Privacy policy

Privacy Policy Information Memorandum

This Information Memorandum on the processing of personal data outlines the methods, purposes, and extent to which we process your personal data. It also provides information about your rights related to the processing of your personal data.

We, Motorsport Legends, a.s., located at Rohanské nábřeží 657/7, Karlín, 186 00 Prague 8, Company ID: 14445476, registered in the Commercial Register maintained by the Municipal Court in Prague, section B, insert 27197 (hereinafter referred to as "MTSL"), as the controller of your personal data, process your personal data.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR"), and all applicable legal regulations. For any inquiries or to exercise any of your rights in the field of personal data protection, please contact us directly via the email listed in the contacts.

The processing of personal data is carried out only to the extent necessary, considering the type and category of personal data. We store your personal data only for the necessary duration to fulfill the purpose of processing, for example, for the duration specified by legal regulations. We aim to keep only current and accurate data, therefore we update them regularly. Appropriate security of personal data is a necessary part of proper data processing, hence we have implemented various measures to protect personal data from unauthorized access. Our goal is to maintain your privacy as much as possible, therefore, we always properly assess whether certain processing is necessary and whether it disproportionately interferes with your rights and freedoms.

For any reports of personal data security breaches or any other suspicions of rights and obligations violations in the area of personal data protection, you may also contact us using Motorsport Legends’s email anonymously.

We process the following categories of your personal data:

  • Identity data – name, surname, address, date of birth
  • Contact details – email, phone number, correspondence address
  • Digital data – cookies, IP address, internet address, data on how electronic applications are filled out

How do we obtain your personal data? 

We primarily collect personal data directly from you:

  • from details you provide on our websites (e-shop)
  • from communication or transactions over the phone, email, or other forms of electronic communication

How long do we keep your personal data? 

We generally archive your personal data for the duration specified by legal regulations, contracts, or based on our legitimate interest. Personal data processed due to our legal obligation are kept for the duration specified by the relevant legal regulations. Except in cases where legal regulations specify a longer retention period for certain documents that may contain personal data, we store personal data processed for fulfilling our legal obligations for 3 years from the last purchase.

Personal data processed for contract fulfillment are kept for the duration of the contract's validity and subsequently as long as our legitimate interest lasts (usually for the duration of the limitation periods when we may have an interest in asserting or defending our legal claims, and in case of initiation of judicial or similar proceedings, for the duration of this proceeding and subsequently during the periods for filing extraordinary remedies and during the proceedings after filing extraordinary remedies).

In our premises and when potentially using our work tools, monitoring of certain locations, devices, and/or activities takes place. Below we detail our procedures. We use a camera system for the purpose of protecting the company's property and our employees. The camera system monitors these places: reception area of the headquarters. In exceptional cases (intentional property damage, theft, etc.), a copy of the recording may be provided to the relevant public authorities (e.g., the Czech Police). Camera recordings are stored for 7 days. The security of the processing is ensured by suitable technical and organizational measures, which protect the camera recordings from any unauthorized access.

Who do we share your personal data with? 

Depending on the purpose of processing, we may disclose your data to the following categories of third parties:

  • relevant government authorities (e.g., authorities active in criminal proceedings, tax administrators, financial oversight bodies, consumer protection agencies);
  • our suppliers (processors);
  • relevant courts.

In connection with our business aktivity

For processing your personal data, we may also use services of external processors, such as external call centers, marketing agencies, research agencies, external debt collection agencies, external law firms, suppliers of printing solutions, IT solution providers. 

Information about data disclosure can be requested via the contacts listed on the website. However, we disclose your personal data only to the extent necessary and in a form necessary to achieve the purposes stated in this information memorandum and only to our contractual partners with whom we have signed contracts protecting your rights and freedoms regarding your personal data.

Where do we process your personal data? 

Your personal data will be processed within the European Union and may also be processed in other countries, specifically in the United States.

Before transferring your personal data, we always carefully evaluate all circumstances to ensure that your data receives an adequate level of protection. In connection with the transfer of your personal data to partners from other third countries, we conclude so-called standard contractual clauses, which guarantee an adequate level of protection, or we base the transfer on other legal titles specified by the GDPR. In cooperation with partners from the United States of America, we transfer your data based on the European Commission's decision on adequate protection. 

The reason for possible processing of your data abroad is the optimization of IT system operation costs.

In connection with the transfer of your personal data abroad, we guarantee you the possibility to exercise all your rights and the possibility to seek effective legal protection from foreign public authorities.

How do we process your data? The processing of your personal data can be both manual and automated. Automated processing takes place in our information systems, or possibly in the information systems of our processors. Your personal data are processed mainly by our selected employees or business representatives. We have taken measures to ensure that only authorized and trained employees and processors who are involved in their processing have access to your personal data and that these employees and processors maintain confidentiality of all facts, data, and information (personal or otherwise) they learn about in the course of their work. We have a written data processing agreement with all processors, emphasizing the security of your personal data and containing identical guarantees for processing procedures at these processors as are set with us.

Your personal data is processed by collecting, storing, and sorting it in our systems, verifying its accuracy, and potentially updating it, classifying it according to your relationship with our company (prospective, current, and former customer), and ultimately disposing of it.

On what legal basis and for what purposes do we use your personal data? 

Below we describe the legal bases for processing your personal data and the individual purposes of their processing:

Contract Fulfillment 

Based on the data you provide, we process your contact details. 

Using your contact details, we also send you information about the contract and documentation and goods, either directly or through our providers of telecommunications and postal services. 

We are also entitled to use data about your unfulfilled obligations to enforce our claims or provide these data to our authorized provider (providers) of debt collection services.

Fulfilling Legal Obligations 

We also process your personal data to properly fulfill all obligations set by legal regulations on personal data protection and other applicable legal regulations. 

We are also subject to audit, tax, and accounting obligations. Therefore, we disclose your personal data to our tax advisors, auditors, and possibly other advisors, always ensuring the confidentiality of this data.

Legal regulations (including international treaties) may impose other obligations on us, during which your personal data must be processed. Such personal data will always be processed exclusively for the purpose of fulfilling the specific legal obligation.

 

Our Legitimate Interests 

We also process your personal data based on our legitimate interests, but only provided that your interests and fundamental rights and freedoms do not outweigh our legitimate interest. Before starting processing, we always carefully weigh your interests against ours. If you disagree with the processing, you have the right to object. 

During our contractual relationship and for 1 year after the end of our contractual relationship, we are interested in sending promotional materials for our products and services and informing you about ongoing promo actions, competitions, and other marketing campaigns for our customers. We are entitled to use your contact details to approach you with offers, sending information about our products and services similar to those we provide or have provided to you in the past. This can be done via phone, letter, email, SMS, or social media, provided that each message will include a simple option to unsubscribe from receiving such messages. 

For securing our network, we process your IP address 

We also use personal data in pseudonymized or subsequently anonymized form for business analytics and evaluation of our services.

Cookies

If you visit our pages, a piece of code called a cookie may be downloaded to your computer, which allows us to display the content you are viewing or to adapt your navigation on the pages to your needs, speed it up, and simplify it. More information about cookies, their categorization can be found in the Cookie Usage Policy of the e-shop website.

What are your rights in the area of personal data protection?

 We process your data in a completely transparent manner. At any time during the processing of your personal data, you can exercise the following rights:

  • You have the right to access your personal data and to obtain a copy of your personal data that we process.
  • You have the right to data portability of your data that you have provided to us or that we process based on your consent or for the purposes of fulfilling a contract and which are processed automatically. We will provide the data in a secure file that is machine-readable, so you can save it or make it accessible to other service providers. You can also provide us with data obtained from other companies. You can request that we provide your data to another controller – however, we can ensure this only if such a transfer is technically feasible. Because the mentioned file contains your personal data, we recommend storing it on your device in a secure manner.
  • We ensure that your data is always up-to-date, so we ask you to check them from time to time and when required by law. However, if you find that the data we have about you are incorrect, you can request the correction of incorrect data and through the aforementioned contact details, it is possible to supplement incomplete data or add additional data. If the accuracy of your data is disputed, you can request the restriction of their processing for the time we verify their accuracy.
  • You have the right to restrict the processing of data. This means that we will keep your data, but will not otherwise use it. You also have the right to request the deletion of your personal data, but only in legally specified cases: 
    • Your data is no longer necessary for us, or the agreed retention period has been exceeded; 
    • if your data is processed based on your consent, you have withdrawn this consent; 
    • you disagree with the processing of your personal data based on our legitimate interest; until your interests are verified, we will restrict the processing and if your rights prevail, we will delete the data at your request;
    • you disagree with the processing of your personal data for marketing purposes;
    • personal data must be deleted if it is necessary to fulfill a legal obligation; 
    • if the processing is unlawful. 

If there is no legal basis for it, we will not delete your data or restrict their processing.

  • You have the right to object at any time to direct marketing and thus stop the offering of products and services of our company. You can send the objection to the contact email or by phone.
  • If you wish to request the exercise of any of your rights mentioned above, you can do so through the contacts on our website.
  • You have the right to disagree with a decision based solely on automated processing of your personal data, including profiling, through the contacts on our website.
  • If you believe that there has been a violation of your rights in connection with data processing, you have the right to approach the relevant supervisory authority (usually the Office for Personal Data Protection, address Pplk. Sochora 27, 170 00 Prague 7, Czech Republic) or the relevant court.

You have the right to object to the processing of your personal data in fulfilling our legal obligation and/or based on our legitimate interest; if you wish to raise such an objection, you can do so through our contacts. Please note that if we find that the law requires processing against which you object, or if our legitimate interest outweighs your rights and freedoms, we may continue processing your personal data. If your objection is found to be justified, we will no longer process your personal data for that purpose.

UPDATES 

We regularly review this information memorandum and may occasionally change it (primarily to comply with legal regulations and procedures for the protection of personal data and to improve these protections). Updated versions will be available on the website.

COPYRIGHT 

All materials published on the website are protected by copyright law. Products and services listed on the website, information about them, and their depiction may be protected by other rights of the concerned parties. The names and designations of products, services, companies, and corporations may be registered trademarks of their respective owners. No part of the company's website (especially descriptions and depictions of sold products, descriptions of purchases, and distribution of categories and parameters) may be copied electronically or mechanically and made accessible to the public without prior written consent from the copyright holder.

LIABILITY 

Information on the website may partly be taken from third parties, may contain factual and technical inaccuracies or typographical errors, and may be updated without prior notice. The e-shop may at any time without prior notice change the products and services described on its pages and does not guarantee the factual accuracy of their content. The e-shop is not liable to any other party for direct, indirect, special, or other consequential damages caused by the use of information from its own or referenced websites, including (but not limited to) lost profits, incurred expenses, business interruptions, and other damages.