Registration

PERSONAL DATA PROTECTION

As a personal data administrator, the Association “Sport in Free Time” (the “Association”) complies with all requirements of EU Regulation 679/2016 – General Data Protection Regulation (GDPR), the Personal Data Protection Act (PDPA), and all other applicable legal provisions. The Association collects, processes, and stores only the data necessary for participant registration in the Sofia Marathon at https://sofiamarathon.bg/ (the “Website”).

Principles of Personal Data Collection, Processing, and Storage

When processing personal data, the Association adheres to the principles of lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy and timeliness; storage limitation; integrity and confidentiality; and ensuring an appropriate level of security for personal data. The Association may process and store personal data to fulfill its obligations under applicable Bulgarian law.

By registering at https://sofiamarathon.bg/, each individual user explicitly agrees that the Association may process their personal data. The provided data may only be used for registration in the Sofia Marathon, for statistical purposes, or to establish direct contact with the user. The data will not be edited, shared with third parties, or used for any purposes other than those described, unless the user gives explicit prior consent or if required by law.

Types of Personal Data Collected, Processed, and Stored by the Association “Sport in Free Time”

The Association “Sport in Free Time” collects only the information and personal data (hereinafter referred to as “Data”) that you voluntarily provide when registering for participation in the Sofia Marathon by filling out our registration form. This includes:

  • First Name and Last Name
  • Gender
  • Contact Phone Number
  • Country
  • Date of Birth (Age)
  • Email Address
  • Race Distance
  • T-shirt Size
  • Password for Account Login

We are required to inform you that for organizing the Sofia Marathon, the Association collects, processes, and stores only the personal data necessary to fulfill this purpose, as follows:

  • First Name and Last Name – Required to identify participants in distance-based rankings
  • Date of Birth – Required for categorizing participants into age groups by distance
  • Country – Used for statistical analysis of marathon participants
  • Phone Number – Required for contacting participants in case of registration issues
  • Email Address – Necessary for communication with participants
  • Gender – Needed for participant classification (men/women)
  • Race Distance – Required for preparing the starting lists for the Sofia Marathon

Legal Basis for Processing These Personal Data

The legal basis for processing these personal data is the contractual relationship established between the Association “Sport in Free Time” and the user upon acceptance of the Terms of Use and/or registration on the website.

Additionally, the Association collects, processes, and stores IP address data of users. The purpose of collecting this data is to enhance service security, localize the interface, and conduct statistical and marketing research. The legal basis for processing this data is the necessity of fulfilling a contract to which the data subject is a party. Before a user account is created, the IP address is collected based on the legitimate interests of the administrator.

Exclusions: Personal Data Not Collected or Processed

The Association “Sport in Free Time” does not collect or process personal data related to:

  • Racial or ethnic origin
  • Political, religious, or philosophical beliefs
  • Trade union membership
  • Genetic and biometric data
  • Health-related data
  • Sexual life or sexual orientation

Furthermore, the Association “Sport in Free Time” does not engage in automated decision-making based on personal data.

Retention Period for Personal Data

The Association “Sport in Free Time” retains personal data for the period required by applicable legislation, which may exceed the duration of a user’s registration.

Transfer of Personal Data for Processing

The data collected by the Association “Sport in Free Time” is stored within the European Economic Area (EEA) but may be transferred and processed in a country outside the EEA. Any transfer of personal data will be carried out in compliance with applicable laws.

User Rights Regarding the Collection, Processing, and Storage of Personal Data

If a user does not wish all or part of their personal data to continue being processed by the Association “Sport in Free Time” for a specific or all processing purposes, they may withdraw their consent at any time and request the deletion of their personal data by sending a request in free text to the following email address: [email protected].

However, the Association “Sport in Free Time” is not obliged to delete personal data if they are retained and processed:

  • To exercise the right to freedom of expression and the right to information
  • To comply with a legal obligation requiring processing under EU law or the law of a Member State applicable to the Administrator
  • To fulfill a task of public interest or other exceptions provided for in legislation

The Association “Sport in Free Time” may require users to verify their identity when withdrawing consent and/or requesting data deletion. If the user withdraws consent for mandatory personal data, necessary for creating and maintaining registration for services, their profile will be deactivated.

Each user has the right to:

  • Request confirmation from the Association “Sport in Free Time” on whether their personal data is being processed
  • Access their personal data and receive information regarding its collection, processing, and storage
  • Obtain a copy of their personal data in electronic format
  • Request a restriction on the processing of their personal data by sending an email to: [email protected]

The Association “Sport in Free Time” reserves the right to impose an administrative fee in case of repetitive or excessive requests for information.

Users can view, correct, or update inaccurate or incomplete personal data directly through their website profile. Users may also object to the processing of their personal data at any time by sending an email to [email protected].

Personal Data Security Breach Notification

If the Association “Sport in Free Time” identifies a personal data security breach that could result in a high risk to a user’s rights and freedoms, the Association is obligated to notify the affected user immediately and inform them of the measures taken or planned.

The Association is not required to notify users in cases where:

  • Appropriate technical and organizational security measures were applied to the affected data
  • Subsequent actions have been taken to prevent any risks to the user’s rights
  • Notification would require disproportionate effort

In case of suspected violations concerning personal data, users may contact the competent supervisory authority, namely the Commission for Personal Data Protection of the Republic of Bulgaria, at the following address: https://www.cpdp.bg/.

General Provisions

If any clause of these Terms of Use is declared null or invalid, this shall not affect the validity of the remaining clauses. These Terms of Use for Personal Data Protection are drafted and shall be applied and interpreted in accordance with Bulgarian legislation.

The Association “Sport in Free Time” reserves the right to modify these personal data protection terms as well as make changes to the website, without prior notice to users.

Within the limits of these provisions, the Association “Sport in Free Time” shall not be held liable for any errors that may appear on the website for any reason, including changes not made by the site administrator.

Latest version of the Personal Data Protection Terms, effective from March 25, 2025.