Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is Pfälzischer Rennverein Haßloch e.V., Rennbahnstraße 158, 67454 Haßloch, DE, represented by its managing director Dr. Boris Rothacker, e-mail: info@rennverein-hassloch.de, telephone: +491791192394 (hereinafter 'we' or 'us'). Pfälzischer Rennverein Haßloch e.V. is committed to data protection. It forms the basis of our relationship of trust with all users of our websites, and we would like to provide you with all information about the storage and use of your data transparently in this Privacy Policy. The data processing is carried out in compliance with the requirements of the GDPR and national data protection laws (in particular BDSG and TDDDG). We only collect personal data from you that you provide yourself, for example when placing orders in our forms, or that is technically required when you visit our website. Only those details that are absolutely necessary for processing the relevant transaction are designed as mandatory fields. All information that may go beyond this can be provided on a purely voluntary basis.

If a data protection officer has been appointed, you can reach them at: info@rennverein-hassloch.de.

Data Processing When Visiting Our Website

You can visit our website and obtain information without having to provide personal details. However, when you visit our site, your browser transmits information to the server of our website. In doing so, the IP address of the requesting computer, date and time of access, name and URL of the retrieved file, the referrer URL, the browser used and, if applicable, the operating system of your computer and the name of your access provider are stored. The processing is carried out for the purpose of ensuring a smooth connection to our website, a comfortable use of the site, and for the evaluation of system security and system stability as well as for administrative purposes.

The legal basis for this processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes for data collection listed here. In no case do we use the data collected for the purpose of drawing conclusions about your person.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. Log files are generally automatically deleted by the system after seven (7) days. Further storage by us does not take place, unless the data are required in individual cases to clarify cases of misuse or security incidents. The collection of data for the provision of our website and the storage of data in log files are absolutely necessary for the operation of the website. Consequently, you do not have the possibility to object.

Contact Form, E-Mail Contact, Telephone Contact, Social Media

We are directly available to you via the contact form. If you use the contact form or contact us via the provided e-mail addresses or telephone numbers, we only collect personal data to the extent provided by you. We only use your e-mail address to process your enquiry. Your data will then be deleted, unless you have consented to further processing and use. The legal basis for this processing is your consent pursuant to Art. 6(1)(1)(a) GDPR.

In addition, we can also be reached via our pages on social networks, for whose data protection the guidelines of the respective social network apply. If contact or communication with us takes place via such social networks, the data processing is carried out in accordance with the applicable data protection guidelines of the social network and additionally these Privacy Policy provisions. In the context of contact, the personal data transmitted with your message will be stored and processed. The legal basis for this processing is your consent pursuant to Art. 6(1)(1)(a) GDPR.

Registration for a Ticket Shop

If you wish to register in our ticket shop and use the form provided for this purpose, you will transmit various personal data to us. This includes in particular the following data:

• Salutation
• First name and surname
• Address
• E-mail address
• Password chosen by the user

Registration of our users is required for general access to purchasing our products and services in the ticket shop. This information is stored in the company's own IT system. The legal basis for this processing is the contract concluded between you and us pursuant to Art. 6(1)(1)(b) GDPR.

At the time of registration, the following additional data are also stored:

• IP address of the user
• Date and time of registration.

The legal basis for the collection of the IP address as well as date and time is our legitimate interest in being able to clarify and prevent cases of misuse, pursuant to Art. 6(1)(1)(f) GDPR.

If you shop as a guest, no user account is created for you and accordingly no further data are processed from you than when visiting our website.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for data collected during the registration process when the registration is cancelled or amended. Data stored beyond this are deleted after the expiry of the statutory retention periods (generally six (6) years pursuant to Section 257 HGB or ten (10) years pursuant to Section 147 AO). As a user, you have the option to cancel your registration at any time. You can have the data stored about you amended at any time by making changes to your user account. Finally, you can request the complete deletion of the user account. If you wish to delete the user account, please send us a corresponding request to the contact details stated in the imprint or this Privacy Policy.

Ordering in the Ticket Shop or via a Call Centre Operated by Us

You can order tickets on our website and via call centres operated by us. In this context, you must transmit various personal data to us that we require for the proper processing of your order.

This includes the following data:

• Salutation*
• First name and surname*
• Street, postcode/city and country*
• Telephone number*
• E-mail address*
• Mobile phone number*
• Date of birth
• Login data (for registered customers)

The information marked with * must be provided mandatorily. The provision of further data is voluntary. You may revoke the provision of voluntarily provided data at any time without giving reasons.

The legal basis for this processing of your personal data is, pursuant to Art. 6(1)(1)(b) GDPR, the purchase contract concluded between you and us. The legal basis for the processing of data that is not mandatory in the ordering process is consent pursuant to Art. 6(1)(1)(a) GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for data used to fulfil a contract or to carry out pre-contractual measures when the data are no longer required for the performance of the contract. Even after the conclusion of the contract, however, it may be necessary to store personal data about you as a contractual partner in order to fulfil our contractual or legal obligations. In particular, commercial and tax law retention periods must be observed (six (6) years pursuant to Section 257 HGB or ten (10) years pursuant to Section 147 AO). After the expiry of these periods, the data will be deleted.

Payment Services

When processing our contractual relationships and orders via our ticket shops, we use various external payment service providers. With the exception of payment by direct debit and invoice, you will be redirected from our ticket shop to the website of the respective external payment service provider to process the payment, where you will then have to enter your data in their payment dialogue. Subsequently, we only receive an automated notification that the payment amount transmitted from our ticket shop to your chosen payment service provider has been paid or a payment has been rejected. We do not receive any further data in this context, in particular your bank details. As we have no influence on the data processing carried out by our external payment service providers, we ask you as our users to also observe the respective data protection conditions of the payment service providers.

For payments by invoice or direct debit, your account details (account number, IBAN, BIC, bank and account holder, if provided) will be communicated to us so that we can execute the payment.

The processing of the data that your payment service provider or you transmit to us is necessary for the fulfilment of the contract concluded with you. The legal basis in this respect is Art. 6(1)(1)(b) GDPR.

Payment data stored by us are stored in encrypted and anonymised form and are deleted after the contractual relationship has been processed, subject to statutory retention periods.

Ticket Secondary Market

If the respective organiser provides a secondary market platform (cf. clause 8.5 of our GTC), you have the option of offering tickets already purchased via this platform for resale to potential secondary buyers. When using the secondary market platform, we process the following personal data: name, contact details (in particular e-mail address), ticket data (event, category, price), transaction data and your account details (in particular IBAN, BIC, account holder and bank). Your account details are stored in order to be able to carry out the financial processing, in particular the payment of the sales proceeds to you, in the event of a successful resale via the secondary market platform. The legal basis for the processing of this data is Art. 6(1)(1)(b) GDPR, insofar as the processing is necessary for the fulfilment of the contract concluded between you and us or the organiser. Insofar as the processing goes beyond the direct fulfilment of the contract, it is carried out on the basis of our legitimate interest in the proper processing of the secondary market sale pursuant to Art. 6(1)(1)(f) GDPR. In the context of the processing of the secondary market sale, your personal data (in particular name and contact details) may be transmitted to the respective secondary buyer and to the organiser, insofar as this is necessary for carrying out the resale and fulfilling the contractual obligations. Your account details are used exclusively for payment processing and are not passed on to the secondary buyer. The data collected in the context of using the secondary market platform are deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your account details will be deleted after the transaction has been fully processed and after the expiry of the statutory retention periods (six (6) years pursuant to Section 257 HGB or ten (10) years pursuant to Section 147 AO). You may request the deletion of your stored account details at any time, provided there is no ongoing transaction via the secondary market platform and no statutory retention obligations preclude this. Please direct such a request to the contact details stated at the beginning of this Privacy Policy.

Interest-Based Advertising Purposes

You may consent to the use of your data for interest-based advertising purposes. In that case, we process the following data:

• Salutation,
• First name and surname,
• Street, postcode/city and country,
• Telephone number or mobile phone number*
• Date of birth
• E-mail address*

We only process data marked with * if they are necessary for the specific advertising medium and covered by your given consent. If you give us your consent to advertising by telephone (SMS or telephone call), we naturally do not process your e-mail address in connection with the marketing measures, and vice versa.

We process your data in this context exclusively for the purpose of sending written and/or electronic advertising information. The legal basis for the use of data is Art. 6(1)(1)(a) GDPR. You may revoke the consent given for the storage of data, the e-mail address and its use for sending advertising information at any time, for example by telephone/e-mail/fax. In the event of revocation, we will block your corresponding contact details for marketing purposes. The processing of your contact details on the basis of the contractual processing remains unaffected by this.

Prize Draw

If you participate in one of our prize draws, you provide us with personal data (first name and surname, e-mail address, sales channel and any further data mentioned in the prize draw terms and conditions). We process these exclusively for the proper conduct of the prize draws and, if applicable, to make contact in the event of a win. The legal basis for the data processing is the prize draw contract pursuant to Art. 6(1)(1)(b) GDPR. Without providing the data, you cannot participate in the prize draw. Your data will be deleted after the prize draw has ended and, if applicable, after contact has been made as a winner, unless statutory or legal obligations require further storage. Participation in a prize draw is voluntary. You may revoke the provision of voluntarily provided data at any time without giving reasons.

Disclosure to Third Parties

We only pass on your personal data if there is a statutory obligation to do so, if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship, or to fulfil our contractual obligations, or if you have expressly consented.

In addition, we pass on your data to third parties insofar as this is required in the context of the use of the website and the processing of contracts, namely the processing of your orders, the handling of your purchases, the delivery of your ordered products and their payment, the provision of the services you desire, in particular for attending events, the analysis of your user behaviour and for the service providers supporting us. As we also act in part on behalf of third parties (organisers), in particular as ticket sellers and brokers, we also pass on data to these parties.

Insofar as we engage external service providers in the context of data processing, we have also ensured in this respect that they are selected and monitored in compliance with the statutory provisions and are also obliged to comply with the data protection statutory provisions. Beyond this, no further disclosure of your data takes place.

Automated Decision-Making

Your personal data are not used on our website for profiling or automated decision-making.

Deletion of Your Data

We do not store your data for longer than is absolutely necessary and only within the framework of the statutory storage and retention obligations. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

With regard to all data processing that we carry out on the basis of your consent (e.g. sending newsletters), we delete your data as soon as you have revoked your consent to us, unless statutory or legal obligations require further storage.

Your Rights

You have, on a statutory basis as a so-called data subject whose personal data are collected, various rights:

Right of access:

Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about the details thereof.

Right to rectification:

Pursuant to Art. 16 GDPR, you may request the immediate rectification of incorrect or the completion of your personal data stored with us.

Right to erasure:

You have the right pursuant to Art. 17 GDPR to request the erasure of your personal data stored with us, unless the processing is required to fulfil a legal obligation, to exercise the right to freedom of expression and information, for reasons of public interest or to establish, exercise or defend legal claims.

Right to restriction of processing:

Pursuant to Art. 18 GDPR, you may request the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful but you refuse its erasure and we no longer need the data but you require them for the establishment, exercise or defence of legal claims, or you have lodged an objection against the processing pursuant to Art. 21 GDPR.

Right to data portability:

Pursuant to Art. 20 GDPR, you may also receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or request the transmission to another controller.

Right to withdraw consent:

Pursuant to Art. 7(3) GDPR, you may withdraw a consent once given to us at any time. This has the consequence that we may no longer continue the data processing that was based on this consent for the future.

Right to object:

If the processing of your personal data is based on the legal basis of our legitimate interests, you have the right to object to the processing. In this case, we ask you to inform us of the reasons for your objection to the processing.

Right to lodge a complaint with a supervisory authority:

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace for this purpose. The supervisory authority responsible for our registered office is the Saxon Data Protection and Transparency Officer, Devrientstraße 5, 01067 Dresden, e-mail: post@sdtb.sachsen.de.

Anonymous Use of Websites, Cookies

The use of our websites is also possible for every user without providing personal data.

When you visit our pages without entering your data in an online form, you generally remain anonymous and only the data mentioned in the section 'Data Processing When Visiting Our Website' are processed. On our websites we use cookies and comparable technologies. These are small text files that are stored on your device when you visit our pages. We distinguish between technically necessary cookies and cookies that are not technically necessary (e.g. analysis or marketing cookies). Technically necessary cookies are set on the basis of Section 25(2) TDDDG in conjunction with Art. 6(1)(1)(f) GDPR without your consent, as they are absolutely necessary for the operation and functionality of our website. Cookies that are not technically necessary are only set with your express consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(1)(a) GDPR. When you first visit our website, a consent banner is displayed to you, through which you can give or refuse your consent to individual cookie categories. You can change your settings at any time via the consent tool provided on our website or withdraw your consent. In addition, you can adjust and also deactivate the use of cookies via the settings options of your internet browser. However, if the use of cookies is restricted, it may be the case that the functionality of our websites is not available to you or is only available to a limited extent.

Privacy Policy for the Use of Meta Plugins (Like Button)

On our pages, plugins of the social network Facebook/Meta may be integrated. These plugins are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter 'Meta'). You can recognise the Meta plugins by the Facebook logo or the 'Like Button' on our page. An overview of the Meta plugins can be found at: developers.facebook.com/docs/plugins/. The integration of the plugins takes place exclusively with your prior consent via our consent tool. Only after you have given your consent will a connection to Meta's servers be established. The legal basis for the processing is your consent pursuant to Art. 6(1)(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Insofar as personal data are collected and transmitted to Meta via the plugins, we and Meta are jointly responsible within the meaning of Art. 26 GDPR for the collection and transmission of the data. The joint responsibility is limited to the collection of the data and their transmission to Meta. The processing by Meta following the transmission is not within our responsibility. The obligations incumbent upon us jointly have been set out in an agreement on joint processing, which is available at the following link: facebook.com/legal/controller_addendum. Meta may transfer the collected data to the USA. For the transfer to the USA, Meta relies on the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. Further information can be found in Meta's privacy policy at: facebook.com/privacy/policy/.

You can withdraw your given consent at any time via our consent tool. If you do not wish Meta to be able to assign your visit to our pages to your Facebook account, please also log out of your Facebook user account.

Privacy Policy for the Use of Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter 'Google'). Google Analytics uses cookies and comparable technologies that enable an analysis of your use of the website. The information generated by these technologies about your use of this website is generally transmitted to a Google server and stored there. Google Analytics 4 uses IP anonymisation as standard, so that your IP address is truncated within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server and truncated there. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR.

The use of Google Analytics takes place exclusively with your prior consent via our consent tool. The legal basis for the processing is your consent pursuant to Art. 6(1)(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Google may transfer the collected data to the USA. For the transfer to the USA, Google is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google.

You can withdraw your given consent at any time via our consent tool. In addition, you can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout. Further information on data protection at Google can be found at: policies.google.com/privacy.

Privacy Policy for the Use of X (formerly Twitter)

On our pages, functions of the service X (formerly Twitter) may be integrated. These functions are offered by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The integration of the X functions takes place exclusively with your prior consent via our consent tool. Only after you have given your consent will the websites you visit be linked to your X account and made known to other users. In this process, data is also transmitted to X. The legal basis for the processing is your consent pursuant to Art. 6(1)(1)(a) GDPR in conjunction with Section 25(1) TDDDG. X may transfer the collected data to the USA. For the transfer to the USA, X relies on the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.

We point out that as the provider of the pages, we do not receive any knowledge of the content of the transmitted data or its use by X. Further information on this can be found in X's privacy policy at: x.com/de/privacy.

You can withdraw your given consent at any time via our consent tool. You can also change your data protection settings at X in the account settings at x.com/settings/account.

Links to Other Websites or Services

Within the services of our website or our ticket shops, there may be links to the websites of other providers. As we have no influence over these websites and services, we recommend that you inform yourself about the data protection information that may be provided there. We accept no responsibility for the content of the linked pages.

Transfer of Data to Third Countries

Insofar as we process data in a third country (i.e. outside the European Union or the European Economic Area) or this takes place in the context of using third-party services, this only occurs if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to statutory or contractual permissions, we only process or have data processed in a third country if the special conditions of Art. 44 et seq. GDPR are met. The data processing is carried out in particular on the basis of adequacy decisions of the European Commission (e.g. EU-US Data Privacy Framework), by concluding EU standard contractual clauses or through other appropriate safeguards pursuant to Art. 46 GDPR. Insofar as we use service providers in the USA who are certified under the EU-US Data Privacy Framework, we base the transfer on the adequacy decision of the European Commission of 10 July 2023. Further information on the safeguards used is available upon request. Contact details can be found at the beginning of this Privacy Policy.

Order Processing and Cooperation with Event Organisers

egocentric Systems GmbH operates a ticketing platform that is made available to event organisers as a technical solution (Software-as-a-Service). Within the scope of this cooperation, egocentric Systems GmbH processes personal data of customers both as an independently responsible controller (in particular for the operation of the website and the technical processing of ticket sales) and as a data processor within the meaning of Art. 28 GDPR on behalf of the respective event organiser. Insofar as egocentric Systems GmbH acts as a data processor, the processing takes place exclusively on the instructions of the respective event organiser and on the basis of a data processing agreement pursuant to Art. 28 GDPR. The personal data collected in the course of the ticket purchase (in particular name, address, e-mail address, order data) are transmitted to the respective event organiser insofar as this is necessary for the conduct of the event and the fulfilment of the contract concluded between the customer and the event organiser. The legal basis for this is Art. 6(1)(1)(b) GDPR. The respective event organiser is independently responsible for the processing of data after transmission. Please note the privacy policy of the respective event organiser in this regard.

Due to the rapid development of the internet and possible adjustments to our processes, it may be necessary for us to revise and update this Privacy Policy from time to time. This version is as of March 2026.

This translation was created automatically (including with the assistance of AI) and is for informational purposes only. The German original version is the only binding and authoritative version. In the event of contradictions or questions of interpretation, the German text shall prevail.

March 13, 2026