RaceBase
Back

Privacy policy

Last updated: 30 May 2025

1. Data controller

The data controller for RaceBase (racebase.avirow.io) is:

Johan Lysemark
Sole trader
Email: johan.lysemark@gmail.com

2. What personal data we process

We collect and process the following personal data about you as a user:

  • Email address — for sign-in and communication
  • Full name — shown in regatta entries and start lists
  • Date of birth — no longer collected — dates already saved for older accounts remain
  • Club affiliation — shown in regatta entries and start lists
  • Usage data — page views and interactions linked to your account, collected to improve the service

In addition to your own data, we also process personal data about the rowers you enter in regattas: their name, role in the boat and club affiliation.

3. Purposes and legal basis

Providing the service and authentication

Performance of a contract (GDPR art. 6.1 b)

We need your details so that you can sign in and use RaceBase.

Publishing start lists

Legitimate interest (GDPR art. 6.1 f)

The name and club affiliation of entered rowers are published in start lists that are visible to all visitors. Publishing participant details is a customary and necessary part of sports competitions and a legitimate interest of organisers and participants.

Export to timing systems (CrewTimer)

Legitimate interest (GDPR art. 6.1 f)

Start lists may be exported to CrewTimer to administer timing during regattas.

Session management

Legitimate interest (GDPR art. 6.1 f)

We use session cookies to keep you signed in during your visit.

Product analytics and improving the service

Legitimate interest (GDPR art. 6.1 f)

We use PostHog to understand how the service is used and to be able to improve it. Usage data is linked to your account and stored within the EU.

4. Public publication of participant details

The name and club affiliation of rowers entered in regattas are shown in start lists that are publicly accessible on the website — with no sign-in required. Whoever enters a participant is responsible for having the right to provide these details. See also our terms of use.

5. Third parties we share data with

We share personal data with the following processors in order to provide the service:

SupabaseEU (Ireland)

Database and authentication

All data is stored in the EU.

GoogleUSA

OAuth sign-in (Google Sign-In)

Data transfer takes place under standard contractual clauses (SCC).

OpenAIUSA

AI analysis of uploaded regatta documents

Files are processed temporarily and not stored by OpenAI beyond what is stated in their privacy policy. Data transfer takes place under SCC.

PostHogEU (EU Cloud)

Product analytics and error monitoring

Data is stored within the EU. Page views and interactions are linked to your account ID. PostHog does not share your data with third parties.

6. Retention period

Your personal data is kept for as long as your account is active. If you ask for your account to be deleted, we remove your data without undue delay. Accounts that have not been used for three (3) years may be deleted after prior notice by email.

Please note that information about previous regatta entries (name and club in start lists) may remain in the organisers' history even after your account has been deleted.

7. Your rights

Under the GDPR you have the following rights. Send your request to johan.lysemark@gmail.com.

  • Access — The right to receive an extract of the data we hold about you.
  • Rectification — The right to have incorrect data corrected.
  • Erasure — The right to ask for your data to be erased ("the right to be forgotten").
  • Restriction — The right to ask for the processing of your data to be restricted.
  • Data portability — The right to receive your data in a machine-readable format.
  • Objection — The right to object to processing based on legitimate interest.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you consider that we process your data in breach of the GDPR.

8. Cookies

RaceBase uses session cookies managed by Supabase to keep you signed in. We also use PostHog to collect statistics on how the service is used — this takes place on the basis of legitimate interest and the data is linked to your signed-in account. No marketing cookies are used.

9. Changes to this policy

We may update this privacy policy. In the event of material changes we will notify you by email. The latest version is always available on this page.

10. Contact

Questions about how we handle your personal data are answered at johan.lysemark@gmail.com.

Read our terms of use →