PRIVACY POLICY

1. Purpose and Scope of Application

This Privacy Policy governs the processing of personal data provided in connection with registration for and participation in the BARCELONA FIREFIGHTERS RACE (the “Event”), as well as the processing related to its organization, security, timing, rankings, communications, audiovisual coverage, and—when authorized by the data subject—promotional activities and commercial communications.

This policy applies to participants and, where applicable, to their legal representatives, accompanying persons, volunteers, and other users of the channels designated for the Event.

2. Data Controller

  • • Data controller: RELAY EVENTS, S.L. - SPORT LIFE IBERICA, S.A. - PRENSA IBERICA 360, S.L., temporary joint venture, Law 18/82 of May 28
  • • Tax ID Number: U88709142
  • • Address: Ronda General Mitre, No. 93, 3-1B, 08022 Barcelona

  • • Data Protection Officer:
  • • Joint Organization / Joint Venture: Relay Events, S.L., Sport Life Ibérica, S.A., Prensa Ibérica 360, S.L.

3. Personal Data Processed

  • • Identification and contact information: first name, last name, identification number (if necessary), date of birth, address, phone number, and email address.
  • • Registration information: event type, category, bib number, club or team, shirt size, expected finish time, credentials, and any other information needed to process your participation.
  • • Financial and transaction data: information related to payment, billing, refunds, and receipts. Full card details will be processed by the payment provider, not by the organizer, unless expressly stated otherwise.
  • • Sports data and results: times, checkpoint times, position, incidents, penalties, withdrawals, and standings.
  • • Images and audio: photographs, audiovisual recordings, and interviews captured during the Event and its related activities.
  • • Strictly necessary health data: allergies, relevant medical conditions, disabilities, or emergency information, only when requested and where there is an appropriate legal basis. This data requires enhanced protection measures.
  • • Information on legal representatives and emergency contacts, where applicable.
  • • Technical data derived from the use of the website or app, in accordance with the Cookie Policy and the settings chosen by the user.

4. Purposes, Legal Bases, and Retention Periods

  • • Personal data will be processed for the following purposes: to manage registration and participation in the Event, including payments, distribution of race bibs, access control, operational communications, incident management, race organization, security management, emergencies, insurance, and claims, as well as compliance with applicable legal obligations. When necessary to ensure the participant’s safety, health data provided by the participant or required in healthcare or emergency situations may be processed, in accordance with the applicable circumstances set forth in Article 9.2 of the GDPR. Legal bases: fulfillment of the registration agreement, compliance with legal obligations, and, where applicable, those set forth in Article 9.2 of the GDPR.
  • • To time the race and publish the results and standings, which may include information such as first and last names, bib number, category, club, time, and finishing position. Legal basis: fulfillment of the registration agreement and legitimate interest arising from the sporting nature of the Event.
  • • Capture and disseminate images of the Event for informational, documentary, and, where appropriate, promotional purposes. General images of the Event will be processed based on the organizer’s legitimate interest, and individual images, interviews, or close-ups will be processed based on the consent of the participant or their legal representative.
  • • To send marketing communications regarding future editions, activities, or services offered by the organizer and, when expressly indicated, to share data with identified sponsors for the purpose of carrying out their own marketing activities. Legal basis: consent and, where legally applicable, legitimate interest arising from a prior relationship. Refusal to give or withdrawal of consent will not affect registration or participation in the Event.
  • • Respond to inquiries, complaints, and requests to exercise rights. Legal basis: compliance with legal obligations and, with respect to general inquiries and complaints, legitimate interest.

The data will be retained for as long as necessary to fulfill the above purposes and, thereafter, for the applicable legal retention and liability periods. Providing the data identified as required is necessary to process the registration and allow participation in the Event.

5. Minors

When a participant is under 14 years of age, consent for processing based on this legal basis must be provided by the person exercising parental authority or guardianship. For participants aged 14 to 17, the minor may consent to the processing of their data in general, without prejudice to any additional authorizations required by the Event regulations, sports regulations, the contract, or the use of their own image.

The person registering a minor certifies that they have sufficient legal capacity or authority to act on the minor’s behalf and that the information provided is accurate. The organizer may request reasonable documentation to verify the minor’s age or the registrant’s authority to act on the minor’s behalf when necessary.

6. Images, Audio, and Audiovisual Coverage

The Event may be photographed or recorded by the organizer, accredited audiovisual service providers, and the media. Image and voice data will be processed for the purposes and on the legal grounds indicated in Section 4; information will be provided prior to registration and through visible signage in the event venues.

  • • General, environmental, or panoramic images may be used to report on the progress of the Event, publish coverage, results, and institutional content.
  • • Close-ups, interviews, or segments focusing on an identifiable person that are used for specific advertising purposes must be subject to separate authorization when necessary.
  • • In the case of minors, enhanced safeguards will be implemented, and any actions that could harm their best interests will be avoided.
  • • Requests for removal will be evaluated based on the context, the legal basis, freedom of information, technical feasibility, and the rights of other affected individuals.

7. Recipients and Suppliers

The data may be disclosed to or made available to the following categories of recipients when necessary:

  • • Companies that are members of the joint venture (UTE), as defined, as applicable, in the joint liability agreement or in the applicable internal regulations.
  • • Registration or ticketing platform, payment gateway, timing service provider, technology services, web hosting, messaging, participant support, insurance, medical services, security, logistics, and audiovisual production, to the extent that they act as necessary service providers for the organization of the Event and, where applicable, as data processors. In particular, the registration or ticketing platform may access and process the personal data necessary to manage registrations on behalf of the data controller, acting as a data processor and in accordance with the data controller’s instructions.
  • • Federations, sports authorities, law enforcement agencies, emergency services, public administrations, and judicial bodies when there is a legal obligation or when it is necessary to protect rights.
  • • The media and the general public with respect to lawfully published data and images.
  • • Identified sponsors, only when the participant has given specific consent and has been provided with the relevant information.

8. International Transfers

Some technology providers or social media platforms may process data outside the European Economic Area. When international transfers occur, the safeguards provided for in the GDPR will apply, such as adequacy decisions, standard contractual clauses, or other valid mechanisms.

9. Rights of Data Subjects

Interested individuals may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, where applicable. They may also withdraw their consent at any time, without this affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise these rights, please send a request to [EMAIL / MAILING ADDRESS], specifying the right you wish to exercise and providing sufficient information to verify your identity. Withdrawing consent for marketing, sharing with sponsors, or promotional use of your image will not result in your removal from the Event if participation can continue to be managed on another legal basis.
If you believe your rights have not been addressed, you may file a complaint with the Spanish Data Protection Agency via www.aepd.es.

10. Security and Confidentiality

The data controller will implement technical and organizational measures appropriate to the risk to protect the data against destruction, loss, alteration, unauthorized disclosure, or unauthorized access. Access will be limited to personnel and vendors who need it for the stated purposes.