Depending on the type of service or location where the services take place, different Spartan Race entities will be the data controller in relation to your Personal Information. The data controller is Spartan Race, Inc. and the Spartan Race affiliate(s) named when your Personal Information was collected or the affiliate(s) identified in the Spartan Race media source (website, email, etc.) that referred you to this Privacy Notice.
INFORMATION WE MAY COLLECT
Except as disclosed below, we do not sell, barter, give away, or license your Personal Information.
(a) Information You Provide to Us. If you have registered with Spartan Race, or ordered items from us, you may have provided us with your name, email address, telephone number, postal address, postal/ZIP code, gender, bank account details, and payment information. If you entered an event you may also have provided your date of birth, photograph, and information about the person who serves as your emergency contact. We also may collect and store your Personal Information that we receive from other sources, (e.g. the information we receive from ticketsocket.com, chronotrack.com, or athlinks.com or any race registration company we utilize when you register for an event or to be a spectator). Please be advised that ticketsocket.com, chronotrack.com, and athlinks.com have their own privacy policies and you should refer to them for any questions you may have about the information they may collect about you when you register for one of our events or to be a spectator using chronotrack.com or athlinks.com.
(b) Information We Collect Automatically. Even if you do not request a newsletter or fill-out a survey, when you interact with our Sites, we may collect certain information. For example, our servers keep an activity log that tracks all visitors to our Sites. The information our servers collect may include, but is not limited to: your IP address, your registered domain or home server, time of access, date of access, web page(s) visited, number of clicks, software crash reports, type of browser used, session identification number, search terms, search results, access times, and referring website’s addresses.
(c) Cookies and Spyware. We do not install spyware on your computer, nor do we use spyware to retrieve information from your computer.
You have the ability to accept or decline Cookies. Most web browsers automatically accept Cookies, but, if you prefer, you can usually modify your browser setting to decline Cookies. For more information on Cookies and how to disable them, you can consult the information provided by the Interactive Advertising Bureau at www.allaboutcookies.org.
(e) No Information Collected From Children. Our services are not directed to or intended for use by children, except for children who are registered for Spartan Race events by their parents or guardians. We will only collect information about children when we have the express consent from the child’s parent or guardian. The information we collect will only be used by Spartan Race and our partners to provide relevant event entries and participation, and to the extent we receive express consent from the child’s parent or guardian, to publish a child’s race results on our website or onsite at an Event. We need to use the information that you give us about your children to fulfil our agreement with you to provide our services. Consistent with the requirements of the US Children’s Online Privacy Protection Act, the GDPR, and all other applicable laws and regulations, if we learn that we have received information directly from a child under age 16 (or age 13 in certain jurisdictions) without his or her parent’s or legal guardian’s verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use our services. Subsequently, we will delete such information.
HOW WE MAY USE YOUR INFORMATION
(a) Personal Data Obtained in Connection with the Services. We use your Personal Information in different ways, depending on the nature of the Services, communications, or other interactions between you and Spartan Race. Below is a table describing how we use Personal Information we process, why we do it, and the legal basis for each category of use.
(b) Use of Anonymous Information. We may use information we collect automatically to help us determine how viewers use our Sites and who our users are in order to improve our Sites. We may also use this information to provide information in aggregated form to our partners and other third parties (e.g. Rakuten Marketing) about how our users collectively use our Sites. We may also use or share this information (or other information, other than Personal Information) in any other manner that we deem appropriate or necessary, subject to your consent.
(c) Third-Parties. We may occasionally have third party representatives, agents, affiliates, and partners perform functions on our behalf, such as event registration, marketing, analytics, etc. These entities may have access to your Personal Information, but only as needed to perform their services.
(d) Emergency Situations. We may also use or disclose Personal Information if required to do so by law or in the good-faith belief that such action is necessary to: (a) conform to applicable law or comply with legal process served on us or our Sites; (b) protect and defend the our rights or property, our Sites or our users, and (c) act under emergency circumstances to protect the personal safety of us, our affiliates, agents, the users of our Sites or the public. For example, if an event participant is injured, it may be necessary for us to disclose personal data, including health status information to medical care providers.
HOW WE SHARE PERSONAL DATA
Your Personal Information will be used by other Spartan Race affiliates for the purposes described above and for accounting, tax and other administrative purposes.
We may disclose some or all of your Personal Information to third parties in accordance with contractual arrangements we have in place with them, including representatives, agents, affiliates, and partners that perform functions on our behalf, such as event registration, timekeeping, race results processing, marketing, analytics, IT services, data storage, payment processing, survey and market research.
We may also share your Personal Information with third-parties so that they can send you communications about their products and services, however we will only share your Personal Information under these circumstances if we receive your prior express consent.
If we determine it to be necessary, we may also disclose your Personal Information to a third party: (i) to respond to an emergency or health incident; (ii) to comply with any law applicable to us, a court order, a request from law enforcement or other legal process; (iii) to protect the legitimate rights, privacy, property, interest or safety of Spartan Race, our personnel, customers, business partners or the general public; (iv) in relation to a change in ownership or control of Spartan Race such as a merger, sale, acquisition, or bankruptcy; or (v) to prevent, detect to actual or potential fraud or other illegal activities.
LINKING TO OR FROM OTHER WEBSITES
Spartan Race will maintain appropriate security measures to minimize the risk that personal data will be lost, used without authorization, or accessed without authorization. We limit access to your Personal Information to those who have a legitimate business need to use it. Those who process your information will do so only in an authorized manner and are subject to a duty of confidentiality. We have implemented procedures to deal with suspected security incidents involving personal data and will notify the applicable regulators and you of such incidents as required by applicable law.
INTERNATIONAL TRANSFER OF YOUR PERSONAL DATA
We transfer your Personal Information to countries outside the European Economic Area. Spartan Race, Inc. is a United States based company that conducts data processing in the United States. Therefore, we will require that you consent the transfer of your Personal Information to Spartan Race, Inc. in the United States before providing you with the Services.
We have taken steps to protect your privacy and fundamental rights when your Personal Information is transferred to third parties the United States and other countries where no adequacy decision of the European Commission exists. Spartan Race will make sure that the recipient is subject to a jurisdiction for which an adequacy decision of the European Commission (including the EU-US Privacy Shield where the recipient is a participant), or that there are adequate safeguards in place such as the Standard Contract Causes or binding corporate rules.
(a) GDPR. Under the European Union General Data Protection Regulation, residents of the European Economic Area have important rights regarding access to and control of your Personal Information, including:
Right of Access: You have the right to ascertain what type of Personal Information Spartan Race holds about you and to a copy of this Personal Information.
Right to Complain: You have the right to file a complaint regarding the processing of your Personal Information to the Supervisory Authority of your Member State.
Right to Erasure: In certain circumstances you may request that we delete the Personal Information that we hold about you.
Right to Object: When we rely on our legitimate interests to process Personal Information, you have a right to object to this use. We will stop processing your Personal Information unless we can demonstrate an overriding legitimate interest in the continued processing.
Right to Portability: You may request that we provide you with certain Personal Information which you have given us in a structured, commonly used and machine-readable format and you may request that we transmit your Personal Information directly to another data controller where this is technically feasible.
Right to Rectification: You have the right to have any inaccurate Personal Information which we hold about you updated or corrected.
Right to Restriction: You have the right to request that we stop using your Personal Information in certain circumstances including if you believe that the Personal Information we hold about you is inaccurate or that our use of your Personal Information is unlawful. If you validly exercise this right, we will store your Personal Information and will not carry out any other processing until the issue is resolved.
Right to Know About Personal Information Collected, Disclosed, or Sold: You have the right to request, subject to verification of your identity, that we disclose to you what Personal Information we have collected, used, disclosed, or sold over the past 12 months.
Right to Request Deletion of Personal Information: You have the right to request, subject to our verification of your identity, that we delete the Personal Information that we have collected or maintain about you, subject to certain exceptions.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment from us for the exercise of your rights described in this section. You will receive equal service and price from businesses, even after exercising the foregoing privacy rights. Please note that if the exercise of these rights limits our ability to process Personal Information (such as in the case of a deletion request), we may no longer be able to provide you our products and services or engage with you in the same manner.
Right to Opt-Out: You have the right to opt-out of the sharing of your Personal Information with third parties for their own business purposes. To opt out of the share of your Personal Information, you may submit a request to us at:
-Send an email to us at email@example.com
-Selecting the “Do Not Sell My Personal Information” checkbox that appears when you visit our Sites.
How to Exercise Your Rights to Access and Deletion: To exercise your right to access or your right to delete, please submit a request to us in one of the following ways:
-Send an email to us at firstname.lastname@example.org
-Call us toll free at 1-508-433-0041
(c) Please bear in mind that your rights in relation to your Personal Information are not absolute and that we must be cognizant of our legal obligations. If you choose to exercise some of your rights, we may not be able to perform the actions necessary to provide the Services or otherwise achieve the purposes set forth above.
You can exercise these rights by contacting us using the information in the Contact Us section below. We may request that you provide proof of your identity for security reasons and in order to prevent the unauthorized disclosure or misuse of Personal Information. We will only charge you for requests to access your Personal Information where they are unreasonable, unfounded or excessive. If we are unable to honor your request, or before we charge a fee, we will let you know why.
RETENTION OF PERSONAL DATA
We will keep your Personal Information for the time necessary to fulfill the purposes for which it was collected, including any legal, accounting or reporting requirements. To determine the appropriate retention period, we consider the categories, amount, nature and sensitivity of personal data, the potential risk of harm from unauthorized use of disclosure of the personal data, the purposes for which we process the personal data, if we can achieve the purposes through other means, and the applicable legal requirements.
CHANGES TO THIS POLICY
This Privacy Notice became effective on May 25, 2018 and was last updated on September 29, 2020.
We may amend this Privacy Notice on occasion, at our sole discretion. Any change will be effective immediately. You should check this page from time to time to note any changes we make, as they will be binding on you. We will notify you of changes to this Privacy Notice by updating the version date. We may also notify you of changes in other ways, including by email.
CONTACT US, MANAGE YOUR PERSONAL DATA