Data Privacy Policy

Last updated: June 1, 2026

1. Data Controller Identification

The Data Controller for personal data collected through CucunuTrail is:

The brands CucunuTrail and Deporte y Datos are owned by the same Controller and operate under this same data treatment.

2. Data Collected

For registration and event organization purposes, we collect the following personal data:

• Full name of participants and contact person
• Identification document (type and number)
• Date of birth (for age-based categorization)
• Sex (for categorization)
• Email address and phone number for contact
• Payment data (processed by third parties, see section 4)
• Race category selected

3. Purposes of Treatment

The collected data will be used for the following purposes:

• Registration management for CucunuTrail 2026
• Event logistics organization (timing, results, safety)
• Participant categorization by age and sex
• Event-related communication (confirmations, updates, instructions)
• Billing and payment management
• Compliance with applicable legal obligations
• Sending news and marketing communications (only with explicit consent)

4. Shared Collection and Treatment

Data is collected through the CucunuTrail website and is also processed on the Deporte y Datos platform, which operates the registration system. Both platforms are brands of the same Controller (Javier Perez), so treatment is shared under the same control.

5. Third Parties and Data Processors

To provide necessary services, we share data with the following third parties:

• Wompi (Bancolombia) – Online payment processing (cards, Nequi, PSE)
• Resend – Transactional email delivery (confirmations, receipts)
• Supabase – Data storage and platform hosting
• HostGator / Vercel – Website hosting

These third parties have their own privacy policies and are contractually obligated to protect data confidentiality.

6. Data Subject Rights

As a data subject, you have the following rights under Colombian Law 1581 of 2012:

• Know, update, and rectify your personal data
• Request proof of authorization granted for treatment
• Revoke authorization and/or request deletion of data when treatment does not respect constitutional and legal principles, rights, and guarantees
• File complaints with the Superintendence of Industry and Commerce for violations of the law

To exercise these rights, send an email to javier@deporteydatos.com.co with the subject "Data rights – CucunuTrail".

7. Retention and Conservation

Personal data will be retained as long as necessary for the purposes described, and in any case for the time required by applicable legal obligations (accounting, tax, etc.). Once the event concludes and legal obligations are fulfilled, data will be deleted or anonymized.

8. Changes to This Policy

This policy may be updated periodically. Any changes will be notified through the CucunuTrail website. The date of the last update is indicated at the beginning of this document.