Privacy Policy

Personal data collected through the get-podium.com platform (the “Platform”) is processed by Podium (“Podium”) as controller within the meaning of Regulation (EU) 2016/679 (“GDPR”). The company's registration details are published in the Site's legal notice as soon as the certificate of incorporation is issued.

Podium is not required to appoint a data protection officer. The single point of contact for any question or request relating to personal data is contact@get-podium.com.

Identification and contact data: surname, first name, email address, phone number, date of birth, photograph.

Sporting profile data (Athletes): discipline, category, record, federation licences, audience and engagement data from social networks, published content.

Data relating to minor Athletes: identity and date of birth of the minor, identity, contact details and proof of standing of the holder of parental authority, evidence of their consent.

Professional data (Companies and Organisers): company name, contact's role, professional contact details.

Waiting list data: email address, the page the sign-up was made from and, where applicable, a referral code. It is collected before registrations open and serves only to tell the person when they do.

Contractual and financial data: subscriptions taken out, Deals concluded, invoicing, payment history. Card details are collected and processed exclusively by our authorised payment provider and are never stored by Podium.

Verification data: identity documents and supporting evidence submitted as part of profile verification and of the payment provider's KYC obligations.

Usage data: connection logs, IP address, browsing data, cookies (see article 11).

Creating and managing accounts, providing the services, making introductions and managing Deals: performance of the contract (art. 6.1.b GDPR).

Verifying profiles and computing the Podium Score: performance of the contract and Podium's legitimate interest in guaranteeing the reliability of the Platform.

Invoicing, collection, accounting: performance of the contract and legal obligations (art. 6.1.c).

Fighting fraud, score manipulation and circumvention: legitimate interest (art. 6.1.f).

Managing the waiting list before registrations open: consent (art. 6.1.a), withdrawable at any time on request.

Commercial outreach to Companies and Organisers: legitimate interest. Newsletters and marketing communications to natural persons: consent (art. 6.1.a), withdrawable at any time.

Audience measurement on public pages: legitimate interest, using an anonymous identifier that allows no profiling.

Processing of minors' data: consent of the holder of parental authority and performance of the contract entered into by the legal guardian.

The Podium Score is an indicator calculated automatically from the Athlete's sporting results, audience, engagement and professionalism. It affects profile visibility and rankings, but no decision producing legal effects or similarly significantly affecting the Athlete is taken solely by automated means within the meaning of Article 22 GDPR. Any Athlete may obtain an explanation of the calculation logic, challenge their score and obtain human intervention by writing to contact@get-podium.com.

Registration of a minor Athlete requires the express, verifiable consent of the holder of parental authority, collected upon account creation. Minors' data is strictly minimised: only data necessary for the provision of the services is collected. The minor's rights are exercised by their legal guardian. Podium may at any time request proof of the guardian's capacity; failing such proof, the account is suspended and the data deleted.

The data is accessible to Podium staff who are authorised to see it, and only as far as their role requires.

It is also processed by our processors within the meaning of article 28 GDPR: Vercel Inc. (application hosting and logs), Supabase, Inc. (database, authentication and file storage, hosted in the Paris region), Stripe (collection of verification fees, subscriptions and licences, and the associated KYC checks), Brevo (sending transactional emails and waiting list messages). Each acts on Podium's instructions, under a data processing agreement.

Other Users can see only the profile data that the User has themselves made public, or that is necessary for an introduction (profile, record, Podium Score, rankings).

Administrative or judicial authorities gain access where the law requires it. Podium never sells its Users' personal data and passes it to no data broker or advertiser.

The database, authentication and the files uploaded by Users are hosted in the European Union, in the Paris region (eu-west-3).

Some processors are established in the United States or run part of their infrastructure there, in particular Vercel Inc. and Stripe. The corresponding transfers are governed by the European Commission's standard contractual clauses, supplemented where appropriate by additional measures, and, where the provider is certified under it, by the EU / US Data Privacy Framework.

The up to date list of processors, their country of establishment and the applicable transfer mechanism are provided on request at contact@get-podium.com.

Account data: for the duration of registration, then archived for evidential purposes for five (5) years.

Waiting list data: until registrations open, then twelve (12) months at most, or immediately on a withdrawal request.

Outreach data: three (3) years from the last contact.

Invoicing documents: ten (10) years (accounting obligation).

Identity and verification evidence: for the period required by the regulations applicable to the payment provider, and at most five (5) years after the end of the relationship. Identity documents submitted for profile verification are purged as soon as the decision is issued.

Connection logs: twelve (12) months.

Audience measurement data (page views, anonymous visit identifier): twenty-five (25) months, then automatic deletion.

Cookies: see article 11, thirteen (13) months at most.

In accordance with the GDPR and the French Data Protection Act, you have a right of access, rectification, erasure, restriction, objection and portability, as well as the right to give directions on what happens to your data after your death, and to withdraw your consent at any time.

These rights are exercised by writing to contact@get-podium.com, providing proof of your identity in the event of reasonable doubt. You will receive a reply within one (1) month, extendable by two (2) months for complex requests.

You may lodge a complaint with the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

Podium implements appropriate technical and organisational measures (encryption in transit, access control, logging, backups, segregation of payment data with the licensed provider) to protect data against loss, alteration and unauthorised access. In the event of a data breach likely to result in a high risk to your rights, you will be informed in accordance with Article 34 GDPR.

Podium uses no advertising cookie and no third-party audience measurement tool: no Google Analytics, no advertising or social network pixel.

Strictly necessary cookies (authentication, security, language preference): exempt from consent.

Internal, anonymous audience measurement: a random identifier, with no cross-site matching and no profiling, used solely to count visits to public pages.

Cookie lifetime does not exceed thirteen (13) months. Should trackers subject to consent be added in future, a consent banner would be put in place before they are set.

This policy may be updated at any time, in particular in the event of changes to the services or applicable regulations. The applicable version is the one published on the Platform; any material change will be notified to you by any appropriate means.