Policy and Privacy

Data controller and categories of processed data

Participation in the event involves the processing of the participant’s personal data such as: name, gender, e-mail address, phone number and image via photographs and videos taken during the event.

Health related data may also be processed (data on pathologies obtained from the medical certificate or declared directly by the participant, data related to Covid-19), and it is strictly for the purpose of registering and participating in the event. In such cases, the consent of the interested parties is required to participate in the event and failure to do so precludes participation. The data processor is the Organizer: SC MATHENA SRL

Purposes and conditions of processing

The use of personal data indicated above is inherent to the sporting and public nature of the event, its organizational needs and the provision of services offered to the participant.

The organizer uses and processes data, including through its technical and service partners and related companies, for the following purposes: registering for the competition, drawing up the list of participants, conducting the competition, forming the ranking, publishing the results and all activities related to the organization and advertising of the event, including sending notifications to participants.

In addition to the purposes mentioned above, the Organizer may also share the data with the partners of the event.

The preconditions for processing are, therefore, constituted by the organization and conduct of the sports event, registration of participants, by the consent of the interested parties, by pursuing the legitimate interest of the Organizer and its commercial partners and by any other fulfillment imposed by law or to protect the right to life of the participant.

The organizer once again draws attention to the participant, so it is undeniable that during the competition, videos and photos will be taken based on art. 14 of the Regulation and for the purposes described in detail. The authorization to use their image in the context of the competition is a necessary requirement to participate in the event itself: therefore, not authorizing the use of their image for the purposes mentioned above, as stipulated in art 14 of the Regulation, implies the participant will not be able to enroll in the competition.

Communication and dissemination of data

The organizer informs the participant that the event is organized and managed by its own operators, technical-IT managers, platforms and with the support of sponsors. Some of these services may require interested parties (participants) to register on the partner’s platform and in such cases, the data processing and communication is managed by the partner as an independent data controller; in such cases, the interested party is invited to carefully read the privacy information provided by the partner. The participants can request the Organized to share the list of partners and sponsors at any time.

Given the public nature and purpose of the event, the participant also acknowledges and accepts that data related to their image, results or competition position in real time, may be made publicly accessible by dissemination by the Organizer, sponsors and service partners of the event and /or communicated to third parties for reporting, documentation and advertising purposes.

Consent for image use

With the specific and free consent of the interested party, the Organizer can use the footage that includes their image for advertising the event and other events organized by the Organizer (Processing for marketing purposes).

By registering for the event, the participant shares with the Organizer their e-mail address, which can be used by the Organizer without the prior consent of the participant, to send them notifications related to the event, future events or related to the sponsors’ products. The organizer has the right to send notifications from the sponsors to the e-mail address of the participant, without asking for the prior consent of the registered competitor.

Data Retention and Data Processors

The participant’s data will be stored in the Organizer’s computer archives and protected by appropriate security measures, in accordance with the provisions of article 32 of EU Regulation 2016/679. The data will be kept for the required duration in relation to the purposes for which they were collected and possibly for an additional period of time if data retention is necessary for the protection of a right of the Organizer or a third party.

Transfer of data outside the EU

In the case of international data transfers starting from the European Economic Area

(EEA), where the European Commission has recognized that a non-EEA country is able to guarantee an adequate level of data protection, the data of the interested party may be transferred on this basis. For transfers to non-EEA countries whose level of protection has not been recognized by European Commission, the Organizer will rely on a derogation applicable to the specific situation or will implement one of the following measures to ensure the protection of your data: standard contractual clauses approved by the European Commission; binding corporate rules

where applicable. To obtain a copy of these measures or details of where they are available, you may submit a written request as indicated in the following article.

Rights of the interested party

At any time, the participant can exercise, pursuant to articles 15-22 of EU Regulation

2016/679, the right to:

• to obtain information related to the processing of personal data and a copy of such data;
• obtain information about the purposes of the processing, the categories of personal data, the recipients or the categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
• obtain cancellation or correction of data;
• get the limitation of data processing without them being deleted;
• achieve data portability, i.e. receive it from the data controller in a structured, commonly used and machine-readable format; and transmit them to another data operator without hindrance;
• opposes data processing, except in cases where there are compelling reasons for

which the Organizer’s interest prevails over its rights (this is the case, for example, if the processing is necessary to defend a right of the Organizer in court);

• oppose an automated decision-making process regarding natural persons, including profiling;
• request the data operator to access the personal data and correct or cancel them or limit their processing or oppose their processing, in addition to the right to data portability;
• withdraw the consent at any time, without prejudice to the legality of the processing based on the consent given prior to the revocation;
• submit a complaint to the supervisory authority for the protection of personal data.

The participant can exercise his rights through a written request that will be sent to the e-mail address: office@romanianshowdown.com