This is a translation. Only the German version is legally binding.
Controller
[First and last name]
[Street and house number]
[Postcode and city]
Email: [Email address]
What happens when you open this site
This site loads nothing from third-party servers. No fonts, no icons, no maps, no analytics, no content delivery network. All images, fonts and scripts are hosted on the same server as the site itself. Your IP address is therefore not passed on to any third party.
The only exception is the stream window in the live timing: only when you open it yourself is the YouTube player loaded in privacy-enhanced mode (youtube-nocookie.com), passing your IP address to Google; as long as it stays closed, nothing happens.
Cookies
The public pages set no cookies – with one exception: the protest form sets the cookie livetiming_session when it is opened. It protects the form from being submitted from other sites and expires when you close the browser.
In the protected administration area, cookies are only set when you log in there:
- livetiming_session – keeps you logged in during the visit. Expires when you close the browser.
- livetiming_remember – only if “Stay logged in” is chosen when logging in. Expires after 30 days and is deleted when you log out.
These cookies are required for the service you request and therefore do not need consent under § 25 (2) TDDDG. There is no consent prompt.
What is stored in your browser
These settings stay in your browser and never leave it:
- In local storage: the car numbers under “My cars”, the column selection and zoom of the live timing, which race control messages you have already seen, and the position and size of the stream window and whether it was open.
- In session storage, which expires with the tab: the last session state seen, so the clock does not briefly jump to zero when switching between timing, track map and spotter guide, and on the protest form the scroll position, so it stays the same after submitting.
None of this is sent to the server. You delete it by clearing the browser data for this site. This storage, too, is required for the service you request; no consent under § 25 (2) TDDDG is needed. Nothing is stored for advertising or analytics.
Server logs
The host [name of the host] creates log files on each request, which usually contain the IP address, time, requested address, amount of data transferred, browser type and operating system. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in secure and trouble-free operation. Retention period: [ask the host].
Protest form
Anyone submitting a protest transmits the session, the protester, the cars involved, time, lap, corner and a description. This information is stored and handled by race control. The description is visible to race control only; the cars involved and the decision appear publicly on the “Incidents” page and with the race result.
If the form is password-protected and a wrong password is entered, a non-reversible hash of IP address and browser identifier is stored in order to block briefly after several failed attempts. These entries are deleted after 24 hours. The legal basis is Art. 6 (1) (f) GDPR.
Failed login attempts
If a login to the administration area fails, the user name and IP address are stored to slow down brute-force attacks. These entries are deleted automatically after 24 hours. The legal basis is Art. 6 (1) (f) GDPR.
Participant data
The operator of each series publishes data on the participants of their series on these pages: names, team, car number, car and class, times, positions and results; in the spotter guide also driver photo, nationality, age and further details where provided; as well as incidents with the cars involved and the decisions of race control, and penalty points.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please contact the address above. You also have the right to lodge a complaint with a data protection supervisory authority.