Privacy Policy

This is a courtesy translation. Only the German version is legally binding. German version

Controller

The controller within the meaning of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is:

SMN83 GmbH

Your rights as a data subject

Using the contact details provided, you may exercise the following rights at any time under the EU General Data Protection Regulation (GDPR):

access to information about your data stored by us and its processing (Art. 15 GDPR),
rectification of inaccurate personal data (Art. 16 GDPR),
erasure of your data stored by us (Art. 17 GDPR),
restriction of data processing where we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
objection to the processing of your data by us (Art. 21 GDPR) and
data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you may withdraw it at any time with effect for the future.

You may lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority of the federal state (Bundesland) in which you reside or with the authority responsible for us as the controller.

A list of the supervisory authorities (for the non-public sector) with their addresses can be found at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Collection of general information when you visit our website

Type and purpose of processing: When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.

It is processed in particular for the following purposes:

Ensuring a smooth connection to the website

We do not use your data to draw conclusions about you personally. However, we reserve the right to review the server log files retrospectively should there be specific indications of unlawful use.

Legal basis and legitimate interest: The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and in ensuring system security and detecting misuse.

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Storage period: Data is stored in server log files in a form that allows the data subjects to be identified only for as long as is necessary for the stated purposes, unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an event, server log files are stored until the security-relevant event has been eliminated and fully investigated.

Whether provision is mandatory or necessary: The provision of the aforementioned personal data is required neither by law nor by contract. Without the IP address, however, the service and the functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

Please also read the information on your right to object under Art. 21 GDPR further below.

Contacting us

Type and purpose of processing: You can contact us by e-mail or by telephone. We do not offer a contact form on our website.

At the time the message is sent, the following data is also stored:

URL from which the enquiry was made

If you contact us via the e-mail addresses provided, the personal data of the user transmitted with the e-mail is stored. This includes the date and time the e-mail was sent, the e-mail address, IP addresses and information about the servers involved in the e-mail communication.

You can contact us via the telephone numbers provided. In doing so, we collect log data that includes your telephone number and the duration of the call.

Regardless of the method of communication chosen, we collect the content of your enquiry. Your data is stored for the purpose of communicating with you individually.

Legal basis: The data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest in processing your data is to make it easy for you to contact us.

If you contact us to request a quotation, the data is processed for the purpose of taking pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Storage period: Data is erased as soon as your enquiry has been conclusively dealt with and no statutory retention obligations prevent erasure.

If a contractual relationship is established, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper bookkeeping and tax law requirements.

Whether provision is mandatory or necessary: The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with the necessary data and the reason for your enquiry.

Please also read the information on your right to object under Art. 21 GDPR further below.

Provision of paid services

Type and purpose of processing: We process the data you provide when placing your order in order to carry out and process your order. This also includes the return or exchange of items and complaints about items.

Your personal data is used only to the extent necessary to process this order and to deliver the products and services requested.

Legal basis: The processing of data necessary for the conclusion of the contract is based on Art. 6(1)(b) GDPR.

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

To perform the contract, we pass on your name and address to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

We process payments via the payment service provider Stripe; details can be found in the section “Payment processing via Stripe”.

Storage period: We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper bookkeeping and tax law requirements.

Whether provision is mandatory or necessary: The provision of your personal data is contractually required. Without the provision of your personal data, we cannot carry out the order.

Hosting and delivery via Cloudflare

Type and purpose of processing: Our online shop is operated and delivered via the infrastructure of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”) (hosting, content delivery network and protection against attacks). Each time our website is accessed, the data technically required for delivery is processed, in particular your IP address, the date and time of access, the page accessed, browser and device information and the volume of data transferred.

Legal basis: The processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our online shop.

Recipients: Cloudflare acts as a processor on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. A transfer of personal data to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework; in addition, Cloudflare has concluded the Standard Contractual Clauses of the EU Commission (Art. 45, 46 GDPR).

Storage period: The data is stored only for as long as is necessary for the stated purposes, unless statutory retention obligations prevent erasure.

Further information can be found in Cloudflare’s privacy policy:

https://www.cloudflare.com/de-de/privacypolicy/

Please also read the information on your right to object under Art. 21 GDPR further below.

Payment processing via Stripe

Type and purpose of processing: To pay for orders, we use the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). When you click “Checkout” in our basket, you are redirected to Stripe’s payment page (checkout.stripe.com). In doing so, we transmit the ordered items and amounts to Stripe; you enter the data required for payment, such as your name, e-mail address, billing address and, where applicable, delivery address, telephone number and your payment details (e.g. credit card or bank account details), directly with Stripe. Stripe then transmits the order and contact details and the payment status to us; we do not receive complete credit card details.

Legal basis: The processing is carried out to perform the contract of sale pursuant to Art. 6(1)(b) GDPR, to fulfil legal obligations (e.g. prevention of money laundering) pursuant to Art. 6(1)(c) GDPR and on the basis of our legitimate interest in secure and efficient payment processing and in the prevention of fraud pursuant to Art. 6(1)(f) GDPR.

Recipients: Stripe processes the data partly as a processor and partly, for example for fraud prevention and to fulfil regulatory obligations, as an independent controller. Depending on the payment method selected, Stripe passes the data on to the credit institutions, card networks or payment providers involved. A transfer to Stripe, Inc. in the USA is possible; Stripe is certified under the EU-US Data Privacy Framework and additionally uses the Standard Contractual Clauses of the EU Commission (Art. 45, 46 GDPR).

Storage period: We store the order and payment data until the statutory retention periods have expired (generally 6 or 10 years for commercial and tax law reasons). Stripe’s retention periods apply to the data stored by Stripe.

Whether provision is mandatory or necessary: Without the data required for payment, we cannot carry out your order.

Further information can be found in Stripe’s privacy policy:

https://stripe.com/de/privacy

Meta Pixel and Conversions API

Type and purpose of processing: If you have given your consent in the cookie banner (“Accept all” or the “Marketing” group), we use the Meta Pixel and the Conversions API of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). This allows us to measure the reach and success of our advertisements on Facebook and Instagram, optimise these advertisements and later show visitors to our shop relevant advertising there (remarketing). Without your consent, the Meta Pixel is not loaded and no data is transmitted to Meta.

We use two channels for this: The Meta Pixel is a script that is loaded in your browser and sends data directly to Meta; for this purpose it sets the cookies “_fbp” and, where applicable, “_fbc” as well as our own cookie “smn_eid”, a random visitor ID with no connection to your name (storage period 90 days in each case). In addition, our server transmits the same events directly to Meta via the Conversions API (server-side transmission). Both messages carry a common identifier so that Meta counts them only once.

Data processed: pages and products viewed, events such as adding to the basket, starting the checkout process and a completed purchase (with article numbers, value of goods and currency), your IP address, browser and device information, date and time, and the identifiers from the cookies “_fbp”, “_fbc” and “smn_eid” (we transmit the visitor ID only in hashed form). Automatic advanced matching is also active: in the event of a purchase, we transmit, where available, your e-mail address, telephone number, your first name and surname as well as the town/city, postcode and country from the order. This information is hashed before transmission (SHA-256, an irreversible encryption); Meta uses it only to assign the events to a user account on Facebook or Instagram.

Legal basis: The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), which you give via our cookie banner. You may withdraw your consent at any time with effect for the future by selecting “Necessary only” via “Cookie settings” in the footer or by switching off the “Marketing” group. From then on, no further data will be transmitted to Meta.

Recipients: We and Meta are joint controllers for the collection and transmission of the data to Meta (Art. 26 GDPR); the corresponding agreement is available at https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for the further processing at Meta. A transfer of personal data to Meta Platforms, Inc. in the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework and additionally uses the Standard Contractual Clauses of the EU Commission (Art. 45, 46 GDPR).

Storage period: If you start the checkout process having given your consent, we store the identifiers (“_fbp”, “_fbc”, “smn_eid”), your IP address and browser information together with the order at our payment service provider Stripe so that we can report a completed purchase to Meta; they are erased together with the order data. Beyond this, we do not store the data transmitted to Meta. The cookies “_fbp”, “_fbc” and “smn_eid” are deleted after 90 days or when you withdraw your consent. Meta’s retention periods apply to storage at Meta.

Further information can be found in Meta’s privacy policy:

https://www.facebook.com/privacy/policy/

Links to social networks

On our website we link to our profiles on Instagram, Facebook and YouTube. These are simple links, not embedded social plugins: the links themselves do not transmit any data to the operators of these networks when our website is accessed (regarding the Meta Pixel, which is only loaded with your consent, see above).

Only when you click on one of these links are you redirected to the page of the respective provider; from then on, its data protection provisions apply. We have no influence on the data processing there.

The following profiles are linked:

Facebook (Meta Platforms Ireland Ltd.): https://www.facebook.com/simonmotorsportdxb/
Instagram (Meta Platforms Ireland Ltd.): https://www.instagram.com/smn_motorsport/
YouTube (Google Ireland Ltd.): https://www.youtube.com/@SimonMotorsport2013

Cookies

A cookie is a small data record that is created when a website is visited and is temporarily stored on the website visitor’s system. If the user of the website calls up the server of this website again, the website user’s browser sends the previously received cookie back to the server. The server can evaluate the information obtained through this procedure. Cookies can, in particular, make it easier to navigate a website.

Detailed information on cookies, and which cookies are used on this website for which purpose, can be accessed at any time in the cookie settings.

Deleting cookies: You can delete individual cookies or all stored cookies. You can also obtain information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information at the following links:

Mozilla Firefox Microsoft Edge Google Chrome Opera Safari

In addition, you can prevent so-called scripts from loading by default. NoScript allows JavaScript, Java and other plugins to run only on trusted domains of your choice. Information and instructions on how to adjust this function can be obtained from your browser provider (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Technically necessary cookies

Type and purpose of processing: We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

For the following applications, we store entries in your browser’s local storage (localStorage): “warenkorb” (contents of your basket), “thema” (selected light/dark view) and “cookie-einwilligung” (your selection in the cookie banner). These entries remain in your browser and are not transmitted to us.

Legal basis and legitimate interest: To this extent, the data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in documenting consent pursuant to Art. 6(1)(f) GDPR in conjunction with a balancing of interests under Section 25(2) TDDDG.

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Storage period: The entries remain stored until you delete them in your browser; we ask for your cookie selection again after 12 months at the latest. You can change it at any time via “Cookie settings” in the footer.

Whether provision is mandatory or necessary: The provision of the aforementioned personal data is required neither by law nor by contract. Without this data, however, the service and the functionality of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

Please also read the information on your right to object under Art. 21 GDPR further below.

Information about your right to object under Art. 21 GDPR

Right to object in individual cases: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection: SMN83 GmbH, Laurenzberger Straße 4, 52249 Eschweiler

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send an e-mail to the controller named above.

Copyright notice

This privacy policy was created with the help of activeMind AG – the experts for external data protection officers (version #2024-10-25).