This confidentiality policy informs you about the personal data that we collect when you use our website, and our mobile app. By collecting this information, we are acting as the Data Controller and, under the GDPR Act, (General Data Protection Regulation EU 2016/679), we are obliged to provide you with information on our company, on why and how we use your data, and on the rights you have concerning your personal data.

1. Who are we

We are the company, SPA GRAND PRIX S.A. Our address is 38, Route du Circuit | 4970 Stavelot | Belgium.
You may contact us by post to this address, or by email to the address [email protected] or by telephone to +32 (0) 87 22 44 66.

We are not obliged to have a data protection officer, so all requests for information concerning our use of your personal data must be addressed to the contact information above.

1.1. Publication and hosting on our website:

The website https://www.spagrandprix.com is published and developed by the company:

SYNCHRONE S.P.R.L.
Rue du Fort 5,
4671 Barchon, Belgique.

The website https://www.spagrandprix.com is hosted by the company:

OVH SAS
RCS Lille Métropole 424 761 419 00045
Code APE 2620Z
Siège social : 2 rue Kellermann - 59100 Roubaix - France

1.2. Publication and hosting of our mobile app:

The mobile app is published and developed by the company:

DEUSE S.r.l.

Siège social : 72, Rue Cochêne, 4680 Hermée - Belgique

The mobile is hosted by the company:

OVH SAS

RCS Lille Métropole 424 761 419 00045
Code APE 2620Z
Siège social : 2 rue Kellermann - 59100 Roubaix – France

2. Site internet : How we use your data ?

2.1. When you make a contact request via Our Website

When you make a contact request on our website, we ask you for your surname, first name, email address, phone number and your postal address.

We use this data in order to respond to your request for information, including provision of all the information you requested on our products and services. We may also contact you several times after your request for contact in order to follow up on your request for information. We will do this according to our legitimate interest in providing exact information before and after a sale or a request for information or for contact.

We retain the emails looking for information or for contact for a period of two years, after which these emails are permanently deleted.

2.2. When You Create an Account on Our Website

When you create an account on our website, we ask for your last name, first name, and email address.

We use this information to open your account. We may contact you after your account registration request to inform you about our products and services using the provided email address.

Your information is retained as long as you keep your account on our website. You can delete your account at any time, in which case your registration information will be immediately removed from our database. Creating an account on our website also allows you to log in to our mobile application using the same credentials after downloading and installing it. Deleting your account on the website will automatically result in the deletion of your mobile application account, and vice versa. Deleting your account does not automatically unsubscribe you from our Newsletter if you have subscribed to it.

2.3. When You Make a Purchase on Our Website

When you make a purchase on our website, we ask for your last name, first name, date of birth, email address, phone number, and, if applicable, your website address, company name, and VAT number, as well as your address and country.

We use this information to process and fulfill your order. We may contact you after your purchase to ensure proper follow-up. Your information is retained for as long as necessary to comply with our legal obligations regarding the retention period of accounting documents.

2.4. Policy in relation to Cookies

With the aim of facilitating your browsing online as well as optimising technical management, this website may use "cookies".

A cookie is a text file sent by a website to your browser to store certain types of data. This cookie may be retrieved during a subsequent visit to that site. The cookie can only be read by the website that has created it. Our website uses cookies for administrative purposes such as recording your preferences in regards to certain types of information, which allows you having to repeat the same keyboard entries each time you visit our site.

Most Cookies only function for the time of a session or visit. None of them contain information that make you susceptible to being contacted by phone, email or by post. It is also possible to configure your browser to be informed each time a cookie is installed or to prevent their recording.

2.4.1. Use of Cookies

When you use our website to see products and services and the information that we make available, a certain number of cookies are used by us and by third parties to allow the site to operate, to collect useful information on visitors and to improve your user experience.

Some of the cookies that we use are absolutely necessary in order for our website to function correctly, and we do not ask your permission to place them on your computer. These are "Necessary" cookies.

However, for cookies that are useful but not strictly necessary, we will always ask for your consent before placing them. As well as the cookies that we use, various third parties may also place cookies on your computer. All of these cookies will be placed on your computer only with your consent. This relates to "Preference", "Statistical" and "Marketing" cookies.

2.5. Payment in installments via Alma

When you choose a payment-in-installments option offered on our site, certain personal data concerning you is transmitted to our partner Alma, a simplified joint-stock company (*société par actions simplifiée*) authorized as a payment institution and financing company.

Data concerned: identification data (surname, first name), contact details (email address, telephone number, postal address), order-related information (amount, type of tickets).

Purposes: to assess your eligibility for payment in installments (creditworthiness analysis), manage the financing and payment schedule, prevent fraud, and comply with Alma’s legal obligations regarding the fight against money laundering and terrorist financing.

Responsibility: Alma acts as an independent data controller within the meaning of the GDPR (EU 2016/679). Spa Grand Prix acts as the data controller for processing operations related to ticket order management.

Legal basis: Article 6.1(b) of the GDPR – performance of the installment payment contract you have requested.

Automated decision-making: acceptance or refusal of payment in installments is based on an automated analysis performed by Alma. You may contest a decision directly with Alma.

Transfers: Alma may use subcontractors located outside the European Economic Area, subject to the appropriate safeguards provided for by the GDPR.

Rights: for processing operations carried out by Alma, please consult their privacy policy: https://almapay.com/legal/privacy-policy

3. Mobile App : How we use your data

3.1. When You Create an Account on Our Mobile Application

When you create an account on our mobile application, we ask for your first name, last name, email address, phone number, date of birth, and country. Creating your account also allows you to log in to our website using the same login credentials. If you delete your account on the mobile application, your account on the website will also be deleted, and vice versa.

We may contact you after your account registration request to inform you about our products and services using the provided email address. Deleting your account does not automatically unsubscribe you from our Newsletter if you have subscribed to it.

3.2. Policy in relation to Software development kit (SDK)

The term SDK, Software Development Kit, describes a range of tools intended for IT development for software design. games, apps on a device and/or an operating system. The SDK mobile is a box of tools that facilitate the development or enrichment of an app.

A SDK mobile is comprised of various modules in order to allow developers to operate the native functions of the phone (GPS, bluetooth, camera, etc.) and for marketing and statistical purposes.

3.3. Use of SDK

The SDKs that we use are strictly necessary for the functioning of our mobile app. We use SDKs in order to allow us to use;

Your geolocation: that will allow the mobile app to give you your location at the Circuit of Spa.
Notifications: in order to send you practical information and to give you the results of the various races.
Your camera in order to scan the QR Code on your ticket and to be able to present it with your mobile app during the control monitoring at the various entrances.

These three functionnalities (geolocation, notifications and camera) will be subject to your prior consent during the use of the app.

We do not collect any data in regards to your GPS position in regards to taking photo or video images. The GPS chip and your phone camera are used (after consent), but no data is collected. The position is used in real time and the information remains locally on your phone and is not transferred to our servers. Likewise, in regards to your camera as it’s used to recognise the QR codes but no photo or video image will be recorded.

We do not use SDKs in relation to marketing or statistics.

4. When you register to receive our Newsletter

When you register to receive our Newsletter, we ask for your email address.

By registering for our newsletter, you give your consent to receive information on our products, services and other information that, in our opinion, could interest you.

You may retract your consent at any time and we will stop sending you our newsletter. Your details will be retained as long as you continue to consent to receive our newsletter.

5. When you participate in a contest

When you participate in a contest organized by Spa Grand Prix S.A., we collect the information you provide in the participation form, namely your first name, last name, and email address.

We use this information to manage your participation and select the winners. The legal basis for this processing is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.

Your data is retained for the duration of the contest and deleted no later than 3 months after the announcement of the winners. The data of the winners is retained for as long as necessary to deliver the prize and comply with our legal obligations.

If you have consented, by ticking a checkbox in the participation form, to Spa Grand Prix S.A. reposting the content you publish as part of the contest on its communication channels, this processing is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw this consent at any time by writing to [email protected].

6. Image and sound recording at our events

During our events, you may be photographed or filmed, particularly in the context of general crowd shots, broadcasts on giant screens, or the production of communication and promotional content for the event.

This recording may be carried out by Spa Grand Prix S.A., its service providers, or accredited third parties acting to promote the event.

The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR—namely, the communication and promotion of the event.

We ensure that such recording focuses on the general atmosphere of the crowd and avoids, as far as possible, the prolonged and identifiable isolation of an individual without their consent, particularly in the case of minors.

If you appear in an identifiable manner in content distributed by Spa Grand Prix S.A. and wish to exercise your rights, you may contact us at [email protected], specifying the date, location, and circumstances of the recording.

7. Sharing and transfer of your data

Your information is stored in our databases located in Europe. It may be shared with the following partners for the purpose of providing our services: Synchrone for ticketing management, Deuse for mobile application management, and Alma for managing installment payments when you select this payment method. In the latter case, Alma acts as an independent data controller. Data may be transferred outside the EEA by Alma under the conditions described in Section 2.5 above.

8. Links to other websites

Our communications, website or mobile application may contain links to other websites. We are in no way responsible for the privacy or commercial practices of these sites or their services. We invite you to familiarize yourself with their own privacy and commercial policies.

9. Your right as a person concerned

In order to exercise your rights in relation to the protection of personal data (right of access, to deletion, to portability, to opposition, to oblivion, to correction, to restrictions on processing), or for any other information concerning your personal data, you can contact us directly by sending an email to the email address: [email protected] or by writing to the postal address: 38, Route du Circuit | 4970 Stavelot | Belgium.

10. Your right to lodge a complaint

If you have a complaint to make in regards to our use of your personal information, you may contact us directly or lodge a complaint with:

Commission for Data Protection: :

Rue de la Presse, 35, 1000 Bruxelles
Tél. : +32 (0) 2 274 48 00
[email protected]

11. Updating our Confidentiality Policy:

We update our confidentiality policy on a regular basis, in line with the development of our services. If the use of your personal data evolves, or if we wish to use your personal data in a way other than that for which you have given your consent, we will contact you to provide you with additional information and, where necessary, to ask again for your consent.

We will update the number of the version and the date of this document each time it is amended.

Version 4, 19 May 2023.