Privacy Policy

1. Controller

The controller for the processing of personal data on this website (https://frankfurt-in-bewegung.de) is:

FSA Frankfurter Sportagentur GmbH
c/o Futury GmbH
Am Steinernen Stock 1
60320 Frankfurt am Main
Email: info@frankfurtersportagentur.de
Phone: +49 69 26946127

This privacy policy also applies to the marathon page at marathonfürfrankfurt.de. That address shows the same page as frankfurt-in-bewegung.de/marathon and is served by the same website, with the same hosting, the same signup form and the same cookie banner.

2. Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. Vercel acts as a processor pursuant to Art. 28 GDPR.

When the website is accessed, technical access data is automatically stored in server log files (including IP address, date and time, page accessed, referrer URL, browser type). This data is used exclusively to ensure technical operation.

Legal basis
Art. 6 (1) (f) GDPR (legitimate interest in secure and trouble-free operation).

Data transfer to the USA: Vercel is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection pursuant to Art. 45 GDPR.

Protecting our forms from abuse (Vercel BotID)
We protect our forms (newsletter and event info, event registration, submitting a run club) from automated requests (bots) with Vercel BotID, a service of Vercel Inc. (address above). Only when you submit a form does your browser load a check script from Vercel through our own address. The script checks technical characteristics of your browser and device and sends the result with your request to our server, where Vercel evaluates it. If the request looks suspicious, a more thorough check in the browser may follow. Your IP address is processed in the process, as with every page view. The data is used solely to prevent abuse.

Legal basis
Art. 6 (1) (f) GDPR (legitimate interest in protecting our forms and the data collected through them from automated abuse). Insofar as information is read from your device for this purpose, this is strictly necessary under § 25 (2) no. 2 TDDDG to provide the registration you have requested securely. For data transfers to the USA, the EU-US Data Privacy Framework applies (see above).

3. Newsletter and Event Info

When you sign up via one of the email forms on our website (for example on the Get Involved page, in the footer, at RUN N RAVE Frankfurt or in an event registration), we process the following data:

• Email address (required)
• First name (optional)
• Your choice of which emails you would like to receive: “Newsletter” and/or “Event info”. Each choice is its own checkbox; at least one is required.
• The page you signed up on (e.g. RUN N RAVE Frankfurt)
• Only if you activate the “I want to get involved” option: your interest in voluntary involvement and, on a voluntary basis, age group and gender. These fields are only visible in this section and are not collected otherwise.
• Time and IP address of the sign-up and of the confirmation (proof of your consent in the double opt-in procedure)

We use the data exclusively to send you the emails you chose: the newsletter with news about the Frankfurt in Bewegung project, prize draws and updates on the marathon, and event info with dates, routes and short-notice changes to our runs and events.

Double opt-in
After signing up you receive an email with a confirmation link. Only once you click it do we add you to the mailing list. This ensures that nobody signs up with someone else’s email address. Our email service deletes unconfirmed sign-ups automatically after four weeks.

Sending via rapidmail
We send our emails with rapidmail, a service of Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany. rapidmail stores and processes the data on our behalf (Art. 28 GDPR) on servers in Germany. We additionally keep a copy of your sign-up in our content management system.

Legal basis
Art. 6 (1) (a) GDPR (consent). We store the proof of your consent on the basis of our legitimate interest (Art. 6 (1) (f) GDPR). You can withdraw your consent at any time, via the unsubscribe link in every email or by messaging us (see section 8).

4. Event Registration via Luma

To take part in RUN N RAVE Frankfurt we link to the registration service Luma (Luma Labs, Inc., 2261 Market Street #4159, San Francisco, CA 94114, USA). The registration button on our website is a plain link: only when you click it do you leave our website and open luma.com. The link itself transfers no data to Luma and sets no cookies on our site.

The data you enter when registering on luma.com (e.g. name and email address) is processed by Luma as an independent controller under its privacy policy. We receive the participant list of the respective edition from Luma in order to plan and run the assembly.

Legal basis
Art. 6 (1) (b) GDPR (running the event you wish to attend) and Art. 6 (1) (f) GDPR (legitimate interest in safe planning). For data transfers to the USA, Luma relies on the EU standard contractual clauses.

5. Survey via Tally

On our marathon page we link to a survey that we run with the form service Tally (Tally BV, Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium). The survey button on our website is a plain link: only when you click it do you leave our website and open tally.so. The link itself transfers no data to Tally and sets no cookies on our site.

In the survey we collect your answers and, if you choose to give it, your postcode. We do not ask for an email address. The link may contain a campaign code (for example “plakat2”) so we can see which poster brought you to us.

We are the controller for your answers. Tally processes them on our behalf (Art. 28 GDPR); the data processing agreement applies through Tally’s terms of use. Tally hosts and stores the data in the EU (Google Cloud, Belgium). More in Tally’s information on the GDPR.

Legal basis
Art. 6 (1) (a) GDPR (consent through your voluntary participation in the survey).

6. Cookies and Analytics

When you first visit our website, a cookie banner appears. There you can decide which categories you want to allow. Your choice is stored in a technically necessary cookie (fib_cc) and can be changed or withdrawn at any time via the “Cookie settings” link in the footer.

Technically necessary storage
For the operation of the website, the following information is stored on your device: your cookie choice (cookie fib_cc) and your theme preference (light/dark mode, in your browser’s local storage under theme). Consent is not required for this, as this storage is strictly necessary to provide the functions you have expressly requested. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest) and § 25 (2) no. 2 TDDDG.

Statistics & analytics
Only with your express consent do we use Vercel Web Analytics (provider: Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA) for audience measurement, without cookies and without an identifier on your device. Only summarised page views are evaluated (URL, referrer, approximate region, device class). To count visits, Vercel derives a hash from the request and discards it after 24 hours (see Vercel’s privacy information on Web Analytics). There is no cross-site tracking and no sharing with third parties. Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The data transfer to the USA is based on the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR). You can withdraw your consent at any time with effect for the future via the “Cookie settings” in the footer.

7. Your Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR): which data we have stored about you
• Rectification (Art. 16 GDPR): correction of inaccurate data
• Erasure (Art. 17 GDPR): deletion of your data
• Restriction (Art. 18 GDPR): restriction of processing
• Data portability (Art. 20 GDPR): receipt of your data in a common format
• Objection (Art. 21 GDPR): objection to processing

To exercise your rights, please contact: info@frankfurtersportagentur.de

8. Right of Withdrawal

If you wish to withdraw your consent to the processing of your personal data (e.g. to unsubscribe from the newsletter), you can do so at any time without any formal requirements. The lawfulness of the processing carried out up to the withdrawal remains unaffected. Write to us at: info@frankfurtersportagentur.de

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for Hesse is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de