Let's Do A Million Acts of Kindness
This Policy applies to both personal information supplied to us either by an individual or by others. We may use personal information supplied to us for any of the purposes as set out in this Policy, or as otherwise disclosed at the point of collection.
This Policy is an important document. We recommend that you read it carefully and print and keep a copy for your future reference.
In this Policy, we use the terms:
“Data Controller” shall mean TM acting as the data controller as prescribed by GDPR
“Personal Information” is any information relating to an identified or identifiable natural person;
“identifiable natural person” is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors; and
“you” and “your” (and other similar terms) refer to our customers, job applicants, staff and visitors to the TM websites.
Under certain circumstances you have the following rights:
To exercise such rights and if you have any questions about how we collect, store and use Personal Information, then please contact us using the details [email protected] or use the form Data Subject Access Request Form
We will only process personal Information where we have a lawful reason for doing so. The lawful basis for processing Personal Information by us will be one of the following:
We aim to be transparent about why and how we process Personal Information. For further information on our processing activities please review the relevant section below:
Our General Personal Data Protection Policy governs the use and storage of your data. You may request to see our General Personal Data Protection Policy in writing by emailing the Data Protection Officer (“DPO”) at [email protected]
Tough Mudder Incorporated, on behalf of itself and its affiliated entities, is a Controller of the personal data you (data subject) provide us. We collect the following types of personal data from you, you give us by filling in forms or by corresponding with Us:
Information we collect automatically
As you interact with the Site, We may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites.
Job applicants: Please refer to information made available when applying online for further details as to how Personal Information is collected, processed and how long it is retained for.
Staff: Personal Information in relation to staff will be held on various internal systems and applications. A privacy notice which sets out the purposes for which Personal Information will be processed and contains information on data subject rights is provided to staff at the commencement of employment. If further information is required please contact the Human Resources department.
Our services are not directed to or intended for use by children, except for children who are registered for Tough Mudder events by their parents or guardians. We will only collect information about children when we have the express consent from the child’s parent or guardian. The information we collect will only be used by Tough Mudder and our partners to provide relevant event entries and participation. We need to use the information that you give us about your children to fulfil our agreement with you to provide our services. [Consistent with the requirements of the US Children’s Online Privacy Protection Act, the GDPR, and all other applicable laws and regulations,] if we learn that we have received information directly from a child under age 16 (or age 13 in certain jurisdictions) without his or her parent’s or legal guardian’s verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use our services. Subsequently, we will delete such information.
On occasion, we may need to share your Personal Information with third parties. We will only share Personal Information where we are legally permitted to do so. We may pass your Personal Information to third parties such as:
We need your personal data in order to provide you with the following services: marketing, operating promoting, and informing me of its event series and related businesses.
From time to time, we may need to transfer your Personal Information between Tough Mudder affiliated entities, who may have offices that are located in territories outside of the European Economic Area (“EEA”), including in the USA, in order to provide you with the services required.
Please note that the legal regimes of some territories outside of the EEA do not always offer the same standard of data protection as those inside the EEA, although we will ensure that your Personal Information is only ever treated in accordance with this Policy.
Where necessary, we have entered into standard European Commission approved form model data protection clauses (if a transfer is to the United States a service provider must either enter into the standard European Commission form approved data protection clauses or be Privacy Shield certified) to provide you with the service required and with our external service providers and business partners in relation to services that they may provide that involve processing data from locations outside of the EEA for which we are Data Controller.
We have in place appropriate technical and organisational security measures to protect your Personal Information against unauthorised or unlawful use, and against accidental loss, damage or destruction.
We put in place strict confidentiality agreements (including data protection obligations) with our third party service providers.
Our website may link to other, unaffiliated third party websites. Please note that TM is not, and cannot, control or be responsible for the content or privacy and confidentiality practices of any third party websites. You must always carefully review the privacy and confidentiality policy of any third party website that you may visit in order to understand how the operators of that website may collect, store and use your Personal Information.
Please check back regularly to keep informed of updates to this Policy.
While we hope that you will not need to, if you want to complain about our use of Personal Information please send an email detailing your complaint to TM’s Data Protection Officer at [email protected]
You also have the right to lodge a complaint with the relevant supervisory authority. Please see further details below:
Information Commissioner’s Office
Wycliffe House, Water Lane
Tel: 0303 123 1113
Tel: 029 2067 8400 (calls in Welsh)
Email: [email protected]