bibexchangeby runoot

YOUR DATA. YOUR CHOICE.

Privacy, in plain language.

This notice covers BibExchange race requests, entry offers and enquiries to Runoot. You can browse without an account and choose whether to allow optional analytics.

Who handles your data

BibExchange is operated by Runoot, Italy. Runoot is responsible for the personal data collected through this service. For privacy enquiries, contact support@runoot.com.

The data we collect

When you submit a request, we collect your first name, last name, email address, selected races (including any names you enter), whether you want a bib, a full package, or either, and, if you choose to add it, your WhatsApp number.

We also store the date of your request, the page it came from and the wording shown beside the request button when you submitted it. Requests from /go are labelled QR; homepage requests are labelled Site. This describes the page used, not your physical location.

When you offer an entry, we also collect your phone number to contact you about the offer, the race date, entry type, any transfer deadline you know, optional asking price/currency and notes. Offers are private and require manual review.

If you email us, we receive your email address, message and any information you choose to include. Our hosting and security systems may process technical information such as IP addresses and access or error logs.

How and why we use it

  • Race requests and entry offers: to review your submission and contact you about matching opportunities or the details of your offer, based on your consent (Article 6(1)(a) GDPR).
  • Enquiries and support: to respond to messages and help manage your request, based on our legitimate interest in providing support (Article 6(1)(f)).
  • Security: to keep the service working and prevent abuse, based on our legitimate interest in protecting it (Article 6(1)(f)).
  • Optional analytics: to understand visits and use of the request form, only with your separate consent (Article 6(1)(a)).

Submitting a race request asks us to send matching opportunity emails for the races you selected. If you add a WhatsApp number, we use it only to contact you quickly about last-minute places for those races; the number is optional. Runoot Last Minute promotional emails require a separate choice in the popup. Submitting a request is voluntary. The fields marked as required are needed to manage it and contact you. Refusing analytics does not affect your ability to send a request. We do not use automated decisions that produce legal or similarly significant effects.

Who can receive your data

Authorized Runoot administrators can access requests and entry offers. We use service providers for hosting (Vercel), database storage (Supabase), email and mailing list management (Resend) and, if you agree, analytics (Google). If we contact you on WhatsApp, the message is delivered through WhatsApp (Meta). They process information as needed to provide their services.

Your request is not published, and your contact details are not automatically shared with race organizers or tour operators. If an opportunity requires details to be passed to a provider, we will explain that next step before you proceed.

Some providers may process information outside the European Economic Area. Applicable transfers require a lawful transfer mechanism, such as an adequacy decision or Standard Contractual Clauses. Contact us for details of the providers and safeguards relevant to your request.

How long we keep it

We keep your race request or entry offer details for up to 24 months from your last submission, unless you withdraw your consent or ask for deletion earlier. Support correspondence is kept as needed to resolve your enquiry and handle related follow-up. Limited records may need to be retained where required by law or to establish, exercise or defend legal claims.

Cookie and analytics retention is separate from the retention of your request, as described below.

Optional Runoot Last Minute mailing list

After saving a race request, you can separately choose to receive promotional emails about bibs, hotels, packages and last-minute opportunities across all races and destinations. Joining is optional and does not change your original request. Selecting “Yes, keep me updated” in the popup activates the subscription immediately.

We store your email, any name provided, the consent wording and date, and when the subscription was activated. If an administrator adds your address, they must declare that you already gave permission. Resend manages the active mailing list and sends our campaigns.

To leave the list, contact support@runoot.com or use the unsubscribe link in any Runoot Last Minute email. Unsubscribing stops promotional campaigns; it does not cancel your race requests. We keep a limited consent and opt-out record so that we can respect your choice. Contact support@runoot.com for access, correction or deletion requests.

Cookies and Google Analytics

Essential storage supports functions such as saving your cookie choice. Your choice is saved in a cookie and browser storage for up to 180 days.

Google Analytics loads only after you accept it. It measures public-page visits and successful requests, with the page source, race category and bib/package preference. We do not send your form name, email address or custom race text to Google Analytics. Advertising features and Google signals are disabled in our tag configuration.

Analytics cookies (_ga and _ga_*) are configured to last up to 180 days. This cookie lifetime is separate from Google’s retention of analytics data. Google explains its processing in its Privacy Policy.

Choose Accept to allow analytics, use Preferences to customize your choice, or close the banner with × to use essential cookies only. You can change your choice later; withdrawing consent stops future analytics collection.

Your rights and choices

You can withdraw consent to opportunity emails, request access to or correction of your data, ask for erasure or restriction, and exercise applicable rights to portability and to object to processing based on legitimate interests. Withdrawing consent does not affect processing that was lawful before withdrawal.

Email support@runoot.com, preferably from the address used for your request. We may need to confirm your identity before acting. You also have the right to lodge a complaint with your local data protection authority, including the Italian Garante.

Questions or updates

For help, visit Contact. If this notice changes, we will update the date above and provide further notice where required.