PRIVACY INFORMATION
We (Estonian Autosport Events MTÜ) collect and process your personal data when you:
- are on our website (www.rallyestonia.ee);
- are on our social media accounts on Facebook, Instagram, Twitter;
- send us an email;
- purchase a ticket to attend our event;
- participate in our event;
- apply for access to the event area;
- participate as a volunteer in organizing the event;
- live in the WRC Rally Estonia stage area;
- are a guest of a local resident living in the WRC Rally Estonia stage area during the rally period.
Personal data is legally defined as any data relating to an identified or identifiable natural person. Data is considered personal data if it allows a direct or indirect link to be established between the data and a natural person.
Processing of personal data means any operation performed with personal data or sets of personal data.
Protecting your privacy is important to us, so we want to provide clarity about our principles for processing personal data and have therefore prepared this Privacy Notice.
Estonian Autosport Events MTÜ uses your personal data only for the purposes set out in this Privacy Notice and does not disclose your personal data to any natural or legal person, i.e., third parties, unless otherwise provided in section 8 of this Privacy Notice.
The collection and processing of personal data is carried out in accordance with the Personal Data Protection Act and the General Data Protection Regulation, which guarantees that your personal data will not be disclosed to unauthorized persons or in an unauthorized manner.
Estonian Autosport Events MTÜ has the right to unilaterally change the conditions set out in the Privacy Notice. The updated terms will be published on our website.
- Personal data we collect
To achieve the purposes set out in the Privacy Notice, we need to process some or all of the following personal data. The exact set of data processed depends on the purpose of the data processing and may differ in each case. We always adhere to the principle of processing as little personal data as necessary to achieve the purpose:
- contact details (first and last name; personal identification code or date of birth; age; details of identity document; phone number; email address; address of residence or workplace; preferred language of communication);
- data about which spectator area a particular event visitor was in;
- payment details (bank card number, credit card number);
- correspondence, including email exchanges;
- data related to visiting the website (e.g., website user's browser and IP address);
- videos, pictures, and other media that enable identification of you in the event area;
- personal data lawfully obtained from third parties;
- information collected for compliance with legal obligations;
- for team members (including teams, competitors, media, guests): country of origin; means, place, and time of arrival in Estonia; vaccination certificate; medical certificate for recovered COVID-19; coronavirus test results; health insurance data.
- Legal basis and purposes for processing personal data
We process your personal data for the purpose of entering into, performing, and ensuring the performance of a contract, in order to:
- manage e-store orders, deliver goods, and contact the winner of a campaign;
- process payments;
- send event tickets to your email address;
- send notifications about the event to your email address, including notifications about changes in traffic arrangements;
- personalize tickets and identify the ticket holder and ensure their access to the event area;
- ensure the safety and health of people present at and near the event area;
- register teams (including teams, competitors, media, guests) and individuals applying for access to the event area;
- identify teams at the event area and ensure their access to the event area;
- ensure compliance with our General Terms and Conditions (https://www.rallyestonia.com/terms).
We process your personal data for compliance with legal obligations in order to:
- fulfill accounting and tax obligations;
- comply with lawful orders from law enforcement or other government authorities.
We process your personal data for the purpose of protecting the vital interests of persons near the event area in order to:
- prevent the spread of SARS-CoV-2 among people present at and near the event area.
We process your personal data according to our legitimate interest in order to:
- inform persons living at or near the event area about changes in traffic arrangements;
- identify a person who has applied for access to the event area and ensure their access to the event area;
- compile website usage statistics, analyze website visitors’ behavior and user experience to provide better service and ensure the smooth functioning of the website and applications;
- market our event through photos or videos taken at the event;
- prepare, present, or defend legal claims.
The legitimate interests of Estonian Autosport Events MTÜ are to ensure the safety of persons present at the event area; safe movement of people through the event area to their home and workplace; offering a better user experience on our website; marketing our event and ensuring compliance with legal requirements. We collect and process personal data only as much as necessary to protect legitimate interests, ensuring the proportionality of data processing. Additional information about the development and balancing of legitimate interest can be obtained by contacting us by email: rallyestonia@rallyestonia.ee.
NB! Persons applying for access to the event area: Access to the event area during the event is granted only to persons who have purchased an event ticket, registered team members (including teams, competitors, media, guests), and persons who have applied for access to the event area in order to pass through the event area to their home or workplace or from there, and in justified cases, other persons (e.g., law enforcement, medical service providers, etc.). Restricting access to the event area is necessary to regulate movement in the event area and thereby ensure people's safety and prevent spectators from gathering in places not intended for that purpose. Estonian Autosport Events MTÜ therefore processes personal data to verify whether a person present at or wishing to pass through the event area has an agreement with Estonian Autosport Events MTÜ.
We may process personal data for other purposes only if you have given prior consent.
- Cookies
For the proper functioning of the website, Estonian Autosport Events MTÜ sometimes stores small data files—so-called cookies—on the user's device. A cookie is a small text file that a website saves to the user's computer or mobile device when the user visits our website. This enables the website to remember the user's actions and preferences (such as username, language, shopping cart contents, and other display preferences) for a certain period. This way, the user does not have to re-enter them each time they return to the site or browse pages. The cookies used include mandatory cookies necessary for the functioning of the website. In addition, we use cookies that are not strictly necessary for the operation of the website but provide a better browsing experience for the user. Estonian Autosport Events MTÜ uses cookies and similar tools to provide the service, improve service quality, and enhance user experiences. The Estonian Autosport Events MTÜ pages use cookies:
- to personalize content and ads,
- to provide social media features, and
- to analyze web traffic.
Cookies may also be used by third parties whose services Estonian Autosport Events MTÜ uses (e.g., social media platforms Facebook, Instagram, Twitter where Estonian Autosport Events MTÜ has an account).
You can opt out of cookies at any time by changing your browser settings and deleting stored cookies on your device. Instructions on how to opt out of cookies in various commonly used browsers can be found here: https://www.cookielawinfo.com/ways-to-block-cookies-in-different-browsers/
The user should be aware that certain features can only be provided using cookies, and if the user decides to opt out of cookies, these features may not be available.
- Google Services
Estonian Autosport Events MTÜ may use Google Analytics, a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses cookies, files stored on the user's computer to analyze how the user uses the website. The information generated by the cookies about the user's use of the website is usually transmitted to and stored by Google on servers in the USA. Since the service provider has activated IP anonymization, Google shortens the user's IP address (for EU or other EEA member states). At the request of Estonian Autosport Events MTÜ, Google will use this information to analyze user activity and compile reports about activity on the website. The user can disable the storage of cookies on their computer via browser settings, but in this case, the user may not be able to use all the features of the website to their full extent.
Additionally, the user can prevent the transmission to Google and further processing of data collected by cookies about website usage (including IP address) by downloading and installing the appropriate browser add-on from the following website: tools.google.com/dlpage/gaoptout?hl=en. Google Analytics retains cookies, user identifiers (e.g., user ID), and advertising identifiers (e.g., DoubleClick cookies, Android Advertising ID, Apple Advertising Identifier) for 26 months.
Estonian Autosport Events MTÜ may display advertisements on the website via third parties. Google uses DART cookies to show users relevant ads and to improve campaign performance reporting and avoid showing ads the user has already seen. Users can opt out of interest-based ads by visiting the Google Ads Settings page:
- Go to http://www.google.com/settings/ads/anonymous.
- Set "Ads based on your interests" to "OFF".
- Confirm your choice.
More information about ads can be found at: http://www.google.com/policies/technologies/ads/.
Estonian Autosport Events MTÜ may use Google Adsense. Third-party advertising networks using Google Adsense use technology that sends ads and links directly to the user's browser. The user's IP address is transmitted to them. Third-party advertising networks also use other technologies (such as cookies, JavaScript) to measure the effectiveness of ads and personalize them. Estonian Autosport Events MTÜ has no access to or control over these cookies used by third-party advertisers. The user should consult third-party advertisers for more information about their privacy policies and how to opt out of sharing information with them. If the user wishes to block cookies, this can be done via browser settings. More information on cookie settings can be found on the website of the browser used by the user.
- SmartAD
Estonian Autosport Events MTÜ may use the SmartAD advertising network. SmartAD uses serving.bepolite.eu cookies, JavaScript, and browser settings (User Agent String, screen size) to show users relevant ads and to improve campaign performance reporting and avoid showing ads the user has already seen. If the user wishes to block cookies, this can be done via browser settings. More information on cookie settings can be found on the website of the browser used by the user.
Estonian Autosport Events MTÜ's website may have integrated Facebook plugins (1601 S. California Avenue, Palo Alto, CA 94304, USA) "Like" and "Share". For an overview of Facebook plugins, visit Facebook's website at developers.facebook.com/docs/plugins/. When a user visits the Estonian Autosport Events MTÜ website, a direct connection is established between the user's browser and Facebook's server using these plugins, through which Facebook receives information that the user has accessed the service provider's website from their IP address. If the user is logged into Facebook and clicks the "Like" or "Share" buttons, the user can link the content of the Estonian Autosport Events MTÜ website to their Facebook profile. Estonian Autosport Events MTÜ does not receive any information about the data transferred or its use by Facebook. For more information, please refer to Facebook's privacy policy: www.facebook.com/about/privacy/. If the user does not want their visit to the Estonian Autosport Events MTÜ page to be reflected on their Facebook account, the user must log out of Facebook.
- Direct marketing notifications
Email addresses and phone numbers are used for sending direct marketing notifications if you have given your consent. If you do not wish to receive direct marketing notifications, you must select the relevant link in the footer of the email or contact customer support. If personal data is processed for direct marketing purposes, you have the right to object at any time to both initial and further processing of your personal data, including profiling related to direct marketing, by notifying customer support by email. This information must be provided clearly and separately from any other information.
- Processing of personal data
Disclosure and transfer of personal data. We disclose and transfer personal data only in the following cases and with a valid legal basis, including to processors authorized by a valid contract. In providing services and fulfilling contracts, Estonian Autosport Events MTÜ may use third parties involved in fulfilling the purposes of processing, such as payment service providers, transport companies, healthcare providers. To provide the service and ensure its quality, it may be necessary to transfer personal data to email service providers, IT service providers, server service providers, software and software service providers. Third parties are required to comply with our Privacy Notice. To fulfill legal obligations, personal data may be disclosed and transferred to authorities that have the right to request disclosure and transfer of personal data, and we are obliged to disclose and transfer the data. To protect our rights, we have the right to transfer personal data to legal service providers, auditors, and debt collection service providers. During the event, to ensure the safety and security of people, Estonian Autosport Events MTÜ cooperates, among others, with the Health Board and the Police and Border Guard Board, and for this purpose, we have the right to transfer your personal data to them. To prevent the spread of SARS-CoV-2 among people present at and near the event area, we may transfer personal data of team members (including teams, competitors, media, guests) to SYNLAB Eesti OÜ, with whom a personal data processing agreement has been concluded.
Personal data security. Estonian Autosport Events MTÜ uses all reasonable administrative, technical, and organizational measures to prevent unauthorized or unlawful access to personal data or such processing or destruction, accidental loss, and disclosure. If your personal data is shared with third parties, they must also use all reasonable administrative, technical, and organizational measures to protect your personal data. Some data collected through the use of cookies is transferred to the United States via Google Analytics. When transferring personal data to the United States, the protection of personal data is ensured by following the measures provided in Article 46(2) of the General Data Protection Regulation, as the general terms of Google services are based on the European Commission's standard data protection clauses.
If a personal data breach occurs that is likely to pose a risk to your rights and freedoms, we will notify the Data Protection Inspectorate within 72 hours of becoming aware of the breach and notify you without delay, unless otherwise provided by applicable law.
Retention of personal data. We retain your personal data as long as necessary to fulfill the purposes described in the Privacy Notice. Invoices issued to persons who have purchased tickets, service contracts concluded for organizing the event, and data contained therein are retained for up to seven years from the date of the transaction or the end of the service, in accordance with accounting requirements. Personal data of persons who have applied for access to the event area are retained until the end of the event. Data on which spectator area a particular spectator was in are retained for up to two months after the end of the event. Data required on the registration form for team members (including teams, competitors, media, guests) are retained for up to two months after the end of the event. We retain your data as necessary to protect our rights, taking into account statutory limitation periods, which are generally three years for civil claims. After the retention period for personal data expires, your data will be deleted.
- Data subject rights
Access to personal data. If you have questions or suggestions related to the processing of your personal data, you have the right to request information about the personal data collected about you and its processing, provided your identity is verified. We will provide you access to the personal data collected about you that we process and their sources. You can contact us by email: rallyestonia@rallyestonia.ee.
Correction and deletion of personal data. You have the right to have your personal data corrected, deleted, or amended to correct inaccuracies if the personal data is incomplete or incorrect or is being processed unlawfully. No fee is charged for exercising these rights. You have the right to request the deletion of data that is inaccurate or irrelevant. You have the right to have your personal data deleted immediately and free of charge if the law does not require the retention of personal data. To submit such requests, you can contact us by email.
Deletion mainly concerns data visibility and may involve the possibility that deleted personal data is temporarily retained. Estonian Autosport Events MTÜ will take all reasonable measures to delete your personal data as completely and thoroughly as possible. If you exercise your right to delete your personal data, your ticket will become invalid and you will not be entitled to compensation or a refund, regardless of whether the event has already taken place or is yet to take place.
Withdrawal of consent. If the processing of personal data is based on your consent, you have the right to withdraw your consent by notifying us by email. Withdrawal of consent does not affect processing operations carried out prior to withdrawal.
Data portability. You have the right to request that the personal data collected about you be provided to you in a structured format.
Right to object and restrict processing. You have the right at any time to object to the processing of your personal data and to request the restriction of the processing of your personal data.
- Contact and protection of rights
If you have any questions regarding the processing of personal data, please contact us as the data controller:
Estonian Autosport Events MTÜ (registration code 80310909)
Sinilille tee 1, Peetri, Harjumaa
tel +372 56 966 699
email: rallyestonia@rallyestonia.ee.
You may also contact the Data Protection Inspectorate (info@aki.ee; tel 627 4135).