Online Privacy Policy - SwissCityMarathon - Lucerne

General information
This online privacy statement explains what data we collect when you visit our website and what we use it for. It also explains how this is done and for what purpose.
When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally.
In addition to this privacy policy, we refer to the General Privacy Policy, which informs about the data processing in connection with the implementation and organization of the running events www.swisscitymarathon.ch/datenschutzerklarung.
When processing data, we act in accordance with the European General Data Protection Regulation [DSGVO], where applicable, and the Federal Data Protection Act [DSG or the revised DSG; nDSG] and the associated Data Protection Ordinance [VDSG or DSV].

This online privacy statement was created on behalf of the Swiss Runners association. Its use is reserved for the members of Swiss Runners.

Note on the person responsible
The data controller for data processing on this website is:
Association SwissCityMarathon - Lucerne, Würzenbachstrasse 13.
CH-6006 Lucerne, Switzerland, +41 (0)41 375 03 30, info@swisscitymarathon.ch
If the GDPR is applicable, Startklar - Rose Müller, Bei der Kelter 5, D-74321 Bietigheim-Bissingen is our representative according to Art. 27 GDPR.

Legal basis
The legal basis for the processing of personal data, if consent is given, is Art. 6 para. 1 lit. a DSGVO or Art. 13. para. 1 DSG or Art. 31 para. 1 nDSG. If the data is processed for the performance of a contract with the data subject, including pre-contractual measures, the legal basis is Art. 6 para. 1 lit. b DSGVO or Art. 13 para. 2 lit. a DSG or Art. 31 para. 2 lit. a nDSG. If the processing is necessary to protect a legitimate interest of our company or a third party, Art. 6 para. 1 lit. f DSGVO or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG serves as the legal basis for the processing. This relates, for example, to marketing, unless you have objected to the use of your data for marketing purposes.
Legitimate interests may include, in particular, further:
- Operation and administration of the website;
- The provision of services and/or information intended for you;
- The processing of personal data for administrative purposes;
- Prevention and detection of fraud and crime;
- Assertion, exercise or defense of legal claims;
- Responding to inquiries;
- Informing the public and interested parties;
- Carrying out direct marketing activities.

Retention and deletion of data
We only ever process as much data as is absolutely necessary for the intended purpose.
We delete data that is no longer required unless there is a legal obligation to retain it or we are entitled to continue to retain the data on the basis of another legal basis or an overriding interest of our own.

Data processing on our website
We have many of the following data because you have provided them to us (e.g. via contact form or registration, etc.). If you conclude a contract with us by obtaining a service, you must provide certain data due to your contractual obligation, such as the master data. In addition, when using the website, the processing of technical data is unimportant. If, on the other hand, it is behavioral or preference data, you may object to the data processing or not give your consent to it.

Cookies
Our website uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO or 13 para. 1 DSG or Art. 31 para. 1 nDSG. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behavior) are stored, these are treated separately in this data protection declaration.

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- Operating system used
- referrer URL
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 para. 1 lit. f DSGVO or 13 para. 1 DSG or Art. 31 para. 1 nDSG. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - for this purpose, the server log files must be collected.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected (e.g. when the session has ended, if the data is required to provide the website).

Online store
When ordering goods or services in our online store, we store your name, first name, address, zip code, city and email address. This data is used for the purpose of processing the contract and thus processed on the basis of the fulfillment of the contract with you (Art. 6 para. 1 lit. b DSGVO or Art. 13 para. 2 lit. a DSG or Art. 31 para. 2 lit. a nDSG).
Contacting us by e-mail
If you contact us directly via e-mail, we will process the data you provide (e-mail address, surname, first name, as well as other personal data provided by you) exclusively for the purpose of processing your inquiry and based on a legitimate interest (answering inquiries; Art. 6 para. 1 lit. f DSVO or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG).
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Your data will be deleted as soon as the data is no longer required to respond to the request, unless there are legal obligations to retain data.
You have the right to object to the processing at any time, in such a case, the conversation can not be continued.
Registration for running events
For the registration of the running event, only the surname, first name, year of birth and address as well as the e-mail address are required from the runners as mandatory information. Further data is only collected on a voluntary basis and only if it is necessary for the provision of a further service. We process this data for the purpose of carrying out the running event, including delivery of information about your participation and the starting documents (digital starting package) as well as a feedback request after the run. The processing is carried out for the execution of the contract (Art. 6 para. 1 lit. b DSGVO or Art. 13 para. 2 lit. a DSG or Art. 31 para. 2 lit. a nDSG) that you have concluded with us, as well as due to an overriding or legitimate interest (administrative purposes; (Art. 6 para. 1 lit. f DSVO or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG) of us.
Depending on which third-party company carries out the timing, all runners must open an account with this company. For the data processing concerning the account, the third party company that performs the timing is considered the responsible party and the data protection declarations and general terms and conditions of the respective third party company apply (e.g. Datasport AG LINK). In all other respects, the timing service providers act as order processors on our behalf.

Contact form
If you send us inquiries via the contact form, the information you provide in the form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry, the date and time of entry and in the event of follow-up questions.
The processing of the data entered in the form is thus based on your consent (Art. 6 para. 1 lit. a DSGVO or 13 para. 1 DSG or Art. 31 para. 1 nDSG).
You can revoke your consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

Analysis tools and advertising
We would like to point out that due to the embedding of the analysis tools, it is possible that your data will be processed in the EU/EEA as well as in countries without an adequate level of data protection. If we use such providers in insecure countries, the transfer is based on Art. 49 para. 1 lit. a DSGVO or Art. 17 para. 1 lit. a nDSG or Art. 6 para. 2 lit. b DSG.
Google Analytics
This website uses functions of the web analysis service Google Analytics for the purpose of analyzing the use of our website and so that we can improve it regularly. The provider is Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, or Google Analytics of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. a DSGVO (consent) or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG.
You have the right to revoke consent once given at any time. To do this, you can prevent the storage of cookies by adjusting the technical settings of your browser software accordingly. We would like to point out that in this case, not all functions of this website can be used to their full extent.
In addition, you can download the browser plugin available under the following link and thereby prevent the collection of the data generated by the cookie and other data related to your use of the website (incl. your IP address) as well as the processing of this data by Google: tools.google.com/dlpage/gaoptout.
To prevent the collection by Google Analytics across devices, you can set an opt-out cookie. Additional information on the terms of use and data protection can be found at www.google.com/analytics/terms/de.html or at www.google.de/intl/de/policies/.
We have activated the IP anonymization function on our website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics may be merged with other data from Google.
We have concluded an order processing agreement with Google and fully implement the strict requirements of the data protection authorities when using Google Analytics. Standard contractual clauses apply in cases where personal data is transferred to the USA.
This website also uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

Newsletter dispatch
If you register for an event via our website or purchase goods via our online store (existing customers) and provide us with your e-mail address, we will use it to send you a newsletter with direct advertising for our own similar goods and services, unless you object. You may object at any time by sending us an e-mail or writing to us.
The data will be used exclusively for sending the newsletter.
If you are not yet one of our existing customers, but would still like to receive a newsletter, you can subscribe to our free newsletter on our website. For the processing of your data, your consent will be obtained at the time of registration and reference will be made to this privacy policy. To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to provide a name, first name and gender, for the purpose of personal address in the newsletter.
We base the newsletter dispatch due to the sale of goods or services on the legal basis of legitimate interest (direct marketing) Art. 6 para. 1 lit. f DSGVO or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG. If you register for a newsletter on our website, the processing is based on your consent and thus Art. 6 para. 1 lit. a DSGVO or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
Our newsletters contain information about our services, products and about our event as well as a registration option and also information from third parties. The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses.
This website uses the services of MailChimp for sending newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter data for the purpose of receiving newsletters (e.g. e-mail address), this data is stored on MailChimp's servers in the USA. We have concluded a so-called "Data Processing Agreement" with MailChimp, in which we oblige MailChimp to protect our customers' data and not to pass it on to third parties. This agreement can be viewed at the following link: mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.
MailChimp allows us to analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (so-called web-beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not want any analysis by MailChimp, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.
If you have subscribed to a newsletter, when you unsubscribe we may store the unsubscribed email addresses for the retention period provided by law based on our legitimate interests (administrative purposes; Art. 6 para. 1 lit. f DSVO or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG) before deleting them in order to be able to prove consent formerly given. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.

For more details, please refer to MailChimp's privacy policy at: mailchimp.com/legal/terms/.

Social media plugins
Common provisions
We are active on various social media (e.g. Facebook, Instagram). Our social media presences are recognizable on our websites by the corresponding icons. The social media plugins have been set up in a 2-click process, whereby they are only activated when you click on the provider's icon. Therefore, no data is automatically transmitted to social media services when you visit our website. Only when you click on the icon will your browser establish a connection to the servers of the operators of the social media services. In this case, the social media service provider learns about your visit to our website and your IP address, regardless of whether you have a corresponding account of the service. If you have a corresponding account and are logged in, the data can be assigned to your social media profile.
We have no influence on how the social media service providers process your data; you can find more information on this in the corresponding data protection statements, which are linked below. However, it is likely that the providers create usage profiles of you and also use the data for personalized advertising.
We rely on the legal basis of consent in accordance with Art. 6 para. 1 lit. a DSGVO or Art. 31 para. 1 nDSG or Art. 13 para. 1 DSG, if you have clicked on the icon.
We would like to point out that due to the embedding of the social media plugins, it is possible that your data will be processed both in the EU/EEA and in countries without an adequate level of data protection. If we use such providers in insecure countries, the transfer is based on Article 49 (1) a DSGVO or Article 17 (1) a nDSG or Article 6 (2) b DSG.
If you do not want your data to be processed accordingly by the activated plugins, make sure that you no longer click on the corresponding icons.
Instagram
On our pages, functions of the service Instagram are integrated. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
For more information, please see Instagram's privacy policy: instagram.com/about/legal/privacy/.
Facebook
We also use Facebook social plugins on our website, which are operated for users from Europe by Facebook Ireland Ltd, Dublin, Ireland. Facebook's privacy notice is available at www.facebook.com/policy. Some of your data will be transferred to the USA in the process. If you wish to object to advertising in this regard, this is possible here: www.facebook.com/settings?tab=ads.
Regarding the data processed when visiting our site for the creation of "Page Insights", we are considered jointly responsible together with Facebook Ireland Ltd, Dublin, Ireland. As part of Page Insights, statistics are created about what visitors do on our site (comment on posts, share content, etc.). Further details are described at www.facebook.com/legal/terms/information_about_page_insights_data. We only receive anonymous, aggregated data.
YouTube
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
On our website, we show you locally stored thumbnails of videos, thus the third-party provider does not receive any information about you. It only receives this information when you click on the preview image and the content of the third-party provider is loaded. The provider receives the information that you have accessed our site and technically necessary usage data.
We have no influence on how the provider processes your data. For more information on the handling of user data, please refer to YouTube's privacy policy at: www.google.de/intl/de/policies/privacy.

Live Slideshow
We use the Live Slideshow of Swiss-Image GmbH, Promenade 53A, 7270 Davos Platz, Switzerland, hereinafter referred to as Swiss-Image. For the Live Slideshow, Google Analytics is used for statistical purposes (reach measurement). The data is stored anonymously for 26 months - no "User ID" is used. Swiss-Image has concluded a corresponding contract with Google for order data processing.
The social share function does not use plugins of the platform operators. Only by clicking on an icon, a link is called at the corresponding platform. During this call, only image-related data (e.g. URL, title) and no personal data is transferred.
Transfer of data
Companies that work for us on behalf of the organization and implementation of running events, the processing of registrations (online, offline), the management of data of participants, the collection, possibly the timing, results service, bib processes, participant advertising and information, process the data on our behalf and for our purposes. We choose our service providers carefully and are obliged by law to control the data processing by these companies and to oblige them not to process the data for their own purposes or to pass it on to unauthorized third parties. We point out that it is possible that your data will be processed by our service providers both in the EU/EEA and in countries without an adequate level of data protection. If we use such providers in insecure countries, the transfer is based on Art. 46 para. 1 lit. c DSGVO or Art. 16 para. 2 lit. d nDSG.
If you participate in a running event, you consent to the transfer of your personal data such as surname and first name, home address (street, no. ZIP code and city) date of birth, telephone number, - and e-mail address to partners (eg photo and video service), unless you prohibit the transfer of data by a message to the postal or e-mail address below. These partners may use the data for their own services or advertising purposes and, in the case of sponsors, for targeted addresses and telephone campaigns (especially for sponsor XY) in connection with the running event.
If we are required by law to do so, we will obtain the runner's consent at the time of registration before sharing personal data with third-party companies that process the data for their own purposes (the provision of their own services).
You can revoke the consent to share the data with third parties at any time.

With the registration you become at the same time a running member of Swiss Athletics and the umbrella organization Swiss Olympic. For this purpose, we will pass on your name and e-mail address to Swiss Athletics. Your data will be used exclusively for your entry as a member and will not be passed on to third parties. At the beginning of the year you will receive a newsmail with an overview of the most beautiful Swiss races. This membership is free of charge for you and expires (after one year) at the end of the following calendar year. More information at www.swiss-running.ch/datenschutz. You can revoke your consent to the transfer of data to Swiss Athletics at any time in writing (e.g. by e-mail to the organizer).

Data subject rights
Information, blocking, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing and, if necessary, a right to correction, blocking or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given above.

Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given above.

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 DSGVO).
If the data processing is based on a public or legitimate interest, you have the right to object to the processing of your personal data at any time. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Right of complaint to the competent supervisory authority
In the event of violations of the DSGVO or the DSG, the data subjects have a right of appeal to the competent supervisory authority. The right of complaint exists without prejudice to other administrative or judicial remedies.

Data security
We take appropriate technical and organizational measures to secure data. For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Automated decision-making in individual cases incl. profiling
We do not perform automated decision-making in individual cases pursuant to Art. 22 DSGVO or automated individual decision-making pursuant to Art. 21 nDSG.

Changes to the online data protection declaration
We reserve the right to change this privacy policy at any time. The version published on our website at any given time shall apply.
This version of the online privacy statement forms the basis of the translations in English, French and Italian. The German version is valid. If you have any questions, please contact us.