers are governed by the Standard Contractual Clauses (SCC) of the European Commission as well as certification under the EU-US Data Privacy Framework (DPF), which constitutes an adequacy decision under Article 45 GDPR.
• Google Analytics (Google LLC) — audience measurement
• Stripe (Stripe Inc.) — payments
These transfers are governed by the Standard Contractual Clauses (SCC) of the European Commission as well as certification under the EU-US Data Privacy Framework (DPF), which constitutes an adequacy decision under Article 45 GDPR.
7. Retention periods
• Account / registration data: up to 3 years after the last competition
• Billing data: 10 years (legal obligation)
• Cookies: 13 months maximum
• Technical logs: 12 months
• Billing data: 10 years (legal obligation)
• Cookies: 13 months maximum
• Technical logs: 12 months
8. Your rights
Under the GDPR, you have the right to:
• access your data
• rectify incorrect data
• erase your data ("right to be forgotten")
• restrict processing
• object to specific processing
• data portability
• withdraw your consent at any time (cookies via the footer link, other processing via email)
• define post-mortem directives
To exercise your rights, write to crossplanner.contact@gmail.com
• access your data
• rectify incorrect data
• erase your data ("right to be forgotten")
• restrict processing
• object to specific processing
• data portability
• withdraw your consent at any time (cookies via the footer link, other processing via email)
• define post-mortem directives
To exercise your rights, write to crossplanner.contact@gmail.com
9. Complaint to the CNIL
If you believe your rights are not respected, you can file a complaint with the French data protection authority (CNIL): www.cnil.fr/en/plaintes.