Orgsu Privacy Policy

of the company Customers Support, s.r.o. Registered at Rubeška 215/1, Prague 9 – Vysočany,
zip: 190 00, Czech Republic Corporate ID: 04244885, Tax ID: CZ04244885
Recorded in  the Commercial Register maintained by the Municipal Court in Prague, File No. C 244472, hereinafter referred to as “ORGSU

DEFINITION OF TERMS

Software – Computer programme or a set of computer programmes, the copyright to which is held by ORGSU, and related documentation or manuals in both an electronic form and in hardcopies, as well as any and all updates, supplements or new versions of the Software provided by ORGSU. The Software enables planning and support or implementation of Events and, among other things, it facilitates establishing interconnections among individuals participating in Events, registration of participants and collection of participation fees for the registration for races held as part of the Events. The Software’s operation shall be provided for by ORGSU on its own equipment or on the equipment of third parties. ORGSU provides Services through the Software. The Software shall not be subject to sale and ORGSU offers Services through the Software that can be used on the basis of Licenses.

Services – Function(s) of the Software, the use of which is offered by ORGSU.

User – A natural person who has his or her user account opened in the Software and who uses the Services.

User Account – The User’s or Customer’s account in the Software.

Customer – A holder of the Licence who uses the Services

Data– Information stored in the Software, Including all Personal and Sensitive Data

Personal and Sensitive Data or PSD– data related to the users: First name and Surname, Sex, DOB, email, telephone, address, timing data and tracking data, results in races and results in the series.

General Terms and Conditions or GTS as are published here.

DATA

The data recorded within Services is owned by Customers, and ORGSU is not authorized to market or commercialize such data. However, ORGSU is entitled to process such data for the purpose of providing the Service and further improving the quality of the Service, evaluating the use of the Service and as anonymized data for statistical purposes as well.

The User acknowledges that the processing of his or her PSD is necessary for the performance of the Service Agreement concluded between him and the ORGSU within the meaning of Article 6 (1) (b) Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016, the General  Regulation on the protection of personal data, hereinafter referred to as the “Regulation”; necessary for the purpose of providing the Services by the ORGSU. For the purposes of these GTCs, processing of personal data means, in particular, their collection, storage on information media, use, sorting or combining, blocking and disposal using manual and automated means, as well as disclosure of such personal data through the Services to the extent necessary to achieve the purpose of the Services. The User acknowledges that the same legal title for the processing of personal data also applies to the Customers in the event of the Events in which the User participates, even if they are Customers residing outside the territory of the European Union.

The user is responsible for the accuracy of all personal data provided by ORGSU when using the Services. In the event that the User or Customer provides ORGSU with personal data of third parties, he declares that he has obtained the consent of all such persons with the provision and processing of such PSD.

If the user or person who personally identifies or believes that the ORGSU carries out processing of his or her personal data contrary to the protection of privacy and privacy, or in violation of the Regulation, especially if the data are inaccurate with regard to (in particular blocking, repairing, supplementing or disposing of personal data) is entitled to request from ORGSU an explanation and removal of the resulting condition.

For the full functionality of the Services, however, the PSD of the users, except for the basic data necessary for setting up the User Account, are not necessary and their possible inclusion in the Service is exclusively a matter of the User.

The ORGSU declares that it has taken appropriate measures to provide Users with all information in a comprehensive, transparent, comprehensible and easily accessible form and using clear and simple language means and has made all communications required by the Regulation.

ORGSU undertakes that the service will be performed only by authorized persons who will have access only to PSD corresponding to the authorized persons of these persons and to special user rights established exclusively for these persons. ORGSU undertakes that its employees will process PSD only under the conditions and to the extent set forth by the ORGSU and corresponding to these GTC.

ORGSU will maintain confidentiality about PSD and security measures whose
disclosure would jeopardize the security of personal information, even after termination of the provision of the Services.

ORGSU commits itself to the same extent as its employees who will be
involved in the processing of PSD and will have access to these PSD.

The ORGSU has put in place technical, organizational, personnel and other appropriate measures within the meaning of the Regulation to ensure and be able to demonstrate at any time that processing of PSD is conducted in accordance with the Regulation so that unauthorized or accidental access to PSD and data carriers, any alteration, destruction or loss, unauthorized transmissions, any other unauthorized processing, and other misuse, which will be reviewed and updated as necessary.

HOW WILL PSDs BE USED BY THE CUSTOMER?

The Customer shall process it in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of PSD and on the free movement of such data and repealing Directive 95/46 / EC (General Protection Regulation (hereinafter referred to as “the Regulation”), and in accordance with the relevant national data protection laws that you provide to the Customer in connection with the use of the Services (for example, in the context of registering a Software account or registering for a race or series of competitions ). In particular, this information is given by the user in his / her profile: name, surname, photograph (if entered), email, phone, language, region, state, IP address, cookies, date of birth, representation of the country, membership of a sports club. In addition, race times and other specific data required to participate in a particular race, the transaction history of the orders, the data on the purchased or sold goods or service.

FOR WHICH PURPOSES DOES THE CUSTOMER PROCESS ATHLETES’ PSD?

Processing of PSD in connection with the management of a user account

If you have registered a  user Account on the Software on the Customer‘s website, the Customer processes your PSD to manage your User Account. The legal title for processing is the performance of the contract. If the User Account is not used for more than 2 years, the Customer may cancel your User Account. This procedure will not affect the validity of your consent to the processing of PSD for marketing and business purposes. In case of a user account, the Customer processes the PSD of the data subject in the range – name, surname, date of birth, photograph (if entered), e-mail, phone, language, region, state.

Processing of PSD in connection with participation in the race

In the event that you log in to the Customer‘s event or series through the Software, the Customer processes your PSD in order to ensure your participation in the race, record and proper performance of the contractual relationship (the legal title for processing is the necessity to fulfil the contract of participation in the race) , to protect the rights of the Customer and third parties (eg other contractors), direct marketing (e.g. sending emails with offers of similar services that you have used from the Customer, such as an invitation to a race), Promotion of the Customer and its activities or publication entries in the starting lists and results of the competitions based on the legal title of the Customer‘s legitimate interests. In addition, your PSD will be used by the Customer to fulfil legal obligations, in particular under the regulations governing bookkeeping and taxation. For the above-mentioned processing purposes, the Customer processes the personal data of the data subject in the range – name, surname, photograph (if provided), email, telephone, language, region, state, date of birth, gender, country representation, split times, total time, location data, account number, and performance data, other specific information required to participate in a particular race.

Sensitive Location Data (SLD)

It is collected by ORGSU Tracking App further referred to as “App”. The App does not have any other means of communication other than with Orgsu Technology via an API. The App requires athlete’s permission to gather their locations data in the background when mobile screen is off. This is because the phone is stored in a backpack or arm holder and to prolong battery life for long races. The sensitive location data sent by the App, further referred to as “SLD” is exclusively used for displaying the current position of the athlete on the event website or for final calculation of race results by Orgsu.com technology. Orgsu Ltd does not track your device location while you are not using the App, but in order to provide Orgsu’s core Tracking services, it is necessary for us to track your device location while you are using the App. If you would like to stop the device location tracking, you may do so at any time by adjusting your device settings. Orgsu Administrators don’t have the tools to modify or copy SLD. Orgsu technology does not share or sell athletes’ SLD.

The types of SLD that Orgsu Tracing App accesses, collects, uses and shares with Orgsu.com technology during the period of time when the App is logged in are: BIB/Start Number, GPS coordinates and the corresponding Timestamp. The App does not collect or ask for the name and DOB of App’s users (athletes).

The URL address of this page is in both the designated field in Play Console and within the Orgsu Tracking App itself.

Processing of PSD in connection with the use of e-shop services
If you use the e-shop services to buy or sell goods or services within the Software, either with or without connection to a particular event, the Customer processes your PSD for the purpose of executing the contract, securing the legitimate interests in connection with a claim for services or goods, as well as for the fulfilment of legal obligations, in particular according to the regulations governing bookkeeping and taxation. For the above-mentioned processing purposes, the Customer processes the personal data of the data subject in the range – name, surname, address, e-mail, phone number, account number and current performance data, transaction history of orders, purchased or sold goods or services.

Customer data processing with consent for marketing and business purposes
In case you agree to the processing of PSD for marketing and business purposes, the Customer will process your PSD in the scope – email address to send emails about new products and services, in particular invitations to races, race results and other business communications of the Customer and its contractual partners through electronic means pursuant to Act No. 480/2004 Coll., on Certain Information Society Services, as amended.

Use of cookies and web site analysis
By using the Services, you consent to the collection and storage of cookies on your computer that is necessary for the proper provision of the Services through the Software. If you do not allow the storage of cookies, you acknowledge that the Service may not function properly. The Customer is not responsible for the malfunctioning of the Service.

For how long is YOUR PSD processed?

If the User account is not used for more than 2 years, the Customer will cancel the user account. Non-use means, in particular, non-participation in the race or nonpurchase of goods or services. This procedure will not affect the validity of your consent to the processing of PSD for marketing and business purposes.

Your PSD will be processed for a reasonable period of time with respect
to the purpose of providing Orgsu.com’s services.