Privacy Policy

Participants must read this Galasin Privacy Policy carefully to ensure that they understand how data is processed at Galasin. Capitalised terms used here have the same meaning as in the Terms and Conditions of the race, which appear on a separate page.

Personal Data

Personal Data means any data, information and/or particulars in any form that can identify the Participant, which the Participant writes when creating an account and/or which the Participant includes or submits in, on and/or through the Galasin registration website concerning the Participant's personal information, covering among other things: full name, address, birth details, the Participant's identity card number, gender, electronic mail address (email), mobile telephone number, medical history, identity, and other data classified as personal data.

Accuracy of Personal Data

Galasin needs the Participant's Personal Data for, among other things, registering for a race and verifying the Participant's data when that Participant becomes one of the prospective race winners. The Participant must update and notify Galasin if there is any change to their Personal Data, any spelling error, or any difference in spelling of either the name or an alias between what appears on the Participant's Identity Card and the data entered when creating an Account on Galasin.

Collection of Personal Data

1. Galasin collects the Participant's Personal Data when the Participant registers or updates their data.
2. Galasin receives the Participant's personal information from Third Parties, to the extent that the Third Party has obtained the Participant's consent to provide the information required (as relevant).

Use of Personal Data

Galasin will process, analyse and/or use the Participant's Personal Data for the following purposes, as well as for other purposes permitted by the applicable laws and regulations:

1. To identify and register the Participant as a race participant and to verify the Participant's data.
2. To enable Galasin to use the Personal Data in providing information services relating to the race the Participant has registered for.
3. To process, manage and verify the Participant's Personal Data.
4. To prevent, detect, investigate and address crime, cheating, and illegal, unauthorised or fraudulent conduct that may occur in the use of the Galasin website (including but not limited to fraud, embezzlement, theft and money laundering).
5. To develop, expand and provide products that meet participants' needs in connection with the Race.
6. To carry out research into Participants' demographic data, including but not limited to the use of Galasin's services.
7. To develop, improve and provide Galasin's services and the features within Galasin.
8. To send information that Galasin considers useful to the Participant, including information about races, feature services and promotions from Galasin, after the Participant has given consent to Galasin when creating an account on Galasin.
9. For internal administrative purposes such as audits, data analysis and database records.
10. To communicate with the Participant regarding all matters concerning Galasin and the race owner, the races available on Galasin, the features and services on Galasin, and information and matters related to the race.
11. To maintain the safety, security and continuity of Galasin.com, its services and features, and those of the race owner.
12. To comply with legal obligations. In certain cases we collect and use the Participant's Personal Data in order to comply with the law. For example, we collect information from the Participant regarding bank accounts for identity verification and other purposes.
13. Communication with the Participant. Galasin uses the Participant's Personal Data to communicate with the Participant in connection with the race the participant is taking part in, through different channels (for example by telephone, email or chat).
14. Advertising and personalisation. We use the Participant's Personal Data to display interest-based advertising for features, products and services that may be of interest to the Participant.

Collection of Children's Personal Data

Under the laws and regulations in force in the Republic of Indonesia, an adult is a person aged 18 years or over. In that context, the Galasin Online Registration System has a policy on the use of the Galasin site to register participants below the age of majority which follows the applicable race regulations, under which the registration process is carried out by a parent. The Galasin Online Registration System will use a child's personal information only for the purpose of verifying participation, and will not share personal information collected from children with third parties for any purpose.

Disclosure to Third Parties

1. For the purposes of management and for the interests of the race owner (the Event owner), the Participant is deemed to have given consent at the time of registering for the race, authorising Galasin to disclose, display, announce, transmit, provide and/or disseminate the Participant's Personal Data to Third Parties. For the avoidance of doubt, the Third Parties referred to in this paragraph may include, but are not limited to:
   1. Galasin's Third Party being the company that owns the race (event) currently taking place, for which the Participant has declared their agreement to take part and whose registration is on Galasin, where that Third Party will use the Data to introduce or offer products and/or services to the Participant and/or carry out other activities including marketing, research, analysis and product development by that Third Party (depending on the circumstances).
   2. A Third Party that is a government authority or institution where (i) required or ordered by the applicable laws and regulations (including but not limited to responding to regulatory enquiries, investigations or guidance, or complying with archiving and reporting requirements or provisions under the applicable laws and regulations) and/or (ii) there are legal proceedings involving Galasin.
   3. A Third Party being the vendor providing financial services (payment gateway) at the point where an approved and verified payment is processed, and in connection with providing the Participant with information as to whether the payment made by the Participant succeeded or not.
   4. Another Third Party being the provider of timing services (timing system) that records participants' times in the race and displays the relevant Personal Data on the timing system website and the timing system database server.
2. In connection with the operation of widgets or special content within Galasin as Galasin explains in these Terms and Conditions, Galasin hereby states that Galasin's Third Party will and may transmit, convey and/or provide the Participant's Personal Data to other parties working together with the Third Party (as relevant), principally in order to be able to forward the Participant's request for the support services the Participant wants to another party providing those support services. In this case, the other party receiving the Participant's Personal Data will be subject to the same obligations concerning the conveyance and use of data as apply to Galasin's Third Party.

Links to Third-Party Sites

Galasin may link to Third-Party sites. Galasin is not responsible for the obtaining, collection, processing, analysis, use, storage, display, announcement, transmission, dissemination, deletion or destruction of the Participant's Personal Data by those third parties. If the Participant provides information directly to such a site, the privacy policy and terms of service on that site will apply, so that all consequences of doing so are entirely the Participant's responsibility.

Data Storage and Security

Galasin ensures that Participant data collected and/or held by Galasin will be stored securely in accordance with the laws and regulations in force in Indonesia. Galasin will retain Participant data for as long as is needed to fulfil the purposes described in this Privacy Policy.

Unauthorised Access

Galasin is responsible for the Personal Data that Galasin collects from the Participant. The Participant, however, must keep confidential their Personal Data, password and/or any unique code the Participant creates and uses to access their Personal Data wherever the Participant stores it, including the Account, password and/or unique code used to access or log in to the Participant's Galasin account, and must not allow third parties to access the Participant's Personal Data without the Participant's consent and knowledge.

The Participant must notify Galasin if the Participant believes that their password and/or unique code is being misused by another, irresponsible party.

Requests for Access to and Change of Personal Data

Subject to the applicable laws and regulations, the Participant may request access to and/or request a change of their Personal Data by sending an email (enclosing supporting evidence or documents) to [email protected].

Galasin reserves the right to refuse the Participant's request to access and/or change their Personal Data for reasons justified under the applicable laws and regulations.

Withdrawal of Consent

The Participant has the right to ask Galasin to stop using their Personal Data for the purposes set out above. Where the Participant intends to ask Galasin to stop using their Personal Data, the Participant may send an electronic mail (email) enclosing supporting evidence or documents (response service within 2x24 hours).

Withdrawing that consent may result in the termination of the Participant's participation status in a particular race, in accordance with the rules and/or specific policies issued by that Race.

Governing Law

This Privacy Policy is governed by and interpreted in accordance with the law of the Republic of Indonesia.

Changes to the Privacy Policy

Galasin may at any time change, update and/or add to part or all of the provisions in this Privacy Policy, in line with Galasin's policy going forward and/or changes in laws and regulations. If this Privacy Policy is changed, updated or added to, Galasin will notify the Participant through the communication channels Galasin determines.

Participant's Declaration and Consent

On the basis of the Privacy Policy set out above, the Participant hereby declares:

1. That the Personal Data provided by the Participant is true and valid data, and that the Participant therefore gives consent to Galasin to obtain, collect, process, analyse, store, display, announce, transmit, disseminate, delete and destroy it in accordance with this Privacy Policy and the applicable laws and regulations;
2. That the Participant has read, understood and agreed to all the provisions contained in this Privacy Policy, which forms an inseparable whole with the Terms and Conditions of the race (event) the Participant is taking part in.