RaceControl is a free, non-commercial hobby project for organising races and championships in Assetto Corsa Competizione. This page explains which personal data we process, why, who we entrust it to and what your rights are.
1. Who is the controller
The data controller is Massimo Saggin, Arcisate (Varese), Italy.
For any question or request about your data, write to privacy@racecontrolsuite.com.
2. What data we process
- Account: email, password (stored only in hashed form, nobody can read it), gamertag, team, language.
- Driver profile: ACC Gamer ID, race number, short name, preferred category, profile picture and team logo, notification and home page preferences.
- Race registrations: the request, its status, the name and number you race with, any notes from you or the organiser.
- Race results: they come from the game server files and contain in-game name, Gamer ID, car, laps, times, positions and penalties. They also include drivers who raced without being registered on RaceControl.
- Organisers: championships and races they create and the details to connect to their game server (address, FTP user and password).
- Communications: messages in the site mailbox and the emails we send you.
- Technical data: IP address and browsing data in the server logs, used for security, and the technical cookies described below.
We do not process special categories of data (health, opinions, etc.), we show no advertising, we use no analytics or profiling tools and we do not sell data to anyone.
3. Why we process it
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, registrations, races, results and the notifications you chose | Performance of the service you request (Art. 6(1)(b) GDPR) |
| Publishing results, standings and lap times, including drivers who are not registered | Legitimate interest in keeping and showing the history of the races (Art. 6(1)(f)); you can object, see section 8 |
| Newsletter (only if you turn it on in your profile) | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Site security, abuse prevention, log of administration activities | Legitimate interest (Art. 6(1)(f)) |
| Answering your requests | Performance of the service and legal obligations (Art. 6(1)(b) and 6(1)(c)) |
4. What others can see
- Everyone, even without an account: results, standings and lap times (in-game name, number, short name, car, team, times and positions) and the list of drivers registered for a public race.
- The organisers of the races you register for: your registration and driver profile details (gamertag, in-game name and number, short name, category, team, Gamer ID). Organisers do not see your email.
- Your email and your Gamer ID are not shown on public pages.
5. Who we entrust data to
- MonsterASP.NET s.r.o. (Prague, Czech Republic): hosts the site, the database and email, as a processor under an Art. 28 GDPR agreement. The servers are in Germany (Hetzner Online data centres).
- Cloudflare, Inc.: only manages the domain name (DNS). Site traffic and your data do not pass through Cloudflare.
The site's fonts, icons and libraries are hosted on our own server: when you open the pages your browser does not contact external services. Data is not transferred outside the European Union.
6. How long we keep it
- Account and profile: as long as the account exists. If you ask us to delete it, your personal data is erased within 30 days; it may remain for a short time in backup copies, which overwrite themselves.
- Race results: they remain as the history of the races. On request your name in the results can be anonymised.
- Messages and notifications: as long as the account exists.
- Technical logs: for as long as needed for the security of the site.
7. Minimum age
You must be at least 14 years old to create an account, the age set in Italy for consenting to online services on your own.
8. Your rights
At any time you can ask to access your data and get a copy, correct it (you can change most of it yourself in your profile), delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest, for example to your name being published in the results. You can withdraw your consent to the newsletter from your profile or from the link at the bottom of every email.
Write to privacy@racecontrolsuite.com: we answer within 30 days. If you raced without being registered and want your name removed or anonymised, write to the same address giving the name you used in the race.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your country.
9. Cookies and browser storage
We only use technical cookies, needed for the site to work, which do not require consent:
.AccTools.Auth: keeps you signed in;.AccTools.Admin: access to the administration console (administrator only);- form security cookie (antiforgery), which prevents forged submissions;
- chosen language and
view-mode(PC or phone version).
In the browser storage (localStorage) we only keep display preferences, such as having closed the cookie notice or the table or card view. We use no third-party, analytics or profiling cookies.
10. Security
The site only works over HTTPS, passwords are stored hashed and access to the data is limited to the administrator. In case of a data breach we follow the procedures set out by the GDPR.
11. Changes
If we change this policy we update the date at the top of the page; important changes will be announced on the site.
This is a translation: in case of differences, the Italian version prevails.