Legal notice & privacy

Publisher

This website, icegames.fr, is published by Ice & Fire, an association governed by the French law of 1 July 1901, registered under SIREN 930 412 416. Ice & Fire organises the Ice Games.

• Registered office: 612 route des Côtes, 74210 Doussard, France
• Email: asso.icefire@gmail.com
• Publication director: Jean Parenty

Hosting

The website and its database are hosted by Railway Corporation, 548 Market St PMB 68956, San Francisco, CA 94104, United States — phone +1 (415) 707-7675, railway.com. They run in Railway’s EU West region, in Amsterdam (Netherlands).

Intellectual property

The texts, photographs, videos, logos, the Ice Games name and the rule book on this website belong to Ice & Fire or to their authors, and are protected by intellectual property law. Reproducing, adapting or distributing them, in whole or in part, without our prior written permission is prohibited. Partners’ logos belong to their owners.

For press or partner use of a photo or the logo, write to asso.icefire@gmail.com.

Liability

We take care to keep this website accurate and up to date, but race dates, schedules, prices and rules can change: the rule book, the welcome letter and the organisers’ announcements prevail. Links to other websites (Instagram, YouTube, Stripe…) lead to services we don’t control.

Privacy policy

This policy explains which personal data Ice & Fire collects through icegames.fr and at the Ice Games, why, and what your rights are under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the French Data Protection Act (loi Informatique et Libertés). We don’t sell your data, we don’t use it for advertising, and we make no automated decisions about you.

Data controller

Ice & Fire, whose details are given under Publisher, is the data controller. For any question about your data, write to asso.icefire@gmail.com.

What we collect and why

Your rider account.

• Data: first and last name, email address, password (stored only as an irreversible hash), date of birth, nationality, sex, height, weight, phone number, postal address, and an optional photo and mantra.
• Why: to run your account, check your age and race category, organise the races, and add you to the riders’ WhatsApp group, where race-week news goes out.
• Lawful basis: the contract you enter into with us when you create an account (Art. 6(1)(b) GDPR). The photo and mantra are optional: you add, change or remove them as you wish (consent, Art. 6(1)(a)).

Race registration and payment.

• Data: the race and entry you choose (offer, category, price, discount code), the person to call in an emergency (name and phone number), the time and IP address from which you accepted the rules and the liability waiver, and the payment’s status, amount and reference. Later: your bib, time-trial slots and heat.
• Why: to register you, take your payment, organise the race, reach someone close to you if you are hurt, and keep proof that you accepted the waiver.
• Lawful basis: the contract (Art. 6(1)(b)); for the emergency contact and the proof of the waiver, our legitimate interest in riders’ safety and in being able to prove that the waiver was accepted (Art. 6(1)(f)). Please let your emergency contact know you have given us their details.
• Card payments are handled by Stripe: we never see or store your card number.

Race paperwork.

• Data: the documents you upload in your race hub — medical certificate, signed waiver, proof of insurance — and the organisers’ review notes.
• Why: to make sure every rider is fit to race and insured.
• Lawful basis: the contract (Art. 6(1)(b)). A medical certificate is health data: we process it with your explicit consent, which you give by uploading it (Art. 9(2)(a)); without it, you can’t take part in the race. A certificate of fitness is all we need: please don’t send us any other medical information.
• Only the organisers in charge of the paperwork can open these files. They are never published.

Race results.

• Data: name, nationality, category, times, heats and final place.
• Why: results are the sporting record of the event: we publish them on this website and our social media, and the press may report them.
• Lawful basis: our legitimate interest in publishing the results of a public competition (Art. 6(1)(f)).

Photos and videos of the event.

• The Ice Games are a public event, photographed and filmed by us and our photographers. Pictures of riders and spectators may be published on this website, on our Instagram and YouTube accounts and in the press, to tell the story of the event and promote the next ones.
• Lawful basis: our legitimate interest (Art. 6(1)(f)).
• If you appear in a picture and want it removed, write to asso.icefire@gmail.com: we take it down from this website and our accounts.

Emails.

• Data: your email address, the emails we send you (account confirmation, password reset, registration confirmation) and the messages you send us.
• Why: to secure your account, keep you informed about your race and answer you.
• Lawful basis: the contract (Art. 6(1)(b)) and our legitimate interest in answering you (Art. 6(1)(f)).

News about future events.

• Data: your name, your email address, your choice, and when you made or changed it.
• Why: to tell you about the next Ice Games and our other events — only if you ticked “Email me about future Ice Games events” when you created your account or in your profile. The box is never ticked for you.
• Lawful basis: your consent (Art. 6(1)(a) GDPR and Art. L34-5 of the French Postal and Electronic Communications Code). You can withdraw it at any time by unticking the box in your profile, with the unsubscribe link in every one of these emails, or by writing to us; emails about your account and your races keep coming.

Technical data.

• When you browse the website, our host records technical logs (IP address, pages requested, browser) to keep the site running and secure — our legitimate interest (Art. 6(1)(f)).

Who can see your data

• The organisers — the members of Ice & Fire who run the races, each for what their role requires.
• Our technical providers, who process data only on our instructions: Railway Corporation (hosting, EU West region), Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, Ireland (card payments; Stripe also uses some data as an independent controller, for its legal obligations and fraud prevention: see Stripe’s privacy policy), Resend — Plus Five Five, Inc., San Francisco, United States (sending our emails), and Google (our Gmail mailbox, for the messages you send us).
• WhatsApp (Meta): the other members of the riders’ group see your name and phone number. You can leave the group at any time.
• The public: race results and event photos, as described above.
• Emergency services if you are hurt, and public authorities when the law requires it.

We never sell or rent your data, and we don’t share it with our sponsors.

Transfers outside the European Union

Our database and files stay in the European Union. Some of our providers are American companies (Railway, Resend, and Stripe’s group): transfers to them are covered by the EU–U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses.

How long we keep it

• Rider account and profile: as long as your account is active. We delete it when you ask us to, or 3 years after your last sign-in or race.
• Registrations and proof of the waiver (time, IP address, signed waiver): 5 years after the race — the limitation period for liability claims (Art. 2224 of the French Civil Code).
• Emergency contact, medical certificate and proof of insurance: deleted within 6 months after the race.
• Payment records: 10 years, for accounting obligations.
• Race results: kept as the history of the event.
• Photos and videos: as long as they are published; removed when you ask.
• News about future events: until you unsubscribe, or 3 years after your last sign-in or race. We keep the record of your choice as long as we must be able to prove it.
• Messages you send us: 3 years after our last exchange.
• Technical logs: a few weeks at most.

Security

The website is served over HTTPS only. Passwords are stored as hashes, never readable; accounts lock after repeated failed sign-ins. Uploaded paperwork and rider photos can only be opened by their rider and the organisers.

Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time for what relies on it. You can also give instructions on what happens to your data after your death (Art. 85 of the French Data Protection Act).

Most of your details can be corrected directly in your rider profile. For anything else, write to asso.icefire@gmail.com, preferably from your account’s email address. We answer within one month. If we have reasonable doubts about who is asking, we may ask you to prove your identity.

If you think we haven’t respected your rights, you can lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr.

Riders under 18

Rider accounts are open from the age of 16. A rider under 18 can exercise their rights themselves; their parents or legal guardians can also do so on their behalf.

Cookies

The cookies this website sets itself are only the ones it needs to work: they are exempt from consent (Art. 82 of the French Data Protection Act). No analytics, no advertising. The one service that asks for your consent is YouTube, which plays our videos.

• icegames-token — keeps you signed in to your rider account. Deleted when you sign out; expires after 2 hours.
• __stripe_mid and __stripe_sid — set by Stripe on the race registration page only, to prevent payment fraud. They last 1 year and 30 minutes.
• icegames-preview — before the website’s launch only: lets the organisers preview it. Lasts 30 days.
• icegames-consent — remembers your answer to the consent banner, so we don’t ask on every page. Lasts 6 months.

Our videos are hosted on YouTube and play in its privacy-enhanced mode (youtube-nocookie.com). Nothing loads from YouTube, thumbnails included, until you accept it, in the banner or by pressing play on a video. Once you have, the home page video starts, muted, when you scroll to it (unless your device is set to reduce motion), YouTube may store data on your device, and Google’s privacy policy applies. You can change your answer at any time with Cookie settings, at the bottom of every page. Our Instagram and YouTube links are plain links: nothing loads from those networks until you follow them.

Updates

We may update this page as the website changes. Last updated: 19 October 2026.