MENU
October 9, 2027

Privacy notice

LAST UPDATED: September 15, 2026

Chicago Event Management (“CEM”) collects the personal information of participants for the Abbott Chicago 5K (the “Chicago 5K”). This includes information collected offline and through the official event website at https://www.chicago5K.com/ (the “Website,” and together with the Chicago 5K, the “Services”). Participants may include event runners, walkers, volunteers, staff, and other event partners. This Privacy Notice explains how CEM collects, uses, shares, and protects that personal information.

CEM develops, manages, and produces the Chicago 5K on behalf of Bank of America.

Personal Data We Collect

We collect Personal Data (information that identifies or relates to an identifiable individual), which may include:

How We Collect Personal Data

We collect Personal Data which you provide when you sign up for a newsletter, register to participate in  the Chicago 5K, or visit the Chicago 5K website.

Uses of Personal Data

We use Personal Data to facilitate your Chicago 5K registration and participation, and ensure that all participants in the event have a safe and enjoyable experience. This Personal Data may be used for the following business purposes including:

We will engage in these activities to manage our contractual relationship with you and/or to comply with our legal obligations. In addition, the Chicago 5K and its partners have a legitimate interest in using the data to ensure a safe event for all.

We may also use your Personal Data to send marketing communications such as by sending you newsletters and/or targeted advertising via social media channels. We will engage in this activity with your consent or where we have a legitimate interest.

We may also use your Personal Data to accomplish our business purposes, such as for:

We engage in these activities to manage our contractual relationship with you, to comply with a legal obligation, and/or because we have a legitimate interest.

Automated Processing and Artificial Intelligence

CEM and its third-party service providers use automated processing technologies and artificial intelligence (“AI“)-enabled features in connection with the Services, including within CEM’s event registration platform. Automated processing may be used for the following general purposes: registration processing and qualification verification; fraud detection and security monitoring; participant analytics and benchmarking; behavioral segmentation of participants to inform targeted marketing campaigns; event launch optimization; personalization of participant experience; customer service support; and event logistics and operational improvement. In addition, the event registration platform may use AI for automated functions that determine the offers, discounts, or promotional communications a participant receives, based on their registration behavior and activity.

Third-Party SaaS Platforms. CEM’s third-party event registration platform uses AI features that process participant personal data for purposes including analytics, participant segmentation, benchmarking, growth strategy recommendations, event launch optimization (including timing and pricing recommendations), and automated functions that may affect the offers, discounts, or promotional communications a participant receives. CEM does not independently control this platform’s AI systems. Participants are encouraged to review the event registration platform’s privacy notice and AI-related terms and conditions for further information about how their data is processed by that platform’s AI features.

Internal AI Tools. CEM uses AI-enabled productivity tools internally (for example, to assist with drafting, scheduling, and administrative functions). To the extent any such tools access or process participant personal data, such use is limited to the purposes described in this Privacy Notice and subject to the confidentiality and data processing obligations applicable to CEM’s service providers.

Automated Decision-Making. Certain aspects of the Chicago 5K registration and operations may involve automated decision-making, including: entry selection systems and qualification time verification; fraud screening; and AI-assisted determinations that affect the offers, discounts, or promotional communications a participant receives. Such processing is carried out on the legal bases of (a) contractual relationship (to manage and administer your registration), (b) fraud prevention and security (to protect participants and the integrity of the event), and (c) legitimate interest, as applicable.

Opt-Out Rights Regarding Automated Processing. Participants who are residents of California or other U.S. states whose applicable privacy laws provide rights with respect to automated decision-making technology (“ADMT”) may have the right to opt out of the processing of their personal data using ADMT to make significant decisions about them. To exercise any such opt-out right, please contact us as described in the Contacting Us section below. We will process your request consistent with applicable law. Please note that if you exercise your opt-out right, CEM will try to provide alternative means of processing your registration or verifying your qualification for participation in the Chicago 5K, however, certain automated functions may be necessary for the administration of the event, and CEM will work with you to address any limitation on a case-by-case basis.

Disclosure of Personal Data

We may disclose Personal Data to:

Other Uses and Disclosures

We may also use and disclose Personal Data as we believe to be necessary or appropriate to do so:

In addition, we may use, disclose or transfer Personal Data to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring entity and its advisors.

Sensitive Data

We do not collect medical or health data at the time of registration. Participants may, however, tell us that they would like to participate in the Athletes with Disabilities program. This information is used only to the extent necessary to facilitate any disability accommodations.

In the event a participant seeks medical attention during an event, personnel at medical aid stations may collect and store individually identifiable medical information during this encounter.

Other Information

“Other Information” is any information that does not reveal a person’s specific identity or does not directly relate to an identifiable individual, such as:

If we are required to treat Other Information as Personal Data under applicable law, then we may use and disclose it for the purposes for which we use and disclose Personal Data as detailed in this Privacy Notice.

Collection of Other Information

We and our service providers may collect Other Information in a variety of ways, including:

Uses and Disclosures of Other Information

We may use and disclose Other Information for any purpose, except where we are required to do otherwise under applicable law. In some instances, we may combine Other Information with Personal Data. If we do, we will treat the combined information as Personal Data as long as it is combined.

Certain links may contain content provided by third parties. Those third parties may collect information about your website usage, including information specific to your mobile device or computer (e.g., IP address) when pages are served to your web browser. Further, when you click on a third party link from the Sites and mobile applications (including, without limitation, banner advertisements), that link will take you to a website(s) controlled and operated by third parties that we do not control. When you click on a third party link, you will be subject to that third party’s terms and privacy policy. Please review the privacy policy of all third party websites that you contact prior to sharing your personal information with such websites.

Third Party Advertisements and/or Analytics: We may serve third party advertisements and may use third party analytics service providers to provide us with statistical information. These third parties display advertisement banners based on an analytics of the statistical data regarding your visits to the Sites or mobile applications in order to tailor advertisements that may interest you. These third parties typically install cookies or other tracking technologies to monitor and record certain behavioral statistics that assist with targeted advertising practices. This Privacy Policy does not cover the methodologies used by third parties. Please review the privacy policy of all third party websites that you contact prior to sharing your personal information with such websites. We are not responsible for the content or practices of any third party advertiser.

Security

We seek to use reasonable organizational, technical and administrative measures to protect Personal Data within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure please immediately notify us in accordance with the “Contacting Us” section below.

Retention Period

We will retain Personal Data for as long as it is needed or permitted in light of the purposes for which it was obtained. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Minors

We do not solicit individuals under the age of sixteen (16) to register for the Chicago 5K, and we do not knowingly collect Personal Data from individuals under 16. We require parental consent for the processing of personal data for individuals under sixteen.

California Privacy Rights

Under the California Consumer Privacy Act (“CCPA”), California residents have certain rights regarding the personal information that businesses have about them. This includes the right to notice, access and/or deletion of your personal information, as well as the right to direct a business to stop selling your personal information.

Right to Notice. You have the right to be properly notified of the following:

Right to Access Your Information: You have the right to request the following covering the 12 months immediately preceding your request:

Please note that we may still use aggregated and de-identified personal information that does not identify you or any individual.

Right to Deletion: You have the right to request that we delete any personal information about you that we have collected from you. Please note that there are exceptions where we do not have to fulfil a request to delete information, such as when the deletion of information would create problems with the completion of a transaction or compliance with a legal obligation.

How to Exercise Your Access and Delete Rights: To exercise your access and delete rights as described above, you may contact CEM by:

Verifiable Consumer Requests: Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may only make a verifiable consumer request for access to your personal information twice within a 12-month period. The verifiable consumer request must: 1) Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative of that person; and 2) Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it. We cannot respond to your request to exercise your access and/or deletion rights if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to personal information associated with that specific account. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Response Timing and Format: We attempt to respond to a verifiable consumer request within 45 days after we receive it. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing within 45 days after we receive your initial request. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period immediately preceding the date we receive the verifiable consumer request. The response we provide will also provide the reasons we cannot comply with a request, if applicable. For access requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Right to Opt-Out of Sale: While we do not sell personal information in exchange for any monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the CCPA (Cal. Civ. Code 1798.140(t)(1)). We support the CCPA and wish to provide you with control over how your personal information is collected and shared. If you would like to exercise your right to request opt-out of sale, please submit a request using this link: office@chicago5k.com.

Right to Non-Discrimination: We will not discriminate against you (e.g., through denying goods or services, or providing a different level or quality of goods or services) for exercising any of the California rights afforded to you.

Complaints: In compliance with the CCPA, we commit to resolve complaints about your privacy and our collection or use of your personal information. We ask that you kindly contact us at office@chicago5k.com, so that we have an opportunity to resolve your complaint.

Your AI-Related Rights

In addition to the rights described above, participants may have the following rights with respect to automated processing of their personal data, depending on their jurisdiction:

California residents and residents of other applicable states may have the right to opt out of the processing of their personal data by automated decision-making technology (“ADMT”) for decisions that produce legal or similarly significant effects on them. Significant decisions in the context of the Chicago 5K may include registration lottery results, qualification verification, or fraud-based exclusion from participation. To exercise this right, please contact us at office@chicago5k.com.

Where automated processing has been used to make a significant decision about a participant, residents of California or residents of other states where applicable law so requires may request a plain-language explanation of: (a) the specific purpose of the ADMT used; (b) the logic involved in the automated decision-making process; and (c) how the output of the ADMT was used in making the decision about the individual. To request such an explanation, please contact us at office@chicago5k.com.

Human Review. Where applicable law so provides and a participant believes that an automated decision has significantly affected their ability to participate in the Chicago 5K, they may request human review of that decision by contacting us at office@chicago5k.com. We will respond to such requests consistent with applicable law.

EEA/UK Participants. Participants in the European Economic Area and United Kingdom have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, under Article 22 of the GDPR and applicable UK data protection law. Where such processing occurs, we will provide participants with the opportunity to obtain human intervention, express their point of view, and contest the decision.

Do Not Track. Some internet browsers – like Internet Explorer, Firefox, and Safari – include the ability to transmit “Do Not Track” or “DNT” signals. Since uniform signals have not been adopted, we do not current process or respond to “Do Not Track” or “DNT” signals.

California’s Shine the Light law. California residents with an established business relationship with us can request information once a year about sharing their personal information with third parties for the third parties’ direct marketing purposes. If you are a California resident and would like to request more information under the California Shine the Light law, you can email us at office@chicago5k.com.

European Economic Area (EEA), United Kingdom (UK), Switzerland Data Subjects

Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers, including the United States, and by using the Services you understand that your information will be transferred to countries outside of your country of residence, including the United States. The United States does not have an adequacy decision from the European Commission, which means that the European Commission has determined that the laws of the United States do not provide legal protection that is equivalent to EU data protection laws. This means that in, certain circumstances, courts, law enforcement agencies or regulatory agencies in those countries may be entitled to access your Personal Data.

Nevertheless, we have implemented appropriate safeguards to protect the Personal Data we collect.

In addition, and for the purposes described in this Privacy Policy, we may transfer your Personal Data from the EEA, UK and/or Switzerland to a US-based affiliate or third party. In such cases, and in order to ensure appropriate safeguards for such transfers are in place, we have entered into European Commission-approved standard contractual clauses (and the UK Addendum, as applicable) with such US-based affiliates and third parties.

Legal basis for processing: We only use your personal information as permitted by law. We are required to inform you of the legal basis of our processing of your personal information, which are described section of this Privacy Policy titled Uses of Personal Data.

Your rights: European data protection laws give you certain rights regarding your Personal Data. You may ask us to take the following actions in relation to your Personal Data that we hold:

How to exercise your rights: You can submit these requests by email at office@chicago5k.com. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.

EEA Representative: You may contact our EU Data Protection Officer at BAML.EUDPO@baml.com.

Complaints: If you have a complaint about how we handle your personal information or respond to your request, you may be able to complain to your data protection authority. A list of data protection authorities is available at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080. We ask that you kindly contact us first, so that we have an opportunity to resolve your complaint.

Marketing Communications

We may seek your consent to send communications regarding future races and events and marketing communications from sponsors. We will ask you to opt in to receiving these communications, which may be revoked by you at any time.

We give you choices regarding our use and disclosure of your Personal Data for marketing purposes.

You may opt-out from:

We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt-out of receiving marketing-related emails from us, we may still send you important administrative messages, from which you cannot opt-out.

How You Can Access, Change or Suppress your Personal Data

If you would like to request to review, correct, update, suppress, restrict or delete persona data that you have previously provided to us, object to the processing of Personal Data, or if you would like to request to receive an electronic copy of your Personal Data for purposes of transmitting it to another company (to the extent this right of portability is provided to you by applicable law), you may contact us as described in the “Contact Us” section below. We will respond consistent with applicable law.

In your request, please make clear what Personal Data you would like to have changed, whether you would like to have the Personal Data suppressed from our database or otherwise let us know which of the above limitations you would like to put on our use of the Personal Data. For your protection, we may only implement requests with respect to the Personal Data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion.

Updates to this Privacy Notice

We may change this Privacy Notice from time to time. The “LAST UPDATED” legend at the top of the Privacy Notice indicates when it was last revised. Any changes will become effective when we post the revised Privacy Notice. Continued use of the Website signifies acceptance of the revised Privacy Notice.

Contacting Us

If you have any questions regarding this Privacy Notice or the Abbott Chicago 5K, please e-mail us at office@chicago5k.com or call 312.904.9800 during regular business hours.

Mailing address
Abbott Chicago 5K
110 N. Wacker
Floor 5 – Marathon Suite
Chicago, IL 60606
USA

Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.

Experience the Bank of America Chicago Marathon weekend.

Bank of America Chicago Marathon
Back to top