Privacy Policy
1. Introduction
At Gauloises Racing (accessible via gauloisesracing.com), we take your privacy seriously. We are committed to safeguarding your personal data and upholding your rights under applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information. Our practices are designed with a privacy-first philosophy that ensures transparency, security, and respect for your personal data.
2. Scope of this Policy and Data Controller Role
This Privacy Policy applies to all users who interact with gauloisesracing.com, including visitors, registered users, and purchasers. Gauloises Racing is the data controller responsible for determining the purposes and means of processing your personal data. If you have any questions or concerns about our data practices, please contact us at [email protected].
3. Categories of Data We Process
We may collect and process the following categories of personal data:
a) Usage Data
We collect data related to how you interact with our website. This may include your IP address, browser type, pages visited, timestamps of visits, referring URLs, and session duration. This data helps us understand user behavior and enhance user experience.
b) Account Data
When you create an account on gauloisesracing.com, we collect your name, email address, postal address, and phone number.
c) Profile Data
Profile data may include your preferences, purchase history, behavior patterns, and any interests you express while using the website.
d) Communication Data
This includes data you submit through contact forms, customer service inquiries, chat communications, email correspondences, and other support-related interactions.
e) Technical Data
We may collect technical details about the devices you use to access our site, including device identifiers, operating systems, browser settings, and system configurations.
f) Transaction Data
If you purchase products or services through gauloisesracing.com, we collect data necessary to process those transactions, such as payment details (processed securely through third-party providers), delivery address, and order history.
g) Preference Data
To offer you a more tailored experience, we may collect marketing and communication preferences, as well as information concerning your interest in specific products, services, or features.
4. Legal Bases for Processing Personal Data
We process your personal information based on one or more of the following legal grounds:
– Legitimate Interests: To improve our services, prevent fraud, and secure our online platform.
– Contractual Necessity: To fulfill our obligations when delivering products or services you have requested or purchased.
– Legal Compliance: To meet statutory obligations.
– Consent: Where we rely on your explicit consent, such as for marketing communications or non-essential cookies, you have the right to withdraw consent at any time.
5. Your Rights Under Applicable Law
Under the GDPR and CCPA (where applicable), you may exercise the following rights concerning your personal data:
– Right of Access: Request confirmation and access to your personal data.
– Right to Rectification: Request correction of inaccurate or incomplete data.
– Right to Erasure: Request deletion of your personal data where legally permissible.
– Right to Restriction: Request that we restrict the processing of your personal data under certain conditions.
– Right to Data Portability: Receive your data in a structured, machine-readable format for transfer to another controller.
– Right to Object: Object to processing based on our legitimate interests or for direct marketing.
– Right to Non-Discrimination: Under CCPA, you have the right to receive equal service and not be discriminated against for exercising your privacy rights.
To exercise any of these rights, please contact us at [email protected]. We will respond in accordance with applicable legal requirements.
6. Data Security Measures
We implement robust security protocols designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Key security features include:
– SSL encryption of all data transmissions
– Role-based access controls for system administrators
– Encrypted data storage for sensitive information
– Regular system backups and disaster recovery plans
– Security training for personnel handling data
7. International Transfers
Information collected on gauloisesracing.com may be processed or stored in countries outside of your jurisdiction. When such transfers occur, we implement appropriate safeguards such as Standard Contractual Clauses approved under GDPR and ensure that similar protections are observed under the CCPA framework.
8. Data Retention
We retain personal data only as long as necessary for the purposes it was collected and as required by law. Specific timeframes include:
– Usage Data: Retained for up to 24 months for analytics purposes
– Account and Profile Data: Retained for the duration of account activity and up to 7 years thereafter for legal compliance
– Transaction Data: Retained for a minimum of 7 years for tax and accounting requirements
– Communication Data: Retained for up to 3 years following last interaction
– Preference Data: Retained until preferences are updated or withdrawn
Upon expiration of retention periods, data is securely deleted or anonymized.
9. Cookie Policy
We use cookies and similar tracking technologies to provide and improve our services. Cookies collect the following categories of data:
– Essential Cookies: Necessary for website performance and core functionality (e.g., site login, cart management)
– Functional Cookies: Enable site personalization based on user preferences
– Analytics Cookies: Collect aggregate information about site usage and performance
– Performance Cookies: Help us understand visitor behavior to optimize performance and user experience
Specific cookies and their functions are detailed in our separate Cookie Settings section on gauloisesracing.com.
10. Cookie Management and Compliance with GDPR & CCPA
We provide users with clear cookie consent management tools in compliance with GDPR and CCPA. Upon first visit, users are presented with cookie consent options. You have the right to:
– Accept or reject non-essential cookies
– Revoke or modify your cookie preferences at any time through our Cookie Management Panel
– Use browser settings to manage or block cookies individually
11. Special Protections for Children
Gauloises Racing does not knowingly collect or solicit personal data from individuals under 13 years of age. If we become aware that we have collected personal data from a child under 13 without verified parental consent, we will delete it promptly. Parents or legal guardians may contact us at [email protected] to exercise rights on behalf of their child.
12. Policy Updates and Notifications
We may update this Privacy Policy to reflect changes in legal obligations or data practices. Users will be notified of material changes via our website or via email (where permitted). Continued use of gauloisesracing.com following such updates constitutes acceptance of the revised policy.
13. Contact Us
If you have questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us:
Email: [email protected]
We are committed to resolving any privacy concerns in a respectful and timely manner.
Compliance Statement
This Privacy Policy is designed to meet the requirements of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data privacy laws. We encourage users to contact us at [email protected] with any questions regarding our privacy practices.