Privacy policy

1  Who we are

Evenyo is the platform for karting at evenyo.io, offered by TotalWebCreations (sole proprietorship, trading as Evenyo), Henry Dunantweg 6, 7161 WS Neede, the Netherlands, registered with the Dutch Chamber of Commerce under number 75833506.

Questions about privacy go to [email protected].

2  Two roles

If you enter a club or championship as a driver, that organisation is responsible for your data. Evenyo processes it on behalf of the organisation, under a data processing agreement. For a question or request about that data, contact the organisation; you can also manage a lot yourself in your profile.

For this website, for demo requests and for administrator accounts, Evenyo itself is responsible.

3  Which data we process

From visitors of this website and from people who request a demo:

• name, club or organisation, email address, phone number and the message you send
• technical data needed to show and secure the site, such as your IP address

From administrators of an organisation:

• name, email address and role
• when they logged in and which changes they made

From drivers, on behalf of the organisation:

• name, date of birth, address, email address and phone number
• licence, race number, class and, where applicable, federation licence, team and equipment
• entries, orders, payments and invoices
• times, results, standings, reports and penalties
• name and contact details of a parent, guardian or team manager

From officials, on behalf of the organisation: name, phone number, role and the reports they make.

4  What we use it for

• To plan a demo and answer questions. We do this because you ask us to.
• To run the platform: entries, payments, the timetable, race day, live timing, race control and results. This is necessary for the agreement between the driver and the organisation.
• To send messages about an entry or event, such as a confirmation or a changed timetable.
• To keep invoices. This is required by law.
• To secure the platform and find errors.

We do not sell data and do not use it for advertising.

5  Drivers under 16

If a driver is under 16, a parent or guardian gives consent before the entry becomes final. This can be done through a link by email or at the track.

6  Who we share data with

We only share data with parties that are needed to run Evenyo:

• Hetzner: the servers and the database, in the European Union
• Amazon Web Services: storage of files and photos, in Frankfurt
• Cloudflare: security and routing of traffic to our servers
• Mollie: payments and refunds
• Mailgun: sending confirmations, login codes and messages
• Google Firebase: notifications in the apps
• Apple and Google: only if you add a pass to your Wallet
• the accounting software the organisation chooses, such as Moneybird or e-Boekhouden: invoices
• MYLAPS: the integration with the timing system

Some of these parties are American. Insofar as data leaves the European Union as a result, this happens on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.

Results and entry lists are public if the organisation chooses so. They show your name, race number and class.

7  How long we keep data

• Invoices and payments: seven years, as required by law.
• Driver data: as long as the organisation sets. After that it is deleted or anonymised automatically.
• The log of changes in the back office: two years.
• Demo requests: up to twelve months after the last contact.

8  Cookies

This website only uses cookies that are needed to make the site work, for example to send the demo form securely. We do not use cookies to track you and no advertising cookies.

9  Your rights

You may view your data, have it corrected, have it deleted and take it with you. You may also object to its use.

• As a driver you download your data in your profile, and you can delete your account there. The deletion becomes final after 14 days; until then you can withdraw it.
• When you delete your account, invoices are kept. Results remain without your name, unless the organisation has chosen to keep names in results.
• For other requests, email the organisation, or us at [email protected]. You get an answer within a month.

If you disagree with how your data is handled, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10  Security

Each organisation’s data is separated from the others in the database. We store sensitive data encrypted, we do not keep login codes in readable form, and changes in the back office are logged. Only those who need it for their work can access the data.

If something does go wrong with personal data, we report it to the organisation and, where required, to the Dutch Data Protection Authority.

11  Changes

We update this policy when Evenyo changes. The latest version is always at evenyo.io/en/privacy, with its date.