1. Who we are

This privacy statement applies to the processing of personal data by:
GrandPrix Camp BV
Email: office@grandprix.camp
Website: https://grandprix.camp

2. What personal data we collect and why
a. Comments
When visitors leave comments on our website, we collect the data entered in the comment form, the
visitor’s IP address, and the browser user agent string to help detect spam.
An anonymized string (hash) based on the email address may be provided to the Gravatar service.
See the Gravatar privacy policy: https://automattic.com/privacy/
b. Media
If you upload images to the website, please avoid including location data (EXIF GPS). Visitors can
extract this information from images on the website.
c. Contact forms
If you use a contact form, we process the information you provide (e.g. name, email address,
message) to handle your inquiry.
d. Cookies
We use cookies to enhance user experience and enable login functionality. For details, refer to our
cookie statement.
e. Bookings and payments
When you make a booking through our website, we collect the following data:
– Name, address, city
– Email address and phone number
– Payment details (processed via a third-party provider)
– Booking details and preferences
These data are processed solely for the execution of the agreement and delivery of our services.
f. Embedded content
Articles on this site may contain embedded content (e.g. videos, images, articles). Embedded
content behaves as if the visitor had visited the source website directly.
g. Analytics
We use analytics tools to monitor website usage. Where possible, personal data are anonymized.

2a. Legal grounds for processing
We process personal data only on one or more of the following legal bases:
– Your explicit consent
– Performance of a contract
– Legal obligation
– Legitimate interest (e.g. security or analytics)

3. Who we share your data with
We share your data only with third parties when necessary for our services (e.g. hosting, payment
processing, spam detection). These parties are bound by processor agreements in accordance with
the GDPR.

4. Data transfer outside the EU
When we use services from providers outside the EEA (such as Google or Mailchimp), we ensure
that data transfers are subject to appropriate safeguards, such as Standard Contractual Clauses
(SCCs).

5. How long we retain your data
Comments and related metadata are retained indefinitely.
For registered users, we retain profile data as long as the account remains active.

6. Your rights
You have the right to access, correct, delete, and export your personal data. You may also object to
certain types of processing.

7. Where your data is sent
Visitor comments may be checked through an automated spam detection service.

8. How we protect your data
We implement appropriate technical and organizational measures to protect your personal data
from loss, misuse, or unauthorized access.

9. Data breach procedures
In the event of a data breach, we document the incident, assess the risk, and notify the Dutch Data
Protection Authority (Autoriteit Persoonsgegevens) and/or affected individuals if required.

10. Data received from third parties
We may receive data from third-party services such as payment providers or analytics tools to
support our operations.

11. Automated decision-making
We do not engage in automated decision-making that has legal or similarly significant effects.

12. Legal obligations
We comply with all applicable legal obligations regarding privacy and data protection.

Drafted in 2024 by GrandPrix Camp BV, established in Rotterdam.