Privacy Policy

Information on the Processing of Your Personal Data

Responsible for data processing on this website, the associated social media presences, and for the other processing activities mentioned is:
Bettina Ehrensberger
info@isou-racing.com
+32 477 28 93 29

On what legal basis are your data processed?

The legal basis for the processing of personal data is generally – unless more specific legal provisions apply – Art. 6 of the EU General Data Protection Regulation (GDPR).
The following legal bases may apply:

  • Consent (Art. 6 para. 1 lit. a GDPR)
  • Data processing for the performance of contracts (Art. 6 para. 1 lit. b GDPR)
  • Data processing based on a balancing of interests (Art. 6 para. 1 lit. f GDPR)
  • Data processing for compliance with a legal obligation (Art. 6 para. 1 lit. c GDPR)

For what purposes do we process your data?

Contact

If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We will not pass these data on without your consent.

The processing of these data is carried out on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the initiation, establishment, content design or modification of a legal relationship between you and us or is necessary for the implementation of pre-contractual measures.

In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested; consent can be withdrawn at any time with effect for the future.

The data you send to us via contact enquiries will remain with us until you request us to delete them, withdraw your consent to storage,
or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods under tax and commercial law – remain unaffected.

Newsletter

If you subscribe to our newsletter, we use the WordPress plugin “The Newsletter Plugin”. With this plugin we can send our newsletter and manage subscribers. The protection of your personal data is very important to us, therefore we inform you below about how we process your data and what rights you have.

Data Collected

As part of the newsletter registration, we collect and store the following data:

  • Email address (mandatory)
  • IP address (anonymised) at the time of registration
  • Date and time of registration

These data are required in order to send you the newsletter and to prevent misuse of our newsletter function.

Double Opt-In Procedure

Subscription to our newsletter takes place using the so-called double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that you are the owner of the specified email address and actually wish to receive the newsletter. Only after confirmation will we permanently store your data for sending the newsletter.

Purpose of Data Processing

The data collected are used exclusively for sending our newsletter. They will not be passed on to third parties. We only use the data for the following purposes:

  • Sending the newsletter
  • Analysis and improvement of the newsletter service
  • Documentation of consent for the newsletter subscription

Legal Basis

The processing of your data takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time by unsubscribing from the newsletter. An unsubscribe link can be found in every newsletter email.

Storage Period

Your data will be stored for the duration of the newsletter subscription. After unsubscribing from the newsletter, your data will be deleted after 365 days unless legal retention obligations apply.

Analysis of User Behaviour

With the newsletter plugin, we can evaluate how our newsletters are used (e.g. whether the email was opened or links contained in it were clicked). This information helps us to improve the newsletter. The evaluation is carried out in anonymised form so that it is not possible to draw conclusions about individual users.

Your Rights

You have the following rights regarding your data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

Server Log Files

With every request, meaning every page access, information is automatically stored in so-called server log files. These include:

  • Your anonymised IP address
  • Date and time of the request
  • Address of the accessed page or file
  • Amount of data transferred in bytes
  • Success or error code of the request (“status code”)
  • Identification of your web browser (e.g. browser type, browser version and operating system used; “User-Agent” header)
  • Previously visited page that led you here, for example via a link

Information relating to the last two points is automatically sent by your web browser. You may be able to deactivate this in your browser settings. The data in the server log files cannot be assigned to specific persons. These data will not be merged with other data sources. The evaluation is carried out exclusively to ensure the provision of our website and to identify possible sources of errors. We also reserve the right to review these data retrospectively if concrete indications of unlawful use become known. Processing is carried out on the basis of these legitimate interests (Art. 6 para. 1 lit. f GDPR). The server log files are automatically deleted after an appropriate period.

Information on the Use of a Session Cookie

(1) When operating our app, we use a cookie. Cookies are small text files that are stored on the device memory of your mobile device and associated with the mobile app you use, through which certain information flows to the party that sets the cookie. Cookies cannot execute programmes or transfer viruses to your computer and therefore cannot cause any damage. They serve to make our app more user-friendly and effective overall, and therefore more convenient for you.

(2) Cookies may contain data that allow the device used to be recognised. In some cases, however, cookies only contain information about certain settings that are not personal. Cookies cannot directly identify a user.

(3) The legal basis for our session cookie, which is absolutely necessary in order to provide you with the expressly requested service, is § 25 para. 2 no. 2 TDDDG.

Name: PHPSESSID
Purpose: This cookie stores your current session in relation to PHP applications and ensures that all functions of this website based on the PHP programming language can be fully displayed.
Duration / Expiry: Deleted when you close your internet browser

To which recipients will the data be disclosed?

Your personal data will generally only be disclosed to third parties if this is necessary for the performance of the contract with you, the disclosure is permissible on the basis of a balancing of interests pursuant to Art. 6 para. 1 lit. f GDPR, we are legally obliged to disclose the data, or you have given your consent.

What rights do you have as a data subject?

All data subjects have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure or the “right to be forgotten” (Art. 17 GDPR)
  • Right to restriction of processing of personal data (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR).

You may object at any time to the processing of personal data for advertising purposes, including the analysis of customer data for advertising purposes, without giving reasons.

Furthermore, you have a general right to object (cf. Art. 21 para. 1 GDPR). In this case, the objection to data processing must be justified. If the data processing is based on consent, you may withdraw your consent at any time with effect for the future.

To exercise your rights as a data subject, the easiest way is to contact us using the contact details above or the address provided in the legal notice. You also have the right to lodge a complaint with a data protection supervisory authority.

How long will your data be stored?

If the storage period has not already been specified for the individual processing operations, we process your data for as long as this is necessary for the respective purpose.

Where statutory retention obligations exist – for example under commercial or tax law – the relevant personal data will be stored for the duration of the retention obligation. After expiry of the retention period, it will be checked whether further processing is necessary. If processing is no longer required, the data will be deleted.

We maintain publicly accessible profiles on social networks

Social networks can generally analyse your user behaviour extensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing operations.

Specifically: If you are logged into your social media account and visit our social media presence, the operator of the social media portal may assign this visit to your user account. Your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, data collection takes place, for example, via cookies stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising may be displayed to you within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are or have been logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policies of the respective social media portals.

Our social media appearances are intended to ensure the most comprehensive presence possible on the internet. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

If you visit one of our social media presences, we and the operator of the social media platform are jointly responsible for the data processing operations triggered during this visit. You can generally assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence over the data processing operations of the social media portals. Our options depend largely on the corporate policy of the respective provider.

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request deletion, withdraw your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data that are stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

We also maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the collected data are also transferred to the USA and other third countries.

You can adjust your advertising settings independently in your user account. To do so, click the following link and log in:
https://www.facebook.com/settings?tab=ads.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381.

Further details can be found in Facebook’s privacy policy:
https://www.facebook.com/about/privacy/.