Privacy notice
What data we collect, what we use it for and how to ask us to delete it.
from COP 370,000 COP 400,000 COP 430,000 COP 460,000
RegisterWho is responsible
- Corporación Gran Fondo Boyacá Mundial, a non-profit organisation and the event organiser, based at La Ciclería Café Taller — Cra. 16 #19-28, Duitama, Boyacá.
- Contact channel for anything concerning your data: gfboyacamundial@gmail.com.
What we collect
- When you register for the event: full name, ID type and number, date of birth — which sets your category —, the category bracket you race in, email address, phone number, city and country, the distance you choose and your jersey size. If you enter the couples or the parent-and-child category by invitation, your registration is linked to the inviter’s and their name appears on yours. If you wish, also what you tell us under «Your Gran Fondo»: the phrase you want shouted at you, who it is from, what people call you and who you ride for.
- If you leave your registration unfinished after ticking that we may contact you, we keep your email, WhatsApp, name and how far you got, to remind you once. Without that box, what you type stays on your device only.
- Whoever leaves you a message for the Divino Niño bend gives us their name and message, with their authorisation, so we can deliver it to you during and after the race.
- Through the instalment form: full name, ID number, email address, the amount and date of the instalment, and the payment receipt you attach.
- In the shop: everything above plus your phone number and, if you ask for home delivery, the address, department and municipality where you want to receive it.
- Registration also asks for the name and phone number of your emergency contact. That data belongs to someone else: by registering you declare that you have their authorisation to give it to us. It is used only to reach them if something happens to you during the event, it is not shared outside the medical team and the organisation, and it is deleted together with the rest of your registration data. That person can exercise their rights — access, update, correct or request deletion of their data — by writing to gfboyacamundial@gmail.com.
- We do not ask for health data: not your blood type, not the name of your health insurer, not medical conditions. Only that you declare you have current health insurance. If you like, you can tell us a dietary requirement (vegetarian, gluten-free…) so we take it into account for lunch and the feed stations.
- If you like, you can give us your Instagram username: we use it to tag you in the event photos and videos, invite you to the Road to Boyacá Mundial activities and tell you about giveaways. It is optional.
- We do not ask for data about minors, and we never collect card or bank account details: payment happens on the Wompi platform and we never see that information.
What we use it for
- To register you for the event: assign your category and distance, prepare your race number and your kit, and write to you about what you need to know for race day.
- To keep track of your Plan Alcancía instalments and how much of your entry fee is paid.
- To contact you if something about a specific instalment needs clarifying.
- To prepare your shop order, hand it over at the Expo Bici or ship it, and write to you about its status.
- To reach your emergency contact if something happens to you during the event.
- So the cheering crew can shout your phrase on the Divino Niño bend, to print your nickname on your race number, and so the announcer can say who you ride for.
- Only if you authorise it in its own box: to message you on WhatsApp about your registration, to send you Gran Fondo news and offers, and to share your story and phrase on the event’s social media and press. They are three separate authorisations and you can withdraw them at any time.
- Outside those boxes we do not use this data for advertising, and we never sell it or pass it to third parties for commercial purposes.
Event photos and selfie search
- Photos from the rides and the race are published free on this site under the image authorisation you gave when registering. If you want a photo taken down, write to gfboyacamundial@gmail.com: we remove it from the album and from our storage.
- So that you can find your race photos, we automatically read the bib number visible in each one. That number is not matched with your registration: the search only returns photos that are already public.
- Selfie search exists only if you expressly authorised it when registering or at kit pickup, because it processes sensitive data: for every face in the photos we compute a numeric signature (128 numbers) that lets us compare it with your selfie. Your selfie never leaves your phone: its signature is computed right there and that is all we receive, without storing it. The photo signatures live in a private index on Netlify that only the search reads, are used for nothing else and are deleted 90 days after publication; the exact date is shown on the photos page. You can revoke that authorisation or ask us to take a photo down at gfboyacamundial@gmail.com.
Who else processes it
- Google LLC, which hosts the spreadsheet where instalments are recorded.
- Netlify, which hosts the site and stores the receipt in private storage.
- Wompi, the platform that processes the payment, under its own privacy policy.
- The courier, only when you choose home delivery: it receives your name, phone number and address, and nothing else.
- All of them act as data processors: they handle the data on behalf of the organisation, not for their own purposes.
How long we keep it
- Registration data is kept for the current edition and up to twelve months after the event.
- Instalment data is kept for the current edition and up to twelve months after the event, in case a payment needs clarifying or a refund request comes in.
- Shop order data is kept while the withdrawal period and the warranty are running, and afterwards for as long as accounting obligations require.
- After that it is deleted, unless an accounting or legal obligation requires keeping it longer.
Your rights
- Under Colombian Law 1581 of 2012 you may access, update and correct your personal data.
- You may request proof of the authorisation you gave, be informed of how your data has been used, and file complaints with the Superintendencia de Industria y Comercio.
- You may withdraw your authorisation and request deletion of your data, unless a legal or contractual duty requires keeping it.
- To exercise any of these rights, write to gfboyacamundial@gmail.com stating your request. We reply within the deadlines set by law.
Security
- The receipt you attach is kept in private storage, never public: it is reached only through a signed link the organisation uses internally.
- The form page is always served over an encrypted connection, and the ID number is never written to the server logs.