Privacy Policy

1. Controller

The controller for the processing of personal data on this website (https://frankfurt-in-bewegung.de) is:

FSA Frankfurter Sportagentur GmbH
c/o Futury GmbH
Am Steinernen Stock 1
60320 Frankfurt am Main
Email: info@frankfurtersportagentur.de
Phone: +49 69 26946127

2. Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. Vercel acts as a processor pursuant to Art. 28 GDPR.

When the website is accessed, technical access data is automatically stored in server log files (including IP address, date and time, page accessed, referrer URL, browser type). This data is used exclusively to ensure technical operation.

Legal basis
Art. 6 (1) (f) GDPR (legitimate interest in secure and trouble-free operation).

Data transfer to the USA: Vercel is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection pursuant to Art. 45 GDPR.

3. Newsletter and Event Info

When you sign up via one of the email forms on our website (for example on the Get Involved page, in the footer, at RUN N RAVE Frankfurt or in an event registration), we process the following data:

• Email address (required)
• First name (optional)
• Your choice of which emails you would like to receive: “Newsletter” and/or “Event info”. Each choice is its own checkbox; at least one is required.
• The page you signed up on (e.g. RUN N RAVE Frankfurt)
• Only if you activate the “I want to get involved” option: your interest in voluntary involvement and, on a voluntary basis, age group and gender. These fields are only visible in this section and are not collected otherwise.
• Time and IP address of the sign-up and of the confirmation (proof of your consent in the double opt-in procedure)

We use the data exclusively to send you the emails you chose: the newsletter with news about the Frankfurt in Bewegung project, prize draws and updates on the Marathon 2027, and event info with dates, routes and short-notice changes to our runs and events.

Double opt-in
After signing up you receive an email with a confirmation link. Only once you click it do we add you to the mailing list. This ensures that nobody signs up with someone else’s email address. Our email service deletes unconfirmed sign-ups automatically after four weeks.

Sending via rapidmail
We send our emails with rapidmail, a service of Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany. rapidmail stores and processes the data on our behalf (Art. 28 GDPR) on servers in Germany. We additionally keep a copy of your sign-up in our content management system.

Legal basis
Art. 6 (1) (a) GDPR (consent). We store the proof of your consent on the basis of our legitimate interest (Art. 6 (1) (f) GDPR). You can withdraw your consent at any time, via the unsubscribe link in every email or by messaging us (see section 7).

4. Event Registration via Luma

To take part in RUN N RAVE Frankfurt we link to the registration service Luma (Luma Labs, Inc., 2261 Market Street #4159, San Francisco, CA 94114, USA). The registration button on our website is a plain link: only when you click it do you leave our website and open luma.com. The link itself transfers no data to Luma and sets no cookies on our site.

The data you enter when registering on luma.com (e.g. name and email address) is processed by Luma as an independent controller under its privacy policy. We receive the participant list of the respective edition from Luma in order to plan and run the assembly.

Legal basis
Art. 6 (1) (b) GDPR (running the event you wish to attend) and Art. 6 (1) (f) GDPR (legitimate interest in safe planning). For data transfers to the USA, Luma relies on the EU standard contractual clauses.

5. Cookies and Analytics

When you first visit our website, a cookie banner appears. There you can decide which categories you want to allow. Your choice is stored in a technically necessary cookie (fib_cc) and can be changed or withdrawn at any time via the “Cookie settings” link in the footer.

Technically necessary storage
For the operation of the website, the following information is stored on your device: your cookie choice (cookie fib_cc) and your theme preference (light/dark mode, in your browser’s local storage under theme). Consent is not required for this, as this storage is strictly necessary to provide the functions you have expressly requested. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest) and § 25 (2) no. 2 TDDDG.

Statistics & analytics
Only with your express consent do we use Vercel Web Analytics (provider: Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA) for anonymised analytics. Vercel Web Analytics works cookieless: only aggregated page views are transmitted (URL, referrer, approximate region, device class). There is no cross-site tracking and no sharing with third parties. Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The data transfer to the USA is based on the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR). You can withdraw your consent at any time with effect for the future via the “Cookie settings” in the footer.

6. Your Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR): which data we have stored about you
• Rectification (Art. 16 GDPR): correction of inaccurate data
• Erasure (Art. 17 GDPR): deletion of your data
• Restriction (Art. 18 GDPR): restriction of processing
• Data portability (Art. 20 GDPR): receipt of your data in a common format
• Objection (Art. 21 GDPR): objection to processing

To exercise your rights, please contact: info@frankfurtersportagentur.de

7. Right of Withdrawal

If you wish to withdraw your consent to the processing of your personal data (e.g. to unsubscribe from the newsletter), you can do so at any time without any formal requirements. The lawfulness of the processing carried out up to the withdrawal remains unaffected. Write to us at: info@frankfurtersportagentur.de

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for Hesse is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de