INFORMATION ON THE COLLECTION AND PROCESSING OF PERSONAL DATA (PRIVACY POLICY)
INTRODUCTORY NOTES
As part of the European Running Championships, which will be held in Belgrade 17. On 17 and 18 April 2027, we will organize a marathon, half marathon, and 10-kilometre race, open to all interested runners (“mass runners”), including members of relay teams (“teams”), as well as group participants from companies and other organizations (“groups”) (hereinafter referred to as the “Event”).
The Belgrade Marathon is aware and understands that privacy is of great importance to you, so we take the protection of personal data very seriously. By creating this Privacy Policy, we aim to make the processing of your personal data transparent and easy to understand. Therefore, this Privacy Policy, together with our Terms and Conditions and Cookie Policy, contains information that relates to or may relate to you.
In this Privacy Policy, we explain how, in our capacity as the Data Controller, we collect, process, and use your personal data – both during the registration and application process for the Event through the registration platform available on the Website [europeanrunningchampionships, njuko], and in connection with your participation in the Event, including the organization and management of the Event. We also explain how you may exercise the rights available to you as a data subject.
The Website may contain links to third-party websites. For more information about how your personal data is processed on those websites, please refer to their respective privacy policies.
This Privacy Policy has been prepared in accordance with the provisions of the Personal Data Protection Act (Law on Personal Data Protection).Official Gazette of the Republic of Serbia, No. 87/2018. (the “Law”).
HANDLER
We are BELGRADE MARATHON PRODUCTION, MARKETING AND ORGANIZATION OF SPORTS EVENTS LLC, BELGRADE, with registered office at Dr. Iva Popovića Đanija 3a, Belgrade (Savski venac), Republic of Serbia, registration number 06303773 (hereinafter: ” Belgrade Marathon ” or ” Rukovalac ” or ” We “).
The controller is the person who determines the purpose and method of data processing, and in the event that two or more controllers jointly determine the purpose and method of processing, then they are considered joint controllers.
PERSONAL DATA PROTECTION OFFICER
The Data Protection Officer of the Controller is Sanja Kovačević, +381 11 3690709, [sanja.kovacevic@bgdmarathon.org](mailto:sanja.kovacevic@bgdmarathon.org).
PERSONAL INFORMATION WE COLLECT
Personal data is any data relating to a natural person whose identity is determined or determinable, directly or indirectly, in particular on the basis of an identity marker, such as name and identification number, location data, identifiers in electronic communication networks or one, i.e. more features of his physical, physiological, genetic, mental, economic, cultural and social identity.
The Belgrade Marathon collects, processes, stores, and transfers various types of your personal data, which we have grouped as follows:
“Identity Data” includes first name, last name, username or similar identifier, gender, date of birth, address, nationality, photographs, and video recordings.
“Contact Data” includes email address(es), telephone number(s), as well as emergency contact information.
“Transaction Data” includes details of payments you have made to us.
“Profile Data” includes your registration for participation in the Race, T-shirt size, expected race time, race bib number, position on the map and split and finish times during live race tracking, performance, results, and finishing time achieved at the Event.
“Marketing Data” includes your choices and preferences regarding the receipt of marketing communications from us and third parties.
“Technical Data” includes your Internet Protocol (IP) address, browser type and version, and other data/technologies relating to the devices you use to access the Website.
HOW WE COLLECT YOUR PERSONAL DATA
We use a variety of methods to collect data from and about you, including:
Direct interaction . You provide Identity Data, Contact Data, and other data specified in the previous section when registering for the Event through the Website.
Automated Technologies or Interactions . As you interact with the Website, we may automatically collect technical data about your equipment, browsing actions and behavioral patterns. We collect this personal data using cookies, server logs and other similar technologies. Please see our Cookie Policy for more details.
Organization and Management of the Event. We collect and process your personal data, either directly or through our partners and data processors, in connection with your participation in the Event (e.g. allocation of a race bib number, photographs and video recordings taken during the race, live race tracking (map position and split and finish times), timekeeping, recording of results and rankings, and publication of results).
Third Parties. We may receive your personal data from various third parties. In such cases, information regarding the processing of your personal data is provided in this Privacy Policy or, where required by law, the relevant information concerning the processing of your personal data will be provided to you within a reasonable period of time.
HOW WE USE YOUR PERSONAL DATA (LEGAL BASES AND PURPOSES OF PROCESSING)
We will use your personal data only when and in the manner permitted by law. We will most commonly use your personal data in accordance with the following legal bases: a) when we need to perform a contract that we are about to conclude or have already concluded with you, b) where it is necessary for our legitimate interests (or those of a third party), provided that your interests and fundamental rights and freedoms do not override those interests; c) when we have received your valid consent to process personal data, d) when we need to fulfill a legal or other legal obligation.
We collect and use your personal data for the performance of a contract concluded with you (Article 12, paragraph 1, item 2 of the Law), in particular in relation to:
- enabling your registration for the Event through the Website;
- receiving payments and providing any type of support related to the Event, including service communications (via email or other means), such as sending registration confirmations and reminders, as well as handling requests related to logistics, accessibility, payments, amendments, and similar matters;
- providing the equipment necessary for participation in the Event, such as special apparel in the appropriate size;
- conducting and managing the Event, including its efficient and proper organization and, most importantly, ensuring participant safety and compliance with applicable sporting rules and regulations;
- timing the race, determining and publishing results, and ranking participants in the Event.
In addition, we collect and use your personal data for the purposes of our legitimate interests, or the legitimate interests of our partners (Article 12, paragraph 1, item 6 of the Law), in particular in relation to:
- ensuring the security, stability, and proper functioning of the registration platform on the Website, including implementing technical improvements aimed at optimization and the prevention of misuse;
- enabling live tracking of the Event through dedicated applications, including making available to application users (e.g. participants and spectators) information such as participants’ positions on a map, split times, finish times, and similar race-related data;
- photographing and recording the Event, as well as creating other audio-visual materials related to the Event, and using such materials for the promotion of the Event and its future editions (including through social media);
- providing you with information about other events and activities that may be of interest to you;
- sharing data with European Athletics and the Serbian Athletic Federation for the purposes of organizing and managing the Event, as well as for post-event reporting and statistical record-keeping;
- preventing and detecting unlawful conduct, as well as protecting and enforcing our rights and the rights of our partners.
We also collect and use your personal data on the basis of your consent (Article 12, paragraph 1, item 1 of the Law), including for the following purposes:
- to provide you with information about the activities, services, and products of the partners and sponsors with whom we cooperate in connection with the Event;
- to include you in our newsletter mailing lists and other promotional activities;
- to share your personal data with our partners and sponsors for the purposes of their own marketing activities;
- to enable you to purchase photographs and video recordings featuring you from our partners;
- to enable European Athletics and the Serbian Athletic Federation to provide you with information about future events and similar activities.
To register for the Event through the Website (i.e. to enter into a contractual relationship with us), you are required to provide the data requested for this purpose, as well as any other data that must be collected in accordance with applicable laws and regulations. If you do not provide such personal data, you will not be able to successfully complete your registration for the Event.
You are not required to provide consent for the processing of data that is not necessary for the establishment and performance of the contractual relationship with us, nor required by applicable law, but is instead collected on the basis of your consent (where applicable).
In any event, if you have any questions, including whether the collection of certain personal data constitutes a legal or contractual requirement or is necessary for entering into a contractual relationship with us, we remain at your disposal and will be happy to provide any necessary clarification.
If we intend to process your personal data for purposes other than those set out above, we will provide you with all necessary information in accordance with the Law before commencing such further processing.
Contact us to learn more about the legal basis we will apply to process your personal data.
WITH WHOM WE SHARE YOUR PERSONAL DATA
We ensure that access to personal data is granted only to those employees who require such access in order to perform their duties and responsibilities. We take all reasonable measures to ensure that our employees keep your personal data confidential, including by imposing confidentiality obligations and providing appropriate data protection training.
Access to personal data may also be granted to third parties where they have a lawful or legitimate reason for such access. Whenever we allow a third party to access personal data, we will take appropriate measures to ensure that the data is used in a manner consistent with this Privacy Policy.
In this regard, we may share your personal data with service providers, sponsors and partners of the Event, partner sports organizations involved in the Event, as well as providers of IT and communications infrastructure services (including the provider of the registration platform), event photography and filming services, live event tracking services through dedicated applications, security service providers, and advisors, lawyers, insurance companies, marketing agencies, newsletter service providers, and social media platforms, acting on our behalf or jointly with us, pursuant to cooperation agreements, data transfer agreements, and/or data processing agreements.
We act as an independent data controller and are responsible for our own data processing activities. However, particularly in connection with the organization and management of the Event, we share participant data with the European Athletics Association (European Athletics Association (EA), Avenue Louis-Ruchonnet 16, CH-1003 Lausanne, Switzerland), which holds the rights to the 2027 European Running Championships, as well as with the Serbian Athletic Federation (Bulevar Oslobođenja 54, 11000 Belgrade), which, together with us, is locally responsible for all aspects of the organization and delivery of this competition.
The primary purpose of this data sharing is the exchange of registration and accreditation data, as well as other participant-related information, in order to ensure that the competition is conducted safely and in accordance with applicable rules and regulations. The purposes also include post-event reporting and statistical record-keeping. In addition, data may be shared for the purpose of informing participants about relevant news and future events, provided that the participants have given their consent for such communications.
Subject to your explicit consent, your personal data may be transferred to Abbott World Marathon Majors (United States of America) for the purpose of your selection and qualification for the world’s leading marathons (Tokyo, Boston, London, Berlin, Chicago, and New York) within the masters categories of these prestigious marathon events. The Data Controller does not control this organization and is not responsible for its collection or processing of personal data.
We have also established a business cooperation with Witisi Sport GmbH, Germany (Hohler Weg 21, 53343 Wachtberg), which has been entrusted with photographing and filming our events. Such photographs and video recordings may be offered to you for purchase by Witisi Sport GmbH, provided that you have previously consented to the transfer of your data to this company for that purpose.
In this regard, the Data Controller and Witisi Sport GmbH act as joint controllers pursuant to a separate agreement that transparently allocates their respective responsibilities for compliance with the obligations prescribed by the Law. A summary of this agreement is available upon request by contacting our Data Protection Officer.
Please note that you may exercise your rights, as further described in the section “Your Rights,” directly with either of the joint controllers, regardless of the internal allocation of responsibilities under the aforementioned agreement.
Finally, we may disclose your personal data to third parties whenever necessary or appropriate and in accordance with applicable regulations, including:
- to fulfill our legal obligations, or when necessary to comply with laws, regulations, or contracts, or to respond to a court order, judicial, or administrative proceeding;
- in response to legitimate requests from government authorities;
- when necessary for the establishment, exercise, or defense against potential, threatened, or actual legal claims or proceedings;
- where it is necessary to protect your vital interests or the vital interests of another person;
- in connection with the reorganization of our company or group, or the sale, assignment, or other transfer of all or part of our business, including to potential purchasers or investors in the company or any part of its business; or
- with your consent.
PURPOSES FOR WHICH WE USE YOUR PERSONAL DATA
Your consent
| Purpose / Activity | Type of Personal Data | Legal Basis | Retention Period |
|---|---|---|---|
| Profile creation (registration) on the website | Identity data | Your consent | For as long as the profile is active (i.e. not deleted by the user) |
| Contact details | Your consent | ||
| Contact details | Your consent | ||
| Marketing data | Your consent | ||
| Registration for races organised by the Controller | Identity data | Performance of a contract or taking steps, at your request, before entering into a contract | Until the purpose is fulfilled, and no longer than one year |
| Contact details | Performance of a contract or taking steps, at your request, before entering into a contract | ||
| Transaction data | Performance of a contract or taking steps, at your request, prior to entering into a contract | ||
| Profile data | Performance of a contract or taking steps, at your request, prior to entering into a contract | ||
| Organisation of races and publication of results | Identity data | Performance of a contract; Legitimate interest of the Controller (we must be able to publish and retain results, rank race participants, etc.) | Permanent |
| Profile information | |||
| Contact Information | |||
| Recording (video and photo) and publication of materials from races organised by the Controller and/or its partners, for the purposes of organising and promoting the races and related activities | Full name, video recordings, photographs | Legitimate interest of the Controller and its partners (we and our partners must be able to publish and present our races through print and electronic media, on the website and social networks, as well as in other current or future media) | Permanent |
| Live race tracking (participants’ positions on the map and their split and finish times) via a dedicated application, as well as publishing and making such data available to application users (e.g. participants and spectators) | Identity data | Your consent | Until consent is withdrawn |
| Profile information | |||
| Transfer of your data to the organisation Abbott World Marathon Majors (United States) for your selection and qualification for leading world marathons (Tokyo, Boston, London, Berlin, Chicago, New York) in master competition categories | Identity data | Your consent | Until consent is withdrawn |
| Contact Information | |||
| Profile information | |||
| Inclusion in our newsletter lists and other promotional activities | Identity data | Your consent | Until consent is withdrawn |
| Profile information | |||
| Marketing data | |||
| Sale of photographs and video recordings from races in which you appear, through our partners | Identity data | Your consent | Until consent is withdrawn |
| Contact Information | |||
| Photographs and Video Recordings in which you are captured as a participant in our events | |||
| Transfer of your data to third parties for marketing purposes | Identity data | Your consent | Until consent is withdrawn |
| Contact Information | |||
| Marketing data | |||
| Use of cookies (see Cookie Policy) | Technical data | Your consent | Until consent is withdrawn |
If we intend to process your personal data for purposes other than those listed above, then we will provide you with all the necessary information in accordance with the Law before starting such processing.
HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?
When determining the appropriate retention period for personal data, we take into account the amount, nature and sensitivity of personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process personal data and whether we can achieve those purposes by other means and in accordance with the applicable regulation.
In this regard, your personal data will be retained by us until the contract has been fulfilled or the purpose for which the data was collected has been achieved, unless applicable laws require longer retention periods.
Generally, and unless another processing purpose requires otherwise, your personal data will be retained for the duration of the Event and for an appropriate period thereafter for the purposes of pursuing legitimate interests, reporting and statistical analysis, complying with legal obligations, or establishing, exercising, or defending legal claims in ongoing or potential judicial or other proceedings.
Personal data may also be retained for a longer period if you have provided your consent or where applicable laws prevent their deletion. Personal data processed for marketing purposes on the basis of your consent will be retained until it is no longer necessary for the purpose for which it was collected or until you withdraw your consent, whichever occurs first.
If you submit a justified request for erasure or withdraw your consent to the processing of your personal data, your data will be deleted unless there are other lawful grounds for its retention (e.g. retention periods prescribed by tax or financial regulations, or ongoing or potential judicial or other proceedings). In such cases, the data will be deleted once those grounds for retention no longer exist.
European Athletics retains data relating to the organization of the Event and competition results for up to three (3) years after the Event for reporting and statistical purposes. Certain results-related data (e.g. name, nationality, finishing time, and ranking) may be retained for a longer period where necessary for maintaining historical records, rankings, and the integrity of the sport.
Data processed for future communications will be retained only where the data subject has provided consent, and only until such consent is withdrawn. Whenever possible, data will be anonymized for long-term statistical and historical purposes.
MARKETING
We strive to provide you with choices regarding the use of your personal data, particularly in relation to marketing and promotional activities.
We will use your identity data, contact data and marketing data to send our newsletters and other promotional content, if you have given us your consent (opt-in) for these purposes. You may withdraw your consent at any time by logging into the Website and updating the relevant marketing preference settings in your profile (opt-out), by following the unsubscribe links included in any marketing communication sent to you, or by contacting us at any time.
In addition, where you have provided your consent, we may share your personal data with our partners and sponsors, who may subsequently contact you as part of their marketing activities. Please note that such disclosure of data to partners or sponsors is carried out solely on the basis of your consent, which you may withdraw at any time.
Before transferring your data to third parties based on your consent, we require them not to further disclose such data and to provide you with a simple, easy, and effective means of objecting to the further use of your data. However, despite our continuous efforts, we cannot guarantee that such third parties will always comply with these obligations to the extent desired.
RECIPIENTS, CATEGORIES OF RECIPIENTS
The Belgrade Marathon can deliver your personal data to processors with whom it has concluded data processing contracts and who process your data on behalf of the Belgrade Marathon as Controller, and for the purposes of achieving the above-mentioned processing purposes. The engagement of a data processor is conditional upon compliance with the legal basis we apply and the specific purpose of processing, as well as the implementation of appropriate procedures and protection mechanisms to ensure the security of your personal data and the exercise of your rights granted by law.
For example, the processors that Belgrade Marathon has hired (or can hire) are: 1) companies (service providers) engaged in the provision and maintenance of our IT and communications infrastructure;
2) companies (service providers) responsible for the maintenance of the Website and/or the application used on the Website;
3) companies (service providers) that provide race recording services (video recordings and photographs) or race timing services for participants;
4) companies (service providers) that provide services through applications enabling live race tracking (participants’ positions on a map, split times, and finish times), including the publication and making available of such data to application users (e.g. participants and spectators);
5) marketing agencies engaged for the purposes of marketing and advertising activities; and
6) other service providers engaged in connection with the organization and delivery of the Event.
We share video recordings and photographs (collectively, “recordings”) from our races with our partners with whom we cooperate in organizing and promoting the races. This allows our partners to further use such recordings for the purposes of organizing and promoting the races, as well as promoting their own activities related to the races. In particular, this includes publishing and displaying the recordings through print and electronic media, on their websites and social networks, as well as in other current or future media.
In addition, subject to your explicit consent, your personal data may be transferred to Abbott World Marathon Majors (United States of America) for the purpose of your selection and qualification for the world’s leading marathons (Tokyo, Boston, London, Berlin, Chicago, and New York) within the masters categories of these prestigious marathon events. The Data Controller does not control this organization and is not responsible for its collection, use, or processing of personal data.
Finally, we may disclose your personal data to third parties whenever necessary or appropriate and in accordance with applicable regulations, including:
- or to comply with our legal obligations, including where necessary to comply with applicable laws, regulations, or contracts, or to respond to a court order or judicial or administrative proceedings,
- in response to legitimate requests from government authorities;
- or when necessary for the establishment, exercise, or defense of potential, pending, or actual legal claims or proceedings,
- or where it is necessary to protect your vital interests or the vital interests of another person,
- • in connection with the reorganization of our company or corporate group, or the sale, assignment, or other transfer of all or part of our business, including to potential purchasers or investors in the company or any part of its business; or
- with your consent.
SECURITY MEASURES
The Data Controller implements appropriate technical, organizational, and personnel measures to protect personal data against unauthorized access, loss, destruction, alteration, misuse, or unauthorized disclosure.
These measures include access controls, secure data storage, regular reviews of our security practices, the implementation of backup systems and databases, management of data retention periods, employee training, and other appropriate safeguards. The measures are designed to ensure a level of security appropriate to the risks associated with the processing of personal data.
TRANSFER OF PERSONAL DATA OUTSIDE THE TERRITORY OF THE REPUBLIC OF SERBIA
Your personal data is stored at the premises of Belgrade Marathon as well as on servers located within the European Union.
Your personal data may be made available to certain categories of recipients outside the Republic of Serbia, as explained in the section “Recipients and Categories of Recipients.” In this regard, Belgrade Marathon will continuously ensure that any transfer of your personal data outside the Republic of Serbia is carried out exclusively in accordance with the Law and subject to an adequate level of protection equivalent to that guaranteed under the Law.
This includes, among other things, transfers to countries that have been recognized as providing an adequate level of protection (such as member states of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data), or transfers to other countries through the implementation of appropriate safeguards (e.g. standard contractual clauses, approval of the Commissioner for Information of Public Importance and Personal Data Protection, or similar measures), in accordance with the Law.
If you wish to obtain further information about these safeguards, you may contact our Data Protection Officer or send a written request to the address specified in the “Data Controller” section.
Furthermore, based on your explicit consent, your personal data will be transferred to Abbott World Marathon Majors (United States of America) for the purpose of your selection and qualification for the world’s leading marathons (Tokyo, Boston, London, Berlin, Chicago, and New York) within the masters categories of these prestigious marathon events.
This means that your personal data will be transferred to and processed in the United States of America (USA). Please note that the Republic of Serbia has not adopted a decision recognizing the United States as providing an adequate level of data protection. Consequently, the level of protection afforded to personal data in the USA may not necessarily meet the standards required under the Law. Furthermore, no appropriate safeguards have been established for this transfer to the United States.
Possible risks arising from the lack of data protection standards in the recipient country (such as the USA) include the following:
- Inadequate legal protection – the recipient country may not have comprehensive data protection regulations comparable to the Law, which may result in weaker privacy rights or insufficient legal remedies for individuals;
- Limited ability to exercise data subject rights – data subjects may not be able to exercise their rights (e.g. access, rectification, erasure, objection to processing) due to the absence of an independent supervisory authority or an adequate enforcement framework in the recipient country;
- Government surveillance and access – authorities in the recipient country may have broader powers of surveillance without adequate oversight or proportionality requirements, which may lead to unauthorized access to or misuse of personal data by public authorities;
- Unlawful or unauthorized data processing – without adequate safeguards, there is a risk of unlawful or unauthorized processing of personal data, including unauthorized sharing or sale of personal data to third parties, resulting in a loss of control over how personal data is used;
- Increased risk of data breaches – the recipient country may not have adequate technical and organizational security measures to protect personal data from unauthorized access, breaches, or cyberattacks, which may expose data subjects to risks such as identity theft or fraud;
- Difficulty in seeking legal remedies – in the event of a data breach or misuse of personal data, data subjects may face significant challenges in obtaining legal remedies or compensation in jurisdictions with inadequate or unclear legal procedures.
- Cross-border data sharing without consent – personal data may be shared across borders in ways that the data subject has not consented to or been informed about, undermining transparency and trust in data processing;
- Lack of data minimization and purpose limitation – in jurisdictions without adequate safeguards, personal data may be processed beyond the original purpose for which it was collected, potentially exposing data subjects to new or unexpected uses of their data.
You accept the potential risks that may arise due to the absence of an adequacy decision and appropriate protective measures, as outlined in this section.
COOKIES
The Belgrade Marathon integrates and uses cookies to enable certain website functions and integrate external web services and thereby improve the user experience. So-called “cookies” are small text files that your browser can store on your access device.
You can set your browser to reject all or some cookies, or to warn you when websites place or access cookies. If you disable or refuse cookies, please note that some parts of the Website may become unavailable or may not function properly. For more information about the cookies we use, see our Cookie Policy .
AUTOMATIC DECISION MAKING
The Belgrade Marathon uses your personal data to make the following automated decisions:
Allocation of Race Bib Numbers: Each person who registers for the Event is automatically assigned a race bib number upon submission and processing of their registration.
Determination of Starting Position/Start Group: Participants’ starting positions in our races are determined based on their expected finishing time.
Timekeeping and ranking of participants in current and overall standings: Time measurement and participant ranking are carried out automatically, based on the results achieved during the race.
THIRD PARTIES
We cannot exclude the possibility that sports clubs, companies, or other organizations may register participants through our registration system. When doing so, such organizations act as third parties. If, in your capacity as such a third party, you register other individuals with us, please note that you must have the valid consent of all such individuals at the time of registration.
By registering another person’s data, you confirm that you have obtained their consent and agree to indemnify and hold us harmless from any claims, demands, or liabilities brought by that person. If you do not have such consent, we reserve the right to take appropriate legal action, including seeking compensation for any damages incurred.
Third parties (including our partners and sponsors) may independently photograph and record our events and use such photographs or recordings, which may contain participants’ personal data, for purposes determined by them and which may not necessarily be related to the purposes described in this Privacy Policy. We do not control such third parties in connection with these activities and are not responsible for their collection or processing of personal data.
YOUR RIGHTS
As a data subject, you have the rights set out below under the Law in relation to the protection of your personal data. If you wish to exercise any of these rights, please contact our Data Protection Officer or send a written request to the address specified in the “Data Controller” section.
Right of access: You have the right to obtain information about the personal data we process about you.
Right to rectification and erasure: You may request that we correct inaccurate data and—where legal conditions are met—delete your personal data.
Restriction of processing: You may request—provided that the legal conditions are met—that we restrict the processing of your personal data.
Data portability: If you have provided data to us based on a contract or consent, you may, subject to the applicable legal conditions, request to receive the data you provided in a structured, commonly used, and machine-readable format, or request that we transfer it to another controller.
Right to Object: Where justified, you have the right to object at any time to the processing of your personal data by the Data Controller where such processing is carried out for the performance of tasks in the public interest or in the exercise of official authority vested in the Data Controller (Article 12, paragraph 1, item 5 of the Law), or for the purposes of the legitimate interests pursued by the Data Controller or a third party (Article 12, paragraph 1, item 6 of the Law), including profiling based on those grounds.
Upon receiving your objection, the Data Controller must cease processing your personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.
You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, your personal data shall no longer be processed for those purposes.
Consent: Where your personal data is processed on the basis of your previously given consent, you have the right to withdraw that consent at any time. To do so, you may contact our Data Protection Officer or send a written request to the address specified in the “Data Controller” section.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Data processing is prohibited after the withdrawal of consent, with the fact that the withdrawal of consent does not affect the legality of data processing based on the consent given before its withdrawal.
If you believe that the processing of your personal data has been carried out in violation of the Law, you may file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11120 Belgrade (“Commissioner”).
CHANGES TO THE PRIVACY POLICY
This Privacy Policy may be amended or updated from time to time to reflect changes in our data processing activities, legal obligations, or other relevant circumstances. The current and applicable version of the Privacy Policy is always available on the Website. We recommend that you periodically review the Website to stay informed of any changes to this Privacy Policy.
*************************************************************************************
[ ] I consent to the use of my personal data for inclusion in newsletter mailing lists and other promotional activities of Belgrade Marathon, in accordance with the information contained in this Privacy Policy.
[ ] I consent to the use of my personal data for receiving information about the activities, services, and products of Belgrade Marathon’s partners and sponsors, in accordance with the information contained in this Privacy Policy.
[ ] I consent to the transfer of my personal data to Belgrade Marathon’s partners and sponsors for the purposes of their marketing activities, in accordance with the information contained in this Privacy Policy.
[ ] I consent to the transfer of my personal data to Witisi Sport GmbH for the purpose of purchasing photographs and video recordings in which I appear during the race, in accordance with the information contained in this Privacy Policy.
[ ] I give my explicit consent for the collection, processing, and transfer of my personal data to the organization Abbott World Marathon Majors for the purpose of selection and qualification for leading world marathons (Tokyo, Boston, London, Berlin, Chicago, New York) in the masters competition categories, in accordance with the information contained in this Privacy Policy.
[ ] I consent to the transfer of my personal data to European Athletics and the Serbian Athletic Federation for the purpose of receiving information about future events and similar activities, in accordance with the information contained in this Privacy Policy.
IMPORTANT NOTICE FOR MINORS AND THEIR PARENTS / LEGAL GUARDIANS:
In the event that registration for the Event is made on behalf of a minor, the parent exercising parental responsibility (or another legal representative) shall be required to:
(i) Provide explicit consent for the collection and processing of the minor’s personal data in accordance with this Privacy Policy.
(ii) Select (opt-in above) the purposes of processing the minor’s personal data for which consent is being given (see above);
(iii) navede (upiše) svoje podatke u okviru donje tabele:
| Full name | Contact phone number | Email address |
|---|---|---|
| the parent exercising parental responsibility, or | the parent exercising parental responsibility, or | the parent exercising parental responsibility, or |
| other legal guardian | other legal guardian | other legal guardian |