Privacy Policy

1. Who we are

Data controller: AKIHO EUROPE

Contact: info@akitainu-hozonkai.eu

If you have questions about this policy or wish to exercise your rights, please contact us using the details above.

2. What personal data we process

Depending on how you use AKIHO+, we may process the following categories of personal data.

Account and identity data

• name and email address;
• authentication identifiers and account status;
• linked sign-in method or identity provider;
• passkey credential metadata necessary for authentication; and
• account creation, login and security-event timestamps.

AKIHO+ does not store the private cryptographic key used by your passkey. That key remains protected by your device or credential provider.

Membership and organisational data

• AKIHO membership number and membership or affiliation information;
• country, club, branch or organisational relationship;
• administrative or organisational role;
• permissions, grants and access status; and
• records of approvals, submissions or administrative actions.

Registry, pedigree and dog-related data

Dog and pedigree records may be associated with identifiable people such as owners, breeders or submitters. Relevant data may include owner or breeder names, membership or contact references, dog registration information, pedigree and parentage information, kennel information, supporting documents, record history, corrections and publication status.

Exhibition and event data

Where AKIHO+ is used for exhibitions or related activities, data may include exhibitor and owner details, dog entries, judging and result information, catalogue information, administrative notes, documents, confirmations and communications relating to participation.

Communications and technical data

We may process messages, documents and submissions you provide, as well as IP address, browser and device information, timestamps, authentication events, session and token metadata, security and error logs, audit records and information used to detect malicious or automated activity.

3. Why we use personal data and legal bases

We process personal data for purposes including:

• providing and securing access to AKIHO+;
• identifying authorised users and applying access permissions;
• administering membership-linked and organisational functions;
• maintaining registry, pedigree and exhibition records;
• processing submissions, corrections and approvals;
• preserving provenance and audit history;
• responding to enquiries and sending account, security or administrative communications;
• preventing fraud, misuse, unauthorised access and automated abuse;
• maintaining service reliability and troubleshooting;
• complying with legal obligations; and
• establishing, exercising or defending legal claims where necessary.

Depending on the activity, we rely on one or more legal bases under applicable data-protection law, including contract necessity, legal obligation, legitimate interests, and consent where consent is specifically required.

4. Authentication

Email sign-in

If you use passwordless email sign-in, your email address and authentication request are processed so that a one-time sign-in link or verification message can be sent to you.

Passkeys

If you register or use a passkey, AKIHO+ processes the public-key credential information required to recognise and verify that credential. The private key remains controlled by your device or passkey provider.

Google or Apple sign-in

Where social sign-in is enabled and you choose to use it, the relevant provider may process information under its own privacy terms. AKIHO+ receives the identity information needed to authenticate or link an authorised account, such as an account identifier and email address where supplied.

5. Cloudflare Turnstile

AKIHO+ uses Cloudflare Turnstile to protect authentication functions against automated abuse and malicious bot traffic.

Turnstile may process technical signals such as your IP address, TLS fingerprint, browser user-agent, site key and associated site origin for the purpose of distinguishing legitimate users from automated traffic and protecting the Service.

AKIHO+ uses Turnstile in Invisible mode, so verification normally runs in the background without presenting a visible CAPTCHA challenge.

For additional information, see Cloudflare's Turnstile Privacy Addendum.

6. Who we share data with

We may share personal data with service providers who help us operate AKIHO+, professional advisers where necessary, participating AKIHO bodies where relevant to the underlying activity, and public authorities where required by law. We do not sell personal data.

Current AKIHO+ infrastructure includes Supabase for authentication and backend services, Cloudflare for application infrastructure and Turnstile security, and Resend for transactional email delivery. Google and Apple may process data when you choose their sign-in methods.

7. International transfers

If service providers process personal data outside the European Economic Area, AKIHO Europe uses appropriate safeguards where required, which may include adequacy decisions, standard contractual clauses or another recognised transfer mechanism.

8. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, including operation of AKIHO+, administration of AKIHO-related records, legal compliance, security, dispute resolution and appropriate historical or audit purposes.

Registry, pedigree, exhibition, membership or organisational records may have a longer legitimate archival or institutional purpose than transient authentication or security logs. More precise retention periods will be maintained as the production systems and applicable obligations are finalised.

9. Record visibility and publication

AKIHO+ distinguishes between access to a record and public publication of a record. Personal data or linked records may be visible only to particular authorised users, such as the person concerned, an owner, a connected club or branch, AKIHO Europe, AKIHO Headquarters or another authorised official.

Other information may be published where there is an appropriate legal and institutional basis, for example as part of an exhibition catalogue, published result or public registry function. Provisional or pending records may remain restricted until the relevant workflow is complete.

10. Data received from authorised sources

Some information in AKIHO+ may be received from Akita Inu Hozonkai Headquarters, AKIHO Europe, another authorised AKIHO club or branch, an event organiser, member, owner, breeder, exhibitor, judge or administrator.

Where another AKIHO body is responsible for the underlying activity or source record, that body may also have responsibilities under applicable data-protection law.

11. Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Measures may include passwordless authentication and passkeys, email confirmation and secure account-change controls, bot protection, access controls, secure session handling, audit logging, HTTPS, restricted administrative access and monitoring.

No online service can guarantee absolute security. Users should protect their devices, email accounts and authentication methods and report suspected compromise promptly.

12. Your rights

Where applicable, you may have rights including access, rectification, deletion, restriction, objection, data portability, withdrawal of consent where processing is based on consent, and the right to lodge a complaint with the relevant supervisory authority.

These rights are not absolute. For example, deletion may not be available where information must be retained to comply with law, preserve an authoritative institutional record, establish legal claims or protect the integrity of registry or audit history.

13. Children

AKIHO+ is intended for authorised AKIHO-related use and is not designed as a general online service directed at children. If a specific AKIHO activity requires processing personal data relating to a minor, that processing will be handled in accordance with applicable law and the rules governing that activity.

14. Automated decision-making

AKIHO+ does not use Turnstile or other security checks to make legal or similarly significant decisions about users. Turnstile is used to detect and block suspected automated abuse.

15. Changes to this Privacy Policy

We may update this Privacy Policy as AKIHO+ develops, as providers or processing activities change, or as legal requirements evolve. The current version will be published through AKIHO+ with an effective date. Where required by law, we will provide notice of material changes.

16. Contact

Questions about this policy or privacy requests may be sent to info@akitainu-hozonkai.eu. We may need to verify your identity before acting on a request, particularly where it concerns restricted membership, registry or account information.