The purpose of the following document (hereinafter, the “Privacy Policy”) is to describe how RISKY PASS, S.L. (“BADLANDS”) processes your personal data in compliance with the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (“GDPR”) and the Spanish Act 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights (“SDPA”).

Accessing and using this Website does not require you to provide us with any personal data or to register as a user. However, we remind you that cookies may be installed on your device in accordance with the provisions of our Cookies Policy (you can obtain more details about the cookies we use and how you can disable them in our Cookies Policy).

Notwithstanding the above, the Website contains different forms through which you can provide us with your personal data. This Privacy Policy describes all the processing carried out by BADLANDS, both of the data collected through the Website and of the data derived from your participation in the route.

In order to carry out the draw for route entries, BADLANDS will request you the following personal data:

• Identification data: name, surname, ID number, nationality, e-mail, telephone number, birth date. Additionally, you can optionally provide us information about your sponsors, gender or your social media information.

In order to register in the route, it is necessary to provide certain personal data. If you choose not to provide them, you may not be able to complete your registration as a participant. The personal data needed to manage your registration in the route is:

• Identification data: name, surname, ID number, nationality, e-mail, telephone number, birth date, address, ICE name, ICE surname, ICE telephone, ICE e-mail. Additionally, you can optionally provide us information about your sponsors, gender or your social media information. You may provide a nickname instead of your real name for the purpose of publishing your times/results on the Website to preserve the privacy of your data.
  
• Financial data: proof of payment of the service.
• Geolocation data: location data during the route via the tracker that will be provided to you. Your location data will be displayed on our Website.
• Image: during the route, BADLANDS may take pictures/videos of participants.
• Other data: If you participate in the route with sponsors, the name of your sponsor will be processed.

In order to register for the Social Rides, BADLANDS will request you the following personal data:

• Identification data: name, surname, e-mail, telephone number.

If you just subscribe to our newsletter, we will only process your e-mail.

If you submit a query, request or complaint, in addition to the above data, we will process any personal data included in the query, request or complaint that you voluntarily provide us with.

We will also process the contact details of your family members that you provide to us in case of emergency. In this case, you guarantee that you have informed them about this Privacy Policy and that you have collected their consent to provide their data to us. Please note that we will only use your family members’ data if absolutely necessary in an emergency.

We process the above-mentioned personal data for the following purposes, based on the below legal grounds:

• We process your personal data to carry out the draw for the route entries and in case you are selected, to contact you to register for it. If you are not selected, we may also contact you in case a place becomes available. This processing is necessary for the performance of the contract to which you are a party (article 6.1.b GDPR) by signing this Rider Agreement.
• We process your personal data to manage your registration in the route and provide you with the requested services. Please note that, according to the Terms and Conditions, the services include: (i) the sending of electronic communications with relevant information for the route, and; (ii) the processing of participants’ location during the route. Your results in the route and your real time location will be displayed in our Website. If you do not want your name to appear, you can choose a nickname. These processing are necessary for the performance of the contract to which you are a party by the registration.
• We will publish your results on our website.
• We process your images for promotional purposes and publicize the celebration of the route if you give your consent to do so (article 6.1.a GDPR).
• If you provide your consent, we may process your e-mail to send you our newsletter or any other commercial communication. BADLANDS will only send you commercial communications in case you provide us with your consent by ticking the corresponding checkbox provided (article 6.1.a GDPR).
• We may process your personal data to manage and resolve any queries and requests you may send us. BADLANDS will only process your personal data for the purpose of managing and resolving your queries and requests in case you have given your consent (article 6.1.a GDPR). In this regard, you provide your consent for this processing in case you send your query or request to info@badlands.cc
• We may process your personal data for statistical purposes in order to improve our services. We deem we have a legitimate interest to analyse the use of the services we provide to improve them and be able to offer a higher quality service.
  

For processing based on your consent, we inform you that you may revoke your consent at any time be the means indicated in section “RIGHTS” of this Privacy Policy.

Except in cases where your personal data must be disclosed in compliance with a legal obligation (e.g. public administrations’ requirements), only some of our service providers will have access to your personal data. These service providers will process your personal data in accordance with our instructions and under our control.

In addition to the above, we inform you that your results and your real-time location will be published on our Website. We remind you that, in case you do not want your name to appear, you can choose a nickname.

The provision of the services do not involve international transfers of personal data outside the European Economic Area.

We inform you that we will keep your personal data for the necessary period of time in order to comply with the purposes described in the present Privacy Policy.

If you are not selected in the draw, you will be included in a waitlist. We will keep the information for five years after the end of the route in order to comply with the legal obligations applicable to us.

The personal data provided for the registration in the route, together with the information derived from your participation in it, will be kept for five years after the end of the route in order to comply with the legal obligations applicable to us.

The personal data processed on the basis of your consent will be processed until you revoke your consent.

According to the GDPR and LOPDGDD, you are entitled to exercise the following rights:

• You have the right to access your personal data and request a copy of them.
  
• You have the right to request the correction of inaccurate personal data.
• You have the right to ask us to erase your data that is not necessary anymore for the purposes which they were collected for.
• In certain circumstances, you can request us to restrict the processing of your personal data.
• You have the right to object the processing.
• You have the right to request us the portability of your data, that is, to transfer your personal data to another organisation.
• You have the right to revoke your consent at any time.
  

You can exercise the above-mentioned rights by email to info@badlands.cc.

In any case, we remind you that you have the right to make a claim to the Spanish Data Protection Authority (www.aepd.es) if you consider that the handling of your personal data does not comply with the RGPD and the LOPDGDD.

BADLANDS can modify the present Privacy Policy to adapt it to regulation or legal changes regarding personal data that might take place, and will require you to read any updates, each time you provide your data through this website.