Privacy statement

Most recently amended: 19-03-19

Basic principles

The terms that are used in this privacy statement and are defined in the General Data Protection Regulation (GDPR) have the meaning allocated to them in the GDPR.
We only use personal data for the purposes defined in this privacy statement (grounds). This is lawful and transparent.
We formulate our privacy statement in clear language and do not try to hide information. We are also clear about which data we process and how we do it. This is well-defined and clear.
We only process the personal data we really need. This is data minimisation.
We are happy to work with you to ensure that the data we process is always correct and up-to-date. This is the correctness of the data.
We do not store the data any longer than is necessary to achieve the purposes for which your data is collected. This is the retention period.
We never share personal data with other parties inside or outside the EU without good reason. We also ensure proper security of personal data by taking many technical and organisational measures. When we share your personal data with third parties, we explicitly state this. Road Race Travel will only share your personal data with third parties with your permission, if this is necessary for the performance of the agreement or to comply with a legal obligation. We conclude a processing agreement with parties that process your data during our assignment to ensure the same level of security and confidentiality of your data. Road Race Travel remains responsible for these processing operations. This is to ensure the integrity and security of the data.

Personal data processed by us

Below you will find an overview of the personal data, purposes, grounds and retention periods we process per category. We also indicate per category with whom your data is shared.

Customer data

Personal data and purposes:

[Adjust the data below on the basis of your situation.]
Name and address (first name, last name, address, postcode, place, country)
To perform the agreement, invoicing, identification, maintain the customer relationship and perform direct marketing activities.
Contact and additional personal data (email address, telephone number, gender)
To communicate with each other, address you correctly, provide support, inform you about changes in products/services and perform direct marketing activities.
Payment details (bank account number, VAT number)
To process your payment and for the VAT transfer if your company is located outside the Netherlands.

Grounds (legal basis) for the processing:
Necessary for the performance of the agreement ( click here for more information ).
The performance of direct marketing activities (we send you offers of similar products or services or tips about the purchased products or services) falls under “justified interest” ( click here for more information ).

Retention period:
[For instance “Within one month after termination of the agreement” ( click here for more information ).]
We will retain your invoices for the statutory retention period.

Whom is your data shared with:
[Add the names of the recipients ( provide additional information if they are located outside the EU ) and indicate that you have concluded a processing agreement with them. Examples of this are your (software) suppliers, such as the supplier of accounting software. TIP: Look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

Data of webshop visitors

Road Race Travel uses cookies. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone during the first visit to this webshop. You can change your cookie preferences by following these instructions . In addition to cookies, this webshop contains one or more web forms in which personal data is processed.

Functional cookies

Personal data and purposes:
Road Race Travel only uses cookies for functionality purposes. These cookies ensure that the webshop works properly and that, for example, your choices and preferences are remembered.

Grounds (legal basis) for the processing:
Justified interest ( click here for more information ).

Retention period:
1 year

With whom will your data be shared:
We are the only ones who receive this data.

Analysis cookies

Personal data and purposes:
When you visit this webshop we process your (anonymised*) IP address in our statistics to gain insight into the functioning of our webshop and to improve it. * = For this processing we anonymise your IP address before it is processed by Google Analytics statistics software. As a result, it is no longer personal data.

Grounds (legal basis) for the processing:
Justified interest ( click here for more information ).

Retention period:
We have set the maximum retention period of Google Analytics cookies at 26 months.

With whom will your data be shared:
With us and Google. We have set the Google Analytics cookies in a privacy-friendly manner in accordance with the 'Manual for the Privacy-Friendly Setting of Google Analytics' as provided by the Dutch Data Protection Authority. In regard to Google Analytics cookies, this means that Road Race Travel (i) has concluded a processing agreement with Google, (ii) masks the last octet of your IP address, (iii) has disabled 'data sharing' so Google cannot process the personal data obtained for its own purposes (Google can only use it for technical support) and iv) does not use other Google services in conjunction with Google unless otherwise specified in the 'Marketing & tracking cookies' section. For more information, read Google's privacy policy , as well as the specific privacy policy of Google Analytics .

Marketing & tracking cookies

Personal data and purposes:
When you visit this webshop we and third parties use techniques (e.g. cookies in which your IP address is recorded) so we can recognize you:

to adjust our promotions and content to your interests (personalisation);
to show you embedded content such as videos (* Vimeo and/or YouTube );
to show you social media sharing options and widgets (* Facebook , Twitter , LinkedIn , Google+ , Pinterest and others);
to make interesting offers to you on advertising networks ( Facebook , Twitter , LinkedIn , Google , and others).

* = You can make your privacy wishes known via the webshops of these parties. Click on the links in the list shown above to view the privacy policy of the relevant party.

Grounds (legal basis) for the processing:
Your permission ( click here for more information ). On your first visit to our webshop we already informed you about these cookies via our cookie notification:

This webshop uses both functional and analytical cookies to ensure optimal user experience. Road Race Travel and third parties place marketing and tracking cookies so we can recognize you. Please see our privacy statement for more information.

By closing this notification or by continuing to use our webshop we will know that you give us permission to do this. You can change your cookie preferences by following these instructions .

You can withdraw your permission by following these instructions .

Retention period:
As long as we have your permission.

With whom will your data be shared:
Cookies from third parties are also placed via our webshop. The use of cookies by other companies is governed by the privacy and cookie policy of the companies concerned. If you disclose your information to other third parties or to other webshops on the internet, other rules may apply to their use or to the disclosure of the information you have provided to them. That is why we encourage you to read the privacy and cookie policy of all external parties to which you provide information. Please note that their policy may change regularly. Road Race Travel has no control over this. Where applicable, we have entered into a processing agreement with a party, for example when we share your personal data in response to an advertising campaign.

Web forms

Personal data and purposes:
For example, you can contact us via a web form. Each web form has one clear purpose and if a form includes an additional purpose (for example registering for the newsletter), we will ask for additional permission. By completing the form, you give us permission to process the requested personal data. We will mainly use name and address details, telephone number and an email address for this purpose.

Grounds (legal basis) for the processing:
Permission given by completing the form or checking a box to give permission for an additional purpose ( click here for more information ). You can withdraw your permission sending a notification via the relevant web form or by sending an email to info@roadracetravel.nl.

Retention period:
[We will retain the data until we are sure you are satisfied with our response.] If the contact results in an order we will retain the data [e.g. “until not later than one month after termination of the agreement” ( click here for more information )]. We will retain your invoices for the statutory retention period.

With whom will your data be shared:
With us and with GraagGoedOnline.nl B.V., our online supplier. We have concluded a processing agreement with GraagGoedOnline.nl B.V. ( click here for more information ). [Add the names of any other recipients ( provide additional information if they are located outside the EU ) and indicate that you have concluded a processing agreement with them. TIP: Look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

[Newsletter (subscription form) → completely remove this item or add what applies to you.]

Personal data and purposes:

Name
Because we would like to address you by your name in our emails.
Email address
So we can send you interesting emails.
[Other information; PLEASE NOTE that this must fit the purpose and that you must minimise the requested data to be able to achieve this purpose.]

We will send you a maximum of 1 newsletter per [day/week/2 weeks/month].

Grounds (legal basis) for the processing:
Your permission ( click here for more information ). You can withdraw your permission by using the link at the bottom of each email we send.

Retention period:
Until you withdraw your permission.

With whom will your data be shared:
With us and [name of newsletter provider] our newsletter provider. We have concluded a processing agreement with [name of newsletter provider (insert a link here to the privacy statement of the newsletter provider e.g. https://mailchimp.com/legal/privacy )]. [Add the names of any other recipients ( provide additional information if they are located outside the EU ) and indicate that you have concluded a processing agreement with them. Also conclude a processing agreement with your newsletter provider ( click here for an example of MailChimp)! TIP: Look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

[Specific form X → completely remove this item or add what applies to you.]

Personal data and purposes:
[List of personal data and purposes. TIP: look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

Grounds (legal basis) for the processing:
[Grounds] ( click here for more information ).

Retention period:
[Retention period.]

With whom will your data be shared:
[Add the names of the recipients ( provide additional information if they are located outside the EU ) and indicate that you have concluded a processing agreement with them. TIP: Look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

[Data of category X ? completely remove this item or add what applies to you.]

Personal data and purposes:
[List of personal data and purposes. TIP: Look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

Grounds (legal basis) for the processing:
[Grounds] ( click here for more information ).

Retention period:
[Retention period.]

Special and-or sensitive personal data processed by us

Our webshop and services do not intend to collect data about visitors who are younger than 16 years, unless they have permission from their parents or guardians. However, we cannot check whether or not a visitor is 16 years or older. We therefore encourage parents to be involved in the online activities of their children in order to prevent data about children being collected without parental consent. If you are convinced that we have collected personal data about a minor without such permission, please contact us via info@roadracetravel.nl , and we will delete this information.

[ View this link for an overview of other special and/or sensitive personal data and assess whether you are processing it. If so, supplement the following texts; If not, completely delete these and the following texts (up to and including "With whom will your data be shared:") but leave the text above "Our webshop/web shop and/or service does not have the intention to ..." if applicable.]

Personal data and purposes:
Road Race Travel processes the following special and/or sensitive personal data about you:

[List.]

Grounds (legal basis) for the processing:
[Grounds] ( click here for more information ).

Retention period:
[Retention period.]

Who are your data shared with:
[Add the names of the recipients ( provide additional information if they are located outside the EU ) and indicate that you have concluded a processing agreement with them. TIP: Look at the texts of the other categories of this privacy statement or go to https://ikwil.graaggoedonline.nl/privacy statement .]

Automated decision-making

Road Race Travel [decides/does not decide] on matters that may have (significant) consequences for people on the basis of automated processing operations. These are decisions made by computer programs or systems without the intervention of a person (for example, an employee of Road Race Travel).

[If so: Road Race Travel uses the following computer programs or systems:]

[Insert name of the system, why it is used, underlying logic, interest and expected consequences for the person involved (your customer/webshop visitor).]

Viewing, correcting or removing data

You have the right to view your personal data and to correct or remove it. You also have the right to withdraw your permission for the data processing or to object to the processing of your personal data by Road Race Travel and you have the right to data portability. This means that you can submit a request to us to send the personal data we have about you in a computer file to another organisation specified by you.

You can send a request for inspection, correction, deletion, data transfer of your personal data or a notification of the withdrawal of your permission or objection to the processing of your personal data to info@roadracetravel.nl. To ensure that the request for access has been submitted by you, we ask you to send a copy of your ID with the request. Mark your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number in black on this copy to protect your privacy.

We will respond to your request as soon as possible, but within four weeks. Road Race Travel also wants to point out that you have the option to file a complaint with the national regulator, the Dutch Data Protection Authority. If you have a complaint about how we or our sub-processors treat your personal data, we ask you to discuss this with us first, so we can see if we can resolve or adjust this to your satisfaction. If we are unable to resolve it that way, you can always file a complaint with the regulator.

How we protect personal data

Road Race Travel takes the protection of your data seriously and takes appropriate measures to prevent abuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. If you feel that, in spite of this, your data is not properly protected or if there are indications of abuse, please contact us via info@roadracetravel.nl.

We, as well as our suppliers (processors) will endeavour to take the appropriate technical and organisational measures with regard to the security of personal data. We do not guarantee that the security is effective under all circumstances. We will make every effort to ensure that the security meets a level that is not unreasonable in view of the state of the art, the sensitivity of the personal data and the costs associated with the security.

Changes to this privacy statement

Road Race Travel reserves the right to make changes to this privacy statement. Changes will be published on this webshop. Please check this privacy statement regularly so you are aware of any changes. The latest version is available in the "Most recently amended" section. If you continue to use our webshop after the last change, this means that you acknowledge the changes to this privacy statement, that you approve them and that you agree with the change(s).