Privacy policy

The controller is C.V.G. s. r. o., company ID 24178934, with its registered office at Hanusova 353/12, Michle, 140 00 Praha 4.

Privacy requests can be sent to info@digitalracing.cz or to the registered office.

• Contact, company and event details submitted in an enquiry.
• Quotations, confirmations, billing data, internal notes and enquiry status history.
• An email address entered for the newsletter and a record of subscription confirmation or withdrawal.
• Race results such as a name or nickname, lap time, position and team, which may appear on a public result page.
• Limited technical data used for security and first-party aggregate traffic measurement.
• Campaign or partner attribution after the visitor has given consent.

Enquiries are processed to take steps before entering into a contract. Orders are processed to perform the contract. Billing records are retained to comply with legal obligations. Security, limited first-party traffic measurement and legal claim handling are based on legitimate interests. Campaign attribution is based on consent.

The Digital Racing newsletter is sent on the basis of consent confirmed through double opt-in. Every marketing email provides a simple way to unsubscribe.

Race results are processed to deliver and transparently evaluate the agreed event programme. Organisers must inform participants, and a nickname should be used where appropriate.

An administrator may connect a publicly shared Google Sheet containing standard columns such as name or nickname and lap time. The website reads only the publicly available data at that link and does not obtain access to the organiser's Google account or private documents.

Results may be displayed at the venue and through a public link. Organisers must inform participants and must not include unnecessary data.

The public website uses first-party aggregate traffic measurement without third-party analytics cookies. After explicit permission, the website may store the visit source in localStorage for up to 30 days. No marketing attribution is stored without consent. The choice can be changed at any time through “Privacy settings” in the footer.

The website necessarily stores the privacy choice itself. The administration uses an essential 12-hour login cookie. A partner page may remember its access key on the partner's device.

• Vercel Inc. for hosting and server infrastructure.
• Convex, Inc. for enquiries, operational records, result configurations and aggregate statistics.
• Sendinblue SAS, operating Brevo, for transactional emails, subscription confirmation, newsletter contact management and marketing campaigns.
• Google Ireland Limited and other Google group companies only where an administrator connects a public Google Sheet.
• Professional advisers and public authorities where necessary by law or to protect rights.

Where personal data is transferred outside the EEA, an adequacy decision, standard contractual clauses or another permitted safeguard is used as applicable.

• Unsuccessful enquiries: up to 12 months after the last substantive communication.
• Completed orders and ordinary contractual communication: normally 3 years after delivery, or longer while a dispute remains open.
• Accounting and tax documents: for the statutory period, commonly 5 or 10 years depending on the document.
• Newsletter: until the subscriber withdraws consent or unsubscribes. A limited suppression record may be retained to ensure that no further campaigns are sent to that address.
• Browser attribution: up to 30 days. Raw partner-link click records: up to 90 days.
• Race results: for the period set for the event and public result page, then deleted, anonymised or retained only while a justified archival purpose remains.

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent at any time. Send requests to info@digitalracing.cz. We normally respond within one month and may reasonably verify your identity.

You may lodge a complaint with the Czech Office for Personal Data Protection.

The service uses access controls, signed administration sessions, rate limits, encrypted transport and restricted database access. Submitting an enquiry does not automatically create a booking, and we do not make decisions with legal or similarly significant effects solely by automated means.

We update this policy when forms, technologies, processing or legal requirements change. Material updates will be marked with a new effective date.

Effective from 29 July 2026. Version 1.1.