At Hybiza Race (hereinafter, "Hybiza Race," "we," or "us"), we are committed to protecting your privacy. This Policy explains what information we collect, why we collect it, how we use it, and what your rights are regarding your personal data when you use our services and participate in our events.

1. Scope

This Policy applies to the data we collect through our website, applications, and associated services, as well as information related to registrations, product purchases, and event participation. It does not apply to data collected by third parties with whom we interact, who will have their own privacy policies.

2. Information We Collect

a) Information you provide to us

When you register or sign up for an event, we may collect: name, email address, phone number, postal address, date of birth, ID/NIE number, emergency contact details, and payment information (processed by external providers). We may also receive data from event registrars or ticket sales platforms used to manage registration.

b) Information we collect automatically

We collect technical information when you interact with our Site, such as IP address, session identifiers, browser, pages visited, access times, and referrals. This data is used for the Site's operation, analysis, and improvement.

c) Cookies and similar technologies

We use cookies to improve the user experience, personalize content, and perform analysis. You can manage or disable cookies from your browser settings; please note that some functionalities may be affected.

3. Purposes of processing

We use your personal data for: managing registrations and payments, communicating with you (confirmations, operational notices, commercial communications with your consent), managing participants, and creating statistics and analysis to improve our services.

4. Legal basis

Depending on the processing, we rely on the consent of the data subject, the execution of a contract (e.g., event registration), or legitimate interest for service improvement and fraud prevention, always respecting your legal rights and guarantees.

5. Communication and transfer to third parties

We may share your data with providers who act as data processors (payment processors, registration platforms, messaging or analytics). We only share the data necessary to provide the service and we sign contracts that guarantee security and confidentiality. We may also disclose data when required by law or to protect rights and the safety of individuals.

6. International transfers

Your data may be transferred outside the European Economic Area when providers are located in foreign jurisdictions. In such cases, we adopt appropriate safeguards (standard contractual clauses or other measures) to protect your rights, and, where applicable, we will ask for your consent for the international transfer.

7. Security

We implement reasonable technical and organizational measures to protect personal data against loss, unauthorized access, or misuse. However, no internet transmission is completely secure; we recommend taking precautions when sharing information.

8. Data retention

We retain your data for the time necessary to fulfill the purposes for which it was collected, including legal and tax obligations. The criteria for determining the retention periods include the nature of the data and the applicable legal requirements.

9. Data subject rights

You can exercise the rights of access, rectification, erasure, restriction, objection, and data portability under the terms provided by the applicable regulations (GDPR). To exercise these rights, contact us at info@hybizarace.es. We reserve the right to request additional information to verify your identity before responding to the request.

10. Specific rights (U.S. / California)

If you are a resident of California, you may have additional rights under the CCPA/CPRA, such as knowing what categories of data have been collected and the deletion or opt-out of processing for commercial purposes. Contact us for more details.

11. Minors

Our services are not directed at minors without the verifiable consent of their parents or guardians. We will only process data of minors when necessary for event registration and with the authorization of the legal guardian where applicable.

12. Changes to this Policy

We may update this Policy occasionally; we will publish the updated version on this page with the revision date. We recommend that you review it periodically.

13. Links to other sites

Our Site may contain links to third-party pages (registration platforms, payment gateways, social networks). These entities have their own policies; we are not responsible for their practices.

14. Contact

If you have questions about this Policy or wish to exercise your rights, please write to info@hybizarace.es.