Privacy Policy

Why this privacy policy?

Crazy Racing Sensations processes personal data of everyone who creates an account or books an event. This policy explains what data that is, why we process it, how long we keep it and what rights you have. In doing so we comply with the General Data Protection Regulation. If our practices change, we will update this policy.

Who is the controller?

The website www.crs-racing.com is an initiative of:

Crazy Racing Sensations
Diebeke 17 9500 Geraardsbergen
Belgium
BTW BE0474.199.940
info@crs-racing.com
0032475452196

What personal data do we process?

Crazy Racing Sensations undertakes to process only data that is relevant to, and necessary for, the purposes for which it was collected. The following categories of personal data may be processed by Crazy Racing Sensations:

Identification data (surname, first name, date of birth)
Contact details (telephone number, email address, postal address)
Billing details (company name and VAT number in the case of a business booking)
Booking data (the event, your type of participation and the options you selected)
Participant data (riding level, driving licence, motorcycle, height, weight and clothing sizes), which we request only after your booking in order to prepare your participation
Special categories of personal data (dietary requirements and physical information), which we likewise request only after your booking. Providing this information is optional. By entering it, you give us your consent to use it for your safety on the circuit and for catering purposes.

For what purposes is my personal data used?

We process your personal data for the following purposes, each on the legal basis stated:

Managing your account and handling your booking — necessary for the performance of the contract (Article 6(1)(b) GDPR)
Invoicing and bookkeeping — compliance with a legal obligation (Article 6(1)(c) GDPR)
Preparing your equipment on the basis of your sizes, clothing sizes, riding level and motorcycle — necessary for the performance of the contract (Article 6(1)(b) GDPR)
Taking your dietary requirements and physical information into account for catering and for your supervision on the circuit — your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you may withdraw at any time
Compiling visitor statistics — your consent (Article 6(1)(a) GDPR), which you give or refuse through the cookie banner

Use of processors
In order to provide and secure our services, we rely on third parties who act as processors on our instructions:

Hostinger, for hosting our website and database and for sending our emails
Google Analytics, for visitor statistics — loaded only after you accept the cookie banner
Google reCAPTCHA, to protect our forms against abuse — necessary for the security of our website

The Google services may process data outside the European Economic Area, in particular in the United States. These transfers rely on the EU-U.S. Data Privacy Framework, under which Google is certified, and on the standard contractual clauses in Google's terms, in accordance with Article 46 GDPR.

How long do we keep your data?

We do not keep your personal data longer than is necessary for the purposes set out above. In concrete terms, we apply the following retention periods:

Billing data: ten years, as required by VAT and accounting legislation.
Booking and account data: up to ten years after your last booking. This period corresponds to the limitation period for contractual claims, so that we are able to defend ourselves in the event of a dispute.
Accounts without a booking: for as long as the account exists. You may ask us to delete your account at any time by writing to info@crs-racing.com.

Cookies

Cookies may be placed during a visit to our website. For more information about the cookies we use and how to set your preferences, please see our cookie policy.

What are my rights?

Guarantee of lawful and secure processing of personal data
Crazy Racing Sensations always processes your personal data fairly and lawfully. This entails the following guarantees:
1. Personal data is processed only in accordance with the specified and legitimate purposes set out in this privacy policy.
2. Personal data is processed only in so far as this is adequate, relevant and not excessive.
3. Personal data is kept only for as long as is necessary to achieve the specified and legitimate purposes set out in this privacy policy.
  
  The necessary technical and security measures have been taken to reduce to a minimum the risk of unlawful access to, or processing of, personal data. In the event of a breach of its information systems, Crazy Racing Sensations will immediately take every possible measure to limit the damage to a minimum.
Right of access to, rectification and erasure of your personal data
Upon proof of your identity as a User, you have the right to obtain confirmation from Crazy Racing Sensations as to whether or not your personal data is being processed. Where Crazy Racing Sensations processes your data, you also have the right to obtain access to the personal data collected. If you wish to exercise your right of access, Crazy Racing Sensations will respond within one (1) month of receiving the request. Requests are made by sending an email to info@crs-racing.com.

Inaccurate or incomplete personal data can always be rectified. It is primarily for the User to correct inaccuracies and incompleteness themselves. You may exercise your right to rectification by providing a supplementary statement to Crazy Racing Sensations. Crazy Racing Sensations will act on this within one (1) month of receiving the supplementary statement.

You also have the right to obtain the erasure of your personal data without undue delay. You may rely on this right to be forgotten only in the following cases:
1. Where the personal data is no longer necessary for the purposes for which it was originally collected;
2. Where the personal data was collected on the basis of consent and there is no other legal basis for the processing;
3. Where you object to the processing and there are no overriding legitimate grounds for the processing;
4. Where the personal data has been unlawfully processed;
5. Where the personal data must be erased in order to comply with a legal obligation.
  
  Crazy Racing Sensations assesses whether one of the above cases applies.
Right to restriction of, and to object to, the processing of your personal data
You have the right to obtain restriction of the processing of your personal data:
1. For a period enabling Crazy Racing Sensations to verify the accuracy of the personal data, where you contest that accuracy;
2. Where the processing is unlawful and you request the restriction of processing instead of the erasure of the personal data;
3. Where Crazy Racing Sensations no longer needs your personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims;
4. For a period enabling Crazy Racing Sensations to assess whether grounds for the erasure of personal data apply.
  
  You also have the right to object at any time to the processing of your personal data. Crazy Racing Sensations will then cease processing your personal data, unless Crazy Racing Sensations can demonstrate compelling legitimate grounds for the processing which override your right to object.
  
  If you wish to exercise these rights, Crazy Racing Sensations will respond within one (1) month of receiving the request. Requests are made by email to info@crs-racing.com.
Right to data portability
You have the right to receive the personal data you provided to Crazy Racing Sensations in a structured, commonly used and machine-readable format. You also have the right to transmit that personal data to another controller where the processing is based solely on your consent.
If you wish to exercise this right, Crazy Racing Sensations will respond within one (1) month of receiving the request. Requests are made by email to info@crs-racing.com.
Right to withdraw my consent / right to lodge a complaint
You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal. You also have the right to lodge a complaint about the processing of your personal data by Crazy Racing Sensations with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels (contact@apd-gba.be, www.dataprotectionauthority.be).
If you wish to exercise this right, Crazy Racing Sensations will respond within one (1) month of receiving the request. Consent is withdrawn by sending an email to info@crs-racing.com.