Raceo Run

Data Processing Agreement

1. Scope

This Data Processing Agreement (“DPA”) applies when a competition organizer (the “Organizer”) uses the Raceo Run platform (the “Platform”), operated by Ori Vision (“we”), to run a competition. It describes how we process registration data on the Organizer's behalf. It takes effect when the Organizer begins using the Platform's management tools for a competition; no separate signature is required.

2. Roles

The Organizer decides what registration data is collected, for what purpose, and how rosters and results are published. Under Taiwan's Personal Data Protection Act, the Organizer is the entrusting party and we process registration data as the entrusted party acting on its behalf.

Account data that users provide to create and manage their Raceo Run accounts is handled by us under our Privacy Policy and is outside the scope of this DPA.

3. Data and Purpose

Registration data processed under this DPA may include:

  • Identity and contact details of skaters, coaches, and team representatives, including identity information needed to verify eligibility.
  • Affiliation, divisions, groups, and entries.
  • Materials uploaded for the competition, such as performance music or appeal attachments.
  • Schedules, check-in records, results, and rankings.

This data is processed only to run the Organizer's competition and publish its results, for as long as the Organizer uses the Platform for that competition and subject to Section 9.

4. Our Commitments

  • We process registration data only on the Organizer's instructions and to provide the Platform.
  • We do not sell registration data or use it for unrelated purposes.
  • Access is limited to personnel who need it to operate the Platform, and they are bound by confidentiality obligations.

5. Security

We apply reasonable technical and organizational measures, including encryption in transit and at rest, role-based access in the management tools, separated environments, and regular backups that rotate over time. See our Security page for more.

6. Sub-processors

We rely on service providers that support operating the Platform, such as cloud hosting, content delivery and network security, email delivery, and monitoring. Data is stored mainly on cloud infrastructure located in Taiwan; some services may process limited data outside Taiwan.

A current list is available to Organizers on request. We will notify Organizers or update this page at least 14 days before a new sub-processor begins processing registration data. Organizers may raise concerns by email during that period, and we will work in good faith to resolve them.

7. Incidents

If we confirm a personal data incident affecting registration data, we will notify the Organizer within 72 hours of confirmation, describing what happened, the data involved, the likely impact, and the steps taken. We will also assist the Organizer in notifying affected individuals as required by law.

8. Requests and Information

  • If a skater or guardian contacts us about registration data, we will refer the request to the Organizer or assist the Organizer in responding.
  • Once every 12 months, the Organizer may request written information about our data protection practices. On-site audits are not offered.

9. Return and Deletion

Within 30 days of the Organizer's written request, we will delete or return the registration data for the relevant competition, unless retention is required by law. Backup copies are removed as backups rotate, within the same period.

10. Term and Changes

This DPA remains in effect for as long as we process registration data on the Organizer's behalf. Updates will be published on this page. This DPA is governed by the laws of Taiwan (R.O.C.).

11. Contact

For questions about this DPA or to make a request, email: contact@ori.vision