Legal document

Privacy Policy

Last updated: October 2026

This policy explains what data we collect, why we use it, who we may share it with and what rights you have regarding the processing of your personal data.

In brief

Essential points

✓ Data is used for registration, participation and communication

✓ Payments are processed through Stripe, we do not store card details

✓ Data is not sold to third parties

✓ You have rights of access, rectification, deletion and objection

✓ Data is retained according to legal obligations and event purposes

✓ Google Analytics 4 is activated only after your choice and can be withdrawn from Cookie preferences

1. Data controllers

Personal data collected through the Swim4Dreams website is processed by Asociația Sută la Sută Românesc (Tax ID RO 34902830) for event organization related activities and by Asociația Sportivă Apa Înseamnă Viață (Tax ID 43866249) for sports registrations and payment processing.

2. What data we collect

Account data: first name, last name, date of birth, email, phone number, country of residence and optionally a sports club.

Registration data: selected race, age category, medical declaration, parental consent for minors, photo/video consent and additional information relevant to participation.

Payment data: payments are processed through Stripe. The website does not store bank card information.

Technical data: IP address, browser type, device information, visited pages and other technical information collected through necessary and analytics cookies.

3. Purpose of data usage

Managing registrations and confirming participation in the event.

Processing participation fee payments.

Communicating information related to the schedule, updates, race kit and logistics.

Ensuring participant safety during the event.

Complying with legal, fiscal and organizational obligations.

Promoting the event through photo/video materials, exclusively based on explicit consent when required.

4. Legal basis for processing

Performance of a contract, for data necessary for registration and participation in the event.

Explicit consent, for image usage and other processing activities requiring separate consent.

Legal obligation, for data required to comply with fiscal, accounting and administrative obligations.

5. Data recipients

Data may be transmitted to Stripe for payment processing.

Data may be shared with the official event timing service and, where applicable, with other providers strictly necessary for organizing the competition.

Data may be disclosed to public authorities only in situations required by law.

Data is not sold or transferred for commercial purposes to third parties.

6. Data retention period

Registration and participation data is retained for the period necessary to organize the event and afterwards according to administrative obligations and legitimate interests.

Financial data and payment related documents are retained according to applicable fiscal and accounting obligations.

Data processed based on consent may be retained until consent is withdrawn, within applicable legal and operational limits.

7. Rights of data subjects

You have the right to access processed data.

You have the right to rectify inaccurate or incomplete data.

You have the right to request deletion of data where this does not conflict with legal retention obligations.

You have the right to restrict processing and the right to object, under the conditions provided by law.

You have the right to data portability and to withdraw consent where processing is based on consent.

8. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or destruction.

Access to data is limited to the persons and systems necessary for operating the platform and organizing the event.

Connections and infrastructure used for the website and payments are configured to provide an appropriate level of security.

9. Website analytics (Google Analytics 4)

Purpose: measuring website usage and conversions, to improve the website and the event experience.

Google Analytics 4 (provider: Google) is activated only after you choose “Accept all”. You can withdraw at any time from “Cookie preferences” in the footer; after withdrawal, analytics stops.

Data processed: browser and session identifiers, the page/path visited, language, website interaction events, the value and currency of a payment or donation (where applicable), and browser, device and network information received by Google during transmission.

We do not intentionally send names, email addresses, phone numbers, Supabase user IDs or raw Stripe payment identifiers to Google Analytics.

Conversion measurement: after Stripe confirms an eligible payment or donation, the server may send a purchase or donation_success event to GA4. This happens only if you granted analytics consent before checkout.

To attribute the conversion to the visit, the Google Analytics client and session identifiers are temporarily stored in the Stripe Checkout Session metadata. Raw Stripe identifiers are not sent to GA4.

10. Policy updates

We reserve the right to update this Privacy Policy to reflect legislative, operational or organizational changes.

The updated version will be published on the website together with the date of the latest revision.

💬