Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

Ralf Lange

License to Race - Event- und Incentive Veranstalter

Schillerstraße 13/2

68723 Plankstadt

Phone: +49 15172468742

Email: 007@license-to-race.com

If joint controllership or a different responsibility applies to individual processing operations, this will be indicated separately in this Privacy Policy.

2. General Information

We process personal data exclusively within the framework of the applicable data protection regulations, in particular the GDPR, the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data means any information relating to an identified or identifiable natural person. This includes, in particular, name, contact details, communication content, usage data, IP address, and all information transmitted to us within the scope of an inquiry, booking, or other communication.

3. Accessing the Website

When you visit our website, data is automatically collected:

• IP address

• Date and time

• Accessed page or file

• Browser type

• Operating system

• Referrer URL

Purpose: Security and stability

Legal basis: Art. 6 (1) (f) GDPR

Storage duration: 14 days

4. Hosting

Our website is hosted by:

Wix.com Ltd.

Nemal St. 40

6350671 Tel Aviv, Israel

According to the EU, Israel is deemed to be a country with an adequate level of data protection.

Legal basis: Art. 6 (1) (f) GDPR

5. Contacting Us

When you contact us (via form, email, or phone), we process:

• Name

• Email

• Phone number

• Company details

• Interests specified

• Number of participants

• Requested dates

• Event inquiries

• Message content

Purpose: Processing the inquiry / event planning

Legal basis: Art. 6 (1) (b) GDPR

Storage duration:

• Pure contact inquiries without subsequent business: 12 months

• Contract-related communication: In accordance with statutory commercial and tax retention obligations

6. WhatsApp Communication

We offer the option to contact us via WhatsApp.

When using this communication channel, the data you transmit as well as the communication content will be processed to handle your inquiry and communicate with you.

Communication via WhatsApp only takes place if you choose this communication channel yourself or expressly consent to it.

Provider: WhatsApp Ireland Limited (Meta)

Note: Data may be transferred to third countries (USA).

Legal basis:

• Art. 6 (1) (b) GDPR

• Art. 6 (1) (f) GDPR

Note: Please do not transmit highly sensitive information via WhatsApp unless absolutely necessary.

7. Newsletter

If you subscribe to our newsletter, we process:

• Email address

• Name (if applicable)

• Optional information provided voluntarily

Registration is carried out using the double opt-in procedure. After registering, you will receive an email in which you must verify your registration by clicking a confirmation link. This ensures that no one can register with someone else's email address.

In connection with the newsletter registration, we also store the time of registration, the time of confirmation, and – as far as technically required – log data to prove the consent granted.

Withdrawal: You can withdraw your consent at any time with effect for the future, e.g., via the unsubscribe link in the newsletter or by notifying us.

Storage duration: Your data will be stored until you withdraw your consent. After unsubscribing, the email address may be stored in a blocklist to legally prevent future mailings.

Legal basis: Art. 6 (1) (a) GDPR

Newsletter service provider: Mailjet

Tracking active: Yes

8. Cookies

Our website uses cookies.

Technically necessary cookies

→ For the proper functioning of the website

Optional cookies

→ Analysis / Marketing (only with your consent)

Legal basis:

• § 25 TDDDG

• Art. 6 GDPR

9. Consent Tool

We use a cookie consent tool:

Cookiebot™ for Wix

10. Analytical Tools

Insofar as web analysis or statistics tools are used, we process usage data to evaluate the reach, usage, and performance of our website and to improve our services.

In particular, the following may be processed:

• Shortened IP address

• Device and browser information

• Pages accessed

• Duration of use

• Interactions

• Referrer

• Timestamp

Legal basis:

• Art. 6 (1) (a) GDPR

• § 25 (1) TDDDG, insofar as access to end-device information takes place

(If used, please select on your platform: Google Analytics 4 / Meta Pixel / LinkedIn Insight Tag / Wix Analytics)

11. External Content

If content or functions of third-party providers are integrated into our website, e.g., maps, videos, fonts, social media elements, booking tools, or security services, personal data may be transmitted to these third-party providers when the respective function is accessed.

Depending on the integration, this may include, in particular, IP address, device information, referrer data, and usage data.

Legal basis:

• Art. 6 (1) (a) GDPR for external services requiring consent

• Art. 6 (1) (f) GDPR for purely technically necessary content

• § 25 (1) TDDDG / § 25 (2) TDDDG (if applicable)

We may integrate: external fonts, embedded videos, map/location services, Instagram feeds, WhatsApp widgets, CAPTCHA/spam protection, CRM/form providers. Data may be transferred to these third-party providers in the process.

12. Recipients of Data

A transfer of personal data only takes place if it is legally permissible. Recipients may include:

• IT and hosting service providers

• Website and maintenance service providers

• Newsletter service providers

• Communication service providers

• Payment, accounting, or tax advisors, as far as required

• Other processors pursuant to Art. 28 GDPR

• Authorities or courts, insofar as a statutory obligation exists

A transfer to other third parties only occurs if it is necessary for contract performance, if a legal basis exists, or if you have consented.

13. Third-Country Data Transfers

Insofar as personal data is transferred to recipients outside the European Union (EU) or the European Economic Area (EEA), this is only done in compliance with the statutory requirements.

Such a transfer may occur in particular if a service provider is based in a third country or uses subprocessors in third countries.

In these cases, we ensure – where necessary – an adequate level of data protection through appropriate guarantees, in particular by:

• An adequacy decision of the EU Commission or

• Standard Contractual Clauses of the European Commission

(To be verified live for your tools: Hosting, Newsletter, WhatsApp/Meta, integrated third-party tools, cloud/email infrastructure)

14. Storage Duration

We store personal data only as long as necessary for the respective purposes or as long as statutory retention obligations exist.

The relevant criteria include, in particular:

• Duration of processing your inquiry

• Duration of an existing contractual relationship

• Statutory retention periods according to commercial and tax law

• Limitation periods and evidence-retention requirements

• Withdrawal of consent

As soon as the respective purpose ceases to apply and there are no statutory retention obligations or legitimate reasons for further storage, the data will be deleted or blocked.

15. Your Rights

You have the right to:

• Access

• Rectification

• Erasure (Right to be forgotten)

• Restriction of processing

• Data portability

• Objection

• Withdrawal of consent

16. Right to Lodge a Complaint

Competent supervisory authority:

Landesbeauftragter für Datenschutz Baden-Württemberg

Lautenschlagerstraße 20

70173 Stuttgart

17. Changes

This privacy policy will be adapted as required.

As of: April 2026