With this privacy policy, we would like to inform you about how we process your personal data (hereinafter also referred to as "data"). This privacy policy applies to the processing of your personal data on our website, our social media profiles and in the context of our service provision. 

 

1. RESPONSIBLE

The person responsible for data processing is:

Central European Rally Event GmbH

Ridlerstraße 35 80339 Munich
Tel.: +49 89 51 95 102

E-mail: dataprocessing@centraleuropeanrally.eu

​

2. WHICH DATA ARE PROCESSED

 

2.1 Visit our website

When using our website for information purposes, we only collect the personal data that your browser transmits to our server. These are:

​

• Type of browser used

• The operating system used

• the domain name of the Internet service provider

• the connection data of the computer used (IP address)

• the website from which you are visiting us (referrer URL)

• the pages you visit on our site

• and the date and time of the visit

​

It is not possible for us to draw conclusions about specific persons from this data due to pseudonymisation. This data is not merged with other data sources.

​

The processing is carried out for the following purposes:

​

• Provision of our online offer

• Information technology infrastructure (operation and provision of information systems and

  technical equipment (computers, servers, etc.)

• Evaluation of system security and stability

• Detection of attacks on the system.

​

We process your data on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in ensuring the technically flawless usability of our website, the detection of attacks on our information technology systems and the detection of software or infrastructure errors or defects.

​

Your data will be deleted as soon as it is no longer required for the aforementioned purposes, but at the latest after seven days.

​

2.2 Contact

​

If you contact us via info@centraleuropeanrally.eu or via the telephone numbers provided, you can provide us with personal data on an individual basis, such as:

​

• Name
• E-mail address
• Address
• Telephone number

​

The purpose of the processing is to handle your request.

​

The legal basis for the processing is Art. 6 (1) lit. b DSGVO if it concerns a pre-contractual or contractual enquiry on your part. If you have general contact enquiries, the data processing is based on our legitimate interest, Art. 6 para. 1 lit. f DSGVO, which is to answer your enquiry.

We delete the data accruing in connection with the contact form after storage is no longer necessary or restrict processing if there are statutory retention obligations.

​

2.3 CER Newsletter

​

With your consent, you can subscribe to our e-mail newsletter, with which we inform you about current interesting offers. To ensure that you actually want to subscribe to the newsletter, we use the so-called double opt-in procedure. This is done as follows: after you have provided us with your e-mail address, we will send you a confirmation link. If you click this link within 48 hours, you will be added to the newsletter distribution list. If you do not confirm your subscription within 48 hours, your e-mail address will be deleted from our systems. The only mandatory information for sending the newsletter is your e- mail address.

​

After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. Furthermore, we store your IP addresses and the times of registration and confirmation.

​

The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The legal basis for the processing of your personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO, which you give us when registering for the newsletter.

​

If you withdraw your consent, we will delete your personal data within seven days. If legal retention obligations prevent deletion, we will block your data for further processing.

​

2.4 ADAC Newsletter

​

Furthermore, you have the option of subscribing to the ADAC Motorsport Newsletter via a link on this website. The person responsible for sending the ADAC Motorsport Newsletter is:

ADAC e.V.

Motorsport Department:

Hansa Street 19
80686 Munich
Tel.: +49 (0)89-7676 4402
Fax: +49 (0)89-7676 4430
E-mail: motorsport@adac.de

The data protection declaration of ADAC e.V. can be accessed at the following link: https://www.adac-motorsport.de/datenschutz/

It contains further information on the processing procedures at ADAC e.V..

​

2.5 Third-party provider 2.5.1 Matomo

​

This website uses the open source web analysis service "Matomo", which is operated on our own servers or on servers of our service provider. Matomo uses so-called "cookies". These are small text files that are stored on your computer and by means of which it is possible to recognise your browser on a subsequent visit if you have consented to their use. This enables us to analyse your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server.

​

Stored data include the IP address of the calling end device, by means of which a rough geolocation is also carried out, the page from which you were referred to our website (so-called referrer; in the case of a search engine referral, this may also contain the search term used), the operating system of your end device as well as the browser version and language used, resolution, active plug-ins, the time spent on the sub-page of our website as well as the number of sub-pages called up. The IP address is anonymised before storage by deleting the last two octets (e.g. 192.168.xxx.xxx). By deleting the last octet, a rough geolocation is possible, but a recognition of your terminal device by means of the IP address is excluded.

​

The purpose of the processing is the anonymised analysis of user behaviour in order to optimise our web offer and our advertising. The information collected and stored in this context about the use of this website is not passed on to third parties.

​

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 lit. a) DSGVO, insofar as you have given it to us. You can revoke your consent at any time by sending a corresponding message to the contact details provided by our data protection officer, in the manner described above or by deleting the corresponding cookies in your browser. You will then be asked again during your next visit to our website for technical reasons whether you consent to the use of cookies by our website.

​

2.5.2 egocentric Systems GmbH

​

For the purchase of tickets to the Central European Rally and the associated accounting and payment processes, we use the ticketing platform of egocentric Systems GmbH (hereinafter "egocentric"), Herweghstraße 4, 01157 Dresden.

​

The privacy policy of egocentric Systems can be accessed at the following link: https://egocentric- systems.de/datenschutzerklaerung/.
It provides further details on egocentric's processing procedures.

​

2.5.2.1 Ticket shop

​

On our website, we integrate the egocentric ticket shop through a so-called inline frame in order to enable direct ticket sales. Within the inline frame, a direct connection to egocentric's website is established. We receive access from egocentric Systems to your personal data provided in the context of the ticket purchase.

​

The purpose of this processing is the preparation and follow-up of the event as well as its implementation and better planning of future event offers.

​

The use is based on Art. 6 para. 1 lit. b DSGVO. The ticket purchase creates a contractual relationship between you and us.

​

2.5.2.2 Payment procedure

​

egocentric integrates payment services from third-party companies in the ticketing system we use. If you make a purchase via the ticketing platform integrated on our website, your payment data (e.g. name, payment amount, account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6 para. 1 lit. b DSGVO (contract processing) as well as in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f DSGVO). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a DSGVO is the legal basis for data processing; consents can be revoked at any time for the future.

​

2.5.3 Google

​

Insofar as you have given your voluntary consent, which can be revoked at any time, we are entitled to use Google Analytics and Google Ads on this website. These are tools offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

 

2.5.3.1 Google Analytics

​

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. This information generated by the cookie is transmitted to a server of the parent company (Google LLC) in the USA and stored there. Before this transfer, IP masking takes place, whereby your IP address is usually anonymised before it is stored and transferred to the USA. This is done by shortening the last octet (for IPv4 addresses) or the last 80 bits (for IPv6 addresses) of your IP address in the RAM of the terminal device you are using. Through this anonymisation, it is practically no longer possible to assign the IP address to you.

The anonymisation of your IP address takes place by default on servers within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases (e.g. in the event of a technical defect within the European Union) will the full IP address be transmitted to a Google server outside the EEA and shortened there.

​

The data collected is used to evaluate the use of our website and to create reports about the activities on the website. These reports in turn allow us to analyse the performance of our website. Consent is only valid for the purposes stated. The collected data cannot be used or stored for any purpose other than those listed below.

​

The legal basis is therefore Art. 6 para. 1 lit. a DSGVO. You can revoke this consent at any time with effect for the future; all you need to do is send an email to the above contact address or delete the cookies in your browser.

​

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The data will be deleted after 14 months.

​

You can also prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may restrict functionalities on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by not giving your consent to the setting of the cookie or by downloading and installing the browser add-on to disable Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de.

​

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

​

We would like to point out that with the discontinuation of the EU-US Privacy Shield, there is currently no adequacy decision for the United States within the meaning of Article 45 (3) of the GDPR of the Commission for a sufficient level of data protection. Therefore, we conclude standard data protection clauses within the meaning of Article 46 (2) (c) of the GDPR with Google to protect your data.

​

2.5.3.2 Google Ads

 

Within the framework of Google Ads, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked across Google Ads clients' websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. The storage of "conversion cookies" and the use of this tracking tool are based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

​

You can find more information on Google Ads and Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de

​

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

​

We would like to point out that with the discontinuation of the EU-US Privacy Shield, there is currently no adequacy decision for the United States within the meaning of Article 45 (3) of the GDPR of the Commission for a sufficient level of data protection. Therefore, we conclude standard data protection clauses within the meaning of Article 46 (2) (c) of the GDPR with Google to protect your data.

​

3. COOKIES AND COOKIE-LIKE TECHNOLOGIES

​

Cookies are used so that the use of the websites and preferences of the website visitors can be made attractive. This means, for example, that your details are stored for the selection of a language. Cookies are text files that are placed on your hard drive to enable identification of the browser when you return to the website.

​

Certain cookies are technically necessary for the proper operation of our site, while other cookies enable certain functions or make offers more attractive to you. For technically non-essential cookies, we ask for your permission when you access our site via our Cookie Consent tool, which you can revoke at any time with effect for the future.

​

You can also prevent cookies from being stored on your hard drive by making the appropriate browser settings. Cookies that have already been set can be deleted at any time. Please refer to the respective browser instructions on how to delete cookies or prevent their storage. If you do not accept cookies, this may impair the use of our website.

​

3.1 Description of the cookies used on our website Essential cookies (technically necessary cookies)

​

Statistics Cookies

​

These cookies are necessary to enable the basic functions of this site, such as providing a secure login or storing order progress.

The legal basis for the processing of cookies is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the technically flawless provision of the website.

​

These cookies allow us to analyse your site usage in order to evaluate and improve our services. They may also be used to provide a better customer experience on this site. For example, providing information on how our site is used.

The legal basis for the processing of cookies is Art. 6 para. 1 lit. a DSGVO, provided that you have declared your consent when entering the site. You can revoke this consent at any time with future effect by sending an email to the above contact address or by deleting the cookies in your browser.

​

External media

These cookies/web services are used to embed and present external content to website visitors. Content from video platforms and social media platforms are blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent.

​

The legal basis for the processing of cookies is Art. 6 para. 1 lit. a DSGVO, provided that you have declared your consent when entering the site. You can revoke this consent at any time with future effect by sending an email to the above contact address or by deleting the cookies in your browser.

​

4. DATA SECURITY

​

We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. Depending on the browser used, data is transmitted using 128-bit to 256-bit SSL encryption. Despite regular checks and constant improvement of our security measures, complete protection against all dangers is not possible.

​

5. SOCIAL-MEDIA

5.1 Social media links on this website

​

You will find links on our website which, when clicked, will redirect you to our fan page on the respective network operator.

The data processing carried out by the forwarding is the responsibility of the operator of the respective social network.

5.2 Social media presence

​

Our presence on social networks and platforms, such as Facebook, Instagram and TikTok, serves active and up-to-date communication with our customers and interested parties. We provide information there about our services, products and interesting special promotions relating to our company.

​

We operate our own social media sites, for which we are jointly responsible with the operator of the respective social media platform. In this regard, we have in each case concluded a joint responsibility agreement pursuant to Art. 26 DSGVO with the respective operators. In detail, these are:

​

• Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)

• Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)

• YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

• Twitter (if you live outside the United States of America Twitter International Company, One

  Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland; if you live in the United States

  of America Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA).

• TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380 Ireland)

 

Processing of your personal data by us

​

When you visit one of our social media sites, we, as the operator of the social media site, process your actions and interactions with our social media site (e.g. the content of your messages, enquiries, posts or comments that you send to us or leave on our social media sites or when you like or share our posts) as well as your publicly viewable profile data (e.g. your name and profile picture). Which personal data from your profile is publicly viewable depends on your profile settings, which you can adjust yourself in your settings on the social media platform. In general, please take care not to transmit or share sensitive data or confidential information (e.g. application documents, bank or payment data) via social media platforms. We recommend that you use a more secure means of transmission (e.g. letter post, e-mail).

We operate our social media pages and process the aforementioned data in order to provide information about us and our products and to communicate with our followers and interested parties.

​

This data processing is carried out on the basis of our aforementioned legitimate interests (Art. 6 para. 1 lit. f DSGVO) and, where applicable, in order to respond to your messages, enquiries, posts or comments that you send to us (Art. 6 para. 1 lit. b DSGVO). We check whether comments or other interactions on our social media pages violate applicable law or the respective community guidelines and delete corresponding comments if necessary. In the event that such comments occur frequently, we may process the user names involved for internal coordination purposes. We base this processing on our legitimate interest (Art. 6 para. 1 lit. f DSGVO) in providing a reputable online presence and meeting legal requirements.

​

The socia media platforms also provide us with anonymous usage statistics (so-called analysis services or page insights data) of our socia media pages based on the actions and interactions of our followers (e.g. likes, shares, comments, etc.), The data is used to help us contact our followers and interested parties, to understand the use and reach of our posts, to evaluate content and to recognise usage preferences, and to design our Socia Media pages to be as target group-oriented as possible. We have no influence or access to the compilation and processing of these usage statistics and the underlying data; it is carried out on our own responsibility by the operator of the respective Socia-Media platform and without us being able to view personal data of individual followers or users. This data processing is based on our aforementioned legitimate interests (Art. 6 para. 1 lit. f DSGVO).

​

We also use these anonymous usage statistics to display targeted interest-based advertisements on the social media platforms we use or to highlight our posts. The display of interest-based advertisements or the highlighting of posts on the socia-media platforms used by us is based on an analysis of the user's previous usage behaviour by the respective socia-media platform without us being able to view personal data of individual users or merge it with personal data processed by us, if applicable, or obtain knowledge of the identity of the users to whom interest-based advertisements are displayed. This data processing is based on our aforementioned legitimate interests (Art. 6 para. 1 lit. f DSGVO). Insofar as, in the context of interest-based advertising, we would exceptionally carry out a so-called extended comparison with customer lists to be uploaded by us to the respective socia-media platform, this would only take place on the basis of consent granted by you for this purpose (Art. 6 para. 1 lit. a DSGVO).

​

We process your personal data as long as this is necessary for the aforementioned purposes. In the event of an objection to processing on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO), we delete personal data unless their further processing is permitted under the relevant legal provisions. We also delete personal data if we are obliged to do so for other legal reasons. Applying these general principles, we generally delete personal data immediately after the legal basis ceases to exist, if it is no longer required for the stated purposes or if the stated purposes cease to exist and if there is no other legal basis (e.g. retention periods under commercial and tax law), otherwise after the other legal basis ceases to exist.

​

We only transfer your personal data if you have given us your consent to do so or if this is absolutely necessary to fulfil a contract with you or to protect our legitimate interests (Art. 6 para. 1 lit. a, b and/or f DSGVO).

​

Processing of your personal data by the operator of the respective socia-media platform

​

The operator of the respective Socia-Media platform is solely responsible for the processing of personal data on the Socia-Media platform itself on which we operate our Socia-Media pages. The operator of the Socia-Media platform processes your personal data when you visit one of our Socia-Media pages, regardless of whether you have a user account on the respective Socia-Media platform or are logged in on the respective Socia-Media platform, and usually also uses cookies and other storage and (sometimes cross-device) tracking technologies. Further information on the processing of your personal data by the operator of the respective Socia-Media platform can be found in the information on data protection on the following websites of the respective Socia-Media platform

​

• Facebook Data Policy at https://www.facebook.com/policy

• Instagram Privacy Policy at https://help.instagram.com/519522125107875

• YouTube privacy policy at https://www.tiktok.com/legal/privacy-policy-eea?lang=de&selection=true

• Twitter privacy policy at https://policies.google.com/privacy?hl=de&gl=de

TikTok Privacy Policy at https://www.tiktok.com/legal/privacy-policy-eea?lang=de&selection=true

​

​The socia media platforms also provide us with anonymous usage statistics (so-called page insights data) of our socia media pages based on the actions and interactions of our followers. We have no influence or access to the compilation and processing of these usage statistics and the underlying data, it is carried out under the sole responsibility of the operator of the respective Socia-Media platform and without us being able to view personal data of individual followers or users. It may happen that the socia- media platforms themselves compile personalised usage statistics, for example for their own market research, advertising, other commercial or business purposes, and also process personal data outside the European Union, which we also have no influence over or access to.

​

Further information on the processing of your personal data by the operator of the respective Socia Media platform in the context of the creation and processing of usage statistics can be found in the information on usage statistics on the following websites of the respective

 

Socia Media platform

​

Facebook information on Page Insights data at https://www.facebook.com/help/pages/insights

Instagram Insights at https://help.instagram.com/788388387972460?helpref=faq_content

• YouTube Insights at https://support.google.com/youtube/answer/9002587?hl=en and https://policies.google.com/terms?hl=de

• Twitter Audience Insights at https://business.twitter.com/de/analytics/audience- insights.html

• TikTok Insights at https://www.tiktok.com/creators/creator-portal/tiktok-content- strategy/understanding-your-analytics/

Further information on the processing of your personal data by the operator of the respective social media platform in the context of interest-based advertising as well as the setting options for your profile and your advertising preferences can be found on the following websites of the respective social media platform

​

1. Facebook at https://www.facebook.com/business/ads or https://www.facebook.com/adpreferences/ad_settings

2. Instagram at https://business.instagram.com/advertising or https://help.instagram.com/478880589321969/?helpref=hc_fnav

3. YouTube at https://support.google.com/youtube/answer/9002587?hl=en

4. Twitter at https://help.twitter.com/de/safety-and-security/privacy-controls-for-tailored-ads

5. TikTok at https://support.tiktok.com/en/account-and-privacy/personalized-ads-and-data

​

Third country transfer

​

For the purposes of the above-mentioned data processing, we also transfer your personal data to recipients who are based outside the EU/EEA.

​

Attention. There is currently no adequacy decision by the European Commission for the USA. However, we have concluded standard data protection clauses with Facebook, which are intended to ensure that your personal data is handled in a manner comparable to the European and German level of data protection. The legal basis for a data transfer to the USA is therefore Art. 46 para. 2 lit. c DSGVO (standard data protection clauses).

​

Contact

​

The contact person for exercising your rights is primarily the operator of the respective Socia-Media platform, who alone can provide direct access to the required information or the functionality of the respective platform and take direct appropriate measures. The contact persons for exercising your rights vis-à-vis the operators of the respective Socia-Media platform and further information can be found in the information on data protection on the following websites of the respective Socia-Media platform

​

1. Facebook Data Policy at https://www.facebook.com/privacy/explanation

2. Instagram privacy policy at https://help.instagram.com/519522125107875

3. YouTube privacy policy at https://policies.google.com/privacy?hl=de&gl=de

4. Twitter Privacy Policy at https://twitter.com/de/privacy

5. TikTok Privacy Policy at https://www.tiktok.com/legal/privacy-policy-eea?lang=de

​

Insofar as our support is possible or necessary, we will of course support you and, for example, forward your request to exercise your rights against the operators of the respective socia-media platform.

​

Contact points for exercising your rights against us can be found at the beginning of this privacy policy.

​

6. SOLUTION

   

Personal data will be deleted or blocked as soon as the purpose of the storage no longer applies or you request the deletion of your data. The data will also be deleted if a storage period prescribed by the

aforementioned standard expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract or you have given your consent in this regard.

​

7.THIRD COUNTRY TRANSFERS

​

Among other things, tools from companies based in third countries, such as the USA, are integrated on our website. When these tools are active, your personal data may be transferred to the respective servers of the companies located in third countries.

In this context, we would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on servers in the USA or accessible from the USA for monitoring purposes. We have no influence on these processing activities.

Data is transferred abroad, including to countries outside the EU or the EEA. An adequate level of data protection is ensured through the use of various security mechanisms. This can be, for example, an adequacy decision of the EU Commission within the meaning of Article 45 (1) of the GDPR; Binding internal data protection rules of the recipient within the meaning of Article 47 of the GDPR or other suitable guarantees. If no generally effective guarantees are available, we base the processing on standard contractual clauses concluded with the providers by the EU Commission within the meaning of Art. 46 (2) c of the GDPR. These measures ensure a sufficient level of data protection.

​