Privacy Policy

Last modified on : 03.04.2024

1. Who we are

1.1 Ahotu Services

Ahotu is a brand of World’s Sports Group AB, reg no 559044-2454 (“Ahotu,” “us,” “we” or “our”). Ahotu is registered in Sweden, with its postal address at The Ground, Bredgatan 4, 211 30 Malmö. Ahotu lists various endurance races (each an “Event”) and links to these events directly or to third party registration platforms and marketplaces.

1.2 Who’s who

When this Privacy Policy uses the term “Event Organizer” we mean Event creators using the Services to create Events for consumers using our Services (a) to consume information about, or attend, Events (“Participants”), or (b) for any other reason. Event Organizers and Participants using our Services are all referred to in this Privacy Policy collectively as “Users”, “you” or “your”.

2. Our Privacy Statement

2.1 Application

This Privacy Policy sets forth our policy with respect to information that can be associated with or which relates to a person and/or could be used to identify a person (“Personal Data”) that is collected from Users on or through the Site. We take the privacy of your Personal Data seriously. Because of that, we have created this Privacy Policy. Please read this Privacy Policy as it includes important information regarding your Personal Data and other information.
“Non-Personal Data” as used in this Privacy Policy is therefore any information that does not relate to a person and/or cannot be used to identify a person, i.e. anonymous data. When you interact with the Site, we may also collect Non-Personal Data. The limitations and requirements in this Privacy Policy on our collection, use, disclosure, transfer and storage/retention of Personal Data do not apply to Non-Personal Data.

3. Personal Data that we collect

When you use or interact with us through the Site, we may collect Personal Data. Sometimes this will be on our own behalf (Ahotu is in such a situation acting as a data controller) and other times this will be on behalf of an Event Organizer using our Services to run an Event or a Provider of add-on products and services (Ahotu is in such situation acting as a data processor). This is an important distinction for EU data protection law purposes and is explained in more detail below.

3.1 All Users

Information you provide to us: For all Users we collect Personal Data when you voluntarily provide such information to us, such as when you create a membership account, contact us with inquiries, respond to one of our surveys or browse the Site or use certain parts of the Services. The Personal Data we collect is your name and your email address.

Information we automatically collect after explicit consent: We also automatically collect certain technical data that is sent to us from the computer, mobile device and/or browser through which you access the Site (“Automatic Data”). Automatic Data, includes without limitation, a unique identifier associated with your access device and/or browser (for example, your Internet Protocol (IP) address) characteristics about your access device and/or browser, statistics on your activities on the Site, information about how you came to the Site and data collected through Cookies, Pixel Tags, Local Shared Objects, Web Storage and other similar technologies. You can find out more information about how we use Cookies and other similar tracking technologies in our Cookie Policy.

When you create an account or otherwise submit Personal Data to us, we may associate other Non-Personal Data (including Non-Personal Data we collect from third parties) with your Personal Data. At such instance, we will treat any such combined data as your Personal Data until such time as it can no longer be associated with you or used to identify you.

4. How we use your Personal Data

We collect and use the Personal Data we collect in a manner that is consistent with this Privacy Policy and with data protection laws such as the EU General Data Protection Regulation (the “GDPR”). We may use the Personal Data as follows:

4.1 Specific reason

If you provide Personal Data for a certain purpose, we may use the Personal Data in connection with the purpose for which it was provided. For instance, if you contact us by e-mail, we will use the Personal Data you provide to answer your question or resolve your problem and will respond to the email address from which the contact came.

4.2 Access and use

If you provide Personal Data in order to obtain access to or use of the Services or any functionality thereof, we will use your Personal Data to provide you with access to or use of the Services or functionality and to analyze your use of such Services or functionality. For instance, if you supply Personal Data relating to your identity or qualifications to use certain portions of the Services, we will use that information to make a decision as to granting you access to use such Services and to assess your ongoing qualification to use such Services.

4.3 Internal business purposes

We may use your Personal Data for internal business purposes, including without limitation, to help us improve the content and functionality of the Site, to better understand our Users, to improve the Site, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Site and our business.

4.4 Ahotu marketing communications

In accordance with your marketing preferences, we may use your Personal Data to contact you for our marketing and advertising purposes. This includes without limitation, to inform you about services or Events we believe might be of interest to you, to develop promotional or marketing materials and provide those materials to you, and to display content and advertising on or off the Site that we believe might be of interest to you. See “Opt Out from Electronic Communications” below on how to opt out of Ahotu Marketing Communications.

4.6 Aggregated Personal Data

In an ongoing effort to understand and serve our Users better, we often conduct research on our customer demographics, interests and behavior based on Personal Data and other information that we have collected. This research is typically conducted on an aggregate basis only that does not identify you. Once Personal Data is in an aggregated form, for purposes of this Privacy Policy, it becomes Non-Personal Data.

5. How we disclose and transfer your personal data

5.1 No sale

We are not in the business of selling your Personal Data. We consider this information to be a vital part of our relationship with you. Therefore, we will not sell your Personal Data to third parties, including third party advertisers. There are, however, certain circumstances in which we may disclose, transfer or share your Personal Data with certain third parties without further notice to you, as set forth below.

5.2 Business transfers

As we develop our business, we might sell or buy businesses or assets. In the Event of a corporate sale, merger, reorganization, dissolution or similar Event, Personal Data may be part of the transferred assets. Any successor to or acquirer of Ahotu (or its assets) may continue to use your Personal Data and other information in accordance with the terms of this Privacy Policy.

5.3 Parent Companies, Subsidiaries and Affiliates

We may also share your Personal Data with our parent companies, subsidiaries and/or affiliates for purposes consistent with this Privacy Policy. Our parent companies, subsidiaries and affiliates will be bound to maintain that Personal Data in accordance with this Privacy Policy (see section 17 below for information about transfer of Personal Data to third countries, i.e. countries outside of the EEA).

5.4 Agents, Consultants and Service Providers

We may share your Personal Data with our contractors and service providers who process Personal Data on behalf of Ahotu to perform certain business-related functions. These companies include our marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others. When we engage another company to perform such functions, we may provide them with information, including Personal Data, in connection with their performance of such functions. We enter into a written data processor agreement with such companies in accordance with the requirements of the GDPR.

5.5 Facebook and other third-party connections

You can connect your Ahotu account to your accounts on third party services like Facebook, in which case we may collect, use, disclose, transfer and store/retain information relating to your account with such third-party services in accordance with this Privacy Policy.

5.6 Legal requirements

We may disclose your Personal Data if required to do so by law in order to (for example) respond to a subpoena or request from law enforcement, a court or a government agency (including in response to public authorities to meet national security or law enforcement requirements), or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect or defend our rights, interests or property or that of third parties, © prevent or investigate possible wrongdoing in connection with the Services, (d) act in urgent circumstances to protect the personal safety of Users of the Services or the public, or (e) protect against legal liability.

6. How we store your Personal Data

We may store Personal Data itself or such information may be stored by third-parties to whom we have transferred it in accordance with this Privacy Policy. We take, what we believe to be, reasonable steps to protect the Personal Data collected via the Site from loss, misuse, unauthorized use, access, inadvertent disclosure, alteration and destruction. However, no network, server, database or Internet or e-mail transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you send to us electronically. Please keep this in mind when disclosing any Personal Data.

7. Your rights

Data protection laws provide you with rights in respect of Personal Data that we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling and unsubscribe from marketing communications. You also have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from us where the processing is based on consent or on a contract or the processing is carried out by automated means.

For the most part, you can exercise these rights by logging in and visiting the settings page or changing the “cookie settings” in your browser (see our Cookie Policy for more information). If you can’t find what you’re looking for in the settings page, please contact us using the contact information set out in section 19 below. Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. There may be circumstances where we are not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation.

If you have a complaint about how we handle your Personal Data, please get in touch with us as set forth in section 19 to explain. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.

8. Legal grounds for processing your Personal Data

The GDPR requires us to tell you about the legal ground we’re relying on to process any Personal Data about you. The legal grounds for us processing your Personal Data for the purposes set out in section 5 above will typically be because: (1) it is necessary for our contractual relationship, (2) the processing is necessary for us to comply with our legal or regulatory obligations; and/or (3) the processing is in our legitimate interest as a calendar for race Events (for example, to protect the security and integrity of our systems and to provide you with customer service, etc.).

9. How long we retain your personal data

We only store Personal Data as long as it is necessary for the purpose/s for which the Personal Data is processed. We may retain your Personal Data as long as you are registered to use the Services. You may close your account by contacting us. If you have an account with us, we will typically retain your Personal Data for a period of 90 days after that you have requested, your account is closed or if it has been inactive for a longer period. However, we may retain Personal Data for an additional period as is permitted or required under applicable laws, resolving disputes and enforcing our agreements. Even if we delete your Personal Data it may persist on backup or archival media for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes.

10. Cookies, pixels tags, local shared objects, web storage and similar technologies

Please refer to our Cookie Policy for more information about our use of cookies and other similar tracking technologies.

11. Your choices

You have several choices available when it comes to your Personal Data:

11.1 Limit the Personal Data you provide

You can browse the Site without providing any Personal Data (other than Automatic Data to the extent it is considered Personal Data under applicable laws) or with limiting the Personal Data you provide. If you choose not to provide any Personal Data or limit the Personal Data you provide, you may not be able to use certain functionality of the Site.

11.2 Opt Out from Electronic Communications

• Ahotu marketing communications

Where it is in accordance with your marketing preferences, Ahotu may send you electronic communications marketing or advertising the Site itself or Events on the Site, to the extent you have registered for the Services. You can also “opt out” of receiving these electronic communications by clicking on the “Unsubscribe” link at the bottom of any such electronic communication. In addition, you may also manage your email preferences at any time by logging in (or signing up and then logging in), clicking on “Profile” and then “Settings”.

• Transactional or responsive communications

Certain electronic communications from Ahotu are responsive to your requests. For instance, if you email our customer support department, we will answer your email.

• Retention

It may take up to forty-eight (48) hours for us to process an unsubscribe request. Even after you opt out of all electronic communications, we will retain your Personal Data in accordance with this Privacy Policy, however, we will no longer use it to contact you.

12. Exclusions

12.1 Personal Data Provided to Others

This Privacy Policy does not apply to any Personal Data that you provide to another User or visitor through the Site or through any other means, including to Event Organizers on Event pages or information posted by you to any public areas of the Site.

12.2 Third-Party Links

This Privacy Policy applies only to the Site. The Site may contain links to other websites not operated or controlled by us (the “Third-Party Sites”). The policies and procedures we described here do not apply to the Third-Party Sites. The links from the Site do not imply that we endorse or have reviewed the Third-Party Sites. We suggest contacting those sites directly for information on their privacy policies.

13. Children

We do not knowingly collect Personal Data from children under the age of thirteen (13). If you are under the age of thirteen (13), please do not submit any Personal Data through the Site. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data through the Site without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Data to us through the Site, please contact us and we will endeavor to delete that information from our databases.

14. Server location and transfer of Personal Data

Information (including Personal Data) will be stored on our servers either within the EEA or outside of the EEA. Countries outside of the EEA (including the United States) may not necessarily have data protection laws as comprehensive or protective as those in the EEA; however, our collection, storage and use of your Personal Data will at all times continue to be governed by this Privacy Policy and applicable data protection laws. You can read more about transfer of Personal Data to third countries in section 17 below.

15. Changes to this privacy policy

The Services and our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, in our sole discretion, to update or modify this Privacy Policy at any time (collectively, “Modifications”). Modifications to this Privacy Policy will be posted to the Site with a change to the “Updated” date at the top of this Privacy Policy. In certain circumstances Ahotu may, but need not, provide you with additional notice of such Modifications, such as via email or with in-Service notifications. Modifications will be effective thirty (30) days following the “Updated” date or such other date as communicated in any other notice to you.

Please review this policy periodically, and especially before you provide any Personal Data. This Privacy Policy was updated on the date indicated above. Your continued use of the Site following the effectiveness of any Modifications to this Privacy Policy constitutes acceptance of those Modifications. If any Modification to this Privacy Policy is not acceptable to you, you should cease accessing, browsing and otherwise using the Site.

16. Transfers of Personal Data to third countries

As Ahotu is a global company, we may need to transfer your Personal Data outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with who may be located in jurisdictions outside the EEA and Switzerland, which might not have any data protection laws or have laws which are less strict than those in Europe.

Whenever we transfer Personal Data outside of the EEA or Switzerland, we take legally required steps to make sure that appropriate safeguards are in place to protect your Personal Data. For example, Ahotu is Privacy Shield certified which means that it self-certifies to protect Personal Data from the EEA and Switzerland in accordance with established data privacy principles. Feel free to contact us as set forth in section 19 for more information about the safeguards we have put in place to protect your Personal Data and privacy rights in these circumstances.

17. Ahotu as a data controller and a data processor

EU data protection law makes a distinction between organizations that process Personal Data for their own purposes (known as “data controllers”) and organizations that process personal data on behalf of other organizations (known as “data processors”). If you have a question or complaint about how your Personal Data is handled, these should always be directed to the relevant data controller since they are the ones with primary responsibility for your Personal Data.
Ahotu may act as either a data controller or a data processor in respect of your Personal Data, depending on the circumstances.
For example, if you create an account with us, Ahotu will be a data controller in respect of the Personal Data that you provide. We use this to conduct research and analysis to help better understand and serve Users of the Site as well as to improve our platform and provide you with more targeted recommendations about Events we think may be of interest to you.

18. Contact us

If you have any questions or concerns at any time, please do not hesitate to contact us at the address in section 1.1 above or at [email protected].