Privacy Policy

This privacy policy explains how the GPStats.racing website processes the personal data of its visitors.

This policy applies to the website https://gpstats.racing

1. Data Controller

Data controller: Szever Sebastian ev.

Registered address: 2400 Dunaújváros, Váci Mihály u. 5., Hungary

E-mail: info@gpstats.racing

Website: https://gpstats.racing

The data controller has not appointed a dedicated data protection officer.

2. Purpose of the website

The purpose of the GPStats.racing website is to present Formula 1 statistics, race results, championship standings, circuit and team information, and historical data to visitors.

The race and statistical data displayed on the website originate from public sports data sources. On their own, such data do not constitute personal data.

3. Data processed, purposes of processing and legal bases

3.1. Technical logs

While operating the website, the server may record technical log data.

Data processed: IP address, time of the request, requested URL, browser type, technical data relating to the device and operating system, HTTP status codes.

Purpose of processing: secure operation of the website, troubleshooting, prevention of abuse, identification of technical problems, and ensuring the availability of the service.

Legal basis: the data controller's legitimate interest under Article 6(1)(f) GDPR.

The data controller's legitimate interest: the secure and reliable operation of the website, and the detection of unauthorised access, abuse and technical faults.

Retention period: generally no more than 90 days, unless a longer retention period is required to investigate a security incident or abuse.

3.2. Necessary cookies and local storage

The website may use cookies and browser-stored data that are necessary for its operation.

Data processed: technical identifiers related to the browsing session, language/localisation settings, preferences stored in the browser.

Purpose of processing: ensuring the proper functioning of the website, remembering the visitor's settings, providing security and technical functions.

Legal basis: the data controller's legitimate interest under Article 6(1)(f) GDPR.

Retention period: the lifetime of cookies and local storage may vary, typically up to 12 months or until the visitor deletes them.

3.3. Analytics processing

The website uses analytics services to understand website traffic and usage.

Services used: Google Analytics and a self-hosted instance of Matomo.

Data processed: page views, time of visit, device and browser type used, approximate geographic information, visitor interactions, technical identifiers.

Purpose of processing: producing traffic statistics, improving the website, identifying popular content and technical errors.

Legal basis: the data controller's legitimate interest under Article 6(1)(f) GDPR, or, where required by applicable law, the visitor's consent under Article 6(1)(a) GDPR.

3.4. Advertising and marketing processing

Advertisements may appear on the website. To display and measure advertisements, the website may use Google AdSense or other Google advertising services, where this feature is enabled.

Data processed: advertising identifiers, cookies, device and browser data, ad impressions, clicks, and inferences relating to interests, to the extent such data are processed by the service.

Purpose of processing: displaying advertisements, measuring the performance of advertisements, and, where applicable, providing personalised or contextual advertising.

Legal basis: the visitor's consent under Article 6(1)(a) GDPR.

If advertising features are not enabled, the website does not load any advertising-related code.

3.5. Contact requests

If a visitor contacts the data controller by e-mail, the data controller processes the data provided in order to respond to the request.

Data processed: name, e-mail address, content of the message, time of the request, and any further data necessary to provide a response.

Purpose of processing: responding to the request, maintaining contact, and clarifying any subsequent questions.

Legal basis: the data controller's legitimate interest under Article 6(1)(f) GDPR.

Retention period: no more than 2 years after the matter is closed, unless a longer retention period is required for the establishment, exercise or defence of legal claims, or by a legal obligation.

Providing the data required for a contact request is voluntary; however, without an e-mail address the data controller cannot respond to the request.

4. Cookies and similar technologies

The website uses cookies and similar technologies.

Cookies are small data files stored by the browser. Some cookies are necessary for the operation of the website, while others may serve analytics or advertising purposes.

The website may use the following categories of cookies: necessary cookies (legal basis: legitimate interest); analytics cookies — Google Analytics, self-hosted Matomo (legal basis: legitimate interest, or, where required, consent); and marketing/advertising cookies — Google AdSense or other Google advertising services, where active (legal basis: consent).

5. Data processors and service providers

The data controller uses data processors and third-party service providers to operate, secure and develop the website, and to maintain contact with visitors.

5.1. Hosting provider / server operator

The website's hosting and server environment is provided by:

IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Website: https://www.ionos.de

IONOS SE, as a hosting provider / server operator, may qualify as a data processor.

The provider may access technical data related to the operation of the website while serving, operating, maintaining, securing, backing up and troubleshooting it.

Data processed: IP address, server logs, time of the request, requested URL, browser and device data, HTTP status codes, and other technical data necessary for the operation of the website.

Legal basis: the data controller's legitimate interest in the secure and continuous operation of the website.

5.2. E-mail service provider

The e-mail service provider assists in providing e-mail-based contact and messaging.

Data processed: name, e-mail address, content of the message, and technical data related to the delivery of the e-mail.

Purpose of processing: contact, responding to requests, and the forwarding and delivery of messages.

5.3. Google Ireland Limited

Google Ireland Limited assists in providing Google Analytics, as well as Google AdSense or other Google advertising services.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google's services may serve analytics, statistical, ad-serving and ad-measurement purposes.

Google's advertising services are activated only based on the visitor's appropriate consent, where such service is in use.

5.4. Matomo

The website uses a self-hosted Matomo installation to produce traffic statistics.

Matomo is operated on the data controller's own server, not as an external Matomo Cloud service.

As part of analytics processing, Matomo processes page views, visit data, device and browser data, and statistical data.

Data processors may only process personal data in accordance with the data controller's instructions and to the extent necessary for the performance of the service.

6. Transfer of data to third countries

In the case of certain third-party service providers, in particular Google's services, personal data may be transferred to, or processed outside of, the European Economic Area.

In such cases, the transfer takes place based on safeguards compliant with applicable data protection rules, such as an adequacy decision of the European Commission, the EU–US Data Privacy Framework, or standard contractual clauses.

The website's hosting provider, IONOS SE, operates in Germany. Hosting services provided by IONOS SE are typically processed within the European Economic Area.

For the self-hosted Matomo instance, analytics data are processed on the data controller's own server.

7. Rights of data subjects

Visitors have the following rights in connection with the processing of their data:

Right of access: the right to request information on whether the data controller processes personal data about them and, if so, what data.

Right to rectification: the right to request the correction of inaccurate or incomplete personal data.

Right to erasure: the right to request the deletion of their personal data where the conditions for processing no longer apply.

Right to restriction of processing: the right to request the restriction of processing in certain cases.

Right to object: the right to object to processing based on legitimate interest.

Right to data portability: in the case of automated processing based on consent or a contract, the right to request the data in a machine-readable format.

Right to withdraw consent: where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Requests to exercise data subject rights may be submitted to the following e-mail address: info@gpstats.racing

The data controller will respond to the request without undue delay, and no later than within 1 month. Where necessary, this period may be extended in accordance with the rules of the GDPR.

8. Lodging a complaint

If a visitor believes that the processing of their personal data is unlawful, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

National Authority for Data Protection and Freedom of Information (NAIH). Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary. Postal address: 1363 Budapest, Pf. 9., Hungary. Website: https://www.naih.hu E-mail: ugyfelszolgalat@naih.hu

Visitors residing in another Member State of the European Economic Area may also contact the supervisory authority of their own place of residence.

Visitors may also bring proceedings before a court to enforce their rights.

9. Data security

The data controller protects the personal data it processes with appropriate technical and organisational measures.

Such measures include, in particular: the use of an HTTPS connection, restriction of access, regular updates, logging, access management, backups, and the deletion or limited-time retention of unnecessary data.

The technical and organisational measures of the hosting provider, IONOS SE, also contribute to the secure and continuous operation of the website.

10. Automated decision-making

The data controller does not apply automated decision-making or profiling that would produce legal effects concerning the visitor or similarly significantly affect them.

Advertising service providers may carry out automated operations related to ad serving within their own systems, where the visitor has consented to this.

11. Mandatory or voluntary provision of data

No registration is required to browse the website.

The processing of technical data is necessary for the operation of the website.

Providing the data required for a contact request is voluntary; however, a working e-mail address is required to receive a response.

Advertising-related processing is based on voluntary consent, and if it is declined, the core functions of the website remain usable.

12. Amendments to this policy

The data controller reserves the right to amend this privacy policy.

The version in force at any given time is available on the website.

In the event of a material change, the data controller may provide appropriate notice to visitors through the website.