This Privacy Policy describes how the association “Adventure Competitions Association” (Reg. No. 40008154479, address: Miera iela 4-17, Łaudona, Madonas county, LV-4862; hereinafter – Controller) processes personal data obtained on the izskrienrigu.lv website and during Izskrien Rīga events.
If you have any questions, contact: xevents@xevents.lv
1 Data processing manager
- Manager: Association “Adventure Competition Association”
- Address: Miera iela 4-17, Laudona, Madonas county, LV-4862
- Email for data protection issues: xevents@xevents.lv
- Phone: 20252282
2 Purposes (objectives) of personal data processing
2.1. Processing no. 1 – Securing participation in Izskrien Rīgu events
2.1.1. Intent
- Registration processing
- Ensuring team participation
- Processing of results, points and marking data
- Communication with participants
- Provision of reward
2.1.2. Data types
- name, surname
- date/year of birth
- gender
- contact details (email, phone)
- team name, composition
- selected distance
- points, results, penalty points
- GPS records (if provided by team)
2.1.3. Legal basis
- Contract performance (GDPR 6(1)(b))
- Compliance with legal obligations (accounting) (GDPR 6(1)(c))
- Legitimate interests – organizing a sports event and publishing the results (GDPR 6(1)(f))
2.1.4. Storage
- event data – up to 3 years
- results – in the long term for the functions of the sports archive
- accounting – 10 years
2.1.5. Data sources
- participants themselves during registration
2.1.6. Beneficiaries
- providers of time and results systems
- IT and hosting service providers
- accident insurers
- payment service providers
- judicial authorities in regulatory cases
2.1.7. Personalized start number and photo search
- A participant’s name may be used to create a personalized start number if the participant chooses such a service during registration.
- The start number can be used to search for photos in the photo galleries of the event.
2.2. Processing no. 2 – Communication with participants and stakeholders
- Purpose: Respond to submissions, questions and communications.
- Data types: first name, last name, e-mail, phone, message content.
- Legal basis: Legitimate interests – to ensure communication (GDPR 6(1)(f)).
- Storage: up to 1 year or until the issue is resolved.
- Beneficiaries: no regular third parties; only if necessary – IT service providers.
2.3. Processing no. 3 – Photo and video recording at events
- Purpose: Documentation and publicity of sports events.
- Data types: photos, video footage (including drone recordings), journalists, TV materials.
- Legal basis: Legitimate interests – coverage of a public sports event (GDPR 6(1)(f)).
- Storage: in the long term (sports history, archive).
- Beneficiaries: social networks, media, photographers and videographers.
2.4. Processing no. 4 – Marketing communications (if consent is given)
- Data types: name, email, consent information.
- Legal basis: Consent (GDPR 6(1)(a)). Consent can be withdrawn at any time by writing to xevents@xevents.lv.
- Storage: until withdrawal of consent.
2.5. Processing no. 5 – Site maintenance, security and analytics (cookies)
- Purpose: website operation, saving cookie settings, statistical analysis (only with consent), marketing targeting (only with consent).
- Data types: IP address, browser, device type, cookie preferences, website usage statistics.
- Legal basis: mandatory cookies – legitimate interests (GDPR 6(1)(f)); analytical and marketing – consent (GDPR 6(1)(a)).
- Beneficiaries: Google LLC (Google Analytics), Meta Platforms (Facebook/Instagram Pixel), other third-party tools when embedded in content.
3 Children’s personal data
In the registration of participants, children’s data are processed if they are submitted by the legal representative. Basis: performance of contract and provision of security requirements.
4 Personal data storage terms
- Participation data – up to 3 years
- Results – in the long term
- Accounting data – 10 years
- Marketing data – until withdrawal of consent
- Cookies – according to 6.4. for the table specified in point
5 Recipients of personal data
- IT and hosting providers
- payment service providers
- score system providers
- insurers
- in regulatory cases of state institutions
Data is not transferred outside the EU/EEA, except when third-party tools (Google, Meta) provide adequate protection guarantees.
6 Cookie policy
6.1. What are cookies?
Cookies are small text files that are stored on the user’s device to ensure the operation of the website, improve functionality and analyze the visit.
6.2. What cookies do we use?
- Mandatory: Required for site operation and security (required by default).
- Functional: Saves your preferences (eg language).
- Analytical: Google Analytics – only with consent.
- Marketing: Meta/Facebook Pixel – only with consent.
6.3. Consent
When you visit the website, a cookie banner is displayed where you can accept all cookies, reject optional ones, choose detailed settings or change your choice later.
6.4. Retention periods and list
Below are the main cookies used on the website:
| Title | Intent | Retention period |
|---|---|---|
| XSRF-TOKEN | Security cookie for protection against data forgery (CSRF). | Session time |
| cookie_consent | A cookie is used to store information about the visitor’s preferences regarding the use of cookies. | 1 year |
| _ga | Analytical cookie (Google Analytics) that identifies unique users for statistical purposes. | 2 years |
| _gid | Analytical cookie for user accounting and session grouping. | 24 hours |
| _fbp | Marketing cookie (Meta Pixel) used to target advertising. | 3 months |
- session cookies – until the browser is closed
- permanent – from 1 day to 24 months
6.5. Third parties
- Google Analytics
- Meta Pixel
- 3rd party videos/maps/embedded tools
7 Your rights
You have the right to:
- access your data;
- correct or supplement;
- request deletion;
- restrict processing;
- object to processing;
- withdraw consent;
- data portability;
- submit a complaint to the Data State Inspectorate.
For requests: xevents@xevents.lv. We will respond within 30 days.
8 Filing a complaint
If you believe that data processing does not meet the requirements, you can contact: Data State Inspectorate Elijas iela 17, Riga, LV-1050 pasts@dvi.gov.lv