Personal Data Processing Policy
Updated:6 October 2026
This policy defines the procedure for processing and protecting personal data of users of the site fatracing.ru, Telegram bot FATRACING, VK bot FATRACING, registration services, store, marketplace, personal account, live tracking and other services of the FATRACING project.
1. Personal Data Operator
Operator: AUTONOMOUS NON-PROFIT ORGANIZATION FOR THE DEVELOPMENT OF CYCLING "FAT RACING CLUB (RACING)".
- Address: 173000, Russia, Novgorod region, Veliky Novgorod, Fedorovsky Ruchey str., 14, sq. 21.
- TIN: 5300020110.
- OGRN: 1255300002616.
- Email for personal data requests: fatracing@yandex.ru.
2. Legal grounds for processing
The operator processes personal data in accordance with the Constitution of the Russian Federation, Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", other applicable regulatory acts of the Russian Federation, consent of the personal data subject, contract or user actions aimed at obtaining services and using FATRACING services.
3. Categories of subjects and personal data
The operator can process the data of the following categories of persons: site visitors, bot users, event participants, buyers, sellers, trainers, partners, organizers, volunteers and support persons.
- Identification data: surname, first name, patronymic, date of birth, gender, city, team, sports categories and results.
- Contact information: phone, email, Telegram ID, Telegram username, VK ID, delivery address or other address specified by the user.
- Account and communication data: messages in bots and chats, requests, requests, history of actions in the personal account.
- Data for participation in events: selected distance, starting number, medical and organizational marks, documents and consents required for admission to the event.
- Order and payment data: order composition, amount, payment and delivery status; the operator does not store bank card data if the payment is made through a payment provider.
- Sports and technical data: downloaded FIT, GPX and other activity files, tracks, power indicators, heart rate, cadence, bike and workout parameters.
- Geodata: live tracking coordinates and route markers if the user explicitly enables geo-location transmission.
- Media: photos, screenshots, avatars, application materials, affiliate and custom images.
- Technical data: IP address, user-agent, cookie, information about the browser, device, time of request, pages and actions on the site.
- When subscribing to Web Push: the address of the browser's push service and the cryptographic keys of the subscription to deliver notifications to this browser.
4. Processing purposes
- User registration, identification in the personal account, Telegram-bot and VK-bot.
- Organization of registration, admission, events, publication of start lists, protocols and results.
- Processing orders, deliveries, refunds, requests, requests and support messages.
- The work of the store, marketplace, partner sections, coaching and team pages.
- Providing live tracking, sports analytics, downloading and comparing activity files.
- Informing about events, service changes, status of applications and orders.
- Delivery of Web Push notifications if the user has separately enabled them in the browser.
- Compliance with the requirements of the legislation of the Russian Federation, accounting and tax accounting, dispute resolution.
- Protection of the site and services from abuse, error diagnosis, traffic analytics and service quality improvement.
5. Processing methods
Processing is performed using automation tools and without them: collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, provision, access, depersonalization, blocking, deletion and destruction of personal data.
6. Cookies, analytics and counters
The site uses cookies and similar technologies for authorization, saving settings, shopping cart operation, protection against abuse and analytics. The site may use Yandex.Metrica, which processes technical data about the session. The user can restrict the use of cookies in the browser settings, but some of the functions of the site may not work correctly.
7. Transfer to third parties
The operator does not sell personal data. The data may be transferred only to the extent necessary for the purposes of processing: hosting providers, cloud storage, payment and mail services, delivery services, analytics services, browser push services for the delivery of Web Push notifications enabled by the user, technical support contractors, organizers and partners of events, as well as government agencies in cases provided for by the legislation of the Russian Federation.
If the user follows external links, uses Telegram, VK, Strava, Intervals.icu, payment or other external services, data processing by such services is governed by their own rules.
8. Cross-border transfer
If cross-border transfer of personal data is required for the operation of integrations or external services, the operator performs it only if there is a legal basis and in compliance with the requirements of the legislation of the Russian Federation on personal data.
9. Storage, updating and destruction
Personal data is stored no longer than required by the purposes of processing, contractual relationships, user consent or requirements of the legislation of the Russian Federation. After the purposes of processing have been achieved, consent has been withdrawn or a legal request for deletion has been received, the data will be deleted, destroyed or depersonalized, unless otherwise required by law. The Web Push subscription is stored until the user disconnects or until the push service informs that the address is no longer valid.
10. Personal data protection
The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision and distribution. Access to data is restricted to authorized persons and is used only to perform their work tasks.
11. Rights of the personal data subject
The User has the right to:
- receive information about the processing of your personal data;
- require clarification, blocking or destruction of incomplete, outdated, inaccurate, illegally obtained or unnecessary data;
- revoke consent to the processing of personal data;
- disable Web Push notifications in the browser or by using the subscription management button on the site;
- appeal the actions or omissions of the operator to Roskomnadzor or the court;
- exercise other rights provided for by the legislation of the Russian Federation.
The FATRACING account can be deleted in the Android application: "Account" → "Settings" → "Delete account". Login data, settings, integrations, subscriptions, personal publications and trips uploaded to the account are deleted. Local GPS tracks remain in the phone's memory and can be deleted separately in the app. The data of registrations, payments and unused slots can be stored without being linked to the account, as long as it is necessary for the fulfillment of obligations, dispute resolution or accounting and tax accounting.
To exercise your rights, send a request to fatracing@yandex.ru. In the request, specify the data that allows you to identify the user and the corresponding FATRACING service.
12. Policy change
The Operator may update this policy. The new version is valid from the date of publication on this page, unless it specifies a different effective date.