Who is responsible. OuiRace is the data controller for the personal data processed in this portal. Questions or requests: dpo@ouirace.com.
What we collect. Identity and contact details (name, email, phone, address, nationality), professional information (CV, skills, experience, and the photo or intro video you choose to add), contractual and financial data (contracts, task orders, rates, invoices, bank details, payslips for salaried staff), and security/usage records (login and signature timestamps, IP addresses, one-time-code delivery logs).
Why we process it.
To run your contract (art. 6(1)(b) GDPR): your account, contracts, task orders, time tracking, invoicing and payments.
To meet legal obligations (art. 6(1)(c)): accounting, tax and employment records.
Legitimate interest (art. 6(1)(f)): securing the portal, audit trails on electronic signatures, fraud prevention.
Your consent (art. 6(1)(a)): optional items such as your birthday (for celebrations), profile photo or intro video — you can leave them empty and remove them at any time from your profile.
Who processes it for us. Data is hosted and processed by Amazon Web Services (EU region, hosting, storage and email delivery), Google Firebase (staff authentication), and Sweego (SMS one-time codes, EU). Payment execution goes through our banks. We do not sell your data, and your profile is only shared with clients when you agree to be proposed for a mission.
How long we keep it. For the duration of our working relationship, then for the legal retention periods that apply to contracts and accounting documents (up to 10 years under French law). After that, data is deleted or anonymized.
Your rights. You can access, correct (directly in your profile), export, restrict or object to processing, and request erasure of data we no longer need to keep. Write to dpo@ouirace.com — we answer within one month. You may also lodge a complaint with your supervisory authority (in France, the CNIL).
How we protect it. Encrypted connections, role-based access, two-factor authentication, one-time codes on contract signatures with audit certificates, daily encrypted backups.
When this notice changes, the version above is bumped and you will be asked to read it again.