How we protect your privacy

This notice explains which personal data the www.utlactrail.com website processes, why it processes it, and what rights you have. It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.

1. Data controller

Larius S.S.D. a R.L.
Viale Turati 123, 23900 Lecco (LC)
VAT no. 03889840132 · REA LC-404423
Email: info@utlactrail.com · PEC: larius.ssdrls@pec.it

2. Which data we process and why

Browsing the website

Like every website, the server automatically records certain technical data from requests: IP address, date and time, requested page, browser type, and operating system. This data is used to operate the website, ensure its security, and identify any misuse.

• Legal basis: the Controller’s legitimate interest in the security and proper operation of the website (Art. 6(1)(f) GDPR).
• Retention: for the technical period provided by the hosting provider, unless needed to investigate cybercrime.

“Become a volunteer” form

If you apply as a volunteer, you provide us with your first name, last name, email address, mobile number (optional), and preferred role. The form does not use external services: data is sent by email to the organization’s address and is not stored on the website.

• Purpose: to contact you and organize your participation as a volunteer.
• Legal basis: your request and the measures necessary to follow it up (Art. 6(1)(b) GDPR).
• Retention: for the organization of the edition for which you apply and no longer than 12 months after it ends, unless you ask us to remain in contact for future editions.

Contact by email or WhatsApp

If you contact us by email or via the WhatsApp button, we process the data you send us (for example, your name, contact details, and message content) only to respond to you. The WhatsApp button opens the WhatsApp Ireland Ltd service (Meta group), which processes data under its own notice: the website does not load anything from WhatsApp until you use it.

• Legal basis: your request (Art. 6(1)(b) GDPR).
• Retention: for the time needed to handle the request.

Visit statistics (Google Analytics 4)

Only if you accept it in the cookie banner (the “Analytics” category), the website uses Google Analytics 4 to collect aggregate visit statistics: pages viewed, duration, device type, and approximate geographic origin. Without your consent, Google Analytics is not loaded and no data is sent to Google.

• Provider: Google Ireland Ltd, acting as a Processor.
• Legal basis: consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time using the “Manage cookies” link in the footer.
• Retention: according to the Analytics property retention settings, for a maximum of 14 months.

Cookie consent log

When you make or change a choice in the cookie banner, the website records a trace of it on its own server: a random consent identifier, the choices expressed, the version of the notice, date and time, page and language, IP address, and browser type. The log does not contain a name or email address and is not shared with third parties.

• Purpose: to demonstrate that consent has been given, as required by Art. 7(1) GDPR.
• Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Retention: throughout the period in which consent takes effect and for the following 24 months.

Course maps

Vector maps, fonts, and icons are hosted on our server. Some base maps, however, come from external services, and your browser contacts them directly when you view the map: Amazon Web Services (elevation data for terrain and 3D view), Esri (satellite view), and OpenTopoMap (topographic view). As with any web request, these providers receive your IP address and browser type. No cookies are used.

• Legal basis: the Controller’s legitimate interest in showing race routes (Art. 6(1)(f) GDPR).

Race registration

Registration takes place on the WeDoSport platform, accessible from the “Register” buttons. The data you enter there is processed according to the notice published on that platform; this website neither receives nor retains registration data.

3. How we process data

Data is processed using electronic tools and appropriate security measures: encrypted connection (HTTPS), system access reserved for authorized persons, and no disclosure. The website is hosted by SiteGround Spain S.L., on servers located in the European Union (the Netherlands). We do not carry out profiling or automated decision-making.

4. Who data may be disclosed to

On behalf of the Controller and as Processors (Art. 28 GDPR), data may be processed by: SiteGround (hosting and email), Google (only with your consent to statistics), and the technical collaborators who maintain the website. We do not sell or transfer data to third parties for commercial purposes. The updated list of Processors is available upon request.

5. Transfers outside the European Union

Some providers (Google, Amazon Web Services, Esri) belong to groups based in the United States. Any transfers take place under the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.

6. Your rights

At any time, you may request access to your data, rectification, erasure, restriction of processing, and portability; you may object to processing based on legitimate interest and withdraw the consent you have given, without affecting processing already carried out (Arts. 15–22 GDPR). To exercise your rights, write to info@utlactrail.com.

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Cookies

The use of cookies and similar technologies is described in the Cookie Policy.

8. Updates

This notice may be updated, for example if the services used by the website change. The version in force is always published on this page.

Last updated: September 30, 2026.