ARTICLE 1: PREAMBLE

The purpose of this privacy policy is to inform users of the :

• How their personal data is collected. Personal data is any information that can be used to identify a user. This may include, but is not limited to, a user's full name, age, postal or e-mail address, location or IP address;
• On the rights they have concerning this data;
• On the person responsible for processing the personal data collected and processed ;
• On the recipients of this personal data;
• About the site's cookie policy.

This policy supplements the legal notice and the General Conditions of Use, which can be consulted by users on the website: https://raceacrossseries.com/

ARTICLE 2: PRINCIPLES GOVERNING THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data is :

• Processed lawfully, fairly and transparently in relation to the data subject;
• Collected for specified, explicit and legitimate purposes (see Article 3.1 hereof) and not further processed in a manner incompatible with those purposes;
• Adequate, relevant and limited to what is necessary for the purposes for which they are processed;
• Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data which is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;
• Kept in a form that permits identification of the data subjects for no longer than is necessary for the purposes for which they are processed;
• Processed in such a way as to ensure appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is lawful only if, and insofar as, at least one of the following conditions is met:

• The data subject has consented to the processing of his/her personal data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request;
• The processing is necessary to comply with a legal obligation to which the data controller is subject;
• The processing is necessary to safeguard the vital interests of the data subject or of another natural person;
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED WHEN BROWSING THE SITE

Article 3.1: Data collected

The personal data collected as part of our business is as follows:
- Last name,
- First name,
- Age,
- Gender,
- Nationality,
- Date of birth,
- Postal address,
- Mailing address,
- Telephone numbers,

This data is collected and processed for the following purpose(s):
- Registration for one of our sporting events
- Subscription to our newsletter

Article 3.2: Data collection method

When you use our site, the following data is automatically collected:
- Data such as browsing behavior or unique IDs

Other personal data is collected when you carry out the following operations on the site:
- Register for one of our sporting events

• Name,
• First name,
• Age,
• Sex,
• Nationality,
• Date of birth,
• Postal address,
• E-mail address,
• Telephone numbers,

- Subscribe to our newsletter

• E-mail address

They are kept by the data controller under reasonable security conditions for a period of 36 months.
The company may keep certain personal data beyond the above-mentioned periods in order to meet its legal or regulatory obligations.

Article 3.3: Data hosting

The www.raceacrossseries.com website is hosted by :
Across and Beyond Endurance AG
c/o MICA Ventures AG
Sihleggstrasse 5 8832 Wollerau
Switzerland
Contact(at)race-across.com

Article 3.4: Transmission of data to third parties :

Anonymized or non-anonymized data may be passed on to our partners.

Article 3.5 : Cookies policy

To provide the best possible experience, we use technologies such as cookies to store and/or access device information. We ask for consent when you first visit our site. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Failure to consent or withdrawal of consent may adversely affect certain features and functions.

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: The data controller

Personal data is collected by Across and Beyond Endurance AG, with capital of CHF 250,000, registered under CH-130.3.029.927-7.
The data controller can be contacted as follows:
By e-mail: contact(at)race-across.com

Article 4.2: The Data Protection Officer

The company or person responsible for data protection is:
Across and Beyond Endurance AG
c/o MICA Ventures AG
Sihleggstrasse 5 8832 Wollerau
Switzerland
contact(at)race-across.com
If, after contacting us, you feel that your "Data Protection" rights have not been respected, you can send a complaint to the CNIL.

ARTICLE 5: THE USER'S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user concerned by the processing of their personal data may avail themselves of the following rights, pursuant to European Regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):

• Right of access, rectification and right to erasure of data (laid down respectively in Articles 15, 16 and 17 of the RGPD);
• Right to data portability (Article 20 RGPD);
• Right to limit (Article 18 of the GDPR) and object to data processing (Article 21 of the GDPR);
• Right not to be subject to a decision based exclusively on an automated process;
• Right to determine the fate of data after death ;
• Right to refer the matter to the competent supervisory authority (Article 77 of the RGPD).

To exercise your rights, please send your request by e-mail to contact(at)race-across.com
In order for the data controller to process your request, you may be required to provide certain information, such as your full name, e-mail address and account, personal space or subscriber number.

Visit cnil.fr for more information on your rights.

ARTICLE 6: CONDITIONS FOR MODIFYING THE PRIVACY POLICY

The publisher of the www.raceacrossseries.com site reserves the right to modify the present Policy at any time, in order to ensure that users of the site comply with current legislation.
Any modifications will not affect purchases previously made on the site, which remain subject to the Policy in force at the time of purchase and as accepted by the user at the time of purchase validation.
The user is invited to familiarize himself/herself with this Policy each time he/she uses our services, without the need for formal notification.

The present policy, edited on 01/09/2023 has been updated on 01/10/2023.