Privacy Policy

Last updated: 17/09/2026

This Privacy Policy is intended to inform users of the website https://www.lavenivici.com, participants in Veni Vici and, more generally, any data subject, about the conditions under which their personal data is collected and processed.

YESWERUN attaches particular importance to the protection of personal data and undertakes to process it in accordance with the General Data Protection Regulation (“GDPR”) and the French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

For processing activities related to the organisation of Veni Vici, the data controller is:

YESWERUN
Limited Liability Company (SARL)
32 rue Robert Mallet Stevens
30900 Nîmes
SIREN: 821581394

Email: contact@yeswerun.fr

For certain specific processing activities, particularly the service providing access to race photographs, YESWERUN may act jointly with other data controllers. These situations are detailed below.

2. Personal Data Collected

Depending on your use of the website and your participation in the event, we may process the following categories of data:

2.1. Identification and contact data

• surname;
• first name;
• date of birth;
• sex or sports category, where this information is necessary for the organisation or classification of the event;
• email address;
• telephone number;
• race bib number;
• nationality;
• country;
• postcode;
• city;
• where applicable, first and last name of the emergency contact;
• where applicable, telephone number of the emergency contact.

2.2. Registration and participation data

• selected race or event;
• registration information;
• sports category;
• registration status;
• race bib number;
• results, timing and ranking;
• information required to verify participation requirements;
• where applicable, supporting documents required by applicable regulations;
• where applicable, information relating to parental authorisation;
• where applicable, contact details of an emergency contact.

2.3. Order and payment data

• details of orders and options purchased;
• amount and date of transactions;
• payment status;
• transaction references.

Banking data may be processed directly by the payment service providers used for registration. YESWERUN does not necessarily have access to full bank card details.

2.4. Photograph-related data

• photographs taken during the event;
• race bib number associated with a photograph;
• first name, surname and email address required to access the photography service;
• where applicable, a selfie voluntarily submitted by the participant to use the facial recognition feature;
• where applicable, a biometric template temporarily generated to perform facial matching.

2.5. Browsing and technical data

Depending on the tools actually used on the website:

• IP address;
• browser type;
• device type;
• operating system;
• pages visited;
• date and time of connection;
• data contained in technical logs;
• identifiers and information from cookies or other trackers.

2.6. Data provided voluntarily

We may also process information that you provide to us when contacting us by email, contact form or any other means.

3. Purposes and Legal Bases for Processing

3.1. Management of Veni Vici registrations

Data collected during registration is used to:

• register and manage your registration;
• verify your eligibility for the event;
• manage payment of the registration fee and any options;
• assign you a race bib;
• organise your participation;
• provide you with the information necessary for the proper running of the event;
• manage timing, results and rankings;
• manage requests relating to your registration;
• provide post-registration support.

Legal basis: performance of the contract entered into with the participant and, where necessary, compliance with legal or regulatory obligations applicable to the organiser.

Certain information is essential to enable your registration. If this data is not provided, YESWERUN may not be able to register or manage your participation.

3.2. Payment of registrations and options

The data required for payment is used to:

• process transactions;
• ensure accounting follow-up;
• manage any refund requests;
• prevent and handle payment incidents.

Legal basis: performance of the contract and compliance with applicable accounting and tax obligations.

Payments are made through: Njuko

3.3. Management of the registration platform

Registrations may be made via the Njuko platform.

In this context, certain data required for registration is processed by Njuko to enable the technical operation of the platform.

Role of Njuko: YESWERUN’s data processor.

For more information about Njuko’s own processing activities, participants are invited to consult the data protection information available on the registration platform.

3.4. Organisation, timing and publication of results

Participation data may be used to establish and publish event results.

The results may include:

• first and last name;
• race bib number;
• age category;
• finish time;
• ranking.

Legal basis: performance of the contract relating to participation in the event and/or the organiser’s legitimate interest in ensuring the sporting operation and publication of the event results.

Retention or publication period: indefinite.

3.5. Practical information relating to the event

YESWERUN may use the participant’s contact details to send communications strictly necessary for the organisation of Veni Vici, including:

• registration confirmation;
• race bib collection arrangements;
• schedules;
• safety information;
• changes to the course or programme;
• information relating to results;
• information required after the event.

Legal basis: performance of the contract.

3.6. Newsletters and marketing communications

Where applicable, YESWERUN may send news, offers or marketing communications to individuals who have agreed to receive them.

Legal basis: consent where required by applicable regulations.

Consent may be withdrawn at any time, in particular by using the unsubscribe link included in the relevant messages.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

3.7. Race bib resale

YESWERUN may offer, through Finishers.com, a service enabling the resale of a race bib.

In this context, the data required to manage the operation may be processed, including:

• first and last name of the transferring participant;
• first and last name of the new participant;
• email address;
• race bib number;
• registration information;
• information required to reassign the race bib;
• transaction data, where the service involves payment.

This data is used to:

• enable the sale or transfer of the race bib;
• identify the participants concerned;
• update the registration and information associated with the race bib;
• monitor the transaction;
• prevent errors, fraud or unauthorised transfers.

Legal basis: performance of the contract and provision of the race bib resale or transfer service.

The service is operated with the involvement of Finishers, in accordance with the arrangements agreed with YESWERUN.

Role of Finishers in this processing: joint controller.

The data is retained for the period necessary to manage the resale, followed by the applicable retention periods for registration and transaction data and, where applicable, accounting obligations.

4. Detailed Information on the Processing of Photographs During the Veni Vici Race

4.1. Personal data

• First name, surname, email address, race bib number and photographs of participants
• Where applicable: photograph (selfie) used for facial recognition and biometric template
• Connection data (logs, timestamps)

4.2. Data controllers and main processors

Data processing is carried out jointly by the race organiser, YESWERUN, and Finishers, the joint technical and operational controller of the system used to provide access to photographs.

Photographers are selected by the organiser and act as processors for taking and uploading photographs.

Finishers uses various technical processors for hosting and maintaining the Platform.

4.3. Purposes of processing

• Enable participants to access their images via a dedicated platform secured through race bib recognition
• Give participants the option to purchase some or all of these photographs
• Subject to explicit consent, enable identification through facial recognition in order to improve the relevance of the photograph selection

4.4. Legal basis for processing

• Race bib recognition: performance of the contract
• Facial recognition: explicit consent of the participant

4.5. Access to photographs

Access is restricted to race participants only. Each participant has a secure personal area. The participant logs in using their email address (used during registration) and race bib number. This information is checked against the database provided by the organiser. If a valid match is found, a secure link is sent by email.

4.6. Retention period

• Photographs not purchased: maximum of 1 month after being made available online
• Purchased photographs: 3 months in the active database, followed by 9 months in archive before deletion
• Biometric data (facial recognition): never retained beyond the real-time matching process
• Connection data: 90 days

4.7. Biometric processing arrangements

• Facial recognition is strictly optional and is activated only at the participant’s initiative
• After the event, if the participant wishes to find their photographs using facial recognition, they provide a selfie that is used as a temporary biometric reference
• The selfie is not retained after the comparison
• Matching results are not retained on a persistent basis
• Participants who have refused this processing are excluded through a distinctive race bib system

4.8. Participants’ rights

• Access, rectification, erasure, restriction, objection and portability
• Withdrawal of consent at any time
• Exercise your rights with Finishers: https://www.finishers.com/contact
• Consent may also be withdrawn from the participant’s personal area
• Complaint to the CNIL: www.cnil.fr

5. Photographs Used for Event Communications

Independently of the service allowing participants to find and purchase their photographs, certain images from the event may be used by YESWERUN to present and promote Veni Vici.

This may include:

• the event website;
• social media;
• event presentation and communication materials.

Photographs and videos taken during the event may also be used by YESWERUN, its partners and authorised media for communication and promotional purposes relating to the event, in accordance with the provisions set out in the race regulations.

The conditions governing the use of participants’ images are specified in the event regulations accepted during registration.

This processing is separate from the Finishers photography service allowing participants to find and purchase their photographs.

5.1. Recipients of the data

Within the scope of their respective responsibilities and depending on the processing concerned, data may be accessible to:

• authorised personnel within YESWERUN;
• teams responsible for organising Veni Vici;
• the Njuko registration platform;
• timing service providers;
• payment service providers;
• Finishers for the photography service;
• photographers working at the event;
• IT, hosting and maintenance service providers;
• email or SMS service providers, where applicable;
• administrative or judicial authorities where required by law.

Service providers only have access to the information necessary to perform their duties and must process it in accordance with their applicable obligations.

6. Transfers of Data Outside the European Union

Whenever possible, YESWERUN gives preference to service providers that process data within the European Union or European Economic Area.

Where data is transferred to a country outside the European Economic Area, YESWERUN ensures that the transfer is covered by the safeguards required under applicable regulations, including, depending on the circumstances:

• an adequacy decision by the European Commission;
• standard contractual clauses approved by the European Commission;
• or any other mechanism ensuring an appropriate level of protection.

Additional information regarding the applicable safeguards may be requested at: info@lavenici.com

7. Retention Periods for Other Data

YESWERUN retains data only for the period necessary to fulfil the purposes for which it was collected, extended where necessary by periods required or permitted by applicable regulations.

The main retention periods are as follows:

Registration data: 5 years

Data required for contract management: 5 years

Accounting records and data: 10 years

Sports results data: indefinite

Requests submitted to participant support: 3 years

Data used for marketing communications: until consent is withdrawn and/or 3 years

Finishers photographic data: see Article 7

Biometric data: not retained beyond the matching process

Finishers logs: 90 days

At the end of these periods, the data is deleted or anonymised, unless additional retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

8. Data Security

YESWERUN implements appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of personal data.

These measures may include:

• limiting access to authorised persons only and securing accounts and personal areas;
• protecting data exchanges;
• managing access rights;
• backup procedures;
• measures to prevent and manage security incidents.

Service providers processing data on behalf of YESWERUN are also required to implement appropriate security measures.

9. Your Rights

Depending on the processing concerned and its legal basis, you may have the following rights:

• right of access to your data;
• right to rectify inaccurate or incomplete data;
• right to erasure, under the conditions provided for by applicable regulations;
• right to restriction of processing;
• right to object, where applicable;
• right to data portability, where applicable;
• right to withdraw your consent at any time where processing is based on your consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

The exercise of certain rights may be restricted where processing is necessary to comply with a legal obligation, perform a contract, or establish, exercise or defend legal claims.

10. Exercising Your Rights

To exercise your rights regarding processing carried out by YESWERUN, you may contact:

YESWERUN – Data Protection
32 rue Robert Mallet-Stevens
Forum Ville Active
30900 Nîmes

Email: contact@yeswerun.fr

To protect your data, YESWERUN may request information to verify your identity where there is reasonable doubt regarding the identity of the person making the request.

For processing carried out jointly with Finishers as part of the photography service, you may also contact:

Finishers: https://www.finishers.com/contact

11. Complaint to the CNIL

If, after contacting us, you believe that your data protection rights have not been respected, you have the right to lodge a complaint with:

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07

Website: www.cnil.fr

12. Cookies and Other Trackers

The website www.lavenivici.com uses only cookies that are strictly necessary for its proper operation.

These cookies are used in particular to ensure the technical operation of the website, manage sessions and correctly display certain features.

They are not used for advertising, profiling or audience measurement requiring consent.

In accordance with applicable regulations, these strictly necessary cookies do not require the user’s prior consent.

13. Links to Third-Party Websites and Services

The website may contain links to services or websites operated by third parties.

These third parties may carry out their own processing of personal data.

Where these third parties act as independent data controllers, their own privacy policies apply.

We encourage you to read them before providing them with personal data.

14. Changes to this Privacy Policy

YESWERUN may amend this Privacy Policy to take into account, in particular:

• changes in laws or regulations;
• recommendations from supervisory authorities;
• changes to the website;
• changes to the services offered as part of Veni Vici;
• changes concerning the service providers used.

The date of the latest update is indicated at the top of this page.

In the event of a substantial change affecting processing that has already been implemented, the persons concerned may be informed by appropriate means.