Privacy Policy

1. Who is responsible for your data

The data controller is TANGO PARIGOT, Rue du Maréchal Leclerc 30, 93400 Saint-Ouen-sur-Seine, France — the organiser of the Liège Tango Marathon. For anything concerning your personal data, write to contact@liegetangomarathon.com.

2. What we collect

When you register for the event, you give us:

• your first and last name, email address and (optionally) phone number;
• your dance role, how often you dance, how many years you have danced, your favourite events and your age group;
• optionally, your Facebook and Instagram handles;
• whether you register with a partner, and any merchandise pre-order (size, colour, quantity);
• the ambassador code you used, if any.

We generate a registration reference, the date of your application, the price calculated for you and any discounts applied, and your registration status (for example pending, approved, paid or waiting list), together with notes the organiser or your ambassador records about your registration.

If you are an ambassador, we also hold your name, email address, personal ambassador code, and account security data: a cryptographically hashed version of your password (never the password itself), password-reset tokens, sign-in times and failed sign-in counts.

3. If you name a dance partner

When you register with a partner, you give us their name and email address. We use the partner's email address purely as a matching key: it lets us pair two people who register separately, so we can keep couples together. We do not use it for marketing, and we do not create a separate profile from it. If you supply someone else's details, please make sure they know. When we first contact a partner, we tell them where their details came from and point them to this policy. A partner can ask us to remove their details at any time using the contact address above.

4. Why we use it, and our legal basis

• To run your registration — reviewing your application, telling you its outcome, arranging payment and sending event information. Legal basis: performance of a contract with you, and steps taken at your request before entering into it.
• To protect the registration form from abuse — a bot check and basic rate limiting. Legal basis: our legitimate interest in keeping the service secure and usable.
• To show the site in your language — your approximate country is derived from your IP address on arrival. Legal basis: our legitimate interest in presenting the site usefully.
• For website analytics — only if you accept analytics cookies. Legal basis: your consent, which you can withdraw at any time.

We never sell, rent or trade your personal data, and we do not share it with sponsors, vendors or other organisations for their own marketing.

5. Who can see your data

Your registration data is visible to the following people and companies, and no one else:

• The event organisers, who manage all registrations.
• The ambassador whose code you used, if any. They can see the registrations made through their own code — including your name, email address, registration status and the amount due — because they help arrange your participation and payment. They cannot see other ambassadors' registrations. A small number of ambassadors act as administrators and can see all registrations.
• Google — the registration data is stored in Google Sheets and processed by Google Apps Script, and our emails to you are sent through Google's mail service. Google acts as our processor. If you accept analytics cookies, Google Analytics also processes usage data about your visit.
• OVH — our web host and email provider for the contact@liegetangomarathon.com address.
• Cloudflare — provides the "are you human?" check on the registration form. It receives technical data needed to make that assessment.
• ipapi.co — receives your IP address when you open the site, so we can pick a starting language.
• OpenStreetMap — receives your IP address when the map on the accommodation page loads, so it can send the map tiles. It sets no cookies.

6. Transfers outside the EU

Some of the providers above are established in the United States and may process your data there. Those transfers rely on the safeguards offered by each provider — the EU–US Data Privacy Framework where the provider is certified under it, and otherwise the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguards that apply.

7. How long we keep it

We keep registration data for up to three years after the end of the event it relates to, then delete it. We keep it that long so we can answer questions about a past edition, resolve payment queries and meet our accounting obligations. Ambassador accounts are kept for as long as the person acts as an ambassador, and deleted when they stop. If you ask us to erase your data sooner, we will do so unless we are legally required to keep it.

8. Your rights

Under the GDPR you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted.
• Restriction — ask us to pause our use of your data while a question is resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — for anything based on consent, such as analytics cookies, at any time.

To exercise any of these, email contact@liegetangomarathon.com. We will reply within one month. If you are not satisfied with our response, you may lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the supervisory authority where you live.

9. Cookies and local storage

We use as little as possible, in two groups:

• Strictly necessary (no consent required) — your language and light/dark theme choice, your cookie preferences themselves, the security check on the registration form, and, for ambassadors, a short-lived sign-in token held only for the duration of your session.
• Analytics (only with your consent) — Google Analytics, to understand how the site is used. Declining changes nothing about your registration.

You can review or change your choices at any time:

10. How we protect your data

The site is served over an encrypted connection. Ambassador passwords are stored only as salted cryptographic hashes, sign-in sessions expire quickly, and repeated failed sign-ins temporarily lock an account. Each part of our system can reach only the data it needs, and ambassadors can never edit the organiser's records directly. No system is perfectly secure, but we keep the amount of data we hold deliberately small.

11. Changes to this policy

If we change how we handle personal data, we will update this page and change the "last updated" date at the top. If the change is significant, we will tell registered participants by email.