Privacy policy

Data controller

The data controller is [Company name], based at [address, city], VAT IT 05733290281, registered with the [province] Companies Register under REA number [to be added]. For any request about your data, write to info@afracingkart.com or call +39 342 544 2697.

The contact form

The contact form collects your name, email, the topic you choose and, if you provide them, your phone number and message. The same data reaches us when you email, message us on WhatsApp or call.

This data is used to answer your request: information, track tests, joining the team or sponsorship proposals. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Name and email are required to send the form; phone and message are optional.

The form is protected by Cloudflare Turnstile, a service of Cloudflare, Inc. that checks the submission comes from a person and not from an automated program. To do so, Turnstile receives your IP address and some technical data about your browser and device. It uses no cookies and is loaded only on the contact page. The legal basis is the controller’s legitimate interest in protecting the form from spam (Art. 6(1)(f) GDPR).

Underage drivers

If the driver is under 14, the form must be filled in by a parent or legal guardian.

How long data is kept

If the request does not lead to an agreement, messages are deleted within 24 months of the last exchange. If it does, data is kept for 10 years, as required by tax and accounting obligations.

Cookies and analytics

The site uses no cookies, neither profiling nor technical ones, and no analytics or advertising trackers. Photos, fonts and content are hosted on the site itself.

Who data is shared with

[Hosting provider] hosts the site. [Email provider] runs the mailbox where form messages arrive. Cloudflare provides the form’s spam check. All of them process data on the controller’s behalf, as data processors. Data is not shared with anyone else or used for third-party marketing.

Transfers outside the European Union

[To be checked based on providers.] If a provider processes data on servers outside the European Union, the transfer relies on a European Commission adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses.

WhatsApp and social media

The WhatsApp button leads to a service run by Meta: from that point on, WhatsApp’s privacy policy applies. Likewise, the Instagram link leads to an external platform with its own privacy rules.

Your rights

You can ask to access, correct or delete your data, restrict its use, or receive it in a machine-readable format (Art. 15-20 GDPR). You can also object to processing based on legitimate interest (Art. 21).

Automated decisions and changes

No data is used for automated decision-making or to profile visitors. When the site adds a service that processes personal data, this page is updated.

Privacy contact

To exercise your rights or for any question about your data, write to info@afracingkart.com. You will receive a reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at garanteprivacy.it (opens in a new tab).