Cookie policy

3.1 Essential Cookies
Essential cookies are strictly necessary for the Site to function. They enable authentication, session management, security, and load balancing. Without them, services you have requested cannot be provided.

Legal basis: These cookies are used because they are reasonably necessary to provide requested Site functionality, maintain security, authenticate users, and operate the Site. Where applicable, processing is based on contractual necessity, our legitimate interests, or another lawful basis recognized by applicable law.
Consent required: No. These cookies are placed without your prior consent because they are required for the Site to operate.
Retention: Session cookies expire when you close your browser. Persistent essential cookies last for the period reasonably necessary for their stated purposes, generally no longer than 12 months unless a longer period is reasonably necessary and disclosed.

3.2 Analytics Cookies
Analytics cookies collect information about how visitors use the Site — pages visited, time spent, errors encountered, and navigation paths. This data is used in aggregate to improve the Site’s performance and content.

Provider: Google LLC (Google Analytics 4).
Legal basis: We obtain your consent before placing analytics cookies through our cookie-preference mechanism. This consent requirement reflects our chosen privacy and cookie-management practices and is not intended to represent that the VCDPA independently requires affirmative consent for every analytics cookie.
Consent required: Yes. These cookies are not placed until you accept them via the cookie banner.
Retention: Persistent analytics cookies last up to 12 months.

3.3 Advertising / Targeting Cookies (Currently Inactive)
It is important for us to know when and how often you visit our Site, and which parts of it you have used (including which pages you have visited and which links you have visited). As with Analytics Cookies, this information helps us to better understand you and, in turn, to make our Site and advertising more relevant to your interests. Some information gathered by targeting cookies may also be shared with third parties.

Legal basis (if activated): We will provide any consent or opt-out mechanism required by applicable law.
Consent required: Any affirmative-consent requirement will depend on the applicable law, the nature of the processing, and our then-current privacy practices.

The following cookies are currently in use or reserved for use on the Site. Specific cookie names and the GA4 tracking ID will be inserted upon completion of technical configuration.

Session Authentication Cookie — Provider: Áthlima Sport — Purpose: Maintains your logged-in session — Expiry: Session

_ga — Provider: Google LLC (GA4) — Purpose: Distinguishes unique users — Expiry: 24 months

None currently active.

5.1 Google Analytics

We use Google Analytics 4, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google may process information collected through Google Analytics in accordance with the applicable Google terms, configuration, and contractual relationship. The precise legal role of Google for each processing activity will depend on the applicable service terms and configuration. Google’s processing is governed by Google’s Privacy Policy, available at https://policies.google.com/privacy.
You may opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-Out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.
We have enabled IP anonymization in our GA4 configuration. We configure Google Analytics to limit data sharing and advertising-related use as described in our Google Analytics account settings and applicable Google terms. The statements concerning IP handling, data sharing, advertising features, and Google's role will be maintained only to the extent they accurately reflect our current GA4 configuration and contractual arrangements.

We use Stripe to process payments for our website and to support payment transactions and related security and functionality. Stripe may process personal data and may use cookies or similar technologies depending on how Stripe payment services are implemented on the Site.
The specific Stripe cookies or similar technologies, if any, will be identified in the Cookie Inventory above after verification of the production payment flow. Payment processing practices are also described in our Privacy Policy.

We do not currently use any third-party advertising or remarketing networks. No cookies from ad networks, demand-side platforms, or social media advertising pixels are placed on the Site. If this changes, we will update this policy and implement the applicable consent and/or opt-out mechanisms required by law and our privacy practices before or when the applicable technologies are activated.

When you first visit the Site, a cookie banner is displayed before any non-essential cookies are placed. By giving your consent to the placing of cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of cookies unless those cookies are strictly necessary; however certain features of our site may not function fully or as intended. You will be given the opportunity to allow and/or deny different categories of cookies that we use.
No analytics or advertising cookies are loaded until you accept all cookies. Your choice is recorded with a timestamp and stored in a preference cookie for up to 12 months. After 12 months, the banner will reappear to renew your consent, where renewal is appropriate under our cookie-management practices or applicable law.
The banner does not use design patterns that obscure the reject option or make acceptance easier than rejection.The following cookies are currently in use or reserved for use on the Site. Specific cookie names and the GA4 tracking ID will be inserted upon completion of technical configuration.

You may review or change your cookie preferences at any time through any of the following:

First-visit banner: Displayed to new visitors and to returning visitors whose consent has expired.

Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. After withdrawal, non-essential cookies already on your device will be deleted or suppressed at the next page load or as otherwise technically feasible.
You may also delete cookies directly through your browser settings. Note that deleting essential cookies may impair Site functionality. Browser-level instructions are available from your browser provider.

Under the applicable law, you may have the right to opt out of the processing of your personal data for purposes of targeted advertising or the sale of personal data, Pursuant to Virginia Code § 59.1-577(A)(5) of the VCDPA, Virginia residents have the right to opt out of the processing of their personal data for targeted advertising or the sale of personal data; and, where applicable, profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer. These statutory opt-out rights are distinct from our voluntary cookie-preference mechanism for analytics cookies.
How to opt out:

On-site: Click “Cookie Preferences” in the cookie banner, in your logged-in profile privacy settings, or on this page, and select “Reject All” or “Accept Individual Cookies” to select which cookies to opt out.
By email: Send a written opt-out request to privacy@athlimasport.org. Include your name and the email address associated with your account (if any). We will process your request within 45 days of receipt. If we require an extension, we will notify you within the initial 45-day period and complete processing within 90 days total. 

Because we do not currently use advertising cookies or sell personal data collected through cookies, the practical effect of an opt-out is limited to analytics cookies. We will honor all opt-out requests regardless.

We are aware that some browsers and browser extensions transmit a Global Privacy Control (GPC) signal indicating a user’s preference to opt out of the sale or sharing of personal data. The Site does not currently process GPC signals automatically. If your browser sends a GPC signal, it will not be recognized as an opt-out by our systems.
To exercise your opt-out rights, please use the “Cookie Preferences” link or submit an email request as described in Section 9. We will reassess our GPC handling as applicable law and technical standards develop. Nothing in this section limits any statutory opt-out right otherwise available to a consumer under applicable law.

Session cookies: Deleted when you close your browser.
Persistent cookies: Retained for up to 12 months from the date of placement, unless you delete them earlier.
Opt-out preference records: Retained for 24 months from the date of your opt-out request, to document compliance.
Analytics data: Governed by our Google Analytics configuration; we have set the data retention period in GA4 to [To be completed] months. See Google’s data retention documentation for further detail.
Retention periods are set to the minimum necessary for the stated purpose, under applicable law. 

The Site and services are intended for users aged 13 and older. We do not knowingly collect personal data from children under 13 through cookies or any other means. If we learn that we have inadvertently collected data from a child under 13, we will delete it promptly (15 U.S.C. § 6501 (COPPA).
If you believe a minor has provided personal data through the Site, contact us at privacy@athlimasport.org.

If you are a Virginia resident, you have the following rights with respect to personal data we process, including data collected through cookies: 

Access: Confirm whether we process your personal data and obtain a copy.
Correction: Request correction of inaccurate personal data.
Deletion: Request deletion of personal data we hold about you.
Opt-out: Opt-out of targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects.
Portability: Receive a copy of your personal data in a portable format.
How to submit a request: Email privacy@athlimasport.org with your name, the email address associated with your account (if any), and a description of your request. We will respond within 45 days. If we require additional time, we will notify you within the initial 45-day period and complete the response within 90 days total. 
Appeal: If we deny your request, you may appeal by emailing privacy@athlimasport.org with the subject line “Privacy Rights Appeal” within 30 days of receiving our denial. We will respond to your appeal within 60 days. If your appeal is denied, you may submit a complaint to the Virginia Attorney General at https://www.oag.state.va.us.

We will not discriminate against you for exercising any of these rights.

We may alter this Cookie Policy at any time. Any such changes will become binding on you on your first use of Our Site after the changes have been made. You are therefore advised to check this page from time to time. In the event of any conflict between the current version of this Cookie Policy and any previous version(s), the provisions current and in effect shall prevail unless it is expressly stated otherwise.

For questions, complaints, or requests regarding this Cookie Policy or our cookie practices, contact:
Paul R. Shaw, Managing Member
Áthlima Sport
107 S West Street #537
Alexandria, VA 22314
Email: privacy@athlimasport.org
We aim to respond to all inquiries within 10 business days. Formal opt-out and rights requests are subject to the 45-day response period described in Sections 9 and 13.