Personal Data Processing Policy

ART. 32 : PERSONAL DATA PROTECTION

The Organiser is committed to the protection of personal data and undertakes to ensure the security and confidentiality of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR"), in particular by taking all necessary precautions to prevent such data from being deformed, damaged or accessed by unauthorised parties.

When registering for a MDS, the participant is informed and accepts that his/her personal data will be: (i) collected on the registration platform, owned by WAPI BULGARIA Ltd, a sister company of the Organiser and mandated by the latter; (ii) used by the Organiser, which acts as the data controller within the meaning of the GDPR, and by WAPI BULGARIA Ltd, its subcontractor.

 

32. 1 : Identity of the data controller
 

The identity and contact details of the person responsible for processing personal data are as follows: 

WHAT AN ADVENTURE (WAA), a limited liability company with a capital of 50,000 euros, registered with the Paris Trade and Companies Register under number 504 009 515, whose registered office is in Paris (75008), 66 avenue des Champs-Élysées. Contact e-mail: contact@marathondessables.com
 

Your personal data are collected by our subcontractor:

WAPI BULGARIA Ltd, a single-member limited liability company under Bulgarian law with a capital of 2,000 Bulgarian lev, whose registered office is located at R-N TRIADITSA DISTR, AP. OFIS 7, FLOOR 6, 1000 SOFIA (BULGARIA), registered in the Commercial Register of Bulgaria under number 204211089. Contact e-mail: support@wapi.bg

 

32. 2 : Data and information collected
 

The data collected is as follows:

Mandatory data for the registration to the MDS
 

Mandatory data identified on the website by an asterisk are collected during the registration process: 

  • First name
  • Last name
  • Telephone number
  • E-mail address
  • Password
  • Civil status (Male, Female)
  • Passport number
  • Date of birth
  • Country
  • City
  • Postcode
  • Address
  • Shirt size
  • Emergency contact (First name, Last name, Phone number, E-mail)
     

This list is likely to change in the light of the legal, technical, or organisational constraints of the Organiser. In particular, in the context of the "Rider + Companion" offer, data relating to the identification of the companion will be requested.

 

Optional data for the registration to the MDS
 

During the registration process, other data may be requested but are not essential for registration. 

In addition, the Organiser or WAPI BULGARIA Ltd may send one or more satisfaction surveys, polls, or questionnaires to participants after the event and collect additional data, in particular relating to the level of sporting activity, feelings about the race, hobbies, participation in other events etc.

 

Payment data:
 

During registration, the bank payment service provider collects and processes data concerning the means of payment (bank card number, expiry date of the bank card, visual cryptogram (not retained), etc.). These data related to the means of payment communicated are encrypted thanks to a security protocol, are never transmitted in clear text on the network and are not communicated to the Organiser.

 

Technical data:
 

The Organiser and WAPI BULGARIA Ltd may collect technical data such as connection data, IP address in accordance with the applicable legislation, and where appropriate with the participant's consent, for the use of certain technologies such as Cookies. No sensitive data is collected, i.e. information concerning racial or ethnic origin, political opinions, philosophical or religious beliefs, trade union membership, etc. (art. 9 of the GDPR).

 

32. 3 : Purposes of the treatment
 

The Organiser and WAPI BULGARIA Ltd collect the above data for specific purposes, in accordance with the applicable legal provisions and with your consent, and in particular for the purposes of:
 

  • To allow the creation, the management, and the access to your account;
  • To enable the processing, management, follow-up, and validation of registrations for the MDS events organised by the Organiser;
  • To facilitate collection and fight against fraud;
  • To enable the management, modification, and improvement of the Organiser's events;
  • Sharing of data with the Organiser's official and commercial partners (industrialists, media, institutions) for the purpose of communicating promotional offers, advertisements, and other commercial communications (subject to your prior agreement when required and to respect for your right to object, in accordance with the rules applicable to commercial prospecting);
  • Sharing of data with the Organiser's official and commercial partners (industrialists, media, institutions) for the purpose of communicating promotional offers, advertisements, and other commercial communications (subject to your prior agreement when required and to respect for your right to object, in accordance with the rules applicable to commercial prospecting);
     

Carrying out satisfaction surveys for scientific and statistical purposes (by means of surveys or questionnaires).

 

32. 4 : Data beneficiaries
 

The personal data collected during the online registration process may be communicated to:
 

  • to the Organiser's internal services (administrative staff, employees, and agents);
  • to the Organiser's service providers and contractual partners who intervene and contribute directly to the management of registrations and the organisation of the MDS (hotel, manufacturer of race numbers, company in charge of medical assistance, etc);
  • to the Organiser's privileged partners (manufacturers, media, institutions), with your agreement, in order to offer products and/or services or for commercial prospecting and/or advertising purposes.
     

The Organiser asks its service providers and partners to put in place strict confidentiality and commercial prospecting measures.

By participating in the MDS event, participants acknowledge and accept that: 

  • Their surname, first name(s) and country appear on the official start list published on the website www.marathondessables.com
  • Their geolocation on the race route is accessible to users of the www.marathondessables.com website.
  • At the end of the sporting event and at any time during the event or at the end of each stage, information relating to their sporting performance (in particular, results, photos and videos) shall be published on the website www.marathondessables.com ; the said results being likely to be taken up by any media.
     

If you wish to oppose such publication for a legitimate reason, you must communicate this decision, in writing, to the Organiser at the following address: contact@marathondessables.com, no later than thirty (30) days before the start of the event so that the appropriate measures can be taken.
 

Apart from the cases set out above, the Organiser undertakes not to sell, rent, transfer, or give access to third parties your data collected without your prior consent, unless it is obliged to do so for a legitimate reason (legal obligation, fight against fraud or abuse, exercise of the rights of defence, etc.).
 

Some of the addressees mentioned above may be established outside the European Union and may have access to all or part of the personal information collected by the Organiser and WAPI BULGARIA Ltd.
 

You expressly agree that your data may be transmitted to service providers or partners located outside the European Union. In this context, the Organiser undertakes to guarantee the protection of your data in accordance with the strictest rules, in particular through the signature, on a case-by-case basis, of contractual clauses based on the European Commission's model, or any other mechanism in compliance with the GDPR, as soon as your personal data is processed by a service provider outside the European Economic Area and whose country is not considered by the European Commission to provide an adequate level of protection.

 

32.5 : Duration of data conservation
 

The data is kept for as long as is necessary for the purposes set out above. These data will be deleted if the participant has not responded to any invitations during three (3) years.
 

However, this data may be kept for a longer period in order for the Organiser and WAPI BULGARIA Ltd to comply with their legal and regulatory obligations or to resolve disputes.

 

32. 6 : Rights of the persons concerned by the personal data processed
 

In accordance with the French law "informatique et libertés" of 6 January 1978 as amended and the GDPR, the persons concerned by the personal data processed have a right of access, rectification, deletion of the data concerning them as well as a right to limit and oppose the processing and portability of their personal data. They also have the right to object to the processing of their personal data for commercial prospecting purposes by the Organiser, WAPI BULGARIA Ltd and/or its partners.
 

These rights can be exercised by e-mail to the following address: contact@marathondessables.com
 

In such a case, you will have to specify your first and last name, the subject of your request and provide valid proof of identity. Pursuant to Article 12.6 of the GDPR, in the case of reasonable doubts as to the identity of the natural person submitting the request, the Organiser or its service provider may request that additional information necessary to confirm the identity of the person concerned be provided.
 

In accordance with Article 12.3 of the GDPR, the Organiser undertakes to provide the data subject with information on the measures taken in response to a request relating to the above rights as soon as possible and in any event within one month of receiving the request.
 

If you do not wish to receive or no longer wish to receive our offers, solicitations, and news, you may also indicate this by clicking on the unsubscribe link at the bottom of each communication.
 

We inform you of the existence of the "Bloctel" list of opposition to telephone solicitation, on which you can register (https://www.bloctel.gouv.fr/).
 

Finally, you have the right to submit a complaint to the Commission Nationale de l'Informatique et des Libertés (more information on www.cnil.fr).

 

32 7 : Contact
 

If you have any questions or complaints or if you wish to make recommendations or comments to MDS to improve our Personal Data Protection Policy, you can send an e-mail to contact@marathondessables.com or send a letter to the following address:
 

WAA - MARATHON DES SABLES

66 avenue des Champs Elysées

75008 PARIS

France.