PRIVACY POLICY – www.runx.org
pursuant to Regulation (EU) 2016/679 (GDPR)
This privacy notice explains which personal data we collect, for what purposes, and how we process it when you visit and use the website www.runx.org (the “Website”).
Contents
PRIVACY POLICY – www.runx.org
1. Controller
2. Scope of this Notice
3. Relationship with World Athletics
4. Why we process your data, the legal basis for each processing activity, and which data we process
5. Who we share personal data with
6. What about transfers outside the EU?
7. How long we keep personal data
8. Children under 16
9. Your rights and how to exercise them
1. Controller
The controller of the data collected through the Website is Technogym S.p.A., with registered office at Via Calcinaro 2861, 47521 Cesena (FC), Italy. Technogym has appointed a Data Protection Officer (DPO) who can be reached at dpo@technogym.com.
2. Scope of this Notice
This privacy notice applies exclusively to the processing of personal data carried out by Technogym S.p.A. through the runx.org Website.
It does not apply to processing carried out by third parties acting as independent controllers - even where such third parties can be reached via links, social buttons, or embedded content on the Website, e.g.:
social networks such as Instagram, Facebook, TikTok, LinkedIn;
video-sharing or multimedia providers;
other external platforms or services accessible via links from the Website.
Any interaction you may have with those platforms (for example, by clicking on social buttons or viewing embedded content) entails processing by their respective controllers, under their own privacy notices and terms of use.
Technogym has no control over the processing carried out by such third parties and therefore encourages users to consult their privacy notices.
3. Relationship with World Athletics
As part of the Virtual Running World Championships / RUNX project, Technogym and World Athletics have entered into a specific data sharing and processing agreement. Under that agreement:
Technogym acts:
as independent controller for managing the technology infrastructure, collecting data through the Website, managing accounts, analyzing performance, and performing Technogym’s marketing activities; and
as processor on behalf of World Athletics, solely for processing needed for World Athletics to carry out its institutional activities (e.g., validation of results, certification of the competition, any regulatory checks).
World Athletics acts as independent controller for processing within its remit, in accordance with the agreement and its own privacy notices.
Personal data are shared between the parties solely for purposes connected with the RUNX project and in compliance with the GDPR.
4. Why we process your data, the legal basis for each processing activity, and which data we process
Below we transparently describe the individual processing activities carried out through runx.org, indicating for each: the user action, the purpose of processing, the categories of data processed, and the corresponding legal basis under the GDPR.
| Action | Purpose | Data collected | Legal basis |
| User fills in a form on www.runx.org | We collect your data to: respond to your requests; keep you informed about the opening of registrations for the Virtual Running World Championships; provide you with pre‑contractual information and, should you decide to register, manage your participation in the event. | First name, last name, gender, date of birth, country, city, postcode, phone number. | Performance of a contract or pre‑contractual measures at the data subject’s request (Art. 6(1)(b) GDPR). |
| User fills in a form to register or pre‑register for the Virtual Running World Championships | We transfer some of your personal data to World Athletics in order to: (i) allow World Athletics to inform you about the opening of registrations; and (ii) if you register, enable the management and validation of your participation according to the competition rules. Processing takes place in accordance with the data‑sharing agreement between Technogym and World Athletics. | First name, last name, age, email address, city, country. | Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR). |
| Creation and management of a Technogym ID account | If you participate in the Virtual Running World Championships you will need to create a Technogym ID account, which enables us to keep track of scores, ranking, participation frequency, and place of participation. Through the Technogym ID account: (i) you can access www.technogym.com and other services in the Technogym digital ecosystem; (ii) you can use digital and personalized training services, including by updating your account; (iii) we may process data associated with your Technogym Account to offer you a personalized training experience and - subject to your consent - profiled marketing services. For further information on personal data processing through the Technogym platform, please see the privacy notice at https://www.technogym.com/it-IT/privacy-policy/. | First name; last name; email address or phone number; city; country; scores, ranking, participation frequency, place of participation. | Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR). |
| Opting in to marketing profiling | We process personal data collected to send personalized marketing communications based on analysis of the user’s preferences and interests (“marketing profiling”). | All data collected on www.runx.org except special categories of data. | Consent of the data subject (Art. 6(1)(a) GDPR). |
| Opting in to direct marketing by World Athletics | Subject to your consent, we transfer your personal data to World Athletics so that it may send you direct marketing and promotional communications. For more information on World Athletics’ processing, please refer to its privacy notice available on its official website. | First name, last name, age, email address, city, country. | Consent of the data subject (Art. 6(1)(a) GDPR). |
| Compliance with law and/or orders from authorities | We process personal data to comply with any obligations arising from applicable law or orders from authorities, including accounting and tax obligations and product warranties. | All data collected on www.runx.org. | Compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR). |
| Soft spam | Send promotional emails about products or services similar to the Virtual Running World Championships. You can object at any time by clicking the link included in such communications. | First name, last name, email address. | Legitimate interest of the controller (Art. 6(1)(f) GDPR). |
| Browsing the Website | We analyze use of the Website for statistical purposes and to improve its content, features, and performance, including through analytics tools such as Google Analytics 4 (GA4). | Browsing data, IP address, device and browser information, Website usage events. | Consent expressed via the cookie banner and the OneTrust CMP (Art. 6(1)(a) GDPR). |
| Interaction with the Website | We analyze on‑site behavior (e.g., mouse movements, scrolling, interactions) to improve user experience and content effectiveness, including via tools such as Mouseflow and Sleeknote. | Browsing data, information on interactions with the Website, device technical data. | Consent (Art. 6(1)(a) GDPR). |
| Use of the Website | Ensure system security, prevent unauthorized access, fraud, and misuse of the Website and services offered. | Access logs, IP address, device technical data. | The controller’s legitimate interest in the security of its systems and the information processed (Art. 6(1)(f) GDPR). |
5. Who we share personal data with
Your personal data may be disclosed to:
- technology providers and hosting providers;
- web agencies and IT vendors;
- Technogym group companies;
- World Athletics (as limited by and for the purposes set out in the agreement);
- and competent authorities where required by law.
Third parties act as processors or as independent controllers, as applicable.
6. What about transfers outside the EU?
Transfers of data to third parties located outside the EU are carried out in accordance with the requirements set out in the GDPR, adopting specific measures to lawfully transfer data to third countries.
For management of the competition and regulatory obligations, data will be transferred to World Athletics (headquartered in Monaco) on the basis of Standard Contractual Clauses (SCCs).
7. How long we keep personal data
Personal data are kept:
- for as long as necessary to achieve the purposes for which they were collected;
- for the duration of the RUNX project;
- for additional periods where required by legal or regulatory obligations;
- for the duration of the requested service;
- and until consent is withdrawn for profiling and marketing activities.
You may request deletion of your Technogym account at any time. While the account is deleted immediately, data collected through the account and related to purchases and/or use of our Service are retained for 10 years, in line with the applicable statutory limitation period. Where data are anonymized, they become irreversibly non‑recoverable.
Please note: if you chose to share your personal data with a Facility, deleting your Technogym account does not mean your data become inaccessible to the Facility. To have your data fully deleted, you must contact the Facility and follow the instructions in its privacy notice.
8. Children under 16
Participation in the Virtual Running World Championships is restricted to adults (individuals aged 18 or over). However, children under 16 (“Minors”) may create a Technogym account only within the Technogym digital ecosystem for personalized training and subject to parental authorization.
9. Your rights and how to exercise them
You have the right to know whether Technogym processes your personal data. In particular, you have the right of access, rectification, and erasure, as well as the right to data portability, the right to restriction, and the right to object to processing where the conditions are met. If data are processed for marketing purposes or on the basis of our legitimate interests, you may object at any time. In such cases, Technogym will no longer process your data unless other legitimate grounds apply. Any request for erasure will not affect processing already carried out on a valid legal basis. For more information on processing or to exercise your rights, email dpo@technogym.com or write to the company by post, to the attention of the Data Protection Officer at Technogym S.p.A., Via Calcinaro 2861, 47521 Cesena (FC), Italy.
Summary of your rights
a. Right of access - to obtain confirmation whether Technogym processes data concerning you and, where applicable, access to such data and related information.
b. Right to rectification - to have inaccurate personal data corrected without undue delay and, taking into account the purposes of processing, to have incomplete data completed.
c. Right to erasure - to have data erased without undue delay (e.g., where data are no longer necessary for the purposes collected), subject to the exceptions provided by applicable law (e.g., where retention is necessary to meet the controller’s legal obligations).
d. Right to data portability - in the circumstances provided by law, to receive the personal data you have provided to Technogym in a structured, commonly used and machine‑readable format, and, where permitted, to transmit those data to another controller, unless this would adversely affect the rights and freedoms of others; for certain services, automated portability tools are available in your account.
e. Right to restriction of processing - in the circumstances provided by law, to restrict processing. In such cases, Technogym may still process your data but only in certain circumstances (e.g., to exercise legal claims or protect the rights of others).
f. Right to withdraw consent - for processing operations based on your consent; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
g. Right to object - in the circumstances provided by law, to object to processing of your data unless Technogym demonstrates compelling legitimate grounds to continue processing. You may lodge a complaint with a Data Protection Authority if you believe you have not received a satisfactory response from Technogym or your rights have been infringed.
Note: if personal data relating to the service are shared with other entities acting as independent controllers, you must exercise your rights vis‑à‑vis those controllers, following their privacy notices. In accordance with privacy by design and privacy by default, Technogym may provide tools to facilitate the exercise of your rights, including vis‑à‑vis entities with which Technogym has agreements (e.g., Facilities attended by the user). Such tools are available in the App or Website personal area.