PRIVACY STATEMENT

Registration as a participant

First name, surname, email address, date of birth, your club if you have one, the distance you choose and your payment details. We need your date of birth for the age categories in the results and to check that you meet the minimum age.

• ·Legal basis: performance of the contract (Article 6(1)(b) GDPR). Without this data we cannot let you start.
• ·Retention: we keep data about your participation until two years after the edition. Financial records are kept for seven years, because the Dutch tax authorities require it.

Your emergency contact

The name and telephone number of someone we may call if something happens to you out on the course. This person does not provide that data to us themselves, so we ask you to let them know.

• ·Legal basis: legitimate interest (Article 6(1)(f) GDPR). The safety of participants in a 226-kilometre race weighs heavily.
• ·Retention: deleted no later than three months after the race. After that it no longer serves a purpose.

Payment

Your payment runs through Mollie. We only see whether a payment succeeded and for what amount; your account number, credit card number or banking details never reach our own systems.

• ·Legal basis: performance of the contract.
• ·Retention: seven years (statutory retention obligation for financial records).

Newsletter

First name, surname and email address, which you enter yourself in the signup form on this site. We use them only to send you the newsletter, nothing else.

• ·Legal basis: your consent (Article 6(1)(a) GDPR).
• ·Retention: until you unsubscribe. Every newsletter carries an unsubscribe link; one click is enough.

Signing up as a volunteer

Name, email address, telephone number, your preferences for roles and time slots, and anything else you fill in yourself. The form runs through Tally.

• ·Legal basis: performance of the agreement about your contribution, and our legitimate interest in being able to organise the event.
• ·Retention: up to one year after the edition, so we can approach you for the next one. Would you rather we didn't? Let us know and we'll delete your data straight away.

Contact by email

Whatever you put in your message yourself: your name, your email address and your question.

• ·Legal basis: legitimate interest. We want to be able to answer your question.
• ·Retention: two years after the last contact.

Results and timing

Your race number, name, town, category and times. Timing is handled by a specialist company (race|result; MyLaps for earlier editions). Results are public. That comes with a race and is set out in the participant conditions.

• ·Legal basis: legitimate interest in a public race result.
• ·Retention: results stay online as a historical archive. If you have a compelling reason not to appear in the results, please contact us.

Photos and video

During the event our photographer and videographer capture images, which we use on the site and on our social media channels. You may be recognisable in them.

• ·Legal basis: legitimate interest in reporting on and promoting the event.
• ·You can object at any time. See the section on images below.

Website statistics

Only if you give consent do we use Google Analytics to measure how many people visit the site, which pages they read and how they find the site. Google Analytics does not store IP addresses; we see no names or email addresses.

• ·Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw via 'Cookie preferences' at the bottom of every page.
• ·Retention: the cookies stay for two years; we keep the measurement data for as short a time as Google Analytics allows. If you don't give consent, nothing is measured and the measurement script isn't even loaded. See the cookie statement.

Access

You may request which data we hold about you and what we do with it.

Rectification

Is your data incorrect? Then we'll correct it.

Erasure

You may ask us to erase your data. That isn't always possible straight away. Financial records, for instance, are subject to a statutory seven-year retention obligation.

Restriction and objection

You can have processing suspended while a discussion is ongoing, and object to processing that rests on our legitimate interest, such as photography.

Portability

Data you provided yourself will, on request, be supplied to you or to another party in a common digital format.

Withdrawing consent

If you gave consent for the newsletter or for statistics, you may withdraw it at any time. That applies from that moment on; what happened before remains lawful.

Lodging a complaint

If we can't resolve it together, you can lodge a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl. You always have that right, even without coming to us first.