Privacy
PRIVACY NOTICE – SOUGLIANI TRAIL
1. Data controller
The organiser of Sougliani Trail is the controller of the personal data processed for race registrations and event administration. For questions about your personal data, you may contact the organiser through the website's Contact page.
2. Personal data we collect
When you register for a race, we may collect information such as your first and last name, date of birth, telephone number, email address, selected race, answers submitted through the registration form, selected products or benefits, payment method and payment status information, and the consent or publication choices you make. We do not request your medical records or medical test results. Your declaration that you are fit to participate forms part of the participation terms.
3. Why we use your data
We use personal data to:
• receive, process and manage your race registration,
• communicate with you about the event,
• administer payments, products, benefits and collection arrangements,
• prepare participant lists, results and statistics where permitted,
• secure and operate the website and the event,
• comply with legal, tax, accounting or regulatory obligations,
• establish, exercise or defend legal claims.
4. Legal basis
Depending on the processing activity, we rely on performance of your participation arrangement and steps taken at your request before participation, compliance with legal obligations, the organiser's legitimate interests in safely and efficiently operating the event and, where required, your consent. Where processing is based on consent, you may withdraw that consent for the future at any time without affecting processing that was lawful before the withdrawal.
5. Public lists, photographs and video
Where the relevant option is available, your first and last name are shown on a public participant list only in accordance with the publication choice you make and the event rules. Photographs and audiovisual material may be created during the event. Such material is used in accordance with the participation terms and applicable law, and where consent is required the corresponding withdrawal rules apply.
6. Recipients
Access may be provided only where necessary for the event, including authorised organisers or staff, hosting and technical service providers, email service providers, payment providers, accountants or legal advisers, and public authorities where disclosure is legally required. We do not sell personal data to third parties.
7. Retention
Personal data is kept only for as long as necessary to administer the registration and event and afterwards for as long as required by legal, tax or accounting obligations or for the establishment, exercise or defence of legal claims. Data processed solely on the basis of consent is kept until consent is withdrawn or the relevant purpose ends, unless another lawful basis requires continued retention.
8. Your rights
Where applicable, you have rights to information, access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time where processing is based on consent. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
9. Minors
A minor may participate only through the guardian declaration and procedure required by the event participation terms.
10. Security and automated decision-making
Appropriate technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or destruction. We do not make decisions producing legal or similarly significant effects based solely on automated processing.
This notice may be updated if the processing activities or applicable legal requirements change. The current version will always be displayed on this page.