What data we collect, what we use it for and your rights over it.
Draft. This page is structurally complete, but the details highlighted in gold must be completed by your legal advisers before publication. This is not legal advice.
Controller: Reto Run y Recovery SL, tax ID (NIF) [to be completed: tax ID] and registered address at [to be completed: registered address]. Contact email: info@runthecamino.com. Data protection officer, if applicable: [to be completed: DPO].
Only what you give us in the sign-up form:
We do not collect special category data (such as health data) through this website.
Your express consent, given by ticking the box on the form, and pre-contractual steps taken at your request. You can withdraw your consent at any time.
For as long as the relationship lasts and, afterwards, for the applicable statutory limitation periods. Specific retention period: [to be completed: period].
To organise and deliver the event, we share the strictly necessary data with the partner companies involved, such as accommodation providers, the insurer, the organising travel agency (Pilgrim), recovery clinics and physiotherapists, restaurants, and transport and luggage transfer companies. Each receives only the data it needs for its service. Beyond this, we do not share your data with third parties unless required by law.
We also use service providers acting as data processors under signed agreements: Google (Google Workspace / Forms) to receive the form, Vercel for web hosting and Network Solutions for email. If you book the trip, your data will be passed to the organising travel agency (Pilgrim) to manage it. Some of these providers may be located outside the EU, in which case GDPR safeguards apply.
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@runthecamino.com, stating the right you wish to exercise and attaching a copy of your ID. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).
We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.
Last updated: date