Responsible

Organizer (see Conditions of Participation)

 

Contact details of the data protection officer

Mr. Reichert, e:los GmbH, datenschutz@elos-net.de

 

Purposes of data processing

(1) When registering, personal data of the participants (including name, first name, gender, e-mail address, telephone number, address, age/date of birth, possibly t-shirt or hoodie size) is collected. This data is used to process participation in the runs. This also includes any medical care of the participants during the event.

(2) In addition, the participant will be informed by e-mail about refreshment points, opening times and other relevant details. This is done via the organizer's newsletter.

(3) After the event, finisher lists will be made available by the organizer on the internet and in other media relevant to the event.

(4) The photos, film recordings and interviews of the participant, the teams and the partners made in connection with the participation in the event can be used by the organizer and the partners (sponsors) of the event without entitlement to remuneration for press releases, PR, advertising and distributed and published for commercial purposes. 

(5) Photos are also processed by our service provider Sportograf and made available to the participants and the organizer. 

(6) As part of the starting documents issue, which is partly carried out by SportScheck GmbH (located in building 6407 Rupert-Mayer-Str. 44, 81379 Munich), data that was previously specified on the ticket will be used for check-in made accessible to staff of SportScheck GmbH. All data are not stored by SportScheck  and can only be viewed on devices provided by Megamarsch.  

 

Legal basis for processing your data

(7) The legal basis for the processing of your data under 1, 2, 4, 5 is the conclusion of a participation contract in one of our events (Art. 6 Para. 1b DS-GVO)

(8) The legal basis for the data mentioned under 3 is the legitimate interest of the organizer according to Art. 6 Para. 1f DS-GVO. The legitimate interest consists in informing the public and other participants about the runs and in publicizing the event.

(9) The legal basis for the data mentioned under 5 is also the legitimate economic interest of the service provider in marketing the photos or videos of the event to interested participants via the website www.sportograf.com.

 

Other parties involved in data processing

When organizing and conducting the runs, we work closely with the following partners, who receive the necessary data from us to carry out their activities.

 

Processing of registration and payment for the events – 

Eventbrite, Inc. 535 Mission Street, 8th Floor San Francisco, CA 94105 United States 

 

Event photography - Sportograf Digital Solutions GmbH, Süsterfeldstrasse 170, 52072 Aachen

 

Sportograf 

 

At our event - in part - the Sportograf Digital Solutions GmbH (web: www.sportograf.com) as a media partner and exclusive photo service provider.

 

If you take part in an event where Sportograf has been commissioned by the client as the exclusive photo service, Sportograf may collect video or image material on which you can be identified personally, possibly with your event participant number (e.g. starting number).

 

Sportograf uses the data collected at the sporting events to fulfill its obligation as a photo service provider from the underlying contract with the client and in its own economic interest to send the photos or videos of the event to interested participants via the website www.sportograf.com market. Due to Sportograf's many years of experience in the field of event photography, Sportograf can state that the participants in the sporting events are transparently informed that Sportograf is used as the exclusive photo service provider and that every participant in such an event must reckon with the fact that the client or his Cooperation partners marketed photos of such events as memories or souvenirs. Your data will not be passed on to third parties. To capture the corresponding photos, Sportograf only uses photographers who have committed you to data protection under the EU General Data Protection Regulation. 

 

The legal basis is Sportograf's aforementioned legitimate interests under Article 6 (1) (f) GDPR. You can object to this processing.

 

You can find more information about the handling of this personal data and your right of objection in the data protection declaration on www.sportograf.com/de/privacy

 

Revocation of granted consent

If the processing of your data is based on your consent, you can revoke this at any time with effect for the future. It is not necessary to give reasons for this. 

 

How long is your data stored? 

The participant data will be kept for as long as they are required for the purpose collected or in accordance with the legal requirements.  

 

Right to information, correction, deletion, etc. 

You are entitled to so-called data subject rights, ie rights that you can exercise. They result from the EU General Data Protection Regulation (GDPR), which also applies in Germany:

 

Right to information, Art. 15 GDPR

You have the right to information about your stored personal data.

 

Right to rectification, Art. 16 GDPR

If you find that inaccurate personal data is being processed, you can request rectification. 

 

Right to erasure, Art. 17 GDPR

You have the right to request the deletion of your data, provided that there are no legal retention periods to the contrary.

 

Right to restriction of processing, Art. 18 GDPR

You have the right to restrict the processing of your data. This means that while your data will not be erased, it will be marked to restrict further processing or use.

 

Right to data portability according to Art. 20 GDPR

Under certain conditions, you have the right to receive your data in a structured, machine-readable format.

 

Right to object according to Art. 21 DS-GVO

You have the right to object to data processing.

 

third country transfer

The service provider Eventbrite is based in the USA. A level of data protection applies there that may not correspond to the level within the EEA. Only the necessary data is processed by Eventbrite. We have agreed the standard data protection clauses with the service provider. In addition, as part of data minimization in accordance with Article 5 (1) (c) GDPR, we ensure that only the necessary data is processed and that it can be deleted after the purpose no longer applies. 

 

Legal basis Art. 49 (1) lit. b,c GDPR

 

Obligation to provide data

Participation is not possible without providing personal data.

 

Automated Decision Making

Does not take place.

 

Data Source

We collect the data from you ourselves and also receive data from our service providers.

 

Complaint to the supervisory authority about data protection violations

You have the right to complain to the competent supervisory authority if you believe that your data is being processed inadmissibly. In such a case, we ask that you speak to us in advance so that we can clarify the matter. 

 

The competent supervisory authority is:

State Commissioner for Data Protection and Freedom of Information

North Rhine-Westphalia

P.O. Box 20 04 44

40102 Dusseldorf

Phone: 0211/38424-0

Fax: 0211/38424-10

Email: poststelle@ldi.nrw.de