Controller and requests
FindMyRace is an independent project run by Anouar Nouri to help people search public running results. This notice applies to findmyrace.de and findmyraces.com. You can request that your results be hidden using the form linked below. It asks only for your full name. For other messages, use “Feedback” at the bottom of the homepage and select “Other problem”.
Result data and sources
We index publicly accessible result lists from race organisers and timing providers. Depending on the source, these contain names, events and years, distances, bib numbers, clubs or teams, placings, finish times, and gender, age group or category. Source links are shown where available. Original publication is not blanket permission for every subsequent use. Name-based groupings can confuse different people and do not verify identity.
Current purposes and legal bases
The current purpose is to help runners find and view published results. This includes assigning results to events and producing descriptive statistics about the dataset. Article 6(1)(f) GDPR is the basis relied upon: the interest in an accessible results search and secure technical operation. Necessity and the interests of the people concerned must be considered. Statutory privacy requests are handled to meet the relevant obligations under Article 6(1)(c); other voluntary feedback is processed to improve the service under Article 6(1)(f).
Planned features
Future plans include running-progress analysis, race-time predictions and running-event recommendations. This notice does not activate those features or provide blanket consent. Before a new personal-data use starts, its purpose, scope, legal basis and any required consent must be assessed, and the information updated. Existing descriptive statistics are distinct from those planned personal features.
Connection data and security
Visits involve processing IP addresses and technical connection data. Security logs include time, the requested path without the search query, response status, duration and a broad, unverified browser/bot classification. Current application logs are configured to avoid search names. Form limits use a value derived from the IP address with timestamps; this is a security measure, not anonymous visitor analytics. The purpose is service delivery and abuse prevention under Article 6(1)(f) GDPR.
Cookies and browser storage
The website’s own code currently sets no cookies and uses neither local storage nor session storage. There is no cookie-based login or embedded advertising or visitor tracking. This does not mean no personal data is processed: results, connections and voluntary form entries still involve personal data. Browsers may cache files normally and autofill forms according to your browser settings.
Hosting, maps and other services
The hosting provider may process connection data needed to operate the server. The map loads tiles from the OpenStreetMap Foundation, which receives technical information such as IP addresses and browser details. Existing AI-generated motivational summaries were created using Google Gemini, processing selected result information. The currently public search does not trigger a new Gemini request. External services may process data outside the EU/EEA; their terms and safeguards need to be considered. PayPal, Strava, organiser sites and the operator’s personal website are ordinary external links; their own privacy notices also apply when you open them.
Retention
Results form a historical archive; no blanket automatic expiry is currently configured. Retention must remain tied to the stated purpose and justified requests. Feedback and hiding requests are stored for handling, documentation and respecting a hiding decision; no automatic expiry is currently configured for these either. Server/application logs are normally rotated daily, retaining up to 14 rotations in addition to the current file. Expired form counters are cleared on the next form access; the limit uses a rolling one-hour window. Backups are separate from normal operation, and restoring one must not permanently reverse justified hiding decisions.
Your rights and objection
Subject to the GDPR’s conditions, you have rights of access, rectification, erasure, restriction and objection. Portability applies where its legal conditions are met, and consent can be withdrawn for future processing. You may object to processing based on legitimate interests on grounds relating to your particular situation under Article 21. You may complain to a supervisory authority, particularly where you live or work or where an alleged infringement occurred. Rights requests generally require a response within one month, subject to the statutory exceptions.
Request hiding on FindMyRace
The separate form accepts a hiding request using your full name. Receipt does not mean the results have already been hidden. Requests are reviewed manually; where names are shared, other people’s results must not be changed. The form offers no personal reply channel and is not a complete procedure for every privacy right. Hiding concerns FindMyRace; original sources and search engines may maintain their own records. Your statutory rights are unaffected.