In the following sections you will find detailed information on the processing of your personal data, for which the company LAST LAP SLU will request your consent, in accordance with the legislation in force at any given time.

1. Data Controller

The data controller for your personal data is LAST LAP SLU, with registered address at C/ La Granja 22. CP. 28018. Alcobendas (Madrid). and Tax ID B-80891211. For any matter related to the processing of your personal data, you can contact us by phone at or by email at info@maratoncostadelsol.com.

2. Purpose

The purposes for which your consent is requested for the processing of your personal data are those indicated in the form we ask you to complete, which prevails over this Privacy Policy. In any case, we inform you that:

• A. We process the information provided by data subjects to manage services such as sending publications, web registration, and event registrations, as applicable.
• B. Based on the information you provide us, we will create a commercial profile that allows us to offer you services and/or products aligned with the preferences and interests you have expressed, whether our own or from third parties, as well as to improve your user experience. Service and/or product offers may be sent by any means, physical or electronic, including email, telephone, and/or SMS.
• C. We will retain the data you provide us as long as you do not request their deletion.
• D. We will strive, with your collaboration, to keep the data we process properly updated.

3. Legal Basis

Unless we expressly indicate, when obtaining your consent, that it is required for a specific purpose such as the execution of a contract (typically a subscription or purchase of publications, or to manage your participation in an event), the legal basis for processing your data is the consent you grant us, for the purposes and uses detailed in sections 2.A and 2.B above.

4. Recipients

Provided we have the explicit consent of the data subject when required, the data we process from users of the websites, clients, suppliers, and employees of the different LAST LAP SLU companies will be shared with the other companies of the group for internal administrative purposes and for the purposes indicated in sections 2.A and 2.B above, as well as to allow any of such companies to receive the assignment, from another, to process data on behalf of the Data Controller.

In principle, we do not communicate the personal data we process to third parties outside LAST LAP SLU. If we were to do so, we would inform you beforehand, and the receiving company would request from you any necessary consent.

5. Your Data Protection Rights

We remind you that current regulations grant you the following rights:

• To request access to your personal data, for any purpose, in particular to know whether we are processing your data, for what purpose, and under which legal basis (contractual consent, specific consent, etc.);
• To request the correction of inaccurate data or their deletion, e.g., when they are no longer necessary for the purposes for which they were collected;
• To request the restriction of data processing, under certain circumstances, in which case we will only store them for the exercise or defense of possible claims;
• To object to their processing, under certain circumstances and for reasons related to your particular situation, in which case we will stop processing your data unless for compelling legitimate reasons or for the exercise or defense of possible claims; and
• To the portability of the personal data concerning you (not third parties), which you have provided directly to us, and which are subject to automated processing.

You can exercise any of these rights by contacting the Data Protection Officer, either by postal mail at the company’s registered address, C/ La Granja 22. CP. 28018. Alcobendas (Madrid)., or by email at info@maratoncostadelsol.com.

If you exercise any of these rights regarding data essential for the execution of a contract, we will inform you of the consequences. In cases where the legal basis for processing is different from contractual consent, we will immediately comply with your request, without prejudice to the lawfulness of processing carried out up to that point. In any case, you can obtain information on the exercise of your rights from the Spanish Data Protection Agency (www.agpd.es) or equivalent regional authorities.

6. Source

In cases permitted by applicable law, in which we process your data without having obtained it directly from you, we will inform you by postal mail, email, or instant messaging of the following:

• The source from which your data originate and, in particular, whether it is a publicly accessible source available without restrictions;
• The categories of personal data involved, including whether they are specially protected data.

7. Security Measures

The Data Controller commits to fulfilling its obligation of confidentiality regarding personal data and to safeguarding them, and has adopted the necessary technical and organizational measures to ensure their security and prevent alteration, loss, unauthorized processing, or access, considering the state of technology and in accordance with applicable regulations. However, absolute internet security cannot be guaranteed, and therefore data breaches through fraudulent access by third parties may occur, in which case the competent authority will be notified within the deadlines established by law.

8. Cookies Policy

The Data Controller’s Cookies Policy is accessible through the following link, in addition to the one shown in a pop-up window when accessing this website.

Reading this Cookies Policy is recommended to understand what cookies are, which ones are used on this website and for what purposes, the information each of them collects, and the options available to you both through your browser settings and by accessing the websites of the cookie providers and main browsers, to configure or reject the installation of cookies on your devices (computer, tablet, mobile phone, etc.).

September 2019