PERSONAL DATA PROTECTION POLICY
for protection of personal data on the www.k3ultra.bg website
in force as of 01/02/2019
INTRODUCTION
This website www.k3ultra.bg is owned by the K3 Ultra Association and is managed in accordance with the provisions of the Personal Data Protection Act and related legislation, including but not limited to Regulation (EU) 2016/679 (GDPR).
K3 Ultra Association, UIC: 205427905, head office and registered address: 4980 Zlatograd, 9 Delyo Voivoda St., in carrying out its activities, processing information, including personal data.
1.IMPORTANT INFORMATION
ADMINISTRATOR
K3 Ultra Association, UIC: 205427905 is responsible for your personal data that you have provided to us. We have appointed a Data Protection Officer (DPO) who is competent and responsible for the matters of this policy. If you have any questions about this Policy or wish to exercise any of your legal rights, please contact us.
CONTACT DETAILS
K3 Ultra Association, 4980 Zlatograd, 9 Delyo Voivoda St., email: k3ultrabg@gmail.com,
THE MAIN POINT OF THE POLICY
This Policy aims to inform you about the way in which we collect and process your personal data, as well as about your rights. The protection of personal data is extremely important to us. K3 Ultra does not sell your data to other companies or individuals.
If we provide your data to third parties, these are our contractors who process the information on our behalf, following our instructions and applying our standard for protecting your personal data. We strive to be as clear, specific and transparent as possible in the information we provide you regarding the processing of your personal data.
PERSONAL DATA
Personal data is any information related to an identified or identifiable natural person (such as email address, names, age, date of birth, telephone and others).
Personal data revealing race or ethnic origin, political views, religious or philosophical beliefs or trade union membership and processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, health or data concerning a natural person’s sex life or sexual orientation are special category of personal data. K3 Ultra does not process such information about you.
2. PERSONAL DATA WE COLLECT
When registering to participate in our events through our website: first name, surnames, user name or similar identifier, date of birth, gender, email address, telephone number;
Payment details and protection of your payment-related data – email address, customer number, telephone number, billing/payment address, information related to the means of payment, service amount, fee;
To record your activity during our sports events: name, date of birth, sex.
3. HOW WE COLLECT PERSONAL DATA
K3 Ultra collects, uses, stores and processes your personal data, which the Association needs for the services provided. Your data serves to identify you on our website; management of your statistics when participating in organised by K3 Ultra events; when required for insurance purposes; in online payments.
We use a variety of methods to collect data from and about you, including through:
- Direct communication: You may provide us with your personal and contact information by filling out forms on this website, or by phone, email or otherwise. This includes personal data that you provide when you create (where possible) a user profile on our website, register for a service or posts, participate in a competition or survey and/or comment or rate our news and galleries.
- Automated technologies: While you use our website, we may collect data about your equipment or behaviour in an automated manner. We collect this data using various technologies, including “Internet cookies”.
- Third parties or publicly available sources: We may receive your data through various third parties and publicly available sources, including analytics service providers such as Google and publicly available sources that provide access to your data, including contact information
4. PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA
The main activities, purposes and grounds that are related to the processing of personal data are data management for the purposes of fulfilling the registration for participation in our event, for the prevention of fraud in connection with a payment and accounting and invoicing of the payment of the participation fee;
We may periodically use your personal information to send you important messages related to the regulation, programme, changes, conditions for participation in any of the events organised by us. We may also use your personal information for checks, data analysis and research to improve the services and communication with the members and users of the K3 Ultra Association. Internet cookies (Google) – these are small information files that are saved in your Internet browser (data on the language used, connection time, Internet pages visited) or hard disk when you visit the site.
You can change the settings of your Internet browser so that it refuses all or some Internet cookies, does not save cookies, or delete already saved ones. K3 Ultra is not responsible if the Internet browser you use does not support the functions of controlling the use, refusing to save or deleting saved cookies.
We draw your attention to the fact that if you share the use of your device with other persons, it is possible to change the personalised characteristics of the cookies.
SOCIAL MEDIA
Your access to social networks such as Facebook, YouTube and others, requires a separate registration and acceptance of the general terms and conditions of these sites. K3 Ultra is not responsible for the protection of your personal data upon acceptance of these general conditions. Please familiarize yourself with the general conditions of these sites in detail.
5. PROVIDING YOUR PERSONAL INFORMATION
In certain cases, K3 Ultra may disclose certain personal information to strategic partners – subcontractors who work with us by providing products and services related to the activities of the Association or helping K3 Ultra the marketing activities of our members. Personal information will be shared by us only for the purpose of providing or improving our services and advertising; it will not be shared with third parties for their marketing purposes.
For cases in which K3 Ultra shares information about you with third parties – suppliers and subcontractors, the Association has mechanisms in place to ensure that they provide a level of data protection according to the agreed standard for this. Your data is considered confidential for our partners as well.
It may be needed – by law, in a legal process, in a legal dispute and/or at the request of public and government bodies in or outside your country of residence – for K3 Ultra to disclose your personal information. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other matters of public importance, such disclosure is necessary or appropriate.
We may also disclose information about you if we determine that such disclosure is reasonably necessary to enforce our terms and conditions, or to protect our operations or users. Additionally, in the event of a reorganisation, we may transfer any or all personal information collected to the applicable third party.
6. INTERNATIONAL DATA TRANSFERS
K3 Ultra does not transfer your data to third countries outside the EU.
7. DATA SECURITY
We have implemented appropriate security measures to prevent the accidental loss, use, unauthorised access, alteration or disclosure of your data. We also have limited the access to personal data to those employees, subcontractors and other third parties who need this access for the purposes of their business and to fulfil their official duties. They will process your data only according to our instructions. They also have an obligation to maintain the confidentiality of your data.
We have procedures in place to deal with data security breaches and will notify you and the relevant regulator of any breach for which we are legally required to make such notification.
8. DATA STORAGE
We will only keep your data for as long as we need it for the purposes for which we collected it, including to comply with our legal obligations.
To determine the appropriate retention period, we take into account the amount, nature and sensitivity of the data, the potential risk of harm in the event of unauthorised use or disclosure, the purposes of the processing and whether we can achieve those purposes by other means, as well as the applicable legal data storage requirements.
We are required by law to keep certain basic data about our users, such as names, contact information, for a period of ten years.
9. YOUR LEGAL RIGHTS
Data protection legislation gives you certain rights, including:
- Right of access to your personal data
- Right to correct your personal data
- Right to erase your personal data
- Right to object to the processing of your data
- Right to request restriction of processing of your data
- Right to transfer your data to a third party
- Right to withdraw your consent to the processing of your data
We will not charge a fee to provide you with access to your data. However, we may charge such a fee, in reasonable amount, or refuse to fulfil your request if it is unreasonable, repetitive or excessive.
Upon receipt of a request to exercise one of your rights, we may need additional information from you to verify your identity in order to ensure that you have the right to access the data (or to exercise any of the other rights). This is a security measure that aims to ensure that personal data is not provided to persons who do not have the right to receive it.
We will strive to respond to all legitimate requests within one month. It may take us more than a month to respond to your request if it is particularly complex or if we have received numerous requests from you. In this case, we will notify you in a timely manner and inform you regularly of any developments.
10. VALIDITY AND UPDATES OF THIS POLICY
We may periodically update our Personal Data Protection Policy. In the event of a change to this policy, a notice will be published on our website, as well as the updated Personal Data Protection Policy.
11. CONTACT DETAILS
If you wish to contact us regarding matters related to this policy or the protection of personal data in K3 Ultra, or to exercise your rights please contact us at the above address.