Data Privacy Policy
This Privacy Policy informs you about the processing of your personal data in connection with the use of this website and the functionalities provided for this purpose, such as the opportunity to contact us.
1. Controller and Data Protection Officer
This website is operated by onGRID Sports Technology GmbH, with its business address at Krausenstr. 9-10, 10117 Berlin, Germany (” onGRID”). onGRID is responsible for the processing of your personal data. For any question about it consulting@datenschutzexperte.de can be contacted by email.
2. Categories of Personal Data, Purpose of Data Processing, Legal Basis, and Data Retention per onGRID’s Services Available on its Website
2.1 Website Visit
2.1.1
onGRID processes Log data , such as your IP address, including details of website requests, such as date and time, status and amount of data transferred, information about the browser you are using (browser type and version number), and information about the website that forwarded you to our website when you visit our website. onGRID stores this data in a log file every time our website is visited. Without further information, such as information from an Internet service provider about the Internet subscriber, which onGRID usually only receives in cases of a suspected material violation of the law, onGRID is generally unable to assign log data to individual, identifiable persons.
2.1.2
onGRID sets Cookies to extend the functionality of the website and to make it easier for you to use the website. These are small text files that are stored on your computer as soon as you access our website and save certain settings and data for exchange with our system via your browser. A cookie regularly contains the name of the domain from which the cookie was sent as well as information about the age of the cookie and an alphanumeric identifier. Most of the cookies used by onGRID are deleted from your hard drive once you end your browser session (session cookies). In addition, onGRID uses so-called persistent cookies, which remain on your device to recognize you on your next visit to the website and make any default settings available again. The usage data collected by means of a cookie (default settings to speed up your web request) will not be merged with your personal data. Your usage data will receive a cookie ID that will not be matched with your IP address or similar data, so it will not be attributed to you. You have the option to prevent the storage of cookies on your device by changing the settings in your browser.
2.1.3
Your personal data will be processed for the purpose of enabling you to use the website. In addition, we process your personal data to prevent and correct malfunctions of the website as well as to optimize the user journey. The legal basis for this processing is an agreement concerning the use of our website and our legitimate interest in its trouble-free operation pursuant to Art. 6 para. 1 b) and Art. 6 para. 1 f) of the General Data Protection Regulation (” GDPR”).
2.1.4
Log Data is deleted as soon as the purpose of the processing no longer exists.
2.1.5
Cookies of onGRID’s website are deleted after 30 days.
2.1.6
Cookies from Google Analytics, Social-Media Plugins. Further information on these services and how they process your personal data can be found below under Section 4. For the legal and processing purposes of the services provided by Google Analytics, described under Section 2.1 , please refer to Section 4. Please refer to the links provided under Section** 4** for further information on the deletion of cookies used by our business partners.
2.2 User Registration
2.2.1
The following categories of data are processed by onGRID when you register for our service as a user for a User Account on our website:
First and last name, address, telephone number, email address, driver license data, emergency contact and password. Once you are registered, you provide onGRID with your role, i.e. whether you register as race driver , team manager , race organizer , legal guardian of a minor , and/or vehicle owner ; subject to your role, you provide onGRID with your race license which then enables you to register for races and/or series. In addition you provide us with your language, social links, nationality and when relevant invoice data. You may also upload a picture of yourself and enter your personal address. onGRID processes all this personal data about when you register for and create a User Account. In order to create an account, onGRID uses the double opt in method: This means that we send you an email to the email address entered in which we ask you to confirm your registratio. Registered users have the option, at any time and if necessary, to change or delete the data they provide at registration, however, in such case you may no longer be able to participate in onGRID services.
In order to ensure the security of your data during transmission and at rest, we use SSL encryption.
2.2.2
If you register on our website for a User Account, we will process your personal data in order to provide onGRID’s user services to you. The legal basis for this processing is Art. 6 para. 1 b) GDPR, i.e. the user agreement entered with you. If you upload a picture of yourself to the User Account, the picture may contain references to your ethical origin, religion or health (e.g. skin color, headcovering, glasses), or references to biometric data that allow clear identification (so-called special categories of personal data), for example based on the shape of your face; in such case, the legal basis to process your picture is your consent pursuant to Art. 6 para. 1 a) and Art. 9 para. 2) a) GDPR and your consent refers to said information. Please note that information on the Internet is accessible worldwide and can be easily copied and distributed. This may mean that information published on the Internet can still be found elsewhere even after it has been deleted.
2.2.3
User Account: Your personal data will be retained for as long as you are registered with onGRID and deleted once you have deleted your user account
If you have registered for a User Account and pay fees, onGRID will retain your personal data for the duration of the contract. Upon expiration of the contract, we are legally obligated to retain your personal data for a period of six or ten years to comply with bookkeeping requirements pursuant to Section 257 of the German Commercial Code and Section 147 of the German Tax Code. This particularly concerns personal data contained in payment slips.
2.3 Contact Form
2.3.1
The following categories of data are processed by onGRID when you contact us via our contact form:
First and last name, e-mail address, company name, and your request are collected by onGRID if you contact us. If you also provide us with your telephone number , we also collect this information, provided that you have given your consent.
2.3.2
We process your personal data in order to answer your request properly if you contact us via the contact form on our website. The legal basis is Art. 6 para. 1 b) GDPR. We process your personal data in accordance with Art. 6 para. 1 a) GDPR if you have provided us with your phone number and further details and have given your consent in this regard.
2.3.3
onGRID retains your personal data so long as it is necessary to answer your inquiry and deletes your data once your inquiry is resolved.
3. Transfer and Recipient of your Personal Data
3.1
Except for the data described in Section 4, all information obtained through your visit to our website is stored on servers within the European Union.
3.2
Personal data obtained in connection with your visit to our website is only accessible to onGRID employees, who are responsible for the technical administration, maintenance, and further development of the website. In addition, onGRIDs website is hosted by a service provider, whose employees may receive access to your personal data. This may be the case whenever IT maintenance and similar services are provided for the website. onGRID has entered into a data processing agreement with its hosting provider.
3.3
If you register on our website for a User Account onGRID’s employees, who are responsible for customer service matters receive access to your personal data. In addition and where applicable, onGRID employees entrusted with bookkeeping and banking matters receive access your personal data. In such case, employees of banks and credit card companies may also receive access to your personal data.
3.4
If you contact us, onGRID employees responsible for inquiries receives access to your personal data.
3.5
onGRID employs external IT service providers to maintain its IT systems, which may gain access to your personal data as part of their job description. Similarly, employees of business partners, as described in Section 4 may access your personal data. If there is a transfer of personal data to a third country, such as the United States of America, we have concluded contracts with such partners for such transfer.
In addition, onGRID does not transfer your personal data to any third parties, unless you have consented to this processing or we are entitled or obligated to such a data transfer because of a legal, administrative and/or court order. In such cases, for example, this may concern information that is provided for the purposes of law enforcement, security or the enforcement of intellectual property rights.
4. Google Analytics and Google AdSense
4.1 Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, hereafter “Google”, located at Gordon House Barrow Street Dublin 4 Ireland VAT IE 6388047V (https://www.google.com/intl/en/about/), for the purpose of designing and continually optimizing our sites. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie includes Browser type/version, user operating system, Referrer URL (the previously visited page), host name of the accessing computer (IP address), and time of server request.
This information is transmitted to a Google server in the U.S. and stored there. The information is used to evaluate the use of the website for reports, create reports about the website activities and providing other services connected with the use of the website and the internet for the purposes of market research and need-based design of these websites. This information is also transferred to third parties, e.g., YouTube and other Google services. Your IP address will be merged with other data from Google to create a broader user picture. Google also uses your gathered information for its own purposes. IP addresses are anonymized, so that an assignment is not possible (IP masking). You may refuse the use of cookies by a corresponding feature of your browser; however, if this is done, not all features of this website may be fully available. Legal basis for this processing is your consent pursuant to Art 6 para 1 lit a) GDPR. You may also use a browser add-on to prevent your data from being used by Google. If you want to opt-out, download and install a Google Analytics Opt-out Browser Add-on. A version for browsers on mobile devices may also be available. This will install an opt-out cookie which will block the future collection of your information. The opt-out cookie may only be valid on certain browsers and is stored on your device. If you delete the cookies in your browser, you may need to install the opt-out cookie again.For more information about privacy in connection with Google Analytics, see the Google Analytics website. onGRID has entered into a data processing agreement with Google into which EU standard contractual clauses are incorporated. You have the right to receive a copy of these EU standard contractual clauses. If you wish to receive such copy, please contact data@myongrid.com.
4.2 Google AdSense
We use Google AdSense, a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to embed advertisements. Google AdSense uses cookies and web beacons. Web beacons are non-visible graphics that allow Google to analyze clicks on this website, traffic and similar information. The information obtained via cookies and web beacons, your IP address and the delivery of advertising formats are transmitted to a Google server located in the USA and stored there. Google may share this information with third parties if required by law or if Google instructs third parties to process the data. However, Google will merge your IP address with the other stored data.
By adjusting appropriate settings on your Internet browser, you can prevent the aforementioned cookies from being stored on your device. However, this may mean that the contents of this website can no longer be used. Legal basis for this processing is your consent pursuant to Art 6 para 1 lit a) GDPR. onGRID has entered into a data processing agreement with Google into which EU standard contractual clauses are incorporated. You have the right to receive a copy of these EU standard contractual clauses. If you wish to receive such copy, please contact data@myongrid.com.
5. Statutory and Contractual Requirements
You may choose not to provide us with personal data or to provide incomplete data. In such cases, for example, if you block cookies, you may not be able to use all functions offered on our website or other services offered as a result. No Automated Decision-making or Profiling.
Except for the data processing described under Section 4, which is also used for profiling, we do not use your personal data for automated decision-making or profiling.
6. Websites of Third Parties
This website may contain hyperlinks to and from other websites of third parties. If you use one of these hyperlinks, we are unable to assume any responsibility or liability for the content of third parties or compliance with data protection law.
7. Amendment of this Data Privacy Policy
onGRID reserves the right to amend this Data Privacy Policy at any time with effect for the future. The current version is available on the website. Please check the applicable data privacy policy on a regular basis.
8. Your Rights
You may contact us in writing or via email at data@myongrid.com to exercise the following rights to the extent provided by law:
- Right to access to your personal data to check and verify this data.
- Right to receive a copy of your personal data.
- Right to request that we complete, correct, or delete your personal data, or refrain from or restrict the collection, processing, or disclosure of your personal data; this also includes the right to have incomplete or incorrect data rectified by supplementary information.
- Right to object to the processing of your personal data whenever the basis of the processing is our legitimate interest pursuant to Art. 6 para. 1f) GDPR.
- You can request to receive your personal data in a structured, common, and machine-readable format and, if you have acquired the corresponding intellectual property rights or other rights required, have this data transferred to another controller as long as you have consented to the processing, or the processing is necessary in order to fulfill a contractual relationship with you or for the execution of pre-contractual measures.
In addition, you have a right to file a complaint with the regulatory authorities in connection with the processing of your personal data. You can direct your complaint to the regulatory authority responsible for your place of residence or competent for onGRID’s place of business.