Política de privacidad / Privacy policy

Proposed version: 2026-10-12. Proposed effective date: 12 October 2026.

Controller and contact

The controller for the platform's own processing is Enric Giribet Usó, Tax ID 47871504V, address: C/Noguera, 16, 08784 Piera, Barcelona, Spain, contact: contact@showinup.com.

ShowInUp acts as an independent controller for the account, authentication, security and general operation of the platform. The organising club acts as controller for data it uses to decide on and manage its event. Where ShowInUp processes event data exclusively under the club's documented instructions, it acts as processor under the applicable data processing agreement. Each party must use data only for its own legitimate purposes.

Data and purposes

We process account and identification data (display name, email, protected credentials, role, verifications and legal acceptance); exhibitor data; dog data (including identification, registrations, pedigree, photos and supplied documents); registrations, classes, event days, amounts, status, results and communications; organisation, board-member, judge and authorised-staff data; and technical session and security data.

They are used to create and protect accounts, provide the platform, manage dogs and registrations, enable organisations to manage events, process payments, send confirmations, catalogues, bibs or schedules, maintain records and handle incidents, legal obligations and security.

The legal bases are performance of the relationship requested by the user to create and use an account, register for and manage an event; compliance with applicable legal obligations, in particular those linked to payments and records; and ShowInUp's legitimate interest in protecting security, preventing fraud, resolving incidents and maintaining the service. Where an activity requires consent under applicable law, it will be requested separately.

Recipients and providers

Data needed for an event is shared with its responsible organisation. The following providers are used: Render to host the API and PostgreSQL in Frankfurt, Germany; documents and images are stored in PostgreSQL; Stripe for payments through Stripe Connect; Google where social authentication is used; and Resend to send operational emails.

For payments, Stripe receives the exhibitor's email and registration, event, organisation and amount data. The technical destination-charge configuration can make registration information and the exhibitor's email visible to the organisation's connected Stripe account. ShowInUp does not store the full card details entered in Stripe Checkout.

Although the API and PostgreSQL are hosted in Frankfurt, Germany, providers may process data from locations outside the European Economic Area. Render publishes a data processing addendum and a list of subprocessors; Stripe, Resend and Google publish their own policies. Up-to-date information about locations and applicable mechanisms can be found in those policies and requested through the contact email.

Retention and rights

Data is kept while the account or service remains active and afterwards for the period necessary to meet liabilities, claims, legal obligations, security needs and, where appropriate, the event record. Dog documents can be deleted by the user; data incorporated into a registration, payment, result or audit record may be retained while necessary for those purposes. This policy does not set one numerical retention period because it depends on the data type and applicable obligation.

You may request access, rectification, erasure, objection, restriction, portability or withdrawal of consent where applicable at contact@showinup.com. You may also complain to the Spanish Data Protection Agency. Sufficient information may be requested to verify identity.