Policy on the processing of personal data

Updated:20 October 2026

This policy defines the procedure for processing and protecting personal data of users of the site fatracing.ru, Telegram bot FATRACING, VK bot FATRACING, registration services, store, marketplace, personal account, live tracking and other services of the FATRACING project.

Also applies to Premium, PRO and waiting list additional information about subscription data processing. Individual consents are available in subscription documents.

1. Personal Data Operator

Operator: AUTONOMOUS NON-PROFIT ORGANIZATION FOR THE DEVELOPMENT OF CYCLING "FAT RACING CLUB (RACING)".

• Address: 173000, Russia, Novgorod region, Veliky Novgorod, Fedorovsky Ruchey str., 14, sq. 21.
• TIN: 5300020110.
• OGRN: 1255300002616.
• Email for personal data requests: fatracing@yandex.ru.

2. Legal grounds for processing

The operator processes personal data in accordance with the Constitution of the Russian Federation, Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", other applicable regulatory acts of the Russian Federation, consent of the personal data subject, contract or user actions aimed at obtaining services and using FATRACING services.

3. Categories of subjects and personal data

The operator can process the data of the following categories of persons: site visitors, bot users, event participants, buyers, sellers, trainers, partners, organizers, volunteers and support persons.

• Identification data: surname, first name, patronymic, date of birth, gender, city, team, sports categories and results.
• Contact information: phone, email, Telegram ID, Telegram username, VK ID, delivery address or other address specified by the user.
• Account and communication data: messages in bots and chats, requests, requests, history of actions in the personal account.
• Data for participation in events: selected distance, starting number, medical and organizational marks, documents and consents required for admission to the event.
• Order and payment data: order composition, amount, payment and delivery status; the operator does not store bank card data if the payment is made through a payment provider.
• Sports and technical data: downloaded FIT, GPX and other activity files, tracks, power indicators, heart rate, cadence, bike and workout parameters.
• Geodata: live tracking coordinates and route markers if the user explicitly enables geo-location transmission.
• Media: photos, screenshots, avatars, application materials, affiliate and custom images.
• Technical data: IP address, user-agent, cookie, information about the browser, device, time of request, pages and actions on the site.
• When subscribing to Web Push: the address of the browser's push service and the cryptographic keys of the subscription to deliver notifications to this browser.

4. Processing purposes

• User registration, identification in the personal account, Telegram-bot and VK-bot.
• Organization of registration, admission, events, publication of start lists, race results.
• Processing orders, deliveries, refunds, requests, requests and support messages.
• The work of the store, marketplace, partner sections, coaching and team pages.
• Providing live tracking, sports analytics, downloading and comparing activity files.
• Informing about events, service changes, status of applications and orders.
• Delivery of Web Push notifications if the user has separately enabled them in the browser.
• Compliance with the requirements of the legislation of the Russian Federation, accounting and tax accounting, dispute resolution.
• Protection of the site and services from abuse, error diagnosis, traffic analytics and service quality improvement.

5. Processing methods

Processing is performed using automation tools and without them: collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, provision, access, depersonalization, blocking, deletion and destruction of personal data.

6. Cookies, analytics and counters

The site uses cookies and similar technologies for authorization, saving settings, shopping cart operation, protection against abuse and analytics. The site may use Yandex.Metrica, which processes technical data about the session. The user can restrict the use of cookies in the browser settings, but some of the functions of the site may not work correctly.

7. Transfer to third parties

The operator does not sell personal data. The data may be transferred only to the extent necessary for the purposes of processing: hosting providers, cloud storage, payment and mail services, delivery services, analytics services, browser push services for the delivery of Web Push notifications enabled by the user, technical support contractors, organizers and partners of events, as well as government agencies in cases provided for by the legislation of the Russian Federation.

If the user follows external links, uses Telegram, VK, Strava, Intervals.icu, payment or other external services, data processing by such services is governed by their own rules.

8. Cross-border transfer

If cross-border transfer of personal data is required for the operation of integrations or external services, the operator performs it only if there is a legal basis and in compliance with the requirements of the legislation of the Russian Federation on personal data.

9. Storage, updating and destruction

Personal data is stored no longer than required by the purposes of processing, contractual relationships, user consent or requirements of the legislation of the Russian Federation. After the purposes of processing have been achieved, consent has been withdrawn or a legal request for deletion has been received, the data will be deleted, destroyed or depersonalized, unless otherwise required by law. The Web Push subscription is stored until the user disconnects or until the push service informs that the address is no longer valid.

10. Personal data protection

The Operator takes the necessary legal, organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, provision and distribution. Access to data is restricted to authorized persons and is used only to perform their work tasks.

11. Rights of the personal data subject

The user has the right to:

• receive information about the processing of your personal data;
• require clarification, blocking or destruction of incomplete, outdated, inaccurate, illegally obtained or unnecessary data;
• withdraw consent to process personal data;
• disable Web Push notifications in the browser or by using the subscription management button on the site;
• appeal the actions or omissions of the operator to Roskomnadzor or the court;
• exercise other rights provided for by the legislation of the Russian Federation.

The FATRACING account can be deleted in the Android application: "Account" → "Settings" → "Delete account". Login data, settings, integrations, subscriptions, personal publications and trips uploaded to the account are deleted. Local GPS tracks remain in the phone's memory and can be deleted separately in the app. The data of registrations, payments and unused slots can be stored without being linked to the account, as long as it is necessary for the fulfillment of obligations, dispute resolution or accounting and tax accounting.

To exercise your rights, send a request to fatracing@yandex.ru. In the request, specify the data that allows you to identify the user and the corresponding FATRACING service.

12. Policy change

The Operator may update this policy. The new version is valid from the date of publication on this page, unless it specifies a different effective date.