Crazy Legs Events are committed to protecting and respecting your privacy. Any references to “we”, “our” and “us” in this Privacy Notice are references to Crazy Legs Events. We are a controller of your personal data under applicable data protection laws, including from 25th May 2018, the General Data Protection Regulation (“GDPR”). We, as a controller, determine why and how we collect and use your personal data.
When you enter one of our events or otherwise interact with us, we collect information about you which constitutes personal data under the GDPR. This Privacy Notice explains how we collect, use, share and protect your personal data. Please read this Privacy Notice carefully to understand what we do with your personal data. We may change this Privacy Notice from time to time and if we make any material changes then we will make the updated Privacy Notice available to you on our website or by other means. The date at the top of this Privacy Notice indicates from when this Privacy Notice applies.
We collect and process personal data about individuals who enter or interact with us about our events (collectively “you”)
We collect from you personal data such as;
We do not collect payment details, this data is collected and processed by a third party payment processor.
If you are entering details on behalf of a child for whom you are a parent or guardian then the child has the same rights through this notice as an adult and you are giving your consent for the processing the child’s personal data in line with the terms of this Privacy Notice.
We may collect your personal data when you;
This notice forms part of the terms and conditions for event entry and by entering an event we organise or provide services for, or by interacting with us as above you agree to the terms of this notice.
We collect information about you from the following third parties;
Third parties from whom we collect data about you will have their own privacy notices for which we have no responsibility or liability.
If we ask you to provide us with your personal data for an event to protect your vital interest, or to allow us to enter into a contract with you, we will advise you in the entry form whether you are obliged to provide personal data or whether it is voluntary. If you do not provide us with data that you are obliged to provide we may reject or delay the processing of your event entry.
We share your personal data with the following in the form of event results;
Event results will normally be limited to;
Personal data that we share with third parties is subject to their privacy policies for which we have no responsibility or liability.
We may disclose your personal data to Emergency Services if necessary or to other authorities where we are legally obliged to do so or in our reasonable opinion such disclosure is necessary to comply with applicable laws and legal processes, support an investigation or to protect our rights and interests.
We may publicly share images of people and events to promote the event on social media and/or on our website. Where we share images individuals may be identified by referencing the results.
We will not share images where we have been specifically requested not to do so or where we are aware we may cause embarrassment or offense.
We will not transfer your data outside of the European Economic Area.
To protect the security of your personal data, we implement appropriate technical and organisational security measures which include physical and technical security safeguards with appropriate policies and procedures.
We may retain your personal data as long as it remains necessary in relation to the purposes we collected the information for. When determining the appropriate retention period we consider the risks of the processing, our contractual, legal and regulatory obligations, our data retention periods and our legitimate business interests.
Any personal data with the exception of event result data (name, club/team, age category, time and position) and financial transaction data will be deleted or destroyed within three years of the event for which it was collected. Financial transaction data will be deleted or destroyed within eight years of the financial transaction – this data only includes the amount and source of the payment, not the payment means.
Subject to the conditions prescribed in applicable laws, you have the right;
You can exercise these rights by contacting us using the contact details below.
If you have any questions or concerns about our use of your personal data please contact us via e-mail at firstname.lastname@example.org
Here you can download a copy of our Crazy Legs Events Data Protection Policy.