Privacy policy

1. Data controller

Edoardo Ascenzi, who can be contacted at privacy@dojemo.com for any privacy request.

2. What data we process

• Account: e-mail address, name (optional), and, if you sign in with an external service (Google, Apple, Strava), the identifier that service gives us, your name and your profile picture. If you choose a password, we store it only in encrypted form (hash), which not even we can read.
• Use of the service: races saved to your favorites, alerts and search filters you create, notification preferences.
• Organizers: the race data you enter (including the organization's contact details you choose to publish) and the GPX tracks you upload. This content is public.
• Technical data: IP address, date and time of requests and browser type, recorded in the server logs for security and operation, and the technical cookies described in the cookie policy.
• Anonymous statistics: to know how many people use the site and which races they are interested in, we record, without third-party tools, the pages viewed, clicks on buttons such as "Register", "Official website" or the GPX download, the type of device (smartphone, tablet or computer), the site you come from (only the domain name, for example google.com) and whether you are signed in (yes or no). We do not store your IP address or your account together with this data: to count unique visitors we compute a code (hash) from the IP address and browser type with a secret key that changes every day, so it is not possible to trace it back to you or to recognize you from one day to the next. During the visit, the browser keeps a random identifier in sessionStorage, which is deleted when you close the tab, to calculate how long the visit lasts. If the browser sends the "Do Not Track" or "Global Privacy Control" signal, we record nothing. We show organizers only the totals for their own races.
• Location: if you allow geolocation, the device's location is used only in your browser to sort races by distance and is neither sent to nor stored on our servers.

Races collected from public calendars may contain the organization's name and contact details as published by the source. The organizer can ask for them to be changed or removed by writing to report@dojemo.com.

3. Why we process them and on what legal basis

• Providing you with the account and its features (sign-in, favorites, alerts, publishing races): performance of the contract for the service that you accept with the terms of use (art. 6.1.b GDPR).
• Sending you the e-mails you requested (sign-in links, address confirmation, password reset, alerts and reminders you turned on): performance of the contract (art. 6.1.b). You can turn off alerts and reminders from your account at any time.
• Security, abuse prevention, backups and troubleshooting: legitimate interest of the controller (art. 6.1.f).
• Anonymous, aggregated statistics on the use of the site, to improve it and to show organizers the interest in their races: legitimate interest (art. 6.1.f). They are collected directly by us, in minimized form and without profiling, as provided for by the Italian Data Protection Authority's (Garante) Guidelines of 10 June 2021 for analytics tools equivalent to technical cookies: this is why no consent is needed.
• Complying with legal obligations or requests from the authorities: legal obligation (art. 6.1.c).

We do not use your data for advertising or profiling, we do not sell it and we do not hand it over to third parties for their own purposes.

4. Who we share them with

We use providers that process data on our behalf as processors (art. 28 GDPR), only as far as needed for the service:

• OVHcloud (OVH SAS, France): server hosting the site and database, in a data center in the European Union.
• Brevo (Sendinblue SAS, France): sending e-mails.
• Cloudflare (Cloudflare Inc., USA): the domain's DNS and encrypted storage of the database backups.
• OpenFreeMap: provides the maps; your browser downloads the map images from its servers, which therefore receive your IP address.
• If you choose to sign in with Google (Google LLC, USA), Apple (Apple Distribution International, Ireland) or Strava (Strava Inc., USA), the sign-in takes place on their site under their privacy policies, and they give us the data listed in section 2.

Transfers to the United States take place under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

5. How long we keep them

• Account data and related content: as long as the account remains active. When you delete it, we erase them; races you published as an organizer may stay online with no reference to your account.
• Database backups: 14 days, after which they are overwritten.
• Anonymous statistics: 13 months, after which they are deleted automatically every night. The visit identifier in the browser is deleted when you close the tab.
• Technical server logs: automatically overwritten on rotation, usually within a few weeks.
• Sign-in and confirmation links: they expire after 15 minutes (sign-in), 1 hour (password) or 24 hours (address confirmation).

6. Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest (arts. 15-22 GDPR), by writing to privacy@dojemo.com from the address you registered with. We reply within one month.

You can also delete your account and all related data yourself from the My account page.

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

7. Mandatory data

The e-mail address is required to create an account and receive alerts; without it we cannot provide these features. Race search remains available to everyone without registration.

8. Sources of race data

Races come from public calendars (for example the FIDAL calendar, skyrunningitalia.it, trailrunning.it, spiritotrail.it), from the pages of organizers that publish structured data and from the organizers themselves. Every race page states its source. The information is indicative: the official race rules always prevail.

Maps © OpenStreetMap contributors, OpenFreeMap tiles. Municipality coordinates: open data dataset "comuni-italiani" by Open Data Sicilia (ISTAT and IPA sources).

9. Changes

If we change this policy, we update the date at the top; for significant changes we notify you by e-mail.