Privacy Policy

The Cani Ninja website and registration application are published by Cani Gourmand, organizer of the Cani Ninja sporting event (an obstacle race with dogs).

For any question about your personal data, you can contact us at contact@cani-ninja.com or by phone at 06.29.82.56.53.

We only collect the data necessary to manage your registration, your participation, and the safety of the event.

Account and identity

• Email address and password (the password is never stored in plain text: it is hashed before being saved to the database).
• First and last name, date of birth, sex, phone number, postal code, and country.

Health data (special category under GDPR)

If you declare a disability, this information, along with the medical certificate and supporting document you upload, are handled with enhanced care: access is strictly limited to volunteers authorized to verify applications, and it is never shared with third parties outside the race organization.

Supporting documents

Depending on your profile (minor, disability), we ask you to upload:

• A liability waiver (all participants).
• A parental authorization (minor participants).
• A medical certificate/proof of disability (participants with disabilities).

These files are stored in a space that is not publicly accessible and can only be viewed by you, your legal guardian where applicable, and volunteers authorized to validate applications.

Your dog

The animal's name and identification chip number.

Minors and legal guardians

For a minor participant, we keep the link with their legal guardian (the adult accompanying them), to ensure a responsible adult is identified for every registered minor.

Payment

Payments are handled entirely by our payment provider Stripe. We never receive or store your card number: we only keep the amount paid, the payment status, and a Stripe transaction identifier, needed for billing and tracking registrations.

Race

Race chosen, bib number, start/finish times, and official time once the race has been completed.

Volunteers

If you are a volunteer: first and last name, email, phone number, dietary preference, any allergies, sector, and assigned duty.

Technical data

A session cookie (strictly necessary to stay logged in), an anti-forgery security token (CSRF), and a language preference cookie (French/English choice, kept for 1 year, not linked to your identity). We do not use any advertising cookies or third-party audience measurement tools (Google Analytics or equivalent).

• Create and manage your account and your registrations (yourself and any minors in your care).
• Process your payment and issue you a bib.
• Verify that the required safety conditions and authorizations are in place (liability waiver, parental authorization, medical certificate) before the race starts.
• Organize the race itself: calling start waves, timing, rankings, real-time runner tracking.
• Contact you if needed regarding your registration (confirmation, event information, missing document).
• Manage volunteer teams (assignment, contact).
• Ensure the security of the application (fraud prevention, logging of payment errors).

• Performance of a contract — creating your account, your registration, and processing payment are necessary to let you take part in the event you chose to join.
• Legal obligation — parental authorization for minors and the liability waiver meet safety and insurance requirements specific to sporting events.
• Explicit consent — for health data (disability status), collected when filling in your profile; you may at any time request deletion of the associated supporting document.
• Legitimate interest — technical logging (security, payment fraud prevention) is strictly limited to what is necessary for the site to run properly.

Your data is never sold and is only shared with:

• Cani Ninja volunteers and organizers, limited to what is necessary for their duties (front desk, document checks, race management) — access is restricted according to each person's role.
• Stripe (payment provider), for secure processing of your payment.
• Our hosting provider (OVH, France) and our email delivery provider, who only access your data to keep the site technically running.

None of this data is transferred outside the European Union.

• Account, registration data, and supporting documents are kept for the duration of organizing the edition you are taking part in, then deleted after the event (by the end of the season at the latest).
• A registration attempt abandoned before payment is confirmed (an incomplete Stripe session) is never stored long-term: it is automatically deleted within a few hours if payment did not go through.
• Billing data (amount, payment status) may be kept longer to meet our legal accounting obligations.
• You may request early deletion of your data at any time (see section 8), subject to documents required to justify an already-paid registration.

• Passwords are hashed (never stored in plain text) using a robust algorithm.
• Communication with the site is encrypted (HTTPS).
• Supporting documents are stored in a space that is not directly accessible from the internet, viewable only through the application by authorized people.
• Back-office access is restricted according to each volunteer's role (principle of least privilege).
• No card data passes through or is stored by us: payment is handled entirely by Stripe, which is PCI-DSS certified.

In accordance with the General Data Protection Regulation (GDPR), you have the following rights over your personal data:

• Right of access — obtain a copy of the data we hold about you.
• Right to rectification — correct inaccurate or incomplete data (directly editable from your profile for most fields).
• Right to erasure — request deletion of your data, subject to legal obligations we must comply with (e.g. billing).
• Right to object and to restriction — object to certain processing or request that it be restricted.
• Right to data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at contact@cani-ninja.com. We respond within one month at most.

A minor participant's registration is carried out by their legal guardian, who gives written authorization and remains the point of contact for any question regarding the child's data. A minor under 16 does not have their own account: their data is attached to their companion's account (their legal guardian).

If, after contacting us, you believe your rights are not being respected, you may file a complaint with the French data protection authority, the Commission Nationale de l'Informatique et des Libertés (CNIL):

www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France.