PRIVACY STATEMENT – CREVENTIC (24H SERIES)
By submitting an entry, competitors/ drivers confirm that the organiser/promotor may, for the own purpose of the event, electronically collect, process, store and, as far as necessary for the sporting organisation, publish the personal data of the competitors/ drivers. The organiser will not transfer personal data to third parties that have no relation to the event.
This policy describes:
- What kind of personal data do we process, for which purpose and for how long?
- Data Controller, Data Processor & Data Subject
- Security of your personal data
- Which 3rd parties are involved?
- Right to the protection of your personal data
- Updates of the privacy statement
1. What kind of personal data do we process, for which purpose and for how long?
Personal data teams
The personal data we collect from teams includes the name, email and phone number of the contact person(s) and the Team Manager, entrant information and the shipping address.
We use the above data to send information, for contact moments, to determine whether each team has a valid entrant license, for the highlight shows, and to ship the sticker packages and additional service products.
Personal data drivers
The personal data we collect from drivers includes the name, a picture, gender, date of birth, nationality, license information and the contact details such as email address, phone number and an emergency contact.
We use the above data for the entry list, championship ranking, affiliated magazines, social media, timekeeping, official results, to check if the driver has a valid license, in case of emergency, for the highlight shows, and to inform drivers about our calendar.
Personal data subscribers newsletters and press releases
The personal data we collect from those who have subscribed to our newsletters and/or press releases includes their email address, through which they will receive newsletters, latest news, press releases and the calendar.
The data of teams and drivers will be stored and processed until they make a request via de Data Request Form to have some of all of their personal data to be erased. Subscribers keep receiving the latest news until they unsubscribe.
2. Data Controller, Data Processor & Data Subject
CREVENTIC (hereafter referred to as ‘’we’’, ‘’our’’ or ‘’CREVENTIC’’) is the data controller. We make the decisions regarding content, processes and access to data.
Sympa HR is our online system that contains all the data described in the beginning of this statement. Sympa HR is a service provider that only processes the data for the purpose of providing the Sympa HR service to CREVENTIC.
The Data Subjects are our customers (teams and drivers) whose data is stored and processed in Sympa HR.
3. Security of your personal data
CREVENTIC uses Sympa HR as data processor and Sympa HR has built and certified its ISMS (Information Security Management System) to ISO27001 standards to demonstrate its compliance and continuous development. Sympa HR continuously evaluates and develops its technical and organisations protection methods as well as risk evaluation processes for better data protection and data privacy. Privacy of your data is a key priority for both CREVENTIC and Sympa HR.
All the data stored in and transferred to/from Sympa HR is encrypted with strong encryption algorithms, at rest and in motion. Sympa HR supports username+password login with password complexity requirements.
4. Which 3rd parties are involved?
Your personal data will be shared with the following trusted 3rd parties which have an relationship to the events:
The data we share with Timeservice.nl will be used for the official results, live timing and the Sporting & Technical Regulations that are implemented in the time service system.
The data we share with our Website Designer will be used for the entry list, official documents used throughout the races, championship ranking, internal lists and to determine driver categories.
The data we share with the Media/TV/Commentator companies will be used for the highlight shows for each race. We share the names of the drivers and team managers, and their respective nationalities.
5. Right to the protection of your personal data
According to the law you have the right to request:
Opt out – Unsubscribe from the latest news
Info Request – What data we have, the purpose for which it is used, and for how long
Access to data – Request to have a copy of your personal data
Data Erasure – Request to erase all/some of your data if processing is no longer necessary
Data Portability – Request to have your data provided/transferred in an easily readable format
Data Rectification – Request to have any incorrect data rectified
Withdraw permission – Request to withdraw your permission where you earlier have provided your consent to the collection of your personal data
If you no longer wish to receive newsletters, press releases or if you have any objection you can unsubscribe/make a request via the data request form https://www.sympahr.net/public/pq.aspx?f86e6c79
7. Updates of the privacy statement
CREVENTIC can update the privacy statement when needed, the new version of which will be uploaded to www.24hseries.com.