PRIVACY POLICY – www.runx.org
pursuant to Regulation (EU) 2016/679 (GDPR)
This privacy notice explains which personal data we collect, for what purposes, and how we process it when you visit and use the website www.runx.org (the “Website”), as well as when you participate in the RUN X™|World Treadmill Championship (hereinafter, “RUN X Championship”).
Contents
PRIVACY POLICY – www.runx.org
1. Controller
2. Scope of this Notice
3. Relationship with World Athletics
4. Why we process your data, the legal basis for each processing activity, and which data we process
5. Who we share personal data with
6. What about transfers outside the EU?
7. How long we keep personal data
8. Children under 16
9. Your rights and how to exercise them
1. Controller
The controller of the data collected through the Website is Technogym S.p.A., with registered office at Via Calcinaro 2861, 47521 Cesena (FC), Italy.
Technogym has appointed a Data Protection Officer (DPO) who can be reached at dpo@technogym.com.
2. Scope of this Notice
This privacy notice applies exclusively to the processing of personal data carried out by Technogym S.p.A. a) through the runx.org Website; b) during the organization, management, and execution of the RUN X Championship, or otherwise in connection with said competition.
It does not apply to processing carried out by third parties acting as independent controllers - even where such third parties can be reached via links, social buttons, or embedded content on the Website, e.g.:
- social networks such as Instagram, Facebook, TikTok, LinkedIn;
- video-sharing or multimedia providers;
- other external platforms or services accessible via links from the Website.
Any interaction you may have with those platforms (for example, by clicking on social buttons or viewing embedded content) entails processing by their respective controllers, under their own privacy notices and terms of use.
Technogym has no control over the processing carried out by such third parties and therefore encourages users to consult their privacy notices.
3. Relationship with World Athletics
Technogym and World Athletics have organized the RUN X™ | World Treadmill Championship, the first global running competition on treadmills connected to the Technogym cloud platform.
To participate in the RUN X Championship, you must provide certain personal data as described in section 4 below to Technogym and World Athletics to enable each of them to fulfill their respective roles in organizing the competition.
As part of the said project, Technogym and World Athletics have entered into a specific data sharing and processing agreement. Under that agreement:
Technogym acts:
as independent controller for managing the technology infrastructure, collecting data through the Website, managing accounts, analyzing performance, and performing Technogym’s marketing activities; and
as processor on behalf of World Athletics, solely for processing needed for World Athletics to carry out its institutional activities (e.g., validation of results, certification of the competition, any regulatory checks).
World Athletics acts as independent controller for processing within its remit, in accordance with the agreement and its own privacy notices. For any information regarding the processing of personal data carried out by World Athletics, please refer to its privacy notice, available at the following link: https://www.worldathletics.org/about-iaaf/documents/member-federation-resource-centre.
Personal data are shared between the parties solely for purposes connected with the RUNX project and in compliance with the GDPR.
4. Why we process your data, the legal basis for each processing activity, and which data we process
Below we transparently describe the individual processing activities carried out through runx.org, indicating for each: the user action, the purpose of processing, the categories of data processed, and the corresponding legal basis under the GDPR.
Certain personal data are required in order to register for and participate in the RUN X Championship. Without providing such mandatory data, it will not be possible to complete the registration process or take part in the competition.
Action: User fills in a form on www.runx.org
Purpose: We collect your data to: respond to your requests; keep you informed about the opening of registrations for the Virtual Running World Championships; provide you with pre‑contractual information and, should you decide to register, manage your participation in the event.
Data collected: First name, last name, gender, date of birth, country, city, postcode, phone number.
Legal basis: Performance of a contract or pre‑contractual measures at the data subject’s request (Art. 6(1)(b) GDPR).
Purpose: We collect your data to: respond to your requests; keep you informed about the opening of registrations for the Virtual Running World Championships; provide you with pre‑contractual information and, should you decide to register, manage your participation in the event.
Data collected: First name, last name, gender, date of birth, country, city, postcode, phone number.
Legal basis: Performance of a contract or pre‑contractual measures at the data subject’s request (Art. 6(1)(b) GDPR).
Action: User fills in a form to register or pre‑register for the Virtual Running World Championships
Purpose: We transfer some of your personal data to World Athletics in order to: (i) allow World Athletics to inform you about the opening of registrations; and (ii) if you register, enable the management and validation of your participation according to the competition rules. Processing takes place in accordance with the data‑sharing agreement between Technogym and World Athletics.
Data collected: First name, last name, age, email address, city, country.
Legal basis: Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR).
Purpose: We transfer some of your personal data to World Athletics in order to: (i) allow World Athletics to inform you about the opening of registrations; and (ii) if you register, enable the management and validation of your participation according to the competition rules. Processing takes place in accordance with the data‑sharing agreement between Technogym and World Athletics.
Data collected: First name, last name, age, email address, city, country.
Legal basis: Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR).
Action: Creation and management of a Technogym ID account
Purpose: If you participate in the Virtual Running World Championships you will need to create a Technogym ID account, which enables us to keep track of scores, ranking, participation frequency, and place of participation. Through the Technogym ID account: (i) you can access www.technogym.com and other services in the Technogym digital ecosystem; (ii) you can use digital and personalized training services, including by updating your account; (iii) we may process data associated with your Technogym Account to offer you a personalized training experience and - subject to your consent - profiled marketing services. For further information on personal data processing through the Technogym platform, please see the privacy notice at https://www.technogym.com/it-IT/privacy-policy/.
Data collected: First name; last name; email address or phone number; city; country; scores, ranking, participation frequency, place of participation.
Legal basis: Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR).
Purpose: If you participate in the Virtual Running World Championships you will need to create a Technogym ID account, which enables us to keep track of scores, ranking, participation frequency, and place of participation. Through the Technogym ID account: (i) you can access www.technogym.com and other services in the Technogym digital ecosystem; (ii) you can use digital and personalized training services, including by updating your account; (iii) we may process data associated with your Technogym Account to offer you a personalized training experience and - subject to your consent - profiled marketing services. For further information on personal data processing through the Technogym platform, please see the privacy notice at https://www.technogym.com/it-IT/privacy-policy/.
Data collected: First name; last name; email address or phone number; city; country; scores, ranking, participation frequency, place of participation.
Legal basis: Performance of a contract or pre‑contractual measures (Art. 6(1)(b) GDPR).
Action: Opting in to marketing profiling
Purpose: We process personal data collected to send personalized marketing communications based on analysis of the user’s preferences and interests (“marketing profiling”).
Data collected: All data collected on www.runx.org except special categories of data.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
Purpose: We process personal data collected to send personalized marketing communications based on analysis of the user’s preferences and interests (“marketing profiling”).
Data collected: All data collected on www.runx.org except special categories of data.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
Action: Opting in to direct marketing by World Athletics
Purpose: Subject to your consent, we transfer your personal data to World Athletics so that it may send you direct marketing and promotional communications. For more information on World Athletics’ processing, please refer to its privacy notice available on its official website.
Data collected: First name, last name, age, email address, city, country.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
Purpose: Subject to your consent, we transfer your personal data to World Athletics so that it may send you direct marketing and promotional communications. For more information on World Athletics’ processing, please refer to its privacy notice available on its official website.
Data collected: First name, last name, age, email address, city, country.
Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
Action: To consent to being filmed and/or photographed during the competition
Purpose: The creation and use of photographic images of participants within the scope of the competition, for the purposes of documenting, communicating, and promoting the event (e.g., publication on the website, social media, and informational materials), without direct commercial purposes.
Data collected: Images of the participants taken during the competition.
Legal basis: Legitimate interest of the Data Controller in promoting and documenting the event, pursuant to Art. 6(1)(f) of the GDPR. For use in connection with commercial purposes: Consent of the data subject, pursuant to Art. 6(1)(a) of the GDPR.
Purpose: The creation and use of photographic images of participants within the scope of the competition, for the purposes of documenting, communicating, and promoting the event (e.g., publication on the website, social media, and informational materials), without direct commercial purposes.
Data collected: Images of the participants taken during the competition.
Legal basis: Legitimate interest of the Data Controller in promoting and documenting the event, pursuant to Art. 6(1)(f) of the GDPR. For use in connection with commercial purposes: Consent of the data subject, pursuant to Art. 6(1)(a) of the GDPR.
Action: Compliance with law and/or orders from authorities
Purpose: We process personal data to comply with any obligations arising from applicable law or orders from authorities, including accounting and tax obligations and product warranties.
Data collected: All data collected on www.runx.org.
Legal basis: Compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR).
Purpose: We process personal data to comply with any obligations arising from applicable law or orders from authorities, including accounting and tax obligations and product warranties.
Data collected: All data collected on www.runx.org.
Legal basis: Compliance with a legal obligation to which the controller is subject (Art. 6(1)(c) GDPR).
Action: Soft spam
Purpose: Send promotional emails about products or services similar to the Virtual Running World Championships. You can object at any time by clicking the link included in such communications.
Data collected: First name, last name, email address.
Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR).
Purpose: Send promotional emails about products or services similar to the Virtual Running World Championships. You can object at any time by clicking the link included in such communications.
Data collected: First name, last name, email address.
Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR).
Action: Browsing the Website
Purpose: We analyze use of the Website for statistical purposes and to improve its content, features, and performance, including through analytics tools such as Google Analytics 4 (GA4).
Data collected: Browsing data, IP address, device and browser information, Website usage events.
Legal basis: Consent expressed via the cookie banner and the OneTrust CMP (Art. 6(1)(a) GDPR).
Purpose: We analyze use of the Website for statistical purposes and to improve its content, features, and performance, including through analytics tools such as Google Analytics 4 (GA4).
Data collected: Browsing data, IP address, device and browser information, Website usage events.
Legal basis: Consent expressed via the cookie banner and the OneTrust CMP (Art. 6(1)(a) GDPR).
Action: Interaction with the Website
Purpose: We analyze on‑site behavior (e.g., mouse movements, scrolling, interactions) to improve user experience and content effectiveness, including via tools such as Mouseflow and Sleeknote.
Data collected: Browsing data, information on interactions with the Website, device technical data.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Purpose: We analyze on‑site behavior (e.g., mouse movements, scrolling, interactions) to improve user experience and content effectiveness, including via tools such as Mouseflow and Sleeknote.
Data collected: Browsing data, information on interactions with the Website, device technical data.
Legal basis: Consent (Art. 6(1)(a) GDPR).
Action: Use of the Website
Purpose: Ensure system security, prevent unauthorized access, fraud, and misuse of the Website and services offered.
Data collected: Access logs, IP address, device technical data.
Legal basis: The controller’s legitimate interest in the security of its systems and the information processed (Art. 6(1)(f) GDPR).
Purpose: Ensure system security, prevent unauthorized access, fraud, and misuse of the Website and services offered.
Data collected: Access logs, IP address, device technical data.
Legal basis: The controller’s legitimate interest in the security of its systems and the information processed (Art. 6(1)(f) GDPR).
4a. Special Participation Modalities (without Technogym ID)
Whereas participation in the RUN X Championship is in principle subject to the use of a personal Technogym ID, it is technically possible for a Runner to participate by other means (e.g., by using an access credential issued by an Official Center). The provisions below exclusively govern such cases of participation.
By launching the challenge and accepting the RUN X Terms and Conditions without authenticating through a personal Technogym ID, the Runner enters into a direct contractual agreement with Technogym, strictly limited to the purpose of participation in the challenge.
In such cases, the Runner acknowledges and agrees that:
(a) Technogym will process personal data (e.g., identifiers linked to the access credential, performance data recorded on the Technogym Treadmill) strictly necessary to manage the Runner’s participation, acting as Data Controller on the legal basis of the performance of the contract (Art. 6(1)(b) GDPR). In the absence of a Technogym ID and of specific consent, the data collected will not be used for any other purpose.
(b) Data relating to the Runner’s performance (such as time and leaderboard position) will be shared with World Athletics, acting as an independent Data Controller, for the purposes of managing the global leaderboards. The Runner is invited to consult World Athletics' privacy policy, available at https://worldathletics.org/privacy-policy.
Technogym is not responsible for the issuance, management, conditions, or revocation of any access credential not linked to a personal Technogym ID. For any queries regarding such credentials, the Runner must contact the Official Center that issued them. Any query related to the processing of personal data by Technogym under this modality shall be directed to dpo@technogym.com.
For all matters not addressed in this section, please refer to the remainder of this privacy notice.
4b. The Participant Declarations and Acknowledgments:
In addition to the processing activities described in this Privacy Policy:
By registering for or participating in the RUN X Championship, the participant represents and warrants that all personal data provided are accurate, complete, and up to date.
The participant acknowledges and agrees that the personal data provided may be processed and, where necessary for the purposes of the competition, shared, transferred, and displayed, by Technogym, World Athletics, and authorized third parties strictly for purposes connected with the organization, management, validation, promotion, and operation of the RUN X Championship and related activities.
Such display may include, where applicable, competition results, rankings, scores, participation statistics, country, city, and/or participant identifiers as necessary for the proper functioning and promotion of the competition.
5. Who we share personal data with
Your personal data may be disclosed to the extent necessary for the purposes described in this Privacy Policy.:
- technology providers and hosting providers;
- web agencies and IT vendors;
- Technogym group companies;
- World Athletics as described in section 3 of this privacy policy and (as limited by and for the purposes set out in the agreement).
and competent authorities where required by law. Third parties act as processors or as independent controllers, as applicable.
6. What about transfers outside the EU?
Transfers of data to third parties located outside the EU are carried out in accordance with the requirements set out in the GDPR, adopting specific measures to lawfully transfer data to third countries.
For management of the competition and regulatory obligations, data will be transferred to World Athletics (headquartered in Monaco) on the basis of Standard Contractual Clauses (SCCs), Where necessary, additional technical and organizational measures are applied to ensure data security during international transfers.
7. How long we keep personal data
Personal data are kept:
- for as long as necessary to achieve the purposes for which they were collected;
- for the duration of the RUN X Championship project;
- for additional periods where required by legal or regulatory obligations;
- for the duration of the requested service;
- and until consent is withdrawn for profiling and marketing activities.
You may request deletion of your Technogym account at any time. While the account is deleted immediately, data collected through the account and related to purchases and/or use of our Service are retained for 10 years, in line with the applicable statutory limitation period. Where data are anonymized, they become irreversibly non‑recoverable.
Please note: if you chose to share your personal data with a Facility, deleting your Technogym account does not mean your data become inaccessible to the Facility. To have your data fully deleted, you must contact the Facility and follow the instructions in its privacy notice.
8. Children under 16
Participation in the Virtual Running World Championships is restricted to adults (individuals aged 18 or over). However, children under 16 (“Minors”) may create a Technogym account only within the Technogym digital ecosystem for personalized training and subject to parental authorization.
9. Your rights and how to exercise them
You have the right to know whether Technogym processes your personal data. In particular, you have the right of access, rectification, and erasure, as well as the right to data portability, the right to restriction, and the right to object to processing where the conditions are met. If data are processed for marketing purposes or on the basis of our legitimate interests, you may object at any time. In such cases, Technogym will no longer process your data unless other legitimate grounds apply. Any request for erasure will not affect processing already carried out on a valid legal basis. For more information on processing or to exercise your rights, email dpo@technogym.com or write to the company by post, to the attention of the Data Protection Officer at Technogym S.p.A., Via Calcinaro 2861, 47521 Cesena (FC), Italy.
Summary of your rights
- a. Right of access - to obtain confirmation whether Technogym processes data concerning you and, where applicable, access to such data and related information.
- b. Right to rectification - to have inaccurate personal data corrected without undue delay and, taking into account the purposes of processing, to have incomplete data completed.
- c. Right to erasure - to have data erased without undue delay (e.g., where data are no longer necessary for the purposes collected), subject to the exceptions provided by applicable law (e.g., where retention is necessary to meet the controller’s legal obligations).
- d. Right to data portability - in the circumstances provided by law, to receive the personal data you have provided to Technogym in a structured, commonly used and machine‑readable format, and, where permitted, to transmit those data to another controller, unless this would adversely affect the rights and freedoms of others; for certain services, automated portability tools are available in your account.
- e. Right to restriction of processing - in the circumstances provided by law, to restrict processing. In such cases, Technogym may still process your data but only in certain circumstances (e.g., to exercise legal claims or protect the rights of others).
- f. Right to withdraw consent - for processing operations based on your consent; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
- g. Right to object - in the circumstances provided by law, to object to processing of your data unless Technogym demonstrates compelling legitimate grounds to continue processing. You may lodge a complaint with a Data Protection Authority if you believe you have not received a satisfactory response from Technogym or your rights have been infringed.
Note: if personal data relating to the service are shared with other entities acting as independent controllers, you must exercise your rights vis‑à‑vis those controllers, following their privacy notices. In accordance with privacy by design and privacy by default, Technogym may provide tools to facilitate the exercise of your rights, including vis‑à‑vis entities with which Technogym has agreements (e.g., Facilities attended by the user). Such tools are available in the App or Website personal area.