Privacy policy

1. Who is responsible for your data?

NXT GP is the controller of the personal data collected through this registration module.

Evenyo provides the platform and processes the data as a processor on behalf of NXT GP. This is laid down in a data processing agreement.

Do you have questions about this privacy policy or about your data? Contact us at [email protected].

2. Which data do we process?

We only process data that you enter yourself or that results from your use of the registration module:

• Account data: first name, last name, address, postal code, city, country, email address, phone number, date of birth and language preference.
• Participation data: category, engine type, start number, transponder number, licences and your registrations for events and seasons.
• Orders: extra products and transponders you buy or rent, including any deposit.
• Payment data: amount, payment method, payment status, payment reference and any notes you add to the payment. We do not store bank account or credit card details.
• Guest registrations: the fields you complete in the registration form, your email address, your IP address and browser type.
• Communication: the messages and updates we send you, whether an email was delivered, opened or clicked, and your notification preferences.
• Login data: one-time login codes sent to your email address and technical session data.

We do not ask for special categories of personal data, such as health data. Please do not enter these in notes or free-text fields.

3. What do we use your data for?

We use your data for the following purposes. The legal basis is shown in brackets.

• Creating and managing your account and processing your registrations, licences and orders (performance of a contract).
• Handling payments, refunds and deposits (performance of a contract).
• Organising events, such as assigning categories, timekeeping and drawing up participant lists (performance of a contract and legitimate interest).
• Sending confirmations and important messages about events you registered for (performance of a contract).
• Sending updates and push notifications. You can switch these off in your profile (legitimate interest or consent).
• Preventing abuse and fraud and securing the platform (legitimate interest).
• Complying with legal obligations, such as tax record keeping (legal obligation).

4. Public participant list

Each event has a participant list that is visible to anyone who visits the page. It shows your first name, last name, category and start number.

Other data, such as your address, email address, phone number and date of birth, is never shown publicly. If you object to being listed, contact us at [email protected].

5. Who do we share your data with?

We do not sell your data. We only share data with parties that are needed to provide the service:

• Evenyo, as the provider of the registration platform and hosting.
• Mollie, for handling online payments.
• Mailgun, for sending emails.
• Google Firebase, for sending push notifications if you use the app.
• Sports federations, timekeepers or other organisers, as far as needed for your participation or licence.
• Public authorities, if we are legally required to do so.

Some of these parties process data outside the European Economic Area. In that case appropriate safeguards apply, such as the standard contractual clauses of the European Commission.

6. How long do we keep your data?

We do not keep your data longer than needed for the purposes for which it was collected:

• Account data: as long as your account is active and up to two years after your last registration or login.
• Registrations and results: up to two years after the end of the season.
• Payment and invoice data: seven years, because of tax record keeping obligations.
• Guest registrations, including IP address and browser data: up to one year after the event.
• One-time login codes: these expire automatically after a short time.

7. Cookies

The registration module only uses functional cookies. These are needed to keep you logged in, remember your language preference and secure forms.

We do not use tracking or advertising cookies. During payment, Mollie may place its own cookies. Mollie's privacy policy applies to those.

8. Minors

Are you under 16? Then you may only register with the consent of a parent or legal guardian. A parent licence may also be required for underage participants.

9. How do we protect your data?

We take appropriate technical and organisational measures to protect your data. Connections are encrypted, logging in is done with a one-time code and only authorised administrators have access to your data. The data of each organisation is stored in its own separate database.

10. What are your rights?

You have the right to:

• access your data and request a copy;
• have incorrect data corrected. You can change much of your data yourself in your profile;
• have your data erased;
• restrict the processing or object to it;
• have your data transferred to another party;
• withdraw any consent you have given at any time.

Send your request to [email protected]. We will respond within one month. To prevent abuse we may ask you to identify yourself.

Are you not satisfied with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl, or with the supervisory authority in your own country.

11. Changes

We may change this privacy policy, for example when the registration module changes. The most recent version is always available on this page. We will inform you by email about important changes.