Privacy notice

1. Who is responsible for your data

KILOMETRO INICIAL (RFC KIN2110206Y7), owner of the Kinel brand, located at Avenida Xicoténcatl 668 (no interior number), colonia Ricardo Flores Magón, between calle Manuel Doblado and callejón Sporting, ZIP 91900, Veracruz, Veracruz de Ignacio de la Llave, Mexico, is responsible for processing your personal data.

For anything related to this notice, write to [email protected].

2. What data we collect

Depending on what you do on the platform, we collect:

• Identification and contact: name, email, phone, date of birth, gender, city, state and country, bib name, team or club, shirt size and estimated time.
• Your account: email, password (stored encrypted) and language. If you sign in with Google, the name and email Google shares with us.
• Third-party data: your emergency contact's name, phone and relationship. By providing them you state that person agrees.
• Sensitive data: information about a disability or health condition you choose to share so we can support you during the event. We only process it with your express consent.
• Payments: processed by Stripe. We do not store your card number; we keep the amount, method and status and, if you choose to save a card, only its Stripe reference.
• Technical data: IP address and access logs, for security. Your browser stores your signed-in session locally. We do not use advertising or analytics cookies.

3. What we use your data for

Purposes needed to provide the service:

• Registering you for the event and managing your participation: category, bib, kit and product pickup at the event.
• Processing your payments, coupons and bib codes.
• Sending your registration confirmation, payment instructions and notices about your order and the event.
• Contacting your emergency contact and assisting you if an incident occurs.
• Preventing fraud and protecting the platform's security.
• Meeting legal and tax obligations and requests from authorities.

Additional purposes, not needed for the service: aggregated statistics to improve the platform and information about future events and promotions. If you do not want us to use your data for these purposes, write to [email protected] at any time; it does not affect your registration.

4. Who we share your data with

Transfers. We share your registration, contact, emergency contact data and, where applicable, the health information you provided, with the organizer and authorized sponsors of the event you register for, only to organize the event, hand over kits and products and assist you. By accepting this notice you consent to this transfer. We will also share it with authorities when the law requires it.

Processors. To run the platform we rely on providers that process data on our behalf and under our instructions: Stripe (payments), DigitalOcean (database and file hosting, with servers in the United States), our email provider and, if you choose to sign in with Google, Google.

5. How to exercise your ARCO rights

You have the right to access, rectify, cancel or object to the processing of your data. Send a request to [email protected] with your name and a way to reply to you; a copy of your ID (or, if a representative acts for you, proof of representation); a clear description of the data and the right you want to exercise; and anything that helps us find you, such as your confirmation number.

We will reply within 20 business days and, if applicable, carry out the request within the following 15 business days. You can correct much of your data yourself from «My races».

6. Withdrawing consent and limiting use of your data

You can withdraw your consent or ask us to limit the use or disclosure of your data through the same procedure, by writing to [email protected]. Withdrawing consent for necessary purposes may prevent us from keeping your registration. To stop receiving advertising you can also sign up for Profeco's Public Registry to Avoid Advertising.

7. Minors

If the participant is a minor, the registration and their data must be provided by their mother, father or guardian, who consents on their behalf.

8. How long we keep your data

We keep it as long as needed for the purposes of this notice and to meet legal obligations, such as tax obligations. After that we block it and securely delete it.

9. Changes to this notice

Any change will be published on this page with its update date. If a change requires your consent, we will ask for it.

If you believe your right to personal data protection has been violated, you may contact the competent authority.