Privacy Policy

This Privacy Policy explains how personal data is processed through the prijave.run platform, provided by Zen Timing. It covers registration for sporting events, payment records, communication with participants, race timing, publication of results and use of the platform.

1. Who is responsible for processing personal data?

The organizer of each sporting event is generally the data controller for personal data relating to registration and participation in that event. Organizer information is available on the event page under "Organizer details".

Zen Timing, a data processing business owned by Bojana Vujić Vakanjac, O. Keršovanija 10b, Osijek, Croatia, provides the prijave.run platform and processes personal data on behalf of event organizers for the technical administration of registrations, payment records and race results.

For certain activities of its own, including platform administration, information security and business communication, Zen Timing may act as an independent data controller. Contact: zen.timing@gmail.com.

2. What personal data do we process?

• participants' first and last names
• sex and year of birth, where required for competition categories
• email addresses and other contact information provided during registration
• club, team or relay information
• selected race and competition category
• registration and payment status
• additional information reasonably required by the event organizer
• race results, times and rankings
• technical and security information necessary for operating the platform

3. Purposes of processing

• receiving and processing event registrations
• organizing and conducting sporting events
• recording entry fees and payment status
• communicating about registration and participation
• race timing, preparation and publication of results
• maintaining justified sporting records and archives
• ensuring the security and reliable operation of the platform
• complying with applicable legal obligations

Participants may receive service-related emails concerning their event, including registration confirmations, payment information and notifications of their race results. Such messages do not in themselves constitute marketing.

4. Legal bases for processing

Depending on the specific purpose and the role of the data controller, personal data may be processed on the basis of contractual necessity, compliance with legal obligations, legitimate interests or consent where required.

The publication of sporting results may be based on the legitimate interests of organizers and participants in conducting competitions and maintaining sporting records, subject to an assessment of the applicable legal basis and the rights of individuals in each case.

5. Recipients and service providers

Personal data may be accessed by event organizers, authorized individuals involved in organizing events and technical service providers, to the extent necessary for the relevant purposes.

• Zen Timing – technical administration of registrations and results
• Stripe – processing card payments where available
• server infrastructure and hosting providers
• Cloudflare – website security and technical protection
• email service providers where necessary

Card payments are processed by Stripe. Zen Reg does not store full payment card numbers.

6. Cloudflare Web Analytics and cookies

The platform uses Cloudflare Web Analytics to measure basic website traffic and analyze technical usage. Cloudflare Web Analytics does not use analytics cookies.

The platform also uses strictly necessary cookies, including those required for form security and authenticated user sessions. Further information will be provided in the Cookie Policy.

7. Publicly available information and results

For the purposes of conducting sporting events, certain information, such as participants' names, competition categories, clubs, bib numbers, race times and rankings, may be published in registration lists and official results.

Sporting results may remain publicly available long-term as part of the event archive, subject to an appropriate legal basis and respect for individuals' rights.

8. Data retention

Personal data is retained for as long as necessary for the purposes for which it is processed and to comply with applicable legal obligations.

A standard retention period of 24 months after an event is planned for registration data, subject to exceptions where longer retention is necessary. Automatic deletion according to this period has not yet been implemented.

Financial records are retained in accordance with applicable statutory requirements. Sporting results may be retained long-term as part of a justified sporting archive.

9. Data subject rights

Depending on the circumstances and applicable legal basis, individuals may request access to, rectification or erasure of their data, restriction of processing, data portability and may object to processing. Where processing is based on consent, consent may be withdrawn without affecting the lawfulness of processing carried out before withdrawal.

For requests relating to a particular event, individuals may contact the event organizer. For questions about the platform or assistance with directing requests, please contact zen.timing@gmail.com.

Individuals have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) through its official website, www.azop.hr.

10. Data security

Appropriate technical and organizational measures are applied to protect personal data against unauthorized access, loss, unauthorized alteration and other security risks. Access to personal data is restricted according to business needs and user permissions.

11. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in platform operations, data processing or applicable regulations. Updated versions will be published on prijave.run.

Document version: 29 October 2026.