Privacy Policy

ATHLEAD HOLDING BV · Last updated: October 6, 2026

1. About Athlead

Athlead Holding BV ("Athlead", "we", "us" or "our") develops technology for live tracking, timing, race results, and race intelligence for sports events.

Our technology enables organizers, among other things, to track participants during an event, register and live-display race times and results, detect safety-related situations more quickly, and make race information available to participants, organizers, officials, spectators, and other authorized parties.

This Privacy Policy describes how we process personal data when you use our websites, applications, tracking equipment, timing and results platforms, APIs, and other Athlead services (collectively the "Services").

Athlead processes personal data in accordance with applicable privacy legislation, including the General Data Protection Regulation ("GDPR").

2. To whom does this Privacy Policy apply?

This Privacy Policy may apply to, among others:

participants and athletes in events where Athlead technology is used;
organizers and event staff;
race juries, officials, and security services;
users of our applications and platforms;
visitors to our websites;
spectators using our live tracking or results platforms;
customers, suppliers, and partners of Athlead.

For sports events, we generally work together with an organizer. Depending on the specific services, the organizer may be the data controller for certain personal data, and Athlead may process this data on behalf of the organizer.

For certain processing activities, Athlead may act as a data controller itself, for example, for the management and security of our own platforms, accounts, technical infrastructure, and business operations.

3. What personal data do we process?

3.1 Identification and registration data

This may include, among other things:

first and last name;
participant number or start number ("bib number");
category, age category, or gender when relevant for the race ranking;
nationality;
team, club, or squad;
email address and other contact details;
profile picture or avatar;
event and registration data.

This data may be provided directly by you or supplied to Athlead by the organizer, a registration platform, a sports federation, or another authorized partner.

3.2 Live location and tracking data

When a participant uses an Athlead tracker, mobile application, or compatible tracking device, we may process location data during the event. This may include:

GPS coordinates;
time of position determination;
speed;
direction of movement;
distance traveled;
position on the course;
passing points;
status and technical information of the tracking device;
derived race information such as position relative to other participants.

This data may be registered and transmitted at a high frequency to enable live tracking.

Athlead does not collect physiological data such as heart rate or power data through its standard tracking services, unless expressly agreed otherwise for a specific application and separate information is provided regarding this.

3.3 Timing and race data

We may process data necessary to determine race times, rankings, and results, including:

start time;
finish time;
intermediate times (split times);
checkpoint passages;
race position;
time differences;
lap times;
speed and average speed;
distance traveled;
race status, for example, started, active, finished, did not finish (DNF), or disqualified;
official and provisional results.

This data may originate from Athlead trackers, timing equipment, transponders, external timing partners, organizers, or other linked systems.

3.4 Technical data

When you use our digital Services, we may process technical data, such as:

IP address;
browser type;
device type;
operating system;
technical identifiers;
log data;
session data;
error messages;
information about the usage and performance of our Services.

3.5 Communication data

When you contact us, we may process your name, contact details, correspondence, and other information that you provide to us yourself.

4. Why do we process personal data?

4.1 Execution of live tracking

Location data is processed to track participants during an event and to determine their position on the course. Live tracking can be used for:

displaying the position of participants;
calculating progress on the course;
determining relative positions and time differences;
race organization;
enhancing the race experience for participants and spectators;
supporting safety processes.

4.2 Participant safety

Live tracking can help organizers recognize potential anomalous situations more quickly, for example, when a participant does not move for an extended period, unexpectedly deviates from the course, or when a tracking device no longer registers normal progress.

However, tracking technology is a supporting tool and does not replace professional medical, safety, or emergency facilities.

Moreover, the lack of a location update does not necessarily mean that a participant is in difficulty. Mobile network coverage, GPS reception, battery status, and other technical conditions can influence the availability of live data.

4.3 Timing and results

We process race data to:

correctly identify participants;
determine start, intermediate, and finish times;
compile provisional and official results;
generate live rankings;
analyze race situations;
export results to organizers, federations, or other authorized partners.

4.4 Event organization and support

Data may be used to support organizers in the operational execution of an event, for example, for participant management, monitoring, race control, support, technical troubleshooting, and reporting.

4.5 Improvement and security of our Services

We may use data to:

secure our systems;
detect technical problems;
prevent fraud or misuse;
analyze performance and reliability;
improve our technology, algorithms, and Services.

Where possible, we use aggregated or pseudonymized data for this purpose.

5. Legal grounds for processing

Depending on the context, we base the processing of personal data on, among others:

Execution of an agreement: When processing is necessary to provide a Service that is purchased by you or by an organizer.

Legitimate interest: For example, for the security and improvement of our Services, technical monitoring, fraud prevention, and certain operational race processes, insofar as your interests or fundamental rights do not override these.

Legal obligation: When we must process or store data to comply with a legal obligation.

Consent: When applicable law requires consent, we or the organizer will ask for this consent before the relevant processing takes place.

For certain race-related processing, the organizer may determine the applicable legal ground. Therefore, please also consult the privacy policy and the participant terms and conditions of the event in which you are participating.

6. Live tracking and public visibility

An essential part of certain Athlead Services is that race information may be visible live to other persons. When this is activated for an event, for example, the following data may be made visible publicly or to a specific user group:

name of the participant;
start number;
team, club, or squad;
category;
profile picture or avatar;
current or last known position;
position on the course;
speed;
distance traveled;
intermediate times;
race position;
time differences;
provisional and final results.

This information can, for example, be displayed on live tracking websites, mobile applications, live leaderboards, screens at the event, livestreams or broadcast systems, websites of organizers, and integrated platforms of partners.

In many cases, the organizer determines which data is publicly displayed during an event.

Live location data

Participants must be aware that participating in an event with live tracking activated may mean that their location is visible to spectators or other users during the race. Athlead and the organizer strive to publish only location data that is relevant to the event.

After the end of the event, the public display of live location data may be terminated or restricted, while race results and historical race information may remain available for longer.

7. Live results

Due to their nature, sports results often have a public character. Name, start number, category, team, race time, ranking, intermediate times, and other relevant race results can therefore be displayed publicly during and after an event.

Results may also be shared with or published by the organizer, sports federations, timing partners, media and broadcast partners, results platforms, and other technical partners of the event.

If a participant believes that published data is incorrect or should not be publicly available for special reasons, he or she can contact the organizer or Athlead.

8. Automated calculations and race intelligence

Athlead can automatically calculate race information based on tracking and timing data. This may, for example, concern:

position on the course;
estimated progress;
live time differences;
ranking;
speed;
estimated time of arrival;
detection of abnormal movement or standing still;
extrapolation of a position when current location data is temporarily unavailable.

Such calculations may be based on algorithms and may temporarily deviate from the actual situation.

Insofar as such calculations do not have legal consequences or similar significant consequences for a person, they do not constitute solely automated decision-making within the meaning of Article 22 of the GDPR. When race results have official consequences, additional verification by the organizer, jury, or timing official may take place.

9. Who do we share data with?

We do not sell personal data to third parties. We may share personal data with parties when this is necessary for the provision of our Services. These may include:

event organizers;
timing partners;
registration platforms;
sports federations;
IT and cloud providers;
hosting providers;
communication providers;
map and geolocation services;
technical integration partners;
security and emergency services when necessary;
competent government authorities when we are legally obliged to do so.

When an external party processes personal data solely on behalf of Athlead, we enter into a data processing agreement where required. When an organizer is a controller in their own right, that organizer is responsible for the processing they carry out with the received personal data.

10. Integrations and external platforms

Athlead may exchange data with external systems used by an organizer. These may include, for example, registration, timing, results, mapping, livestream, or race management platforms.

When personal data is forwarded to an external party that processes it for its own purposes, the privacy policy of that party may also apply.

11. Cookies and similar technologies

Our websites and web applications may use cookies, local storage, and similar technologies. We may use these technologies for essential functionality, authentication, security, remembering preferences, performance analysis, and statistics about the use of our Services.

For non-essential cookies, we ask for consent where legally required. More information can be provided via our cookie settings or a separate cookie policy.

12. Retention periods

We do not keep personal data longer than necessary for the purpose for which it was collected, unless a longer retention period is legally required or justified.

Tracking and race data, including historical GPS locations, timestamps, speeds, passages, and derived race information, may be kept for a maximum of one year after the event.

This retention period allows Athlead to further improve the quality, accuracy, and reliability of its tracking, timing, and race intelligence technology. During this period, the data may be used for purposes including analysis, validation, troubleshooting, and training and improvement of algorithms and models.

Where reasonably possible, personal data for such training and improvement purposes is pseudonymized, aggregated, or anonymized, and directly identifying data is not used when it is not necessary for the intended purpose.

After the one-year retention period, the raw personal data is deleted or anonymized, unless longer retention is necessary due to a legal obligation, a dispute, a security incident, or another valid legal basis.

Official race results are an exception to this. Name, bib number, race time, ranking, split times, and other relevant official results may be kept for a longer period or permanently when this is necessary or customary for maintaining a historical race archive.

Account, contract, and billing data are kept for as long as necessary for the provision of services and for the duration of applicable legal retention periods.

13. Security

Athlead takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, unauthorized disclosure, and misuse.

These measures may include access control, authentication, encryption, logging, monitoring, backups, and security of our technical infrastructure. However, no digital system can guarantee absolute security.

14. International transfers

Athlead strives to process personal data within the European Economic Area ("EEA") whenever reasonably possible. For certain technical services, we may use service providers that process personal data outside the EEA.

When personal data is transferred to a country for which there is no adequacy decision from the European Commission, we ensure appropriate safeguards are in place where required, for example by using standard contractual clauses approved by the European Commission ("Standard Contractual Clauses").

15. Your privacy rights

When the GDPR applies to the processing, you may have the following rights, depending on the circumstances:

right to information;
right of access;
right to rectification of incorrect data;
right to erasure;
right to restriction of processing;
right to data portability;
right to object to certain processing;
right to withdraw consent at any time when processing is based on consent;
rights regarding solely automated decision-making.

These rights are not absolute. In certain cases, we may, for example, continue to store data when this is legally required or necessary for the establishment, exercise, or defense of legal claims.

When Athlead processes data solely on behalf of an organizer, we may forward your request to or refer you to the relevant organizer. We strive to process requests within the legally provided timeframe.

16. Right to object to live tracking or publication

When live tracking or publication of race data is part of an event, disabling it may have consequences for participation in certain functionalities or, depending on the race rules, for participation in the event itself.

If you have objections to the public display of your location or other race information for personal or safety reasons, we advise you to contact the organizer before the event. Athlead and the organizer can then assess what measures are technically and legally possible.

17. Minors

Athlead may provide technology for events in which minors participate. When personal data of minors are processed, special attention must be paid to their privacy and safety.

The organizer is responsible for determining an appropriate legal basis and, where required, obtaining consent from a parent or legal guardian. For events involving minors, the public availability of live location data may be restricted when necessary to protect the participants.

18. Data processing on behalf of organizers

At many events, the organizer determines which participants are tracked, which personal data is provided to Athlead, which data is publicly displayed, for what purposes the data is used, and how long certain race data should be retained.

For these processing activities, the organizer may act as the data controller and Athlead as the processor. Athlead then processes this data in accordance with the instructions of the organizer and the applicable data processing agreement.

For processing activities that Athlead carries out for its own purposes, Athlead may act as a data controller itself.

19. Changes to this Privacy Policy

Our technology and Services continue to evolve. We may therefore amend this Privacy Policy from time to time. The most recent version will be made available via our website or Services.

When changes have a material impact on the way we process personal data, we will provide additional information where appropriate.

20. Contact

The data controller for the processing activities for which Athlead determines the purposes and means itself is:

Athlead Holding BV

Europalaan 128

8560 Wevelgem

Belgium

Company number: 1036.060.661

E-mail: info@athlead.id

For questions about this Privacy Policy, the processing of personal data, or the exercise of your privacy rights, you can contact us via the above e-mail address. For questions about personal data processed in the context of a specific event, you can also contact the organizer of that event.