Privacy Policy
This is a translation for your convenience. The German version is legally binding. View the German version.
General
This privacy policy informs visitors/users like you about the nature, scope and purposes of the collection and use of personal data on the online offerings of the provider. This includes this website, its functions and content as well as external online presences, such as social media profiles (collectively referred to below as the "online offering").
Provider of this website:
BLUEMLE Motorsport & Events
Owner: Manfred Blümle
Hauptstraße 101
D-56566 Neuwied
Mobile: +49 171 41 14 817
Email: info@bluemle-motorsport.de
(see also Legal Notice).
The legal basis for data protection can be found in the General Data Protection Regulation (GDPR). For the terms used, please refer to the definitions in Art. 4 GDPR.
When visiting my online offering website, the IP address and the time of the user action are stored. This storage is based on my legitimate interest as well as the interest of visitors/users in protection against misuse and other unauthorized use. This data is generally not passed on to third parties. Exception: it is necessary to pursue my claims pursuant to Art. 6 (1)(f) GDPR or there is a legal obligation to do so pursuant to Art. 6 (1)(c) GDPR.
Web hosting
The online offering and its associated functions (data storage, database, email delivery, security functions, encryption certificate, maintenance) are provided by my hosting provider.
Inventory data, contact data, content data, contract data, usage data, and communication data of customers, prospects and visitors are processed on the basis of my legitimate interest pursuant to Art. 6 (1)(f) GDPR in conjunction with Art. 28 GDPR. I have concluded a data processing agreement with my hosting provider for this purpose.
Server data, access data, log files
My hosting provider collects (legitimate interest, Art. 6 (1)(f) GDPR) data on every access to the server on which this online offering is located (log files). This includes the URL/name of the accessed webpage and file, the date and time of access, the amount of data transferred, a message about successful retrieval or error messages, the browser type and version, the user's operating system, a possible referrer URL (where the request to this page came from), the IP address, and the telecommunications provider used.
Security
If I engage third parties to process data on the basis of a so-called "data processing agreement", this is done on the basis of Art. 28 GDPR.
A defense tool is used for security against malicious attacks, which also processes and stores dynamic IP addresses. This is a legitimate interest so that the online offering can be operated smoothly and securely for all visitors.
Cookies
Cookies are small files that make it possible to store device-specific information on the user's access device (PC, smartphone, etc.). This website uses technically essential cookies as well as Google Analytics and Google Fonts, but completely refrains from further marketing-based cookies.
You can manage many online advertising cookies of companies via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/ . Please also pay attention to your browser settings and adjust them for your security.
Google Analytics
On the basis of my legitimate interest (analysis, optimization of my online offering within the meaning of Art. 6 (1)(f) GDPR) I use Google Analytics. Cookies are used here. The information generated by the cookie through the user's visit to the website is generally transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google uses this information on my behalf to evaluate the use of my website and compile reports. Pseudonymous user profiles can be created from the processed data.
I use Google Analytics with IP anonymization enabled. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. However, in exceptional cases the full IP address may be transferred to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies through a corresponding setting of their browser software: The browser plugin available at the following link can be downloaded and installed: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on data use, settings and objection options can be found on Google's websites: https://www.google.com/intl/de/policies/privacy/partners, http://www.google.com/policies/technologies/ads, http://www.google.de/settings/ads.
You can prevent Google Analytics from collecting your data by clicking the following link. An opt-out cookie will be set, which prevents the collection of your data during future visits to this website: Disable Google Analytics.
Fonts – external integration
The fonts (Google Fonts) of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, are integrated into my website and are stored locally on the server and loaded from there. The user's IP is not forwarded to Google.
Further information on Google's privacy policy https://www.google.com/policies/privacy/ as well as on opt-out: https://adssettings.google.com/authenticated.
Contact via forms, email and other media
When contacting me via contact form, email, telephone or social media, the user's details are processed for the purpose of handling the inquiry or message and its processing in accordance with Art. 6 (1)(b) GDPR. User details may be stored digitally and/or in paper form.
Inquiries and messages are deleted if retention is no longer required. I review the necessity every two years. The statutory archiving obligation takes precedence.
The form fields "Name" and "Phone" are marked as mandatory fields based on legitimate interest, as my communication is customer-oriented and follow-up questions can often only be answered directly by phone (provision of contractual services, service). Of course, pseudonyms or abbreviations can also be used for simple inquiries - except when it comes to binding information that entails contractual cooperation. All other additionally offered fields for completing the form are voluntary information that the user may, but does not have to, provide. A math task is included to prevent spam, which must be solved.
Order forms
The website contains forms that trigger a binding booking or booking request (which must be confirmed by me). The information marked as required is necessary to establish and fulfill the contract. I disclose the data to third parties only within the scope of execution (e.g. at racetracks for registration/entry), payment, or within the scope of legal permissions and obligations towards legal advisors and authorities.
Deletion takes place after the expiry of statutory warranty and comparable obligations. The retention of the data is reviewed every three years. Statutory archiving obligations are observed (6 years under commercial law and 10 years under tax law).
Newsletter / customer information via Mailchimp
Distribution takes place via the service provider "MailChimp" (newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA). You can view MailChimp's privacy policy here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC (MailChimp) is certified under the Privacy Shield agreement and offers a European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used on the basis of my legitimate interest pursuant to Art. 6 (1)(f) GDPR and a data processing agreement pursuant to Art. 28 (3) sentence 1 GDPR.
The dispatch service provider may use the recipients' data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for technical optimization of dispatch and presentation of the newsletter / for statistical purposes. However, the dispatch service provider does not use the data of newsletter recipients to write to them itself or to pass the data on to third parties.
I only send newsletters with the consent of the recipients (e.g. in contact forms or order forms).
Double opt-in and logging:
Registration (except for contact or order form inquiries) for my newsletter takes place using a double opt-in procedure. After registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that it is your own email address and that no third-party data has been used for registration. Newsletter registrations are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the registration and confirmation times, as well as the IP address.
Registration data: To register for the newsletter, your email address is sufficient. Optionally, I ask you for a name for personal address.
The dispatch of the newsletter and the associated success measurement take place on the basis of the recipients' consent pursuant to Art. 6 (1)(a), Art. 7 GDPR in conjunction with Section 7 (2) No. 3 UWG (German Unfair Competition Act) or, if consent is not required, on the basis of my legitimate interest in direct marketing pursuant to Art. 6 (1)(f) GDPR in conjunction with Section 7 (3) UWG.
Cancellation/revocation - You can cancel receipt of my newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of every newsletter. I may store the removed email addresses for up to three years on the basis of my legitimate interests before deleting them, in order to be able to prove previously given consent. Processing of this data is limited to the purpose of possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.
Newsletters contain a pixel-sized file, not visually visible, that is retrieved when opened. As part of this retrieval, technical information (browser/system, IP address and time of retrieval) is initially collected.
This information is used for the technical improvement of the services. It is also possible to see whether the newsletters are opened, when/how often they are opened and which links are clicked. This information can be assigned to individual newsletter recipients - for technical reasons. However, it is not my intention to observe individual users. Rather, the evaluations serve to help me recognize reading habits and adapt content to them and send it according to the interests of the users.
Unfortunately, a separate revocation of success measurement is not possible; in this case, the entire newsletter subscription must be canceled.
Business-related data processing
I process inventory data (basic customer data such as names and addresses), contact data (email, phone numbers), content data (e.g. text entries, photographs, videos), contract data (e.g. subject matter of the contract, duration), and payment data (bank details, payment history) from my customers and business partners. I generally do not process special categories of personal data unless these are part of a commission. Inquiries from prospective customers are also stored together with the associated data.
The purpose of the processing is to provide contractual services, billing and customer service. The legal bases for processing arise from Art. 6 (1)(b) GDPR (contractual services), Art. 6 (1)(f) GDPR (analysis, statistics, optimization, security measures).
Office organization, financial accounting, contact management
The purpose and interest in data processing lies in administration, financial accounting, office organization, and data archiving. This serves to maintain my business activities, fulfill tasks, and provide my services. I disclose/transmit data to the tax administration, tax advisors and other fee offices and payment service providers. I use software for this that is appropriately secured. For support purposes, the software provider may be granted access (remote maintenance). This is done on the basis of my legitimate interest and is documented by a data processing agreement.
I delete the data after the expiry of statutory warranty and comparable obligations. The need for data retention is reviewed every three years. In the case of statutory archiving requirements, deletion occurs after the respective expiry periods.
Furthermore, based on my business interests, I store information about suppliers, organizers and other business partners, e.g. for contact purposes. I generally store this predominantly company-related data permanently.
Revocation, changes, corrections and updates, and deletion
You have the right to information about data concerning you as well as further information and a copy of the data pursuant to Art. 15 GDPR.
Pursuant to Art. 16 GDPR, you have the right to complete data concerning you or to correct incorrect data.
Pursuant to Art. 17 GDPR, you have the right to have the relevant data deleted without delay. Alternatively, pursuant to Art. 18 GDPR, you may request a restriction of the processing of the data.
You have the right to receive the data concerning you that you have provided to me pursuant to Art. 20 GDPR and to request its transfer to other controllers.
You have the right to revoke consents given (pursuant to Art. 7 (3) GDPR) with effect for the future.
Duty to provide information
Users have the right to receive, upon request and free of charge, information about the personal data stored about them. You can exercise this right to information at any time by sending me an email (see Legal Notice).
If you have further questions that go beyond the scope of this privacy policy, please contact me with confidence. I am available at any time to provide information and explanations.
Presence on social media (external)
I am active on online presences within social networks and platforms. I communicate there with customers, prospects and users who are active there. I also inform them about my professional offerings.
I would like to point out that data from the respective user accounts may be processed outside the European Union. This may involve risks because, for example, the enforcement of users' rights could be made more difficult. With regard to US providers certified under the Privacy Shield, I point out that they commit to complying with EU data protection standards.
User data on social media is generally processed for market research and advertising purposes. For example, profiles based on usage behavior and resulting interests of users can be created. These usage-based profiles can, in turn, be used to place advertisements within and outside the platforms that may correspond to the interests of the users. As a rule, cookies are stored on users' computers, in which usage behavior and possibly interests of the users are stored. In addition, user data can also be stored in the profiles independently of the devices used (especially if the users are members of the platforms used and are logged in).
The processing of users' personal data takes place on the basis of my legitimate interest in effective information for users and communication with users pursuant to Art. 6 (1)(f) GDPR. If users are asked by the respective providers for consent to data processing (i.e. they give their consent by checking a checkbox or confirming a button or similar), the legal basis for processing is Art. 6 (1)(a), Art. 7 GDPR.
For a detailed presentation of the processing and objection (opt-out) options, please refer to the links of the respective providers.
In the case of information requests and the assertion of user rights, I point out that it is best to assert these directly with the providers. Only the providers of the social media platforms have access to the users' data and can provide direct information.
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads, http://www.youronlinechoices.com - YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy policy: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated - Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
Privacy policy / opt-out: http://instagram.com/about/legal/privacy/ - Twitter/X (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Privacy policy: https://twitter.com/de/privacy
Opt-out: https://twitter.com/personalization - Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA)
Privacy policy / opt-out: https://about.pinterest.com/de/privacy-policy - Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
Privacy policy / opt-out: https://privacy.xing.com/de/datenschutzerklaerung - LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Cookie policy: https://www.linkedin.com/legal/cookie-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Last updated: 13.08.2026
Manfred Blümle, BLUEMLE Motorsport & Events