Privacy policy

Last updated:31 October 2026

This website tells the story of KRAP Invaders and its editions. It is a static site: no accounts, no forms to fill in, no payments, no analytics, no advertising. Here we explain the little personal data that passes through it anyway, under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

Who is responsible

The data controller is KRAP ASD APS, the association that organises KRAP Invaders.

In short

  • We set no cookies of our own and we do not track you.
  • Like any website, the server sees your IP address; so does Google, which serves the fonts and the video thumbnails.
  • YouTube comes into play only when you start a video.
  • The quiz stores your scores in your own browser; we only receive what you choose to send in the “Who’s that?” mode.
  • Sign-up, membership and payments happen on a separate system, with its own notice.

When you visit the site

The site is hosted by Netlify Inc. (USA). Like every web server, Netlify records technical logs of each request: IP address, browser type (user agent), page requested, date and time. They are needed to deliver the pages and to protect the site from abuse and attacks. Netlify processes them on our behalf as a data processor (Art. 28 GDPR) and keeps them according to its own log rules; we do not use them for anything else and do not combine them with other data.

Legal basis: our legitimate interest in keeping the site running and secure (Art. 6(1)(f) GDPR).

Fonts

The site’s typefaces are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com, Google Ireland Ltd and Google LLC) on every page. To send you the font files, your browser connects to Google’s servers, which therefore receive your IP address and the technical data of the request. Google handles them under its own privacy policy.

Legal basis: our legitimate interest in displaying the site correctly (Art. 6(1)(f) GDPR).

Videos

Video previews are images loaded from i.ytimg.com (Google) when the page opens: here too your browser sends your IP address to Google.

The actual YouTube player loads only when you click a video (in privacy-enhanced mode, from youtube-nocookie.com), or when you start the quiz mode with video clips. From that moment YouTube and Google may set cookies or similar storage in your browser and collect data about your viewing, as independent controllers, under Google’s privacy policy. If you don’t want this, simply don’t start the videos.

The quiz

The game on /gioca/ remembers your best scores, your settings and the proposals you have made in your browser’s local storage (localStorage, keys starting with “kq:”). That data stays on your device: we never see it. You can delete it at any time, as explained in the cookie policy.

There is one exception. In the “Who’s that?” mode you can suggest the name of a person you recognise in an archive photo. If you press send, we receive: the photo, the proposed name, the note if you wrote one, your name or nickname if you wrote one (it is optional), and the time. The proposal is stored with Netlify (Netlify Blobs) and read by KRAP staff, who use it to caption the archive photos.

  • Legal basis: our legitimate interest in documenting the history of the event and putting names to the people in the photos (Art. 6(1)(f) GDPR); your own name is there only if you choose to add it.
  • Retention: until the proposal has been reviewed, and in any case no longer than 12 months.
  • Please write only names or nicknames: no phone numbers, addresses or other details. You may leave your own name blank.
  • If someone suggested your name for a photo and you would rather not be named, write to us and we will delete the proposal.

If you write to us

If you write to info@krapinvaders.com, we use your address and what you write only to reply to you. The mailbox is hosted by Aruba S.p.A. in Italy. We keep the emails for as long as it takes to deal with your request.

Legal basis: replying to a request you made (Art. 6(1)(b) GDPR).

Sign-up, membership and payments

Event sign-up, KRAP membership and payments do not happen on this site but on iscrizioni.krapinvaders.com, a separate system run by the same association together with the krapannone.com membership system. The privacy notice for that data (what we collect, why, for how long, who processes it, including payment providers and email services) is shown when you sign up and is published at krapannone.com/privacy.

Photos and videos from the events

This site publishes an archive of photos and videos from past editions: athletes in action, guests, the crowd, and sometimes children at the kids’ workshops. We publish them to tell the story of the event and of the parkour community that has grown around it, never in ways that harm anyone’s dignity or reputation.

Consistent with the association’s notice: for those who sign up for the event or join KRAP, the use of images is based on the optional photo and video consent given at that time (Art. 6(1)(a) GDPR), which can be withdrawn at any time. Wide shots of the crowd and documentary pictures of a public event are based on our legitimate interest in documenting the history of the event (Art. 6(1)(f) GDPR).

If you appear in a photo or video and want it removed or blurred, write to info@krapinvaders.com with the link to the page or the photo. We act as quickly as possible, without asking for reasons. For minors, the request comes from a parent or guardian. Please note: we can remove the image from this site and from our channels, but not from copies that others may have saved or shared elsewhere.

Social networks and external links

The site has links to Instagram, YouTube and Facebook. They are plain links: nothing is loaded from those platforms until you click. Once on their pages, their own privacy policies apply.

Data outside the European Union

Netlify and Google are companies based in the United States, so some data (above all your IP address) may be processed there. These transfers rely on the safeguards provided by Articles 44 ff. GDPR, such as the standard contractual clauses or the EU-US Data Privacy Framework.

Minors

This site does not ask anyone for personal data, so it collects none from minors either, except what a minor might type into a “Who’s that?” proposal. If you are under 18, you can leave the “your name” field blank.

No profiling

We make no automated decisions and do no profiling with the data described here.

Your rights

Under Articles 15 to 22 GDPR you can:

  • find out whether we hold data about you and get a copy (access);
  • have it corrected or deleted;
  • ask us to restrict its processing;
  • receive it in a machine-readable format (portability);
  • object to processing based on our legitimate interest, for example to a photo of you or a proposal with your name;
  • withdraw any consent you have given, without affecting what was done before.

Write to info@krapannone.com or by certified email to krapasd@pec.it. We reply within one month (Art. 12 GDPR).

If you believe your data has been handled improperly, you can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the EU country where you live.

Changes

If the site changes, this page changes too: the date at the top tells you when it was last updated. For cookies and browser storage, see the cookie policy.