ROTAX RACING: PRIVACY POLICY

Last update:  2. Dezember 2024

GENERAL INFORMATION ON DATA PROTECTION AND THIS PRIVACY POLICY

Overview concerning data protection

We, BRP-Rotax GmbH & Co KG - and, in some cases described below, its sales partners> and race organizers jointly - operate various channels as website, apps, etc. to present our achievements, services and products in the world of Rotax Racing.
If our privacy policy does not answer all your questions, please do not hesitate to contact us at privacy.rotax@brp.com. Or you can write us at: 

BRP-Rotax GmbH & Co KG
c/o data protection
Rotaxstraße 1
4623 Gunskirchen
Österreich
(These are the contact details of the entity responsible for all data processing and protection issues concerning the described channels).

Scope and purpose of this privacy policy

In this privacy policy, we explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and the applicable national laws, which personal data we process - in some cases as a joint controller. In addition, we also inform you about your rights in relation to our data processing activities. The following information relates to data processing operations within the scope of our - in some cases jointly - provided channels.

The legal bases

The protection of your personal data is our special concern, all data processing requires a legal base. We therefore process your data exclusively on the basis of the relevant legal provisions (GDPR, Austrian DSG, Austrian TKG 2021, German TDDDG). We only process your data if at least one of the following conditions applies: 

• Consent (Art. 6 (1) lit. a GDPR): you have given us your consent to process data for a specific purpose (e.g. consent in the cookie banner on the website, consent to receive push messages in the apps, consent during the registration process, etc.).
• Contract (Art. 6 (1) lit. b) GDPR): In order to fulfill a contract or pre-contractual obligation with you, we process your data (e.g. when you register your engine via the website, entry form for participation in races).
• Legal obligation (Art. 6 (1) lit. c) GDPR): If we are subject to a legal obligation, we process your data (whenever it is provided by law that we have to process data of customers e.g. for warranty reasons).
• Legitimate interests (Art. 6 (1) lit. f) GDPR): We reserve the right to process personal data in the case of legitimate interests, if this does not conflict with any overriding interests of protection on your part (e.g. we process data to make the website and the apps secure, or to provide you with information about Rotax Racing)

What is personal data?

While you are using our channels, various personal data is collected and processed. "Personal data" is information about an individual that is linked to his or her identity, such as a name, phone number, email address, or other identity identifier (e.g. race license number or IP address). Our privacy policy explains what data we collect and what we use it for. It also explains how and for what purposes this is done.

How do we collect your data?

Your data is collected when you provide it to us. This can be, for example, data that you enter in a contact form. Other data is collected by our IT systems automatically when you visit the website or after your consent has been given. This is mainly technical data (e.g. Internet browser, operating system or time of page view). 

What do we use your data for?

Purposes for data use may vary: from processing your requests, to ensuring that there is no unauthorized access to our channels, to marketing activities. Detailed information on the processing purposes can be found below in the respective descriptions of the individual data processing activity.

Transfer of personal data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed in this privacy policy.

We will only transfer your personal data to third parties where:

• you have given your consent in accordance with Art. 6 paragraph 1 lit. a GDPR, or
• the transfer is necessary to safeguard legitimate interests, including exercising or defending of legal claims, and is not overridden by contrary prevailing interests worthy of protection ( Art. 6 paragraph 1 lit. f GDPR), or
• there is a legal obligation to transfer the data (Art. 6 paragraph 1 lit. c GDPR), or
• a transfer is necessary for fulfilling our contractual obligations towards you (Art. 6 paragraph 1 lit. b GDPR).

The descriptions on data processing in this privacy policy explain which of these legal bases is relevant for a particular data processing operation carried out by us.

How long will your data be stored?

Unless a more specific storage period is mentioned within this privacy policy, your personal data will remain with us until the purpose of the data processing has been achieved. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be used only for these purposes foreseen by law and will be deleted once these reasons no longer apply.
As part of the description of individual technologies on our website, there are specific references to the storage period of data. In our cookie table, you will be informed about the storage period of individual cookies. In addition, you always have the possibility to ask us directly about the specific storage period of your data. To do so, please use the contact details listed at the beginning of this privacy policy.

Cooperation with processors

For some data processing we rely on the support of processors. We have concluded a data processing agreement according to Art. 28 GDPR with these processors. This is a contract required by data protection law, which is intended to ensure that they only process the personal data of our website visitors, app users, interested parties and customers in accordance with our instructions and in compliance with the GDPR. Among other things, this contract also includes the technical and organisational measures to be taken by our processors to ensure that your personal data is protected. For example, we use pseudonymisation whenever possible (e.g. evaluation of race data in the Rotax TRAX app).  

Notice on data transfer to third countries

We take great care in our selection of systems and tools to ensure that they comply with the principles of the GDPR. Almost all systems and solutions we use are developed in Europe and hosted on European servers. As far as reliance on European software products is not feasible for technical or other important reasons, we use software products from companies in third countries (primarily the US). These transfers only take place under the following conditions:

• First of all, if we ourselves decide to process data in a third country, or processing takes place in the context of the use of third-party services or in the form of the disclosure or transfer of data to other persons or companies abroad, this is done only on the basis of one of the legal bases outlined in the section above on ‘Transfers of personal data to third parties’.
• Secondly, we transfer data to third countries exclusively in accordance with Art. 44-49 GDPR. Apart from the existence of explicit consent or contractual necessity in individual cases, this means that data is only transferred to third countries, if their level of data protection is recognized as adequate, or if the data is  processed in the third country on the basis of special guarantees: These guarantees may be  the result of contractual obligations of the foreign data importer in the form of the EU Commission's standard data protection clauses, or may be based on certification of the foreign data importer or on approved Codes of Conduct that the foreign data importer has undertaken to comply with.

Note on data transfer to the US

We would like to explicitly point out that as of July 10, 2023, the EU Commission has issued an adequacy decision on the EU-US Data Privacy Framework in accordance with Art. 45 paragraph 1 GDPR. Accordingly, organizations or companies (as data importers) in the US that are registered in a public list as part of the self-certification of the EU-US Data Privacy Framework provide an adequate level of protection for data transfers. You can find out whether the specific provider of a service is already certified in the public list.  
The EU-US Data Privacy Framework provides a valid legal base for the transfer of personal data to the US. This creates binding guarantees to comply with all ECJ requirements; for example, it provides that access by US intelligence services to EU data is limited to what is necessary and proportionate and that a data protection review court is created to which individuals in the EU also have access.
If we transfer data to the US or use a service provider based in the US, we explicitly refer to this in this privacy policy.
It should be noted that, apart from significant improvements, the EU-US Data Privacy Framework is only partially applicable and only applies to data transfers to those data importers in the US that appear in the above-mentioned public list of certified organizations/companies.
With organizations / companies that are not yet on the list of certified organizations / companies, we have concluded standard data protection clauses in accordance with the Commission's implementing decision (EU) 2021/914 of June 4, 2021. Special protection mechanisms such as pseudonymisation are used where possible. Furthermore, within the scope of the available possibilities, service provision by way of servers located in Europe is preferably agreed upon in order to make any attempts by US authorities to access data from the European Economic Area (EEA) significantly more difficult.

What rights do you have regarding your data?

According to Art. 7, 12–22, 77 GDPR you have the following rights:

• Before we process your data, you will be informed by us about all essential aspects relating to the processing, such as in particular the categories of data concerned, the purpose(s) of processing, the legal base and the storage period of the data (Art. 13 and 14 GDPR).
• Acc. to Art. 15 you have the right to obtain, upon request, information at any time about the categories (types) of data processed, the purpose(s) of the data processing, the recipients of the data, if any, including information on whether data is transferred to third countries, the storage period, as well as the origin of your personal data, if they were not collected from you
• You also have the right to request the correction or deletion of your data if you believe that the data is inaccurate or are being processed improperly (Art. 16, 17 and 19 GDPR). 
• Further, you have the right to request the restriction of the processing of your personal data under certain circumstances (Art. 18 GDPR). 
• In addition, you have the right to data portability (Art. 20 GDPR).
• Insofar as one of our processing operations is based on our legitimate interests, you have the right to object. In this case, we may only continue the processing if we succeed in proving compelling legitimate reasons for this processing which override existing interests in protection of this data (Art. 21 GDPR).
• You also have the right, in accordance with Art. 22 GDPR, not to be subjected to decisions made solely by automated means. (We do not carry out such processing!) 
• If you have given your consent to certain data processing operations, you can revoke this consent at any time with the effect that future use of this data is prohibited (Art. 7 paragraph 3 of the GDPR). For example, you have the option of revoking your consent to the use of cookies on our website, with effect for the future, by calling up our Cookie Settings.
• Furthermore, you have the right to lodge a complaint to the data protection supervisory authorities in accordance with Art. 77 of the GDPR. As a rule, you can contact the data protection authority at your usual place of residence or workplace or at the headquarters of our company.

The responsible data protection authority for BRP-Rotax GmbH & Co KG is:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Tel.: +43 1 52 152-0, dsb@dsb.gv.at.

For all questions relating to data protection you may contact us at any time by e-mail to privacy.rotax@brp.com  
or by mail to:
BRP-Rotax GmbH & Co KG
c/o data protection
Rotaxstraße 1
4623 Gunskirchen
Österreich
(These are the contact details of the entity responsible for all data processing and protection issues concerning the described channels).

Please assist us in specifying your request by answering questions from our responsible employees regarding the specific processing of your personal data. If there are reasonable doubts about your identity, we may request a proof of your identity.

If you have any questions regarding privacy issues related to your customer relationship with a distribution partner at a race organizer, please contact them directly.

PRIVACY POLICY WEBSITE

We – BRP-Rotax GmbH & Co KG and its distribution partners – jointly operate this website to present our achievements, services and products throughout the world of Rotax Racing. The following information relates to data processing operations within the scope of our jointly provided website. It could happen that, during your browsing experience on our website, you enter the company websites of our distribution partners. The respective distribution partners are solely responsible for the data processing that takes place directly on their websites.

Data processing on our website

Security

SSL-encryption

Within your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the representation of the key or lock symbol in closed form in the lower status bar of your browser. We use this encryption procedure on the basis of our legitimate interest in the use of suitable encryption techniques in accordance with Art. 6 paragraph 1 lit. f GDPR.
We also make use of suitable technical and organisational security measures in accordance with Art. 32 GDPR to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and kept state-of-the-art.

Hosting

In the process of hosting our website, we store all data related to the operation of our website. This is necessary for enabling operation of our website. Therefore, we process this data on the legal ground of our legitimate interest in optimising our website (Art. 6 paragraph 1 lit. f of the GDPR). To provide access to our website, we use the services of web hosting providers, to whom we supply the afore mentioned data within the context of contractual processing in accordance with Art. 28 of the GDPR.

Access-log-files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: Browser type and browser version, operating system used, referrer URL, time of server request, pseudonymized IP address. This data will not be combined with other data sources.
Legal base: Art. 6 (1) lit. f GDPR: The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
Storage period: 7 days

Request by e-mail, phone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, contact details, content of the inquiry) will be processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to pre-contractual measures or to the performance of a contract between you and us. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), if this has been requested.
Data from inquiries will be stored by us for as long as is necessary to process your request, but for no longer than six months, unless mandatory statutory provisions – in particular statutory retention periods – require longer storage or where it is necessary for the establishment, exercise or defense of legal claims.

Forms

We offer various contact forms on our website:

• General contact requests
• Product inquiries
• Engine Registration
• Test drive requests
• Inquiries about race organization
• Inquiries about kart races

Depending on the content, we – that is: Rotax GmbH & Co KG and the sales partner responsible for you – work together to answer and process your enquiry. If you express an interest in our ‘Rotax Certification Program’ (RCP) training programme by completing the corresponding form, your data will be forwarded to our external trainer for further processing.

Depending on the form, we collect and process the following data: your name, your contact details (e-mail address, telephone number if applicable), address, country, the category of your request, your message; if applicable, company and information about the products you have purchased.

The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) lit. f) GDPR) or on your consent (Art. 6 (1) lit. a GDPR), if this has been requested. 

Data from the contact forms will be stored by us for as long as is necessary to process your request, but for no longer than six months, unless mandatory legal provisions – in particular legal retention periods – require longer storage. This is the case, for example, with engine registration. Additionally data will be stored where it is necessary for the establishment, exercise or defense of legal claims.

Newsletter marketing for own purposes

Newsletter registration

If you would like to receive the newsletter from Rotax and your distribution partner, which is offered on the website and tailored to your interests, we require an e-mail address from you as well as consent to receiving the newsletter. In order to tailor our newsletters to your interests as much as possible, we analyze the behavior of newsletter recipients in the newsletters and on our website. Among other things, we can analyze how many recipients have opened the newsletter and how often which link in the newsletter was clicked. All links in the newsletter are so-called tracking links, with which your clicks can be counted and your website behavior can be analyzed.  
This data processing is based on your consent (Art. 6 (1) lit. a GDPR). Your data will be stored until you revoke your consent or for a maximum of two years after our last contact. You will find the link with which you can unsubscribe from the newsletter in every newsletter.

Data collection for own marketing purposes in our forms

We store the email address and name or product information you entered into the relevant forms on our website also in our customer and prospect file for marketing purposes - for B2B inquiries in our partner file. This data will - if you have not objected - be used for the newsletter communication about our products around our Rotax Racing benefits, services and products. The data processing is based on our legitimate interest in providing you as a customer or interested party with information relevant to you about Rotax Racing (Art. 6(1) lit. f GDPR). You have the option to object to this use at any time, before entering the data into the prospect file for marketing purposes and in each newsletter by means of an unsubscribe link or by e-mail to privacy.rotax@brp.com. Your data will be stored as long as you have not objected,  longest, however, until two years after our last newsletter mailing.

In order to tailor our newsletters to your interests as much as possible, we analyze the behavior of newsletter recipients in the newsletters and on our website. Among other things, we can analyze how many recipients have opened the newsletter and how often which link in the newsletter was clicked. All links in the e-mail are so-called tracking links, which can be used to count your clicks and analyze your website behavior. The data processing is based on your consent (Art. 6(1)(a) GDPR) to the cookies necessary for such processing (see section "Marketing cookies" in the COOKIE POLICY).

Cookie-Policy

The use of cookies and similar technologies

We use cookies to make our website as user-friendly and functional as possible for you. Some of these cookies are stored on the device you use to access the site. 

Cookies are small packages of data that are exchanged between your browser and our web server whenever you visit our website. They do not cause any damage and can only store information provided by your browser, e.g. information that you have entered into your browser or that is available on the website. Cookies cannot execute code. 

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the form function for contacting you). Other cookies are used to evaluate user behavior or to display videos. In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for the use of video services).

An essential function of cookies is also to recognize website visitors if they have visited the website before and to adapt the website visit to the previously expressed preferences as far as possible (e.g. language, currency, ...).

Cookies can contain the following information:

• Cookie name
• Name of the server from which the cookie originates
• Cookie ID number
• An expiry date, after which the cookie will be automatically deleted

General browser settings and deletion of cookies

You can also set your web browser so that it does not store any cookies in general on your device or so that you will be asked each time you visit the site whether you accept the use of cookies. Cookies that have already been stored can be deleted at any time. Refer to the Help section of your browser to learn how this is done.

When deactivating cookies, the functionality of our website may be limited. 

Cookie-Settings

When you visit our website for the first time (or call it up after you have deleted your cookies), you will be asked to give your consent to the activation of various cookies via a so-called "cookie banner" in accordance with Art. 6 (1) lit. a GDPR. We classify cookies in the following categories depending on their purpose and function: 

• Technically necessary cookies
• Statistics cookies
• Marketing cookies

You can give, change or revoke your cookie preferences / consent to the individual categories at any time by clicking on the link 'Cookie-Settings' at the bottom of the website or by clicking on the following link Cookie-Settings. 

Technically necessary cookies

Technically necessary cookies are required to carry out the electronic communication process (e.g. secure browsing experience), to provide certain functions you request (e.g. flawless use of our forms - see section "Forms") and to query your cookie preferences. These cookies are stored on the basis of Art. 6 (1) lit. f GDPR. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. You cannot set preferences individually for this category in the cookie banner. However, as described above, you have the option to generally prevent cookies, which may lead to a reduced use of our website for this type of cookies.

Statistics cookies

To help us understand how you use our website, which areas of the website are of interest to our users and which are less so, which of our services on the website are well received and which are less so, where our users come from and how long they stay on our website, we use the analysis tool from Matomo. It helps us to continuously optimize our information and services offered on the website to provide you with a great experience.
For website measurement, the storage of the cookies in question is based exclusively on your consent (Art. 6 (1) lit. a GDPR); you can revoke your consent at any time via the 'Cookie-Settings' link at the bottom of the website.

Marketing cookies

We use tools on our website to provide you with a customer-focused website experience. These tools are: 

• Google Maps, so you can find us and our distribution partners at any time.
• Video platforms YouTube and Vimeo, so that you can experience the world of Rotax Racing in moving pictures.
• Newsletter and campaign tracking to enable us to tailor our newsletter communication to your interests and wishes, while also allowing us to better measure the success of our online campaigns.

The storage of the cookies in question is based on your consent (Art. 6 (1) lit. a GDPR); consent can be revoked at any time via the 'Cookie-Settings' link at the bottom of the website.

Occasionally it can happen, that so called "unclassified cookies" appear in the cookie banner. These are cookies which we will subsequently try to classify together with individual cookie providers.

Our tools

WebCare (technically necessary cookies)

In order to obtain consent for the use of cookies on our website in accordance with the GDPR, we use the Consent Banner of DataReporter WebCare. This is a service provided by DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria ("DataReporter"). The Consent Banner records and stores the consent to cookie use for the respective user of our website. Our Consent Banner ensures that statistical and marketing cookies are only set when the user has given his express consent to their use. 

We store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by calling up the setting for cookies and managing the declaration of consent. Existing cookies will be deleted after revocation of the consent. A cookie is also set to store information on the status of the user's consent, which is indicated in the cookie details. Furthermore, the IP address of the respective user is transmitted to DataReporter's server for calling this service. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service. The use of the above data is therefore based on our legitimate interest in the legally compliant design of our website in accordance with Art. 6 paragraph 1 lit. f GDPR.

Matomo (statistic cookies)

We use the service "Matomo Cloud" of InnoCraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand (country with adequacy decision) for web analysis on our website in order to continuously optimize our information and service offer. For web analysis, surfing behavior (e.g. when do users visit our website, do they come to us directly or via another website, which pages are visited, which links are clicked on, how long do users stay on our website) as well as browser information (e.g. is our website visited via a PC or a mobile phone, which browsers are used to visit our website, from which countries do users access our website) are processed. All data that is processed is available to us as aggregated, statistical data. When analyzing with Matomo, we use IP anonymization. In this case, your IP address is shortened before analysis so that it can no longer be clearly assigned to you. Data is automatically deleted after a maximum of 365 days.

Newsletter and campaign tracking (marketing cookies)

When you click on a link in our newsletters, we can use website tracking to determine which topics you are interested in. This allows us to tailor our content to your preferences. This enables us to provide more targeted content in our newsletters, ensuring that we are offering information that is relevant to your interests. The data is deleted after 24 months.
Campaign tracking also enables us to ascertain the effectiveness of our online advertising. For instance, it allows us to identify which campaign led you to our website and which forms you completed. These cookies are only stored until the end of your website visit.

The use of US-tools

Google Maps (marketing cookies)

We offer you a geographic, visually appealing search function for partner locations (distributors, service and repair centers) as well as tracks on our subpage. Therefore we use the map service "Google Maps" from Google. For Europe, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is responsible for all Google services. 

In order for Google Maps to provide its service, your IP address, latitude and longitude coordinates and search terms are collected and stored by Google. Within the scope of this service, data is transferred to the US or, at least, such transfer cannot be ruled out.

Most servers are located in the United States. Google currently transfers and processes data to/in the United States based on the EU-US Data Privacy Framework (Art 45(1) GDPR) and thus undertakes to largely comply with the European level of data protection when processing your data. You can find details about this here.

Depending on whether you use Google tools (e.g. a Google account) and depending on which Google services you have given your consent to, Google may merge data collected via our website with information that Google already has and create profiles about you. This enables Google to subsequently offer services and benefits tailored to you. In such cases it is Google which is exclusively responsible for such processing of data.

We point out that when running this service on the part of Google (currently) a setting cookie called "NID" is set. Google Maps does not currently offer us the option to run this service in a mode without this cookie. The NID cookie contains information about your user behavior, which Google uses to optimize its own services and to provide individual, personalized advertising for you. Your consent to use Google  Maps thus also covers the setting of this cookie.

If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required fonts (webfonts) into its browser cache in order to display texts and fonts correctly. Google Fonts logs records of CSS and font file requests. The font files are cached for one year.

Google Maps anonymizes data in server logs by deleting part of the IP address and cookie information after 9 and 18 months respectively.
Location and activity data is stored - depending on your decision - either 3 or 18 months and then deleted. You can also manually delete history at any time via your Google account. If you want to completely prevent your location tracking, you need to turn off the 'Web and App Activity' section in your Google Account.


For further information, refer to the

• Google privacy policy
• Terms and conditions
• You can find out where Google data centres are located.

YouTube from Google (marketing cookies)

We integrate Rotax videos from YouTube on our website in order to bring you closer to the world of Aircraft in moving images. The operator of the YouTube platform is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, a subsidiary of Google. Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for data processing in Europe.
As soon as you start a YouTube video on our website, a connection to YouTube's servers is established. Most servers are located in the United States. Google currently transfers and processes data to/in the United States based on the EU-US Data Privacy Framework (Art 45(1) GDPR) and thus undertakes to largely comply with the European level of data protection when processing your data. You can find details about this here.
Depending on whether you use Google tools (e.g. a Google account, YouTube account) and depending on which Google services you have given your consent to, Google may merge data collected via our website with information that Google already has and create profiles about you. This enables Google to subsequently offer services and benefits tailored to you. In such cases it is Google which is exclusively responsible for such processing of data.
The storage period of your data with us depends on the type of data collected and the respective tool used.  
Depending on the cookie and data type, the storage period varies between 30 minutes, 3 and 8 months, 2 and 19 years.
For more information about data protection at YouTube, please see Google's privacy policy and Terms of Service. 

Vimeo without tracking (marketing cookies)

In order to bring you closer to the world of Rotax Racing in high-quality moving images, we integrate Rotax videos via plug-ins from the video portal Vimeo on our website. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. Vimeo acts as the data protection controller.
When you visit our website and you have given your consent via our "cookie banner", a connection is established from your browser to the servers of Vimeo. In the process, the Vimeo server is informed which of our pages you are visiting. In addition, Vimeo obtains your IP address. This is necessary for technically being able to show the video on your browser. We apply Vimeo so that Vimeo does not set cookies and thus cannot track your user activity. The so-called dnt parameter (do not track) has the same effect as activating a Do Not Track setting in the user's browser.
We were not able to find out how long data is stored by Vimeo in this specific case. In general, Vimeo states that data remain stored until Vimeo no longer has an economic reason for storing it. Vimeo, according to it’s own statement, does not disclose data to third parties.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission, the EU-US Data Privacy Framework and, according to Vimeo, on grounds of "legitimate business interests". Further information on the handling of user data can be found in Vimeo's privacy policy. For questions, inquiries or complaints regarding the protection of your data in the context of the use of Vimeo, please contact: Privacy@vimeo.com

Cookie-Settings

PRIVACY POLICY SOCIAL MEDIA

We - BRP-Rotax GmbH & Co KG - operate pages on various social media platforms in order to make further content about Karting and the other business areas available to the interested web audience. The decision on the purpose and means of data collection on the social media channels is the responsibility of BRP-Rotax GmbH & CO KG. Distribution partners and race organizers can operate their own social media pages and determine in their respective sole responsibility about related purposes and means. As a result, there is no shared responsibility between BRP-Rotax GmbH & Co KG and the distribution partners and race organizers for the social media channels to which we link at the bottom of our website.

We are represented with our company profile on the following social media platforms:

• Facebook: https://www.facebook.com/ROTAXKART/
• Instagram: https://www.instagram.com/rotaxkarting/
• YouTube: https://www.youtube.com/user/rotaxKarting

Further information on the individual social media platforms can be found in our general BRP-Rotax GmbH & Co KG privacy policy. 

PRIVACY POLICY EVA / GLOBAL APP

We – BRP-Rotax GmbH & Co KG and the race organizers – jointly operate the Rotax Event Management System including the corresponding mobile app ("Rotax Global App") to provide you with information about races, events, products and services. The following information relates to data processing activities carried out within the framework of our jointly provided Rotax event management system and the associated "Rotax Global App".
You may come across race organizer websites and channels during your browsing experience in the Rotax Global App. The respective race organizers are solely responsible for the data processing that takes place directly on their websites and channels.

Data processing: Rotax event management system "EVA" and Global APP

Security

We protect your personal information from unauthorized access, use or disclosure. We ensure that your personal data stored by us is used in a controlled, secure environment that prevents unauthorized access and disclosure.
The event registration / registration for the race always takes place via a website that uses SSL or TLS encryption for security reasons. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and that the lock symbol appears in your browser line.
In the Rotax Global App there is an optional registration possibility for you. Passwords set during registration are encrypted in our database.

Access-log-files Rotax event management system "EVA"

The provider of the event registration pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: IP address, date and time of access, country and a corresponding information if logged in incorrectly. This data will not be combined with other data sources.
We have a legitimate interest (Art. 6(1) lit. f GDPR) in the technically error-free presentation and optimization of our event registration pages – for this purpose, the server log files must be collected.
Storage period: 365 days

Access-log-files Rotax Global APP

Log files are also created and stored in the Rotax Global App for the last login: IP address, date and time of access, username/email, errors and warnings.
We have a legitimate interest (Art. 6(1) lit. f GDPR) in the technically error-free presentation and optimization of our Rotax Global App – for this purpose, the server log files must be collected.
Storage period: 365 days

Request by e-mail or phone

If you contact us by e-mail or telephone, your inquiry including all resulting personal data (name, contact details, content of the inquiry) will be processed by us for the purpose of dealing with your request. We do not pass on this data to third parties without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to pre-contractual measures or to the performance of a contract between you and us. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), if this has been requested.
Data from inquiries will be stored by us for as long as is necessary to process your request, but for no longer than six months, unless mandatory statutory provisions – in particular statutory retention periods – require longer storage or where it is necessary for the establishment, exercise or defense of legal claims.

Event registration / race registration

The data collected during your event registration / race registration (name, contact information such as email address, phone number, address, country, date of birth, class, body weight, race license, photo, etc.) will be processed based on our legitimate interest to provide a professional event experience (Art. 6(1) lit. f GDPR). If necessary, this data may be passed on to the event location for smooth processing on site.
Some of the data you provide is necessary for the organization and execution or your participation in the race and is therefore mandatory. Other data you can provide voluntarily (e.g. sporting CV, best results or hobbies). You can change your data after the event registration / registration for the race by using the "edit code" sent to you by e-mail.
Data from the event registration will be stored by us as long as this is necessary for the processing of the event, but no longer than one year after the event, unless mandatory legal provisions – in particular legal retention periods – require longer storage.

Newsletter marketing for own purposes

Data collection for own marketing purposes in the context of event registration, race registration and registration in the Rotax Global APP

We store the email address and name you provide in the registration form or app registration in our customer and prospect database. This data will be included in newsletter communications about our events, services and products around Rotax Kart. You have the option to object to this at any time, in each newsletter by using the unsubscribe link or by sending an email to privacy.rotax@brp.com. This data processing is based on our legitimate interest to provide you as a customer or interested party with relevant information about Rotax Kart (Art. 6(1) lit. f GDPR). Your data will be stored until you object or for a maximum of two years after our last contact.

Communication and information in the Rotax Global APP

If you have given your consent (Art. 6(1)(a) GDPR) for push messages in the Rotax Global App, we will provide you with news and information about the races and events you have selected. The primary purpose of these messages is to keep you up to date before, during and after the races and events directly in the Rotax Global App and to inform you about possible changes promptly.

Push messages via Firebase from Google

Push messages that are displayed directly in the Rotax Global App are created via Google's US solution "Firebase" and delivered via Google's and Apple's US push providers or Huawei's Chinese providers. Push messages in the Rotax Global App will only be displayed with your consent (Art. 6(1) lit. a GDPR). The push messages are created via Google's "Firebase" tool and delivered directly to your mobile phone. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services in Europe.
Where Firebase is used, Google processes personal data like the Mobile Device ID. The processing of the Mobile Device ID is technically necessary, otherwise no push messages can be delivered to your mobile phone.
Data collected through Firebase is stored on Google's own servers distributed around the world. Most servers are located in the United States. Google currently transfers and processes data to/in the United States based on the EU-US Data Privacy Framework (Art 45(1) GDPR) and thus undertakes to largely comply with the European level of data protection when processing your data. You can find details about this here.
Depending on whether you use Google tools (e.g. a Google account), and depending on which Google services you have consented to Google using, Google may combine data collected through the Rotax Global App with information Google already has about you and create profiles about you. This enables Google to subsequently offer services and benefits tailored to you.
The storage period depends on the type of data collected and the particular tool used for processing.
Further useful links: Google privacy policy and Terms and conditions


Rotax Global APP registration

As a user, you also have the possibility to register in the Rotax Global app. Your data (e-mail address and password), which you provide in the registration process, will be processed on the basis of our legitimate interest (Art. 6(1) lit. f GDPR) for the purpose of providing the following functions in the Rotax Global App: You can

• add kart drivers to the championship or adjust existing kart drivers ­– without an edit code
• retrieve updates on the selected race
  Your registration data will remain stored until you delete the Rotax Global App. Data that you have entered during an event registration / race registration remains unaffected. The above storage period applies to this data.

Communication of race organizers in the Rotax Global APP

In the Rotax Global App, personal data is processed in some areas, and the processing is the sole responsibility of the respective race organizer. This may concern the following:

• Live timing and live streaming
• Registration and participant lists, rankings and results lists (Notice Board, Results, Standings, Entry List).
• Payment processing for race fees
• Updates
• Regulations
  If you have any questions, please contact the race organizer directly. You can find his contact details in his imprint too – available in the section "Entry Form".

PRIVACY POLICY TRAX APP

We – BRP-Rotax GmbH & Co KG – operate the Rotax mobile app ("Rotax TRAX App") to give you the opportunity to experience the whole world of Rotax Racing: We give you the possibility to organize races by yourself,  connect to likeminded racers, compete with other drivers and constantly improve your driving performance. Additionally we provide you with information about professional races, events and our services.
The following information relates to data processing activities carried out within the scope of our Rotax TRAX App.
You may come across race organizer or partner websites and channels during your browsing experience in the Rotax TRAX App. The respective race organizers and partner are solely responsible for the data processing that takes place directly on their websites and channels.

Data processing: Rotax TRAX APP

Security

We protect your personal information from unauthorized access, use or disclosure. We ensure that your personal data stored by us is used in a controlled, secure environment that prevents unauthorized access and disclosure. In the Rotax TRAX App there is an optional registration possibility with email address and password. Passwords set during registration are encrypted in our database. In addition, we use pseudonymisation whenever possible (e.g. evaluation of race data in the Rotax TRAX app). 

Access-log-files

Log files are also created and stored in the Rotax TRAX App: IP address, date and time of access, username/email, Driver Score, errors and warnings.
We have a legitimate interest (Art. 6(1) lit. f GDPR) in the technically error-free presentation and optimization of our Rotax TRAX App – for this purpose, the server log files must be collected.
Storage period: 30 days

Account registration, profile and main features

Children under 14 years of age may only use the app with the consent of their parents or legal guardians. The app is recommended for children aged 13 and up.
There are three ways to register and login:
1. registration with your Apple account
2. registration with your Google account
3. registration with username and password

The registration and log-in processing via Apple and Google is based on your consent (Art. 6(1) lit. a GDPR). Your data (e-mail address, for Google additionally: username, language settings, profile picture) will be passed on to us on the basis of your consent in order to provide you with all functions of the Rotax TRAX App. For further information please read the privacy information from Apple and Google.
Your data (e-mail address, username and password, optional foto), which you provide within the third way of registration, is processed on the basis of your consent (Art. 6(1) lit. a GDPR).
All other data – described below – that you provide in the app or that is determined by the central features is processed on the basis of your consent (Art. 6(1) lit. a GDPR). 

• We offer the app in two versions: a free version and a pro version. The pro version is subject to a fee. We do not store any data relating to the purchase of the pro version. We only receive information from the payment provider as to whether a payment could be made or not. This data processing is based on the fulfillment of the contract in accordance with Art. 6(1) lit. b GDPR - we provide you with paid content and features in the Rotax TRAX App.
• In the profile settings, you can provide additional data (age, weight, gender, real name, country) and decide which of the data in your public profile can also be seen by other app users. The following data is visible to all app users (depending of free or pro version): photo (if uploaded), nickname, stats, activities, driver score, your followers and people you are following.
• One of the central features of the app is the improvement of your own driving performance with the help of the physical TRAX device. During your training laps and races, your race data (e.g. race track, date and time, weather conditions, acceleration, distance, time, engine, tyres, ...) is recorded and evaluated . Based on the analyses and recommendations by the Rotax coach, you can use the knowledge gained to improve your performance.
• Another important aspect is the motivation to keep improving. That's why you can compete with other app users and follow them, or other app users can follow you. The central date here is the Driver Score, your rank in the TRAX community. The score is calculated based on your race data (streak, highest max speed, highest acceleration, highest breaking, total distance, total time, …) and is visible to all app users. In addition to the Driver Score, other app users can see the data you have defined in your profile setting.
• You also have the possibility to organise races (challenges) by yourself. You can simply invite other app users by adding them directly to your race, and you can even take part in races to which you have been invited. You also have the option of sharing your races via your social media channels or simply by sharing a link. You can also use the function to display public challenges nearby, provided that you have given your consent for the use of your geodata.

Your account data will remain stored until you delete your account. In the profile settings you have the option to delete your account at any time. In this case your data will be deleted as well. If you only delete the app from your mobile phone, your account data will not be deleted.

Newsletter marketing for own purposes

Data collection for own marketing purposes in the context of registration / login

We store the email address and name you provide during the app registration in our customer and prospect database for marketing purposes. This data will - if you have not objected - be used for the newsletter communication about our events, services and products around Rotax Racing. You have the option to object to this at any time, in each newsletter by using the unsubscribe link or by sending an email to privacy.rotax@brp.com. This data processing is based on our legitimate interest to provide you as a customer or interested party with relevant information about Rotax Racing (Art. 6(1) lit. f GDPR). Your data will be stored until you object or for a maximum of two years after our last contact.

In order to tailor our newsletters to your interests as much as possible, we analyze the behavior of newsletter recipients when browsing in the newsletters and on our website rotax-racing.com. Among other things, we can analyze how many recipients have opened a newsletter and how often which link in the newsletter was clicked. All links in the e-mail are so-called tracking links, which can be used to count your clicks and analyze your website behavior. The data processing is based on your consent (Art. 6(1) lit. a GDPR) to the cookies necessary for such processing (see section "Marketing cookies" in the COOKIE POLICY above).

Communication and information

If you have given your consent (Art. 6(1) lit. a GDPR) for push messages in the Rotax TRAX App, we will provide you continuously with news and information about races, events, invitations and services. The primary purpose of these messages is to keep you up to date before, during and after the races and events directly in the Rotax TRAX App and to inform you about possible changes promptly.

Push messages via Firebase from Google

Push messages that are displayed directly in the Rotax TRAX App are created via Google's US solution "Firebase" and delivered via Google's and Apple's US push providers or Huawei's Chinese providers. Push messages in the Rotax TRAX App will only be displayed with your consent (Art. 6(1) lit. a GDPR). The push messages are created via Google's "Firebase" tool and delivered directly to your mobile phone. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services in Europe.
Where Firebase is used, Google processes personal data like the Mobile Device ID. The processing of the Mobile Device ID is technically necessary, otherwise no push messages can be delivered to your mobile phone.
Data collected through Firebase is stored on Google's own servers distributed around the world. Most servers are located in the United States. Google currently transfers and processes data to/in the United States based on the EU-US Data Privacy Framework (Art 45(1) GDPR) and thus undertakes to largely comply with the European level of data protection when processing your data. You can find details about this here.
Depending on whether you use Google tools (e.g. a Google account), and depending on which Google services you have consented to Google using, Google may combine data collected through the Rotax TRAX App with information Google already has about you and create profiles about you. This enables Google to subsequently offer services and benefits tailored to you.
The storage period depends on the type of data collected and the particular tool used for processing.
Further useful links: Google privacy policy and Terms and conditions


Request by e-mail or forms

If you contact us by e-mail or forms, your inquiry including all resulting personal data (name, contact details, content of the inquiry) will be processed by us for the purpose of dealing with your request. We do not pass on this data to third parties without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to pre-contractual measures or to the performance of a contract between you and us. In all other cases, the processing is based on our legitimate interest in the effective handling of the requests addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), if this has been requested.
Data from inquiries will be stored by us for as long as is necessary to process your request, but for no longer than six months, unless mandatory statutory provisions – in particular statutory retention periods – require longer storage or where it is necessary for the establishment, exercise or defense of legal claims.

Engine registration

In the Rotax TRAX App you have the possibility to register your Rotax kart engine. The following data will be collected and processed by us – and in this particular case also by the distribution partners, who are responsible for your region: Your name, e-mail address, address, country and information about your purchased products. The processing of this data is based on Art. 6(1) lit. b GDPR, the data is necessary for a contract. We store the data for as long as mandatory legal provisions - in particular legal retention periods - require. Additionally, data will be stored where it is necessary for the establishment, exercise or defense of legal claims.

App statistics and usage

We use the service "Matomo Cloud" of InnoCraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand (country with adequacy decision) for app analysis in order to continuously optimize our features. For app analysis, your behavior (e.g.  how long and how often do users interact with the app, which features do they use, how many users download the app, but do not register, etc.) as well as technical performance (e.g. load time, crash rates) are processed. All data that is processed is available to us as aggregated, statistical data. When analysing with Matomo, your data is anonymised so that it can no longer be clearly assigned to you. Data is automatically deleted after a maximum of 365 days. This data processing is based on your consent (Art. 6(1) lit. a GDPR).

Photos and videos at the events and races

During the events, recordings may be made of the visitor area to document the events and the mood of the participants for the interested public. No photographs will be published that depict participants in a way that they might find objectionable. If individual participants are to be separately photographed or interviewed, this will only be done with their consent. For more information, please contact us at privacy.rotax@brp.com or the race organizers.

Gunskirchen, on  2. Dezember 2024

Download as PDF