Source: http://lu.thecolorrun.com/en/contact.html
Timestamp: 2019-04-21 06:09:20+00:00

Document:
You can also fill in the text fields below to send us a message. Afterwards just hit “Send” and we will get back to you as soon as possible.
Mandatory field Safety question:* Please add 5 and 7. Please add 5 and 7.
Thank you for your interest in The Color Run Luxembourg. Data protection is of particular importance to step by step S.A. In most cases, use of the step by step S.A. website is possible without having to provide any personal data. However, if a person wishes to use our company’s special services via our website, personal data must be processed.
The Color Run Luxembourg website collects a series of general data and information every time a person accesses the website. This general data and information is stored in the server’s log files. We record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (known as the ‘referrer’), (4) the sub-websites accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service providers of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
The data subject has the option of registering on The Color Run Luxembourg’s website by providing personal data. The personal data transferred to the controller is determined by the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for the data subject's own purposes. The controller may arrange for the data to be transferred to one or more processors, who shall also use the personal data exclusively for internal use attributable to the controller.
When a user registers on The Color Run Luxembourg website, his/her IP address assigned by the Internet Service Provider (ISP) is stored along with the date and time of registration. The idea behind storing this data is that this is the only way to prevent misuse of our services and, if necessary, to enable us to investigate any criminal offences committed. In this respect, the storage of this data is necessary to protect the controller. This data will not be passed on to third parties unless required to do so by law or for the purpose of criminal prosecution.
Due to legal regulations, the website of The Color Run Luxembourg contains information that enables quick electronic contact with our company as well as direct communication with us, including a general email address. If a data subject contacts us via email or a contact form, the personal data transmitted by the data subject will be automatically stored for the purpose of processing or contacting the data subject. This personal data will not be disclosed to third parties.
In addition, the data subject has the right, for reasons based on his/her particular situation, to object to the processing of personal data relating to him/her by The Color Run Luxembourg for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) of the GDPR, unless such processing is necessary to fulfil a task of public interest.
Art. 6 (1)(a) of the GDPR provides us with a legal basis for processing operations in which we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfil a contract of which the data subject is a party, as is the case in processing operations necessary to register for The Color Run Luxembourg, for example, or to provide any other service or consideration, the lawfulness of this processing is based on Art. 6 (1)(b) of the GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Art. 6 (1)(c) of the GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his/her name, age, health insurance or other vital information would be passed on to a doctor, hospital or other third party. Such processing would be based on Art. 6 (1)(d) of the GDPR. Finally, certain processing operations find their legal basis in Art. 6 (1)(f) of the GDPR. If a processing operation is necessary to safeguard the legitimate interests of our company or a third party, but not covered by any of the legal bases above, the processing is considered lawful except in cases where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. According to European law, we are allowed to carry out such operations. In this respect, according to the second sentence of Recital 47 of the GDPR, a legitimate interest could be assumed if the data subject is a customer.

References: Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6