Privacy Policy

1. Who we are

This privacy statement applies to the processing of personal data by:
GrandPrix Camp BV
Email: office@grandprix.camp
Website: https://grandprix.camp

2. What personal data we collect and why

a. Comments
When visitors leave comments on our website, we collect the data entered in the comment form, the visitor’s IP address, and the browser user agent string to help detect spam.
An anonymized string (hash) based on the email address may be provided to the Gravatar service. See the Gravatar privacy policy: https://automattic.com/privacy/

b. Media
If you upload images to the website, please avoid including location data (EXIF GPS). Visitors can extract this information from images on the website.

c. Contact forms
If you use a contact form, we process the information you provide (e.g. name, email address,
message) to handle your inquiry.

d. Cookies
We use cookies to enhance user experience and enable login functionality. For details, refer to our cookie statement.

e. Bookings and payments
When you make a booking through our website, we collect the following data:

Name, address, city
Email address and phone number
Payment details (processed via a third-party provider)
Booking details and preferences

These data are processed solely for the execution of the agreement and delivery of our services.

f. Embedded content
Articles on this site may contain embedded content (e.g. videos, images, articles). Embedded
content behaves as if the visitor had visited the source website directly.

g. Analytics
We use analytics tools to monitor website usage. Where possible, personal data are anonymized.

2a. Legal grounds for processing
We process personal data only on one or more of the following legal bases:

Your explicit consent
Performance of a contract
Legal obligation
Legitimate interest (e.g. security or analytics)

3. Who we share your data with
We share your data only with third parties when necessary for our services (e.g. hosting, payment processing, spam detection). These parties are bound by processor agreements in accordance with the GDPR.

4. Data transfer outside the EU
When we use services from providers outside the EEA (such as Google or Mailchimp), we ensure that data transfers are subject to appropriate safeguards, such as Standard Contractual Clauses (SCCs).

5. How long we retain your data
Comments and related metadata are retained indefinitely.
For registered users, we retain profile data as long as the account remains active.

6. Your rights
You have the right to access, correct, delete, and export your personal data. You may also object to certain types of processing.

7. Where your data is sent
Visitor comments may be checked through an automated spam detection service.

8. How we protect your data
We implement appropriate technical and organizational measures to protect your personal data
from loss, misuse, or unauthorized access.

9. Data breach procedures
In the event of a data breach, we document the incident, assess the risk, and notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and/or affected individuals if required.

10. Data received from third parties
We may receive data from third-party services such as payment providers or analytics tools to
support our operations.

11. Automated decision-making
We do not engage in automated decision-making that has legal or similarly significant effects.

12. Legal obligations
We comply with all applicable legal obligations regarding privacy and data protection.

Drafted in 2024 by GrandPrix Camp BV, established in Rotterdam.