This policy describes how Sparta Atletik & Løb and Malmö Allmänna Idrottsförening (MAI) collect and process the personal information you provide to us when registering for Bridge Run 2025 (Bridge Run) and/or information collected about you through the Bridge Run website, www.brolobet2025.dk, www.broloppet2025.se, or www.bridgerun2025.com.

Contact information for the data controller:

Sparta Atletik & Løb

Gunnar Nu Hansens Plads 11

2100 Copenhagen Ø

Phone: +45 41 34 40 50

Email: brolobet@sparta.dk

CVR: 10050979

Malmö Allmänna Idrottsförening

Eric Perssons väg 53 217

62 Malmö

Phone: +46 (0)40 – 86 900

Email: broloppet@mai.se

Organization number: 846000 – 3752

2.2 Sparta Atletik & Løb and MAI have joint data responsibility for the personal data we collect and process in connection with the Bridge Run. The policy for our joint data responsibility can be found here.

2.3 If you have questions or comments about this privacy policy, or if you want to exercise one or more of your rights described in point 5, you can contact us.

3.1 When you visit the website, we collect information about your use of the website, such as the type of browser you use, your IP address, including your network location, and information about the device you use to visit the website. We also collect information about which pages you visit and where you click. The information is collected, among other methods, through the use of cookies when you give consent via our cookie banner. Read more in our cookie policy here.

3.1.1 The purpose is

3.1.1.1 to compile statistics so that we can analyze how our customers use and navigate our website, optimizing the user experience and website functionality,

3.1.1.2 The legal basis for processing is Article 6, paragraph 1, letters a of the EU General Data Protection Regulation.

3.2 When you register for the Bridge Run on our website, we collect the information you provide, such as name, address, email address, phone number, nationality, gender, age, club or company, expected finish time, product choices (e.g., transport), payment method, information about the time of purchase, and the IP address from which the registration is made.

3.2.1 The purpose is:

3.2.1.1 to register you as a participant and deliver the relevant product, a race number for the Bridge Run that you have purchased, thereby fulfilling our agreement with you, and

3.2.1.2 to display selected personal information on participant and results lists (name, gender, race number, club or company name, birth year, and nationality),

3.2.1.3 to send you necessary race information leading up to the event,

3.2.1.5 to comply with legal requirements, including accounting and financial obligations.

3.2.2 The legal basis for processing is Article 6, paragraph 1, letters b and c of the EU General Data Protection Regulation.

3.3 When you subscribe to our newsletter, we collect information about your name, email address, and preferred language. We also collect information about when you subscribed to the newsletter, when you unsubscribed, information about whether you opened the newsletter or not.

3.3.1 The purpose is:

3.3.1.1 to deliver newsletters to you, and

3.3.1.2 to compile statistics for optimizing the newsletters and for marketing our services, and

3.3.1.3 to document your consent to receive the newsletter.

3.3.2 The legal basis for processing is Article 6, paragraph 1, letters a of the EU General Data Protection Regulation.

On the event day of the Bridge Run 2025 we take photos and videos. When you participate in the Bridge Run, you might appear on some of these pictures and recordings. Media material featuring participants as part of our events is presented, for example, on our websites, in our apps, and on social media managed by Sparta Athletics & Running and MAI.

3.4.1 The purpose is:

3.4.1.1 to deliver personal live pictures and videos on the participant’s results profile in the app and web,

3.4.1.2 to provide a recap video and atmospheric pictures from the race, and

3.4.1.3 to collect event pictures and videos for the purpose of marketing next year’s event.

3.4.2 The legal basis for processing is Article 6, paragraph 1, letters b and f of the EU General Data Protection Regulation.

Your personal information may be disclosed in the following contexts.

4.1.1 Information may be shared with external partners who process the information on our behalf. We use external partners for user statistics for the website, media storage, as well as hosting, technical operation, and improvements of the registration and participant platform, and the dispatch of newsletters. These companies are data processors and operate under our instructions, processing data for which we are the data controller. Data processors may not use the information for any purpose other than fulfilling the agreement with us and are bound by confidentiality about it. Three of these data processors are Google Analytics at Google LLC, Flickr, and Sportstiming.

4.1.2 Personal information may be disclosed to public authorities if required by law or to the police in case of suspected legal violations or as part of the investigation of specific legal violations. Information about a purchase, including who made the purchase, may be disclosed to the card issuer if the cardholder reports that the card has been misused in connection with the specific purchase.

4.2 Your information is not transferred to insecure third countries or organizations outside the EU/EEA. However, information available on our public participant and result lists can be accessed.

5.1 In order to provide transparency about the processing of your information, we, as the data controller, shall inform you about your rights.

If you wish to exercise your rights, you can contact us. You will find our contact information in point 2.

5.2.1 You have the right to be informed, among other things, about the information we have recorded about you, the purpose of the registration, the categories of personal data, and recipients of information, as well as information about the source of the information.

5.3.1 You have the right to have incorrect personal information about yourself corrected. You can correct the personal information we have collected in connection with your registration for the Bridge Run by logging into your participant profile.

In certain cases, you have the right to have all or some of your personal information deleted or anonymized by us.

5.4.1 Deletion

5.4.1.1 When you participate in the Bridge Run, you have the right to have your personal information deleted by us after the event (either by canceling your registration or after the race day), after which you will be GDPR-deleted, and all your information will be deleted. Note that this also means that you will no longer appear on participant and result lists, and this cannot be restored later. You must contact us per point 2 to be GDPR-deleted.

5.4.1.2 You have the right to have your personal live images and videos of you taken during the Bridge Run deleted. Live images and videos can be deleted through your participant profile.

5.4.1.3 If you withdraw your consent to cookies or the newsletter we will delete your information. However, we may keep documentation of your consent for 2 years after we last sent you electronic marketing.

5.4.2 Anonymization

5.4.2.1 When you participate in the Bridge Run, you have the right to have your data anonymized on publicly accessible platforms before and after the race day. When anonymized, your name will only be displayed as initials on all public participant and result pages, and the first name will not appear on the race number. You can anonymize your data through your participant profile.

5.4.2.2 Your personal information is automatically anonymized 36 months after the race day on our participant and registration platform. However, you will still appear on participant and result lists unless you actively anonymize your registration through your participant profile.

5.5.1 In certain cases, you have the right to restrict the processing of your personal information to only consist of storage. In that case, we may only process the information with your consent or for the purpose of establishing, enforcing, or defending a legal claim.

5.6.1 In certain cases, you have the right to receive the personal information you have provided to us in a structured, commonly used format.

You have the right to object at any time to:

5.7.1.1 our processing of the image and video material taken of you during the Bridge Run. This includes both personal live images and videos, as well as images and videos taken by professional photographers on race day.

5.7.1.2 our processing of your personal information related to your participation in the Bridge Run. Note that there are several options for deleting and anonymizing your personal information related to your participation in the Bridge Run as per point 5.4.

5.7.1.3 for reasons related to your personal situation, object to the processing of your personal information that we carry out based on our legitimate interests, as mentioned in point 3.

5.8.1 You have the right to withdraw your consent to the newsletter or cookie consent you have given us at any time. Withdrawal of consent during registration will result in the cancellation of your participation in the Bridge Run if it is before the race date, as it will not be possible for us to deliver the product without your personal information otherwise.

5.9.1 You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way we process your personal information. You will find a complaint form and contact information at www.datatilsynet.dk.

Your personal data is deleted as follows:

6.1.1 Information collected about your use of the website as per point 3.1 is deleted when the cookie expires after 2 years. See our cookie declaration for more details.

6.1.2 Information collected in connection with your subscription to our newsletter, as per point 3.3, is deleted when your consent to the newsletter is. However, we may keep documentation of your consent for 2 years after we last sent you electronic marketing.

6.1.3 Information collected in connection with your registration for the Bridge Run as per point 3.2 will be anonymized 36 months after the race day but retained in its anonymized state for statistical purposes. Note that your personal data (name, gender, age group, club, nationality and result) will still appear on participant and result lists unless you are GDPR-deleted or anonymize your registration.

Information may be retained for a longer period if we have a legitimate need for longer storage, such as if it is necessary to establish, assert, or defend legal claims, or if storage is required for us to meet legal requirements. Accounting material is kept for 5 years until the end of a fiscal year to comply with the requirements of the Accounting Act.

6.1.4 Image and video material taken by professional photographers will be preserved unless an objection is raised, after which the image/video will be removed if justified. Personal live images and videos are automatically deleted after 36 months.

7.1 We have implemented appropriate technical and organizational security measures to prevent personal information from being accidentally or unlawfully destroyed, lost, altered, or impaired, and to prevent unauthorized access or misuse.

7.2 Only employees who have a legitimate need to access your personal information to perform their job have access to it.

8.1 If we make changes to the Privacy Policy, you will be informed of this on the website.

8.2 If you have registered for The Bridge Run, you will be notified of policy changes by sending information to your registered email address.

9.1 This is version 1 of the privacy policy dated February 1, 2024.