Back to home

Privacy notice

Last updated: 25 May 2026

Who we are

ESCMS (Endurance Sports Competition Management System; escms.ro) is a competition registration and management platform. We help event organizers run registrations, payments, timing integrations, and public result pages.

Roles under GDPR

For participant and registration data collected for a specific event, the event organiser is the data controller. ESCMS acts as a data processor under Article 28 GDPR, processing personal data only on documented instructions from the organiser and for the purpose of providing the platform.

What we process

On behalf of organisers we may store and process registration details (such as name, contact information, category, club, and custom form answers), payment-related metadata handled through our payment providers, timing and results data supplied by the organiser or timing partners, and technical logs needed to operate and secure the service. We do not sell personal data.

Processor obligations

We process data only as instructed by the organiser, maintain confidentiality, apply appropriate technical and organisational security measures, and assist organisers with data subject requests where applicable under our agreement with them.

Retention

Retention periods for participant data are determined by the organiser as controller. ESCMS retains data only for as long as needed to provide the service, meet legal obligations, or as agreed with the organiser.

Your rights

If you are a participant, requests to access, rectify, or erase your registration data should usually be directed to the event organiser first, because they decide why and how your data is used. For requests relating to your use of the ESCMS platform itself (for example organiser account or platform support), contact us using the details below.

Deletion requests

You may request deletion of data processed by ESCMS as processor by emailing privacy@escms.ro. We will route your request appropriately — including to the relevant organiser when they are the controller — and respond within a reasonable time.

Contact

Privacy enquiries and deletion requests: privacy@escms.ro. For event-specific participant data, please include the event name so we can identify the correct organiser.