Legal
Privacy Policy
Last updated: April 20, 2024
1. Data Controller
Racespot Media House GmbH
An der Hasenkaule 10 (21D)
50354 HΓΌrth, Deutschland
Email: contact@racespot.tv
Phone: +49 (0)163 686 7887
2. Categories of Data Collected
We may collect and process the following categories of personal data:
- Inventory data (names, addresses)
- Contact data (email addresses, telephone numbers)
- Content data (entries in online forms)
- Usage data (websites visited, content interests, access times)
- Meta/communication data (device information, IP addresses)
- Location data (geographical position of the device)
- Contract data (contract subject, terms, customer classification)
- Payment data (bank details, invoices, payment history)
Data Subject Categories
- Business and contractual partners
- Interested parties
- Communication partners
- Customers
- Website users and online service users
3. Purposes of Processing
- Provision and improvement of our online services and user experience
- Credit assessment and creditworthiness evaluation
- Contractual service delivery and customer support
- Contact management and communication
- Administrative and organisational procedures
- Interest-based and behavioural marketing
- Direct marketing (email, postal)
- Conversion measurement and range measurement
- Remarketing and target audience determination
- Cross-device tracking for marketing purposes
- User profiling
- Visit action evaluation
- Security measures
4. Legal Basis for Processing
We process personal data based on the following legal grounds under the GDPR:
- Art. 6(1)(a) GDPR β User consent for specific purposes
- Art. 6(1)(b) GDPR β Processing necessary for contract performance or pre-contractual requests
- Art. 6(1)(c) GDPR β Compliance with legal obligations
- Art. 6(1)(f) GDPR β Legitimate interests of our organisation
5. Cookies
Our website uses cookies β small text files stored on your device. We distinguish between:
- Session cookies β deleted when you close your browser
- Persistent cookies β stored for up to 2 years for functionality and marketing
Consent is obtained prior to use except where legally unnecessary. Our cookie consent procedure stores your opt-in status for up to 2 years. IP masking and pseudonymisation are employed where applicable.
You can manage cookie preferences in your browser settings or via the following opt-out pages:
6. Third-Party Services
Payment Processing
- PayPal (Europe) S.Γ r.l. β Payment solutions. Privacy: paypal.com/privacy
- Stripe Payments Europe, Limited β Payment services. Privacy: stripe.com/privacy
Email & Newsletter
- CleverReach GmbH & Co. KG β Email marketing platform. Privacy: cleverreach.com/datenschutz
- Mailchimp (Rocket Science Group, LLC) β Email dispatch. Privacy: mailchimp.com/legal. Transfer basis: Data Privacy Framework, standard contractual clauses.
- Help Scout Inc. β Contact management. Privacy: helpscout.net/privacy
Web Analytics
- Google Analytics (Google Ireland Limited, Dublin) β Usage analysis with pseudonymous user identification and IP masking. Transfer basis: Data Privacy Framework, standard contractual clauses. Opt-out: tools.google.com/dlpage/gaoptout
- Google Tag Manager (Google Ireland Limited) β Website tag management. Privacy: policies.google.com/privacy
- etracker GmbH β Reach measurement. Privacy: etracker.com/datenschutz
- Matomo β Privacy-focused analytics (with or without cookies). Cookie retention: max. 13 months. Website: matomo.org
Online Marketing & Advertising
- Facebook Pixel / Custom Audiences (Meta Platforms Ireland Limited) β Used to determine visitors as a target group for ads displayed only to users showing interest. Transfer basis: Data Privacy Framework, standard contractual clauses. Privacy: facebook.com/about/privacy
- Google Ad Manager (Google Ireland Limited). Privacy: policies.google.com/privacy
- Google Ads & Conversion Measurement (Google Ireland Limited). Transfer basis: Data Privacy Framework, standard contractual clauses.
Social Media Presence
- Instagram (Meta Platforms Ireland Limited). Privacy: instagram.com/legal/privacy
- Facebook Pages (Meta Platforms Ireland Limited) β Joint responsibility agreement applies. Details: Page Controller Addendum
7. Newsletter
Newsletter subscriptions require double opt-in confirmation. We log the IP address and confirmation time for proof of consent. We use web beacons to track open rates and link clicks for performance analysis based on legitimate interests. Every newsletter contains an unsubscribe link.
8. Customer Accounts
IP addresses and access times are logged at registration for proof of consent. Users are responsible for data backup upon account termination. Customer accounts are not indexed by search engines.
9. Data Retention
- Customer accounts: retained per legal archiving requirements (typically 10 years for tax)
- General commercial data: 4 years after contract expiration
- Newsletter unsubscribes: up to 3 years (legitimate interest in defence)
- Server log files: retained for security and stability purposes
- Cookies: generally up to 2 years unless specified otherwise
- Matomo cookies: maximum 13 months
10. Your Rights
Under the GDPR (Articles 15β22), you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Rights related to automated decision-making
- Withdraw consent at any time
To exercise these rights, contact us at contact@racespot.tv.
11. International Data Transfers
Where data is transferred outside the EU/EEA, we ensure appropriate safeguards in accordance with GDPR Articles 44β49 through:
- Standard contractual clauses (SCCs)
- Data Privacy Framework (DPF) certification for US companies
- EU Commission adequacy decisions
- Explicit user consent where required
More information: dataprivacyframework.gov
12. Security Measures
- SSL/HTTPS encryption for data transmission
- Physical and electronic access controls
- Confidentiality, integrity, and availability safeguards
- Data protection by design and default principles
- Procedures for breach response and user rights exercise
13. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated to affected users.