Privacy policy

Controller

The party responsible for processing personal data on this website is named in the imprint.

You'll find the full contact details for data-protection questions there: Go to the imprint

What data we process

We only process the data needed to organize the Trophy: your registration data, payment details, and — if you write to us or log in — your communication and account data. In detail:

Registration data (team, driver, co-driver, vehicles)

At registration we collect the team name, the class (Regular class or Open class) and the contact email address used to manage the registration, plus for each vehicle its brand, model, and license plate. For the driver and co-driver we each collect name, date of birth, address, phone number, email address, and T-shirt cut and size.

We use this data solely to organize your participation in the Trophy: processing the registration, managing start places, being able to reach you in an emergency, and planning logistics such as T-shirts. The legal basis is Art. 6(1)(b) GDPR (performance of your registration agreement).

Paying the starting fee

The starting fee is paid by bank transfer. We only store a payment status (pending/paid) and a payment reference that lets us match incoming transfers to your team. We never see or store your bank details — the transfer runs directly through your bank.

The legal basis is likewise Art. 6(1)(b) GDPR.

Email communication

We send you emails about your registration (confirmation, payment confirmation) and, if needed, individual messages from the organizers. Emails are sent through an email server (SMTP); your addresses are used only for delivery.

The legal basis is Art. 6(1)(b) GDPR (performing the contract) and Art. 6(1)(f) GDPR (our interest in keeping you informed about your registration).

Team and admin accounts

Your team's contact email address can log in with a self-chosen password to manage the registration. Logging in sets a technically necessary session cookie (see the "Cookies" section). Passwords are never stored in plain text, only as a one-way hash. Failed login attempts are kept briefly to prevent abuse.

The legal basis is Art. 6(1)(b) GDPR (enabling you to self-manage your registration).

Public start list

Once the start list is published, we publicly show the start number, number of vehicles, and team name. Names, contact details, or any other personal data of drivers and co-drivers are never published there.

The legal basis is Art. 6(1)(f) GDPR (our interest in a transparent, public start list for participants and spectators).

Cookies

We use only technically necessary cookies: a session cookie for logging in to the team and admin areas, and a cookie that remembers your language choice. Both are required to operate the website and may be set without separate consent under Art. 6(1)(f) GDPR.

No cookies are set for advertising or tracking purposes.

Analytics

We use a privacy-friendly analytics service to see how often our pages are viewed and whether technical errors occur. This service works without cookies and without recognizing individual visitors across different websites; it respects your browser's "Do Not Track" setting.

The legal basis is Art. 6(1)(f) GDPR (our interest in keeping the website technically stable and improving it).

Spam protection

When you submit the registration, we use a privacy-friendly security check that prevents automated bulk registrations. It works via a background computation, without picking images or typing text, and processes no personal data beyond what is technically needed for the check itself.

The legal basis is Art. 6(1)(f) GDPR (our interest in protecting the registration from abuse).

Recipients and processors

We send emails through an email server (SMTP). The registration system's database runs on the same server as the website. Where required, a data processing agreement under Art. 28 GDPR is in place with every service provider involved. Your data is never sold or passed on to third parties for advertising purposes.

Retention period

We keep your registration data for as long as it is needed to organize the current Trophy and, for record-keeping and recurring registrations, for a reasonable period afterwards. On request, we delete or anonymize your data sooner, unless a statutory retention obligation prevents this.

Data security

All data transferred between your browser and our servers is encrypted (TLS/HTTPS). Access to registration data is restricted by role in the admin area: only authorized admin accounts and the team itself can access a given registration.

Changes to this privacy policy

We update this privacy policy whenever our data processing or the legal situation changes. The version published on this page at any given time applies.

Your rights

You have the right, at any time, to:

• access to the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)

Just get in touch using the contact address named in the imprint. You also have the right to lodge a complaint with the supervisory authority responsible for us. Go to the imprint