PRIVACY POLICY AND PERSONAL DATA ADMINISTRATION

§1 Administrator

The administrator of personal data collected on the roadtosport.com website (the “Service”) is the “Road to Sport” Foundation, headquartered in Wrocław, ul. Nefrytowa 74B, registered in the National Court Register under number 0001050501 (hereinafter referred to as the “Foundation”).

For any matters related to the processing of personal data, please contact us via email at Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser. or in writing at the address: “Road to Sport” Foundation, ul. Nefrytowa 74B, 52-215 Wrocław.

§2 Data Collection

The Foundation processes personal data of individuals interested in participating in events offered by the Foundation and participants of events organized directly by the Foundation, only to the extent necessary, in particular:

a) first and last name,
b) gender,
c) email address,
d) phone number,
e) image.

Personal data of interested individuals and participants are provided to the Organizer after they submit an application, register for an event, or fill out a form on the website.

The Foundation may receive personal data of an interested individual or participant from another person who registers on their behalf, provided that a declaration is made stating that the individual has consented to the processing of their personal data by the Foundation.

§3 Legal Basis for Processing

Data is processed in accordance with EU and national regulations on personal data protection, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

Data will be processed:

a) based on the consent of the interested individual or participant,
b) if the participant's data is necessary to execute a contract to which the participant is a party,
c) when it is necessary to fulfill a legal obligation imposed on the Foundation as the event organizer,
d) based on the legitimate interests pursued by the Foundation.

The transfer of personal data by the Foundation to third parties, such as sponsors or partners of the event or the Foundation, can only occur after obtaining explicit and separate consent from the individual. Providing such consent is voluntary and not required for participation in events promoted or organized by the Foundation.

§4 Purpose of Data Processing

The personal data of the interested individual or participant may be processed for the following purposes:

a) conducting and managing events, including registering teams in the system, organizing sports competitions, preparing start lists, compiling results, and creating informational and promotional materials (including the image of individuals),
b) improving participant services, including post-event satisfaction surveys,
c) conducting future marketing activities related to the Foundation’s activities, products, and services, including direct marketing under the Act of 18 July 2002 on the provision of electronic services. Participants may opt out of receiving marketing messages at any time,
d) sending participants messages related to the management and execution of events as well as website functionality (reminders, system notifications, technical alerts, important announcements), which cannot be opted out of,
e) addressing internal administrative and analytical needs,
f) ensuring security and investigating potential fraud or other violations,
g) establishing, pursuing, and enforcing claims,
h) handling complaints and inquiries.

Personal data provided may be processed for the purposes mentioned in §4.1 under the following circumstances:

– upon consent,
– when the data is necessary for the execution of a contract to which the individual is a party,
– when fulfilling a legal obligation imposed on the Foundation as the event organizer,
– based on the legitimate interests pursued by the Foundation,
– when it is necessary to fulfill a legal obligation imposed on the Foundation.

If the purposes for which personal data is collected change, the Foundation will inform individuals about the need to provide consent for processing the data for new purposes.

§5 Rights of Data Subjects

Individuals providing their personal data have the right to access, correct, rectify, and request deletion of their data. Despite a request for deletion, the Foundation may retain certain personal data to the extent necessary for establishing, pursuing, or defending claims or ensuring security and investigating potential fraud or other violations.

From 25 May 2018, individuals providing their data have the right to:

a) withdraw consent for data processing at any time without affecting the lawfulness of processing carried out before the withdrawal,
b) restrict data processing in the following cases:
– when the individual questions the accuracy of their personal data,
– when, in the individual's opinion, processing is unlawful,
– when the personal data is no longer needed for the Foundation’s purposes but is required by the individual to establish, pursue, or defend claims,
– when the individual objects to data processing by the Foundation.
c) request data portability to another administrator, including a direct transfer of their data by the Foundation to another administrator, if technically feasible,
d) object to data processing, including profiling, if data processing is based on the legitimate interests pursued by the Foundation or a third party,
e) file a complaint with the President of the Personal Data Protection Office if they believe that the Foundation's data processing violates national or EU data protection regulations.

Individuals may request a copy of their personal data, including in a machine-readable format.

The Foundation will respond to requests promptly, no later than 30 days from receipt. For complex or numerous requests, the Foundation will inform individuals of an extension of up to 60 days.

Requests for the above rights can be made:

a) in writing to the Foundation’s address,
b) via email to Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.,
c) through the contact form available on roadtosport.com.

If an individual contacts the Foundation, the Foundation will retain correspondence to facilitate problem resolution.

§6 Data Retention Period

Data will be retained until the necessity for its possession ceases, i.e., until legal obligations expire (including requests from authorities), disputes are resolved, security is maintained, fraud and abuse are prevented, and the applicable agreement is enforced.

If an individual or participant consents to data processing for marketing purposes, the data will be retained until marketing activities cease or the consent is withdrawn.

§7 Consequences of Lack of Consent

Providing personal data is a condition for participating in events organized or promoted by the Foundation. The consequence of not providing mandatory data, refusing consent for personal data processing, or withdrawing consent is exclusion from participation in the event.

Consent for marketing data processing is voluntary and not required for participation in events but is necessary to receive offers regarding event participation.

§8 Data Recipients and Security

Data processed by the Foundation will not be transferred to third countries or international organizations.

Personal data may be disclosed to entities authorized under applicable laws, court orders, or other legal processes, particularly to law enforcement authorities.

The Foundation may disclose personal data if it believes in good faith that disclosure is necessary to:

a) assist investigations or law enforcement authorities,
b) enforce obligations under contracts,
c) conduct investigations and protect against potential claims or third-party allegations,
d) ensure the security or integrity of the website,
e) enforce or protect the rights and safety of the Foundation, its employees, other participants, or others.

The Foundation may entrust data processing to third-party entities that support the operation of the Service, event organization, registration platforms, accounting, legal advisory, or IT services.

The Service implements solutions ensuring a high level of data protection, including SSL certificates and an IT system meeting high data protection standards.

The Foundation is committed to fulfilling obligations under applicable EU and national data protection regulations.

§9 Liability Disclaimer

All financial transactions will be conducted by external entities providing such services. These external entities have their own privacy policies, which should be reviewed before confirming any transaction.

The Foundation is not responsible for the content or activities of redirected websites accessed via links on its pages, and such external websites have their own independent privacy policies.

§10 Cookies

Cookies are IT data stored on devices used to browse the Foundation’s website, sent by the website when visited. They allow the website to recognize an individual, enabling pages to be displayed according to their preferences, optimizing the website experience.

Cookies do not allow personal identification. The data collected through cookies is used only to perform certain functions for the individual and is protected from unauthorized access.

Information collected through cookies is used to enhance the convenience of visitors to the Service and improve the overall quality of the services provided.

Standard browser settings allow cookies to be stored on users’ devices.

Modifications to these default settings, including methods and possibilities of managing cookies, can be made in the settings of the individual’s browser.

Restricting the use of cookies may affect the availability of certain functionalities of the roadtosport.com website.

§11 Final Provisions

This Privacy Policy applies when an individual interested in participation or a participant uses or expresses interest in using the Foundation's services.

The Foundation may amend or supplement this Privacy Policy as needed.

If any provision of this Privacy Policy is deemed invalid by a final court ruling, the remaining provisions will remain in force.

This Privacy Policy is governed by and will be interpreted in accordance with Polish law.