PRIVACY POLICY

Preamble

When using the website www.granpremiostorico.com (the “Site”), data may be collected by HVM Racing and processed in order to allow access to the Site’s services, as well as for administrative and commercial management purposes.

This Privacy Policy aims to inform users of the Site about our practices regarding the collection, use, and sharing of information that you may provide through our Site accessible at www.granpremiostorico.com.

This Privacy Policy therefore specifically applies to any order placed with HVM Racing for access passes and products related to the Gran Premio Storico d’Italia (hereinafter “GPSI”), as well as to any use of the Site’s services and content in connection with this event.

For the purposes of this document, terms beginning with a capital letter shall have the meaning given to them by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter the “GDPR”).

1. Acceptance of the Privacy Policy

By ticking the box “I have read and accept the Privacy Policy,” you (as the user) confirm that you have read and unreservedly accepted the terms of this Policy.

If you do not agree with any of the terms herein, you are free not to use, or to discontinue using, our services.

1. Amendments to the Privacy Policy

HVM Racing reserves the right to make any changes to this Privacy Policy relating to the protection of Personal Data at any time.

If any modification is made to this Privacy Policy, HVM Racing undertakes to publish the new version on its Website.

HVM Racing will also inform users of the modification by email at least 15 days before the effective date.

If the user does not agree with the terms of the revised Privacy Policy, they may delete their account and withdraw their consent to the Processing of their Personal Data.

1. Identification of the Data Controller / Data Processor

The Data Controller responsible for the Data collected in connection with the sale of access passes and products related to the GPFH is HVM RACING, a limited liability company (SARL) with its registered office at 31, rue d’Aguesseau, 92100 Boulogne-Billancourt, responsible for the organization and promotion of the GPFH event.

In this capacity, we undertake, in the course of our activities, to comply with the provisions of the GDPR and to ensure that your Personal Data is processed lawfully, fairly, and transparently, in accordance with Article 28 of the GDPR.

In particular, this means processing data for specific, explicit, and legitimate purposes, without further processing that is incompatible with those purposes, and retaining it only for as long as is necessary to achieve the purposes for which it was collected and processed.

1. Collection of Personal Data in the Context of the GPSI

By using our Website in connection with the GPSI event, you may be required to provide us with information, some of which may allow you to be personally identified.

This is particularly the case when you complete a form to purchase access passes and/or products related to the GPSI via the following URL: https://www.granpremiostorico.com/billetterie, when you report a problem or share a suggestion related to this event, when you contact us, or when you subscribe to our newsletter related to the GPSI.

This information includes, in particular, the following Data :

Orders : As part of an order for access passes or various products, the user provides a certain amount of Data when creating an account by completing a form: title, last name, first name, email address, phone number, date of birth, postal address, country, and, for certain specific products, a description, vehicle registration certificate, proof of insurance, and the owner’s driving license.

The title, last name, and first name are requested in order to identify the purchaser. The email address is required to send the order confirmation and ticket(s). The phone number is requested so that the purchaser can be contacted regarding their order, if necessary. The date of birth is requested to ensure that the purchaser is over 16 years of age. The postal address and country are collected to help anticipate arrival flows at the circuit. The description, vehicle registration certificate, insurance, and owner’s driving license are required for certain product types (such as exhibitions or track sessions) to identify the relevant vehicles and verify the necessary authorizations.

Payment : In the context of payment for the services offered on the Site, the Site may record financial data relating to the user’s bank account or credit card.

Browsing : HVM Racing directly or indirectly collects Personal Data during the user’s browsing on its Site, particularly within sections related to the GPFH, such as the user’s IP address.

Record of all GPFH bookings made on our Site.

Fraud prevention.

Site security : We collect certain browsing data to ensure the security of our order/ticketing services for the GPFH and to detect, prevent, or trace any malicious activity, attempted intrusion, or violation of the terms of use of our services.

Communication with users and improvement of the quality of our order/ticketing services related to the GPFH.

Sending newsletters related to the GPSI.

It is hereby reminded that the Processing of this Personal Data is carried out at the initiative and under the instructions of the Data Controller.

1. Use of Personal Data

The Personal Data collected from users of the Site, at the request of the Data Controller, is intended to provide the Site’s services relating to orders and ticketing for the GPFH, to improve them, and to maintain a secure environment. More specifically, the data is used for the following purposes :

Management of orders and sales of access passes and products related to the GPFH (including the delivery of purchased tickets);
Creation of databases of members/customers registered for these services;
Organization of contests and promotional games;
Management of the terms and conditions of use of payment services;
Verification, identification, and authentication of Data provided by the user;
Provision of user support and assistance;
Prevention and detection of fraud, malware, and management of security incidents;
Management of potential disputes with users;
Sending of commercial and promotional information, in accordance with the user’s preferences, provided that the user has ticked the corresponding box indicating consent at the time of registration for these services.

The legal basis for the collection of your Personal Data for the purposes listed above is your consent, as provided for under Article 6(1) of the European Regulation on Personal Data.

Such consent constitutes a freely given, specific, informed, and unambiguous expression of your will, by which you agree through the positive act of accepting this Privacy Policy that the aforementioned Personal Data relating to you may be subject to Processing.

In the case of minor users, the applicable legal basis is the consent of the legal representative of the Data Subject.

As provided for in Article 7 of the GDPR, you may withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to its withdrawal.

Retention Period of Personal Data

We undertake to retain your Personal Data only for the period strictly necessary for the declared processing purposes referred to above, and in all cases within the limits required by law.

Accordingly, depending on the type of Personal Data, the retention period may vary from a few days to several months.

In any case, we undertake to delete your Personal Data from our databases within one month following your request for deletion.

However, we may retain certain information for a period beyond your request for deletion of your Personal Data in order to comply with our legal, accounting, and tax obligations, and in particular, to prevent any unlawful conduct that may occur after the deletion of your Personal Data. In such cases, your Data will be deactivated and will no longer be accessible online.

Minors

In the case of minor users, the applicable legal basis is the consent of the legal representative of the Data Subject.

It is the responsibility of parents and any person exercising parental authority to decide whether their minor child is permitted to use the services offered by HVM Racing.

Sharing of Personal Data with Third Parties

Personal Data may be shared with third-party companies in the following cases :

When the user uses payment services, the Site interacts with third-party financial or banking institutions with which it has entered into agreements in order to provide these services;
When the Site uses service providers to supply user support, advertising, and payment services. These providers have limited access to the user’s Data as part of the performance of their services and are contractually obligated to use it in compliance with the applicable regulations on personal data protection;
Where required by law, the Site may transmit Data in order to respond to claims made against it and to comply with administrative or judicial procedures.

In any event, it is hereby reminded that the Processing of such Personal Data is carried out at the initiative and under the instructions of the Data Controller, so that the Data collected via the Site by HVM Racing is made available to the Data Controller.

Security and Confidentiality

The Site implements organizational, technical, software, and physical security measures to protect Personal Data against alteration, destruction, and unauthorized access.

However, we cannot guarantee that your communications and other Personal Data will not be intercepted or disclosed by a third party.

We inform you that your Personal Data is stored on servers located within the European Union.

To help ensure the security of your Personal Data, please choose a sufficiently strong password when registering for the aforementioned services.

Exercise of Users’ Rights

In accordance with the regulations applicable to personal data, users have the following rights :

They may exercise their right of access to know the Personal Data concerning them;

In this case, before implementing this right, the Site may request proof of the user’s identity in order to verify its accuracy;

If the Personal Data held by the Site is inaccurate, users may request that the information be updated;

Users may request the deletion of their Personal Data, in accordance with applicable data protection laws.

All of these rights may be exercised by sending a letter to the address indicated in Article 3 of this Policy and/or to the following address: HVM Racing – 31 rue d’Aguesseau – 32100 BOULOGNE-BILLANCOURT.

If you exercise these rights, we will endeavor, together with the Data Controller, to respond to your requests as promptly as possible, within the maximum period provided by law of one month, at no cost to you, subject to any abuse of rights.

In case of dispute or disagreement, you have the right to lodge a complaint with a supervisory authority.

Use of Cookies

When visiting the Site, and specifically the page https://www.granpremiostorico.com/billetterie, information regarding the user’s navigation via their device (computer, tablet, smartphone, etc.) may be stored in so-called “cookies” (login identifiers) installed on the device, subject to (i) the choices expressed by the user regarding these cookies (which can be modified at any time) and (ii) the settings of the web browser being used.

What is a “cookie”?

A cookie is a small set of information, usually of limited size and identified by a name, which can be sent to your browser by a website you visit. Your web browser will store it for a certain period and will send it back to the web server each time you reconnect to the site. Cookies have multiple uses: they can be used to remember your login identifier, to track your navigation for statistical or advertising purposes, etc.

The retention period for information regarding user navigation provided by cookies on the Site shall not exceed thirteen (13) months.

Cookies allow HVM Racing, without personally identifying the user, to :

Store information related to a form that the user may have completed on the Site or to products, services, or information that the user has selected or viewed on the Site;
Enable the user to access restricted and personal areas of the Site, such as their account, using identifiers or Data previously provided;
Implement security measures, for example, when the user is required to log in again to access content or a service after a certain period of time;
Monitor the use and performance of the Site, establish statistics, and track traffic and usage of various elements of the Site (visited content, navigation paths), allowing us to improve the relevance and usability of our services (most visited pages or sections, most read articles, etc.).

The placement of a cookie on a device is essentially subject to the user’s consent, which may be expressed, modified, or withdrawn at any time and free of charge.

Managing Cookies

Users have several options for managing cookies; it should be noted that any settings made by the user may affect their Internet browsing and access to certain services that require the use of cookies :

The user can configure their web browser so that cookies are either stored on their device or rejected, either systematically or according to the issuer. They can also configure their browser to prompt for acceptance or refusal of cookies on a case-by-case basis before a cookie is stored on their device;

If the user accepts the storage of cookies in their browser, the cookies embedded in the pages and content they have visited may be temporarily stored in a dedicated area on their device, readable only by the issuer;

Conversely, if the user refuses the storage of cookies on their device, or deletes those already stored, they will no longer be able to benefit from certain functionalities that are nevertheless necessary to navigate some areas of the Site. This will be the case when attempting to access content or services that require authentication, or when HVM Racing—or its technical providers—cannot recognize, for technical compatibility purposes, the type of browser used by the user’s device, its language and display settings, or the country from which the device appears to be connected to the Internet.

In such cases, HVM Racing disclaims all liability for any consequences resulting from the degraded functioning of its Site and/or services due to the inability to store or access the cookies necessary for their operation, which the user has refused or deleted.

Managing Cookies from Your Browser

By configuring your browser, you can at any time and free of charge decide whether to enable or disable cookies. This setting allows you to accept or refuse all cookies or to handle them on a case-by-case basis. Completely disabling cookies on your device may cause navigation issues on a website.

The configuration process for managing cookies and your preferences varies depending on the browser used. Instructions can be found in the help menu of the respective browser.

For Google Chrome

Click on the “Settings” menu icon, then select “Advanced Settings.”
In the “Privacy and Security” tab, click on “Clear Browsing Data.”
Click the button for “Cookies and other site data.”
Click on “Clear Browsing Data.”

For Internet Explorer

In Internet Explorer, click the Tools button, then select “Internet Options.”
Under the “General” tab, in the “Browsing History” section, click on “Settings.”
Click the “View Files” button.
Click the column header “Name” to sort all files alphabetically, then browse the list until you see files starting with the prefix “Cookie.” (All cookies have this prefix and usually include the name of the website that created the cookie.)

For Firefox

Go to the “Tools” tab of the browser and select “Options.”
In the window that appears, choose “Privacy” and click on “Show Cookies.”
Locate the cookies, select them, and delete them.

For Safari

In your browser, choose the “Edit” menu, then “Preferences.”
Click on “Security.”
Click on “Show Cookies.”
Select the cookies and click “Remove” or “Remove All.”
After deleting the cookies, click “Done.”