How we handle your data.
1. Who is responsible
Controller: [COMPANY NAME, LEGAL FORM, REGISTRATION NO.], [STREET, POSTCODE CITY, COUNTRY]. Contact for anything in this notice: hello@raceframe.studio.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email, request type (race / Creator Desk / sponsor) | To answer your request, confirm a slot and send the payment link | Steps before a contract and performing it (GDPR Art. 6(1)(b)) |
| Event, package, start time, bib number | So the crew is at the right place at the right time and can identify you | Contract (Art. 6(1)(b)) |
| Outfit photo (a photo of what you will race in, which may show you) | So the crew recognises you in the corral. Nothing else. | Contract (Art. 6(1)(b)) |
| Message field, Instagram handle or brand (creators, sponsors) | To scope the Creator Desk or sponsor pilot | Steps before a contract (Art. 6(1)(b)) |
| Race-day photos and video of you | The product you booked | Contract (Art. 6(1)(b)); use in our portfolio only with your separate opt-in (Art. 6(1)(a)) |
| Server logs (IP address, browser, time) | Running and securing the site | Legitimate interest (Art. 6(1)(f)) |
We do not use analytics or advertising cookies. The site sets no cookies of its own.
3. Who processes it for us
- Netlify, Inc. (USA) — hosts the site and stores form submissions (Netlify Forms). Transfers are covered by the EU–US Data Privacy Framework and standard contractual clauses.
- Google Fonts — the site loads its typefaces from Google's servers, which see your IP address when the page loads.
- Email provider [NAME] — for confirmations, payment links and delivery links.
- Payment provider [NAME] — handles the payment itself; we never see your card details.
We do not sell data and do not share it with the event organiser or any other third party.
4. How long we keep it
- Outfit photo: deleted 30 days after the event.
- Booking details (name, email, event, package, start time, bib): 12 months after the event, then deleted, except invoicing data we must keep under tax law (10 years).
- Requests that don't become a booking: deleted 6 months after the last message.
- Your race-day content: available for download for 30 days after delivery; our archive copy is kept for 24 months so we can re-deliver, then deleted. Portfolio use continues only while your opt-in stands.
5. Your rights
You can ask us at any time for access to your data, a copy of it, correction, deletion, restriction, or to object to processing based on legitimate interest. You can withdraw the portfolio opt-in at any time; we then stop using that content publicly. Write to hello@raceframe.studio; we answer within 30 days.
You also have the right to complain to a supervisory authority — in Slovenia the Information Commissioner ([Informacijski pooblaščenec, Dunajska 22, 1000 Ljubljana]) or the authority where you live.
6. Changes
If this notice changes, the date at the top changes with it. Material changes to how we use existing bookings are sent by email.