Privacy policy
In short: we have no user accounts, we do not store visitors' IP addresses and we only collect what you type into a form yourself. We never take runners' names from registration platforms.
This is a translation. In case of any discrepancy, the Croatian version prevails.
Who processes the data
The controller for runners.hr and hybrid.hr is Adriavibe, Zagreb.
For any questions about personal data, write to privacy@runners.hr.
What data we process and why
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Name, city, description, training sessions and public contact channels of a run club or running school | Listing in the club and school directory | Legitimate interest (public directory), with notice when submitting | While the club or school is listed; after removal, another 30 days in backups |
| E-mail for updating a club or school (not shown publicly) | Verifying changes and a reminder every 6 months to confirm the details | Legitimate interest | While the club or school is in the directory |
| Coach names provided by a school | Showing the school | The school's legitimate interest | While the school is listed |
| Data from a submission or correction form | Processing the submission | Legitimate interest | Approved: kept with the club, school or race; rejected: 30 days after rejection |
| E-mail with "Send us a race link" (optional) | So we can contact you about the race | Consent (you can withdraw it at any time) | 10 days |
| Name, e-mail, company and message from the "For brands" form | Replying to a partnership enquiry | Legitimate interest (replying to an enquiry) | Not stored on the site; the message stays in our mailbox while the conversation lasts, at most 2 years |
| Public contact details of race organisers (e-mail, phone) | Questions about the race | Legitimate interest; not displayed | While the race is in the database |
| E-mail for the newsletter | Sending the weekly race overview | Consent with double opt-in | Until you unsubscribe (one-click unsubscribe in every e-mail) |
| Clicks on external links and ads (no IP address, no cookies) | Statistics and partner reports | Not personal data | 24 months, then monthly totals only |
For races we only take public information from organisers and registration platforms, plus the total number of registered runners (where available, also the number of women and men). We do not take names, results or any other data about runners.
Who else processes data for us
- Cloudflare: hosting, database and storage (stored in the EU), form protection (Turnstile) and cookie-free visit statistics.
- Brevo (France): sending notifications about submissions and the newsletter.
- Google: Analytics and AdSense, only with your consent in the cookie settings (without consent, only non-personalised ads).
- Machine translation service: we only send it public texts (descriptions of races, clubs and schools), never contact details.
We have a data processing agreement with each of them. Google and Cloudflare may also process data outside the EU, under the EU-US Data Privacy Framework and standard contractual clauses.
Cookies
Necessary settings (for example your cookie choice) are stored without consent. Analytics and advertising cookies are only set once you accept them, and you can change your choice at any time. The list is on the Cookies page.
Your rights
You have the right to access your data, rectification, erasure, restriction of processing, objection and data portability, and the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. You can remove a club or school using the "Suggest a correction" form on its page or by e-mail. We reply to requests within one month at privacy@runners.hr.
If you believe the processing does not comply with the regulations, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.
Security
Data is kept in a database stored in the EU, accessible only to the administrator. Contact details and e-mails for updates are never shown publicly. If a data breach poses a risk to you, we will notify AZOP within 72 hours and you without undue delay.
Changes to this policy
When we change this policy, we publish the new version here, with its date. With every consent we record which version of the text was accepted.
Version 1.2, 13 November 2026