Swiss City Marathon Logo Swiss City Marathon Logo Swiss City Marathon Logo
Register Now!
26.10.2025 Register Now! 26.10.2025

Online privacy policy - SwissCityMarathon - Lucerne

General information

This online privacy policy explains what data we collect when you visit our website and what we use it for. It also explains how and for what purpose this is done.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally.

In addition to this privacy policy, reference is made to the general privacy policy, which provides information on data processing in connection with the implementation and organisation of the running events www.swisscitymarathon.ch/datenschutzerklarung

When processing data, we act in accordance with the European General Data Protection Regulation [GDPR], if applicable, and the Federal Act on Data Protection [FADP or the revised FADP; nDSG] and the associated Data Protection Ordinance [DPO or DPO].

This online data protection declaration was created on behalf of the Swiss Runners association. Its use is reserved for members of Swiss Runners.

Note on the controller

The data controller responsible for data processing on this website is

SwissCityMarathon - Lucerne Association, Würzenbachstrasse 13
CH-6006 Lucerne, Switzerland, +41 (0)41 375 03 30, info@swisscitymarathon.ch

If the GDPR is applicable, Startklar - Rose Müller, Bei der Kelter 5, D-74321 Bietigheim-Bissingen is our representative according to Art. 27 GDPR.

Legal basis

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG if consent has been given. If the data is processed for the fulfilment of a contract with the data subject, including pre-contractual measures, the legal basis is Art. 6 para. 1 lit. b GDPR or Art. 13 para. 2 lit. a FADP or Art. 31 para. 2 lit. a nDPA. If the processing is necessary to safeguard a legitimate interest of our company or a third party, Art. 6 para. 1 lit. f GDPR or Art. 13 para. 1 FADP or Art. 31 para. 1 nDSG serves as the legal basis for the processing. This applies, for example, to marketing, provided you have not objected to the use of your data for marketing purposes.

Other legitimate interests may include, in particular

  • Operation and administration of the website;
  • the provision of services and/or information intended for you
  • the processing of personal data for administrative purposes;
  • Prevention and detection of fraud and criminal offences;
  • Assertion, exercise or defence of legal claims;
  • Responding to enquiries;
  • informing the public and interested parties;
  • Carrying out direct marketing measures.

Storage and deletion of data

We only ever process as much data as is absolutely necessary for the intended purpose.

We delete data that is no longer required, provided there are no statutory retention obligations to the contrary or we are authorised to retain the data on the basis of another legal basis or our own overriding interest.

Data processing on our website

We have much of the data listed below because you have provided it to us (e.g. via contact form or registration, etc.). If you conclude a contract with us by purchasing a service, you must provide certain data due to your contractual obligation, such as master data. When using the website, the processing of technical data is also unavoidable. However, if it is behavioural or preference data, you may object to the data processing or not give your consent.

Cookies

Our website uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR or 13 para. 1 DSG or Art. 31 para. 1 nDSG. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Time of the server enquiry
  • IP address

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR or 13 para. 1 DSG or Art. 31 para. 1 nDSG. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - the server log files must be recorded for this purpose.

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected (e.g. when the session has ended, if the data is required to provide the website).

Online shop

When you order goods or services in our online shop, we store your surname, first name, address, postcode, city and email address. This data is used for the purpose of processing the contract and is therefore processed on the basis of the fulfilment of the contract with you (Art. 6 para. 1 lit. b GDPR or Art. 13 para. 2 lit. a FADP or Art. 31 para. 2 lit. a nDSG).

Contacting us by e-mail

If you contact us directly by email, we will process the data you provide (email address, surname, first name and other personal data provided by you) exclusively for the purpose of processing your enquiry for the purpose of processing the contact on the basis of a legitimate interest (answering enquiries; Art. 6 para. 1 lit. f GDPR or Art. 13 para. 1 FADP or Art. 31 para. 1 nDPA).

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Your data will be deleted as soon as it is no longer required to answer your enquiry, provided there are no legal obligations to retain it.

You have the right to object to the processing at any time, in which case the conversation cannot be continued.

Registration for running events

To register for the running event, runners are only required to provide their surname, first name, year of birth, address and email address. Further data is only collected on a voluntary basis and only if it is necessary for the provision of a further service. We process this data for the purpose of organising the running event, including sending you information about your participation and the starting documents (digital starting pack) as well as a feedback request after the run. The processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR or Art. 13 para. 2 lit. a FADP or Art. 31 para. 2 lit. a nDSG) that you have concluded with us, as well as on the basis of an overriding or legitimate interest (administrative purposes; (Art. 6 para. 1 lit. f GDPR or Art. 13 para. 1 FADP or Art. 31 para. 1 nDSG) on our part.

Depending on which third-party company carries out the timekeeping, all runners must open an account with this company. For data processing relating to the account, the third-party company that carries out the timekeeping is considered the controller and the data protection declarations and general terms and conditions of the respective third-party company(TrackMaxx) apply. In all other respects, the timekeeping service providers act as processors on our behalf.

Contact form

If you send us enquiries via the contact form, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry, the date and time of entry and in the event of follow-up questions.

The processing of the data entered in the form is therefore based on your consent (Art. 6 para. 1 lit. a GDPR or 13 para. 1 DSG or Art. 31 para. 1 nDSG).

You can withdraw your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.

We will retain the data you provide on the form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Analysis tools and advertising

We would like to point out that due to the embedding of the analysis tools, it is possible that your data may be processed both in the EU/EEA and in countries without an adequate level of data protection. If we use such providers in insecure countries, the transfer is based on Art. 49 para. 1 lit. a GDPR or Art. 17 para. 1 lit. a nDSG or Art. 6 para. 2 lit. b DSG.

Google Analytics

This website uses functions of the web analysis service Google Analytics for the purpose of analysing the use of our website and so that we can regularly improve it. The provider is Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, or Google Analytics of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. a GDPR (consent) or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG.

You have the right to withdraw your consent at any time. You can prevent the storage of cookies by adjusting the technical settings of your browser software accordingly. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.

In addition, you can download the browser plugin available under the following link and thereby prevent the collection of the data generated by the cookie and other data related to your use of the website (including your IP address) as well as the processing of this data by Google: https://tools.google.com/dlpage/gaoptout?hl=de

To prevent Google Analytics from collecting data across all devices, you can set an opt-out cookie. You can find additional information on the terms of use and data protection at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/

We have activated the IP anonymisation function on our website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics may be merged with other Google data.

We have concluded an order processing contract with Google and fully implement the strict requirements of the data protection authorities when using Google Analytics. Standard contractual clauses apply in cases where personal data is transferred to the USA.

This website also uses the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

Newsletter dispatch

If you register for an event via our website or purchase goods via our online shop (existing customers) and enter your e-mail address, we will use it to send you a newsletter with direct advertising for our own similar goods and services, unless you object to this. You can object to this at any time by sending us an e-mail or writing to us.

The data will be used exclusively for sending the newsletter.

If you are not yet one of our existing customers but would still like to receive a newsletter, you can subscribe to our free newsletter on our website. Your consent to the processing of your data is obtained when you register and reference is made to this privacy policy. To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to provide your surname, first name and gender so that we can address you personally in the newsletter.

We base the newsletter dispatch due to the sale of goods or services on the legal basis of legitimate interest (direct marketing) Art. 6 para. 1 lit. f GDPR or Art. 13 para. 1 DSG or Art. 31 para. 1 nDSG. If you register for a newsletter on our website, the processing is based on your consent and thus Art. 6 para. 1 lit. a GDPR or Art. 13 para. 1 FADP or Art. 31 para. 1 nDPA. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

Our newsletters contain information about our services, products and our event as well as a registration option and also information from third parties. Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses.

This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that can be used to organise and analyse the sending of newsletters, among other things. If you enter data for the purpose of subscribing to the newsletter (e.g. email address), this data is stored on MailChimp's servers in the USA. We have concluded a so-called "Data Processing Agreement" with MailChimp, in which we oblige MailChimp to protect our customers' data and not to pass it on to third parties. This agreement can be viewed at the following link: mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/.

With the help of MailChimp we can analyse our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (known as a web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you do not wish to be analysed by MailChimp, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

If you have subscribed to a newsletter, we may store the unsubscribed e-mail addresses for the statutory retention period on the basis of our legitimate interests (administrative purposes; Art. 6 para. 1 lit. f GDPR or Art. 13 para. 1 FADP or Art. 31 para. 1 nDPA) before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for erasure is possible at any time, provided that the former existence of consent is confirmed at the same time.

For more information, please refer to MailChimp's privacy policy at: mailchimp.com/legal/terms/.

Social media plugins

Common provisions

We are active on various social media (e.g. Facebook, Instagram). Our social media presences are recognisable on our websites by the corresponding icons. The social media plugins have been set up using the 2-click method, which means that they are only activated when you click on the provider's icon. Data is therefore not automatically transmitted to social media services when you visit our website. Only when you click on the icon will your browser establish a connection to the servers of the social media service provider. In this case, the social media service provider learns about your visit to our website and your IP address, regardless of whether you have a corresponding account with the service. If you have a corresponding account and are logged in, the data can be assigned to your social media profile.

We have no control over how the social media service providers process your data; further information on this can be found in the corresponding privacy policies, which are linked below. However, it is likely that the providers will create user profiles of you and also use the data for personalised advertising.

We base this on the legal basis of consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 31 para. 1 nDSG or Art. 13 para. 1 DSG, provided you have clicked on the icon.

We would like to point out that due to the embedding of social media plugins, it is possible that your data may be processed both in the EU/EEA and in countries without an adequate level of data protection. If we use such providers in insecure countries, the transfer is based on Art. 49 para. 1 lit. a GDPR or Art. 17 para. 1 lit. a nDSG or Art. 6 para. 2 lit. b DSG.

If you do not want your data to be processed accordingly by the activated plugins, make sure that you no longer click on the corresponding icons.

Instagram

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

Further information on this can be found in Instagram's privacy policy: instagram.com/about/legal/privacy/.

Facebook

We also use Facebook social plugins on our website, which are operated for users from Europe by Facebook Ireland Ltd, Dublin, Ireland. Facebook's privacy policy is available at www.facebook.com/policy. Some of your data will be transferred to the USA. If you wish to object to advertising in this regard, you can do so here: www.facebook.com/settings?tab=ads.

With regard to the data that is processed when you visit our site for the creation of "Page Insights", we are considered jointly responsible together with Facebook Ireland Ltd, Dublin, Ireland. As part of Page Insights, statistics are compiled about what visitors do on our page (comment on posts, forward content, etc.). Further information is available at www.facebook.com/legal/terms/information_about_page_insights_data. We only receive anonymous, aggregated data.

YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

On our website, we show you locally stored preview images of videos, which means that the third-party provider does not receive any information about you. They only receive this information when you click on the preview image and the content of the third-party provider is loaded. The provider receives the information that you have accessed our site as well as technically necessary usage data.

We have no influence over how the provider processes your data. Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Live slideshow

We use the live slideshow of Swiss-Image GmbH, Promenade 53A, 7270 Davos Platz, Switzerland, hereinafter referred to as Swiss-Image. Google Analytics is used for statistical purposes (reach measurement) for the live slideshow. The data is stored anonymised for 26 months - no "user ID" is used. Swiss-Image has concluded a corresponding contract with Google for commissioned data processing.

The social share function does not use any plugins from the platform operators. Only by clicking on an icon is a link to the corresponding platform called up. Only image-related data (e.g. URL, title) and no personal data is transferred when this link is called up.

Transfer of data

Companies that work on our behalf for the organisation and implementation of the running events, the processing of registrations (online, offline), the administration of participants' data, collection, timekeeping if necessary, results service, start number processes, participant advertising and information, process the data on our behalf and for our purposes. We select our service providers carefully and are obliged by law to monitor data processing by these companies and to oblige them not to process the data for their own purposes or to pass it on to unauthorised third parties. We would like to point out that it is possible that your data may be processed by our service providers both in the EU/EEA and in countries without an adequate level of data protection. If we use such providers in insecure countries, the transfer is based on Art. 46 para. 1 lit. c GDPR or Art. 16 para. 2 lit. d nDSG.

If you take part in a running event, you consent to the transfer of your personal data such as surname and first name, private address (street, no., postcode and town), date of birth, telephone number and e-mail address to partners (e.g. photo and video service), unless you prohibit the transfer of the data by sending a message to the postal or e-mail address given below. These partners may use the data for their own services or advertising purposes and, in the case of sponsors, for targeted addresses and telephone campaigns in connection with the running event.

If we are legally obliged to do so, we will obtain the runner's consent at the time of registration before passing on personal data to third-party companies that process the data for their own purposes (the provision of their own services).

You can revoke your consent to the transfer of data to third parties at any time.

When you register, you also become a running member of Swiss Athletics and the umbrella organisation Swiss Olympic. For this purpose, we will pass on your name and e-mail address to Swiss Athletics. Your data will only be used for the purpose of registering you as a member and will not be passed on to third parties. At the beginning of the year you will receive a newsmail with an overview of the best Swiss races. This membership is free of charge for you and expires (after one year) at the end of the following calendar year. Further information can be found at www.swiss-running.ch/datenschutz. You can revoke your consent to the forwarding of data to Swiss Athletics at any time in writing (e.g. by e-mail to the organiser).

Rights of data subjects

Information, blocking, erasure and rectification

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time. You can contact us at any time at the address given above if you have further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given above.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

If data processing is carried out on the basis of a public or legitimate interest, you have the right to object to the processing of your personal data at any time. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; if you object, your personal data will subsequently no longer be used for the purpose of direct marketing.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR or the FADP, data subjects have the right to lodge a complaint with the competent supervisory authority. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Data security

We take appropriate technical and organisational measures to secure the data. This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Automated decision-making in individual cases incl. profiling

We do not carry out automated decision-making in individual cases in accordance with Art. 22 GDPR or automated individual decision-making in accordance with Art. 21 nDSG.

Changes to the online privacy policy

We reserve the right to amend this privacy policy at any time. The version published on our website applies.

This version of the online privacy policy forms the basis for the translations into English, French and Italian. The German version is valid. If you have any questions, please contact us.