Legal
Privacy
This privacy policy informs you, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Italian data protection law (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018), about the processing of your personal data in connection with the „Dolomites Last Loop“ event.
1. Data Controller
The controller within the meaning of the GDPR is:
- Amateursportverein Sport OK Toblach
- Seeweg 16, 39034 Dobbiaco/Toblach (BZ), Italy
- Codice Fiscale: 01483970214
- Email (data protection): info@worldcup-dobbiaco.it
2. Registration data
To run the event we process the data collected in the registration form. This processing is purpose-bound and necessary for performance of the contract as well as for the organisation and safety of the race (Art. 6(1)(b) GDPR).
- Full name
- Tax number (Codice Fiscale)
- Place and date of birth
- Phone number
- Emergency contact (name and phone number)
- Medical / sports-medical certificate (health data – see section 3)
3. Health data – medical certificate
The medical / sports-medical certificate you upload contains health data and therefore a special category of personal data.
Health data are a special category of personal data within the meaning of Art. 9 GDPR. We process your certificate solely on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give during registration, and to protect vital interests during the race. The data are treated confidentially, stored in a private, access-restricted storage, and kept only for as long as necessary to run the event safely. You may withdraw your consent at any time with effect for the future.
4. Payment data (Stripe)
Payment of the entry fee is processed via Stripe Payments Europe, Ltd. The data required for payment (e.g. card details) are collected and processed directly by Stripe; we do not receive full payment-instrument data. In this respect Stripe acts as an independent controller.
For more information see Stripe’s privacy policy: https://stripe.com/privacy
5. Newsletter
If you sign up for our newsletter, we process your email address and name on the basis of your consent (Art. 6(1)(a) GDPR). Sending uses a double opt-in procedure. You can unsubscribe at any time via the unsubscribe link in every email or by contacting us.
For sending the newsletter we use [NEWSLETTER-TOOL AUSFÜLLEN] as a processor.
6. Technical data and service providers
When you access the website, technically necessary data (e.g. IP address, date/time, requested page) are processed to provide the website securely and reliably (Art. 6(1)(f) GDPR).
- Hosting: Vercel Inc. – delivery of the website (server location in the EU where available).
- Database/storage: Supabase – storage of participant and registration data.
- No Google Analytics or comparable tracking tools are used.
7. Retention period
We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Participant data are kept until [SPEICHERDAUER AUSFÜLLEN] after the event and then deleted or anonymised. Health data (certificate) are deleted without undue delay after the event as soon as they are no longer needed.
8. Your rights
With regard to your personal data you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to object (Art. 21 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw a given consent with effect for the future (Art. 7(3) GDPR)
To exercise your rights, contact: info@worldcup-dobbiaco.it
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. In Italy the competent authority is the Garante per la protezione dei dati personali (https://www.garanteprivacy.it).
10. Photos and videos (image rights)
Photos and videos are taken during the event. With your consent at registration, these images may be used by the organiser (Sport OK Toblach) for event coverage as well as for marketing and advertising purposes (website, social media, print).
Consent is voluntary and can be withdrawn at any time with effect for the future ([PRIVACY EMAIL TO BE FILLED IN]). Withdrawal does not affect the lawfulness of processing carried out beforehand; images already published may not need to be withdrawn where this is impossible or involves disproportionate effort.