Privacy

Who am I?

The Bun Run Den Haag is organised by Arn. I am responsible for the data on this page. Questions or requests? Email arn@bunrundenhaag.nl.

This website

Visitor statistics: only with your OK

I use Google Analytics to see how many people visit the site and which pages they view. That only happens if you click “OK” in the cookie banner. Without your OK, Google Analytics isn’t even loaded. Advertising and personalisation features are always off.

With your OK, Google Analytics sets two cookies (_ga and _ga_…, valid for up to 2 years) and Google processes data such as the pages you visit, your browser, your device and your approximate location (country or city). Google Analytics 4 doesn’t store full IP addresses. Google may also process this data outside the EU, under the EU-US Data Privacy Framework. The data is automatically deleted after 14 months at most.

I remember your choice in your browser (localStorage, key bunrun-cookies). You can always change it through Cookie settings at the bottom of every page. If you withdraw your OK, the Google Analytics cookies are deleted.

Language choice

If you choose Dutch or English with the button at the top right, I remember that in a functional cookie (bunrun-taal, valid for up to 1 year). It only contains your language. Without a choice, the site looks at your browser’s language, and I don’t store that.

Hosting

The site runs on Cloudflare. To show and protect the site, Cloudflare processes technical data such as your IP address. That’s needed for the site to work (legitimate interest), and I don’t use that data myself. Fonts and all other files come from this site itself. No external font or advertising services are loaded.

The mailing list

Through the form on this site I ask for your email address and first name, and the pace you want to run (or that you’re not running yet). Whether you want to wear the pacer button is optional. I also store the language you signed up in, so I can email you in that language. If you came in through a personal link (with?via= and a code), I store that code with your registration. That shows me how people find the Bun Run. The code says nothing about you, and your browser only remembers it during your visit (sessionStorage).

• What for: keeping track of your registration, sending you the payment link, letting you know when the bakers and the route are announced, and emailing you about future editions.
• Legal basis: your consent. You give it with the tick box in the form.
• Where: at Resend, the service I use to send the emails. Resend is an American company; the transfer falls under the EU standard contractual clauses. Only I have access.
• How long: until you unsubscribe, or until the Bun Run stops.
• Unsubscribing: every email has an unsubscribe link at the bottom. Or email me, and I’ll remove your data right away.

Tickets and the day itself

You pay for your spot through a bunq payment link, with iDEAL or another payment method. bunq processes your payment under its own privacy statement. I see your name and account number, and use them only to match your payment to your registration. For the practical emails (your group, the info email beforehand and a thank you afterwards) I put your email address and first name on the participant list in Resend. I use that list only for that edition. You only get news about future editions if you sign up for that yourself.

To organise the run, I keep an overview of sign-ups in a Google Sheet that I don’t share with anyone. It holds your first name, email address, when you signed up, your group, whether you want to be a pacer, your language, the via code if you had one, whether, when and how much you paid, and a short note where needed. The legal basis is legitimate interest: I can’t organise the run without this overview. Google is an American company and processes the data under the EU-US Data Privacy Framework. I delete the overview a month after the run. All I keep are numbers without names, like how many runners each group had.

I also note my best guess of your gender, to see how the groups are made up. That’s my own interest; you don’t need it to take part. Did I get it wrong, or would you rather I didn’t? Email me and I’ll change or remove it.

On the day, photos are taken, which I share on Instagram and with the bakers. Rather not be in a photo? Say so at check-in, or email me afterwards and I’ll remove the photo.

Your rights

You can always ask what data I hold about you, and have it corrected or deleted. You can withdraw your consent at any time, and object to how I use your data in the sign-up overview. Email arn@bunrundenhaag.nl and I’ll respond within a month, usually much sooner. If you’re not happy with how I handle your data, you can file a complaint with theAutoriteit Persoonsgegevens, the Dutch data protection authority.