Website Privacy Policy
Privacy Policy and Data Protection
In compliance with current legislation, Racetracker (hereinafter, also the Website) is committed to adopting the necessary technical and organizational measures, according to the appropriate security level, to ensure the protection of collected data.
Laws incorporated in this privacy policy
This privacy policy is adapted to the Spanish and European regulations on the protection of personal data online. Specifically, it complies with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data (GDPR).
- Organic Law 3/2018 of December 5, on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).
- Royal Decree 1720/2007 of December 21, which approves the Regulation for the development of Organic Law 15/1999 of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
Address: Calvet 5, 08021 Barcelona
Contact phone: +34932011666
Contact email: hola@racetracker.es
Record of Personal Data
In compliance with the GDPR and LOPD-GDD, personal data collected by Racetracker through the forms on its pages will be included and processed in our file to facilitate, expedite, and fulfill the commitments established between Racetracker and the User or maintain the relationship established in the forms the User fills out or to address a request or inquiry. In accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the activities carried out and the circumstances provided for in the GDPR.
Principles applicable to the processing of personal data
The processing of the User’s personal data will be subject to the following principles, as outlined in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights:
- Lawfulness, fairness, and transparency: The User’s consent will always be required, with complete transparency about the purposes for which personal data is collected.
- Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
- Data minimization: Only the strictly necessary personal data will be collected.
- Accuracy: Personal data must be accurate and kept up to date.
- Storage limitation: Personal data will only be kept in a form that allows for User identification as long as necessary for the purposes of processing.
- Integrity and confidentiality: Personal data will be processed in a manner that ensures their security and confidentiality.
- Accountability: The Data Controller will be responsible for ensuring compliance with the above principles.
Categories of personal data
The categories of personal data processed at Racetracker include both identifying information and special categories of personal data as defined in Article 9 of the GDPR. Special categories of personal data include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic, biometric data aimed at uniquely identifying an individual, health data, or data concerning sexual orientation or activity. Explicit User consent will be required for the processing of special categories of personal data for one or more specific purposes.
Legal basis for the processing of personal data
The legal basis for processing personal data is consent. Racetracker is committed to obtaining the User’s explicit and verifiable consent for processing personal data for one or more specific purposes.
The User has the right to withdraw consent at any time. Withdrawing consent will be as easy as giving it. Generally, withdrawing consent will not affect the use of the Website.
If the User is required to provide data via forms for inquiries or requests, they will be informed if it is mandatory to fill out any fields necessary for the correct development of the operation being carried out.
Purposes of data processing
The personal data collected and managed by Racetracker aims to facilitate, expedite, and fulfill commitments between the Website and the User or maintain the relationship established in the forms that the User fills out, or to respond to a request or inquiry.
Data may also be used for personalized, operational, and statistical commercial purposes, and for Racetracker’s own business activities, including the extraction, storage of data, and marketing studies to tailor the offered Content to the User and improve the quality, operation, and navigation of the Website.
Retention periods for personal data
Personal data will only be retained for the minimum necessary period, specifically 12 months or until the User requests deletion.
The User will be informed about the retention period or, if not possible, the criteria used to determine this period when personal data is collected.
Recipients of personal data
User data will not be shared with third parties.
In any case, when personal data is collected, the User will be informed about the recipients or categories of recipients of the data.
Personal data of minors
Only users over the age of 14 may lawfully give their consent for the processing of personal data by Racetracker. If the user is under 14 years of age, the consent of the parents or guardians will be required.
Secrecy and security of personal data
Racetracker commits to adopting necessary technical and organizational measures to guarantee the security of personal data, avoiding its destruction, loss, alteration, or unauthorized access.
The Website uses an SSL (Secure Socket Layer) certificate to ensure the secure transmission of data between the server and the User.
In the event of a data security breach, Racetracker will notify the User promptly, following GDPR guidelines. Personal data will be treated as confidential by Racetracker and its employees.
User Rights
The User has the following rights over Racetracker in accordance with GDPR and Organic Law 3/2018:
– Right of access
– Right of rectification
– Right of deletion (“right to be forgotten”)
– Right to restrict processing
– Right to data portability
– Right to object
– Right not to be subject to automated decisions, including profiling
Complaints to the supervisory authority
If the User believes there is an issue or infringement in the processing of personal data, they have the right to file a complaint with a supervisory authority, such as the Spanish Data Protection Agency (http://www.agpd.es).
II. Acceptance and Changes in this Privacy Policy
The User must have read and agree to the conditions regarding the protection of personal data contained in this Privacy Policy.
Racetracker reserves the right to modify this Privacy Policy at any time.