This policy describes how Run5 collects and uses personal data when you use the platform.

---

1) Data Controller

• Platform: Run5
• Contact: contact@proalergare.ro
• For GDPR-related questions, you can email us.

2) Data we collect

• Account data: email, name/username, password (stored hashed).
• Profile data: avatar, gender, club (if provided).
• Event data: registrations, role (runner/volunteer), confirmations.
• Technical data: IP, user-agent, security logs (anti-abuse).

3) Why we use data

• Account creation and management.
• Event registration/participation and list management.
• Publishing results and stats (depending on platform settings).
• Security, abuse prevention, troubleshooting.

4) Legal basis

We process data to provide the service (contract), comply with legal obligations, and for legitimate interests (security). If we enable non-essential cookies/analytics, they will be used only with consent.

5) Storage & retention

We keep data as long as needed to operate the platform and comply with legal requirements.

• Account: until deletion or prolonged inactivity (per internal policies).
• Results: may remain as historical records for rankings and PB.
• Logs: kept for a limited time for security.

6) Cookies

We use essential cookies (auth, session, preferences). Non-essential cookies (e.g., analytics) are disabled by default and can be enabled only after you accept.

7) Your GDPR rights

• Right of access and information.
• Right to rectification and erasure (where applicable).
• Right to restriction / objection.
• Right to data portability (where applicable).

8) Security

We use technical safeguards (secure sessions, CSRF, validation, role-based access).

9) Changes

We may update this policy from time to time. The “Last updated” date indicates the current version.

• If changes are significant, we may display a notice in the platform.
• Continuing to use the platform after updates means you accept the new version.

---