Personal Data Protection Notice

Data Controller: [YOUR ORGANISATION NAME], [Street, City, Postcode, Country], Registration No. [REG. NO.], e-mail: [email@yourorg.org], tel.: [+XX XXX XXX XXX].

This notice explains how we process the personal data of visitors to peacerun.org and how we comply with Regulation (EU) 2016/679 (GDPR) and applicable national data protection law.

1. Contact Form

If you send us a message via the contact form, we will use the information you provide (name, e-mail address, message content) solely to respond to your enquiry.

Legal basis for processing: legitimate interest of the controller (Art. 6(1)(f) GDPR) – the need to respond to the submitted enquiry.

Submitted forms are stored on our servers in encrypted form. Forms older than 6 months are automatically deleted.

We do not share contact form data with third parties other than our server provider (see section 4).

2. Cookies and Tracking Technologies

Our website uses only technical (session) cookies that are strictly necessary for the correct display of pages in your browser. These cookies expire when you close your browser.

We do not use Google Analytics or any other analytical or tracking tools.

No cookie consent is required – technical session cookies are permitted by law without consent.

3. Embedded Videos (Vimeo, YouTube)

Some pages may contain videos embedded from Vimeo and/or YouTube. These are provided by third parties and playing them may result in cookies being set by those providers. We have no control over these cookies. For further information please refer to:

• Vimeo: https://vimeo.com/cookie_policy

• YouTube: https://policies.google.com/technologies/cookies

4. Server Logs

For security purposes, our web server records technical information about each access (IP address, time of access, page visited, browser type). These records are retained for a maximum of 30 days, after which they are automatically deleted.

Legal basis: legitimate interest of the controller – ensuring the security of the information system (Art. 6(1)(f) GDPR).

The server operator (processor) is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (info@hetzner.com). A Data Processing Agreement is in place in accordance with Art. 28 GDPR.

5. Your Rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to know what personal data we process about you.

• Right to rectification (Art. 16 GDPR): You have the right to request correction of inaccurate data.

• Right to erasure – 'right to be forgotten' (Art. 17 GDPR): You have the right to request deletion of your personal data once the purpose of processing has ceased.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request a temporary restriction on processing.

• Right to object (Art. 21 GDPR): You have the right to object to processing based on legitimate interest.

• Right to lodge a complaint: You have the right to lodge a complaint with your national supervisory authority. [UPDATE if your country's supervisory authority differs – e.g. for Germany: Bayerischer Landesbeauftragter für den Datenschutz (BayLDA), www.datenschutz-bayern.de] Czech Republic: Office for Personal Data Protection (UOOU), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

To exercise your rights or for any questions please contact us at: [email@yourorg.org] or tel. [+XX XXX XXX XXX].

6. International Transfers

Your personal data is processed on servers located in Germany (EU). Videos embedded from Vimeo and YouTube may be processed by those platforms in the USA; such transfers are covered by EU Standard Contractual Clauses.

7. Compliance

The processing described above is in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection law. We review and update this notice regularly.

Last updated: [DATE].