Privacy Policy

1. Data Controller

Trilhos da Nexebra Trail - TNT® is responsible for the processing of your personal data collected through this website. For any questions regarding data protection, you can contact us through the Contacts page.

2. Data We Collect

We only collect the personal data strictly necessary for the provision of our services:

• Identification data: full name, date of birth, and ID document number.
• Contact data: email address, phone number, and address.
• Health data: relevant medical information voluntarily shared for safety purposes during the races.
• Payment data: securely processed through certified platforms, without the organization having access to card details.
• Website usage data: IP address, browser type, and visited pages, collected through cookies.
• Name: collected through the contact form.
• Email: collected through the contact form.
• Phone: optional, collected through the contact form.

3. Purpose of Processing

Your personal data is processed for the following purposes:

• Management of registrations and participation in the races.
• Communication about the event, program changes, or relevant information.
• Preparation of results, rankings, and bib numbers.
• Compliance with legal and regulatory obligations.
• Improvement of our services and user experience.
• Sending marketing communications, only with your explicit consent.

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

• Performance of a contract: to process your registration and manage your participation.
• Legal obligation: to comply with applicable legal requirements.
• Legitimate interest: to improve our services and ensure the safety of the event.
• Consent: for sending marketing communications, when applicable.

5. Data Sharing with Third Parties

We do not sell or share your personal data with third parties for commercial purposes. Your data may be shared with:

• Service providers that assist us in organizing the event (e.g., medical services, timing).
• Public authorities, when required by law.
• Event partners and sponsors, only with your explicit consent.

6. Data Retention

Your personal data is kept for the period necessary to fulfill the purposes for which it was collected, or for the period required by law. After this period, the data is securely deleted or anonymized.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: obtain confirmation as to whether your data is being processed and access it.
• Right to rectification: request the correction of inaccurate or incomplete data.
• Right to erasure: request the deletion of your data in certain circumstances.
• Right to restriction of processing: request the suspension of the processing of your data.
• Right to object: object to the processing of your data in certain circumstances.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure. Access to data is restricted to authorized personnel who need it to perform their duties.

9. Cookies

We use cookies to improve your browsing experience. For more information on how we use cookies, please see our Cookie Policy.

10. Contact and Complaints

To exercise your rights or for any questions related to the processing of your data, contact us through the Contacts page.

If you consider that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the National Data Protection Commission (CNPD).