Data & Privacy

Approach

The analysis of an event is designed before the race, not improvised afterwards. Before we start, we agree with the organiser which information is needed, what it will be used for, who has access to each result and how long it is retained. That agreement is the basis of the project and governs every other technical decision.

We do not present this as a certification or an absolute guarantee. It is the way of working that seems reasonable to us when handling data from thousands of participants: define the scope in writing, limit the purpose and deliver in aggregate.

Roles

The event organiser is the party that holds the relationship with its participants and supplies the authorised race records. Eyerace carries out the analysis for the organiser and within the framework agreed with them. The specific data protection role of each party, together with the applicable lawful basis for processing, is set out in the contract and in the corresponding data processing agreement before the race.

What we process

The analysis draws on two sets of information:

• Race-day observation. Imagery captured at agreed control points, from which the bib number and the brand, model and category of sports equipment are extracted, together with their confidence level.
• Event information. The authorised race records and official results, supplied by the organiser, which connect each observation to a registered participant.

The purpose of the system is to identify equipment and describe the race in aggregate. We do not build individual participant profiles for commercial purposes, and we do not use the information from a race for purposes other than those agreed with its organiser.

What each party receives

The organiser receives the event report corresponding to the agreed scope. Sports brands receive aggregated market intelligence: shares, distributions and time series, not sets of participants' personal data.

When an analysis is carried out at a brand's request, it still requires the cooperation of the event organiser and their processing framework. We do not analyse a race without the involvement of the organisation running it.

Retention

Retention periods are agreed per project and documented in writing. We distinguish between the captured material, the intermediate data of the process and the aggregated results, which are what support the series across editions. At the end of the agreed period, the data is deleted or anonymised as agreed.

Security

We apply technical and organisational measures proportionate to the type of information we process: access control, encryption in transit, separation between environments and access limited to the staff working on each project. The specific measures for each project are set out in its documentation.

Participants' rights

Participants in an event can exercise their data protection rights with the organiser, as the party that holds the relationship with them. Eyerace works with the organiser to handle those requests within the scope of the analysis carried out.

Contact

For any question relating to data and privacy, including preliminary enquiries from an organiser considering an analysis, write to us at hello@eyerace.io. If you need the processing documentation for your legal team, say so in your message and we will send it to you.

This page describes our approach and does not replace the legal information applicable to each project, which is set out in the contracts and data processing agreements signed with each organiser.