Privacy Policy

1. Data Controller

Vessia Racing is the data controller for the personal data collected through this website. Vessia Racing is an informal racing team/community without its own registered organization number. If you have questions about privacy or wish to exercise your rights, you can contact us at vessiaracing@gmail.com.

2. Data Protection Officer

Vessia Racing is not required to have a data protection officer and has not appointed one. Privacy-related inquiries should be directed to the contact email above.

3. What information we collect

When you create an account, we store:

• Name
• Email address (used only for login and to contact you about your account)
• Password (never stored in plain text — only as an irreversible, salted hash)
• Self-selected experience level

In addition, you may optionally add:

• Profile picture and bio
• A connection to your iRacing account (iRacing Customer ID and statistics such as iRating, safety rating, and license class, retrieved via iRacing's official API)

4. Purpose and legal basis

Your name, email, and password are processed in order to create and manage your user account and give you access to log in to the website. This is necessary to provide the service to you, pursuant to the General Data Protection Regulation (GDPR) Article 6(1)(b) (performance of a contract).

Profile picture, bio, and the iRacing connection are optional and are processed on the basis of your consent, pursuant to GDPR Article 6(1)(a). You may withdraw your consent at any time by removing this information from your profile page, without affecting the lawfulness of processing carried out before the withdrawal.

5. Who we share information with

We use the following data processors to operate the website:

• Supabase — database and storage of user data
• Vercel — hosting of the website and storage of uploaded images
• iRacing — only if you choose to connect your iRacing account, in order to retrieve your statistics

We never sell your personal data, and we do not share it with any third parties other than those mentioned here.

6. Transfers to countries outside the EU/EEA

Our data processors (Supabase and Vercel) may process and store data on servers located outside the EU/EEA. In such cases, the transfer is safeguarded through the European Commission's Standard Contractual Clauses or an equivalent approved transfer mechanism used by the provider.

7. How long we store your information

We store your information for as long as you have an active user account with us. You can delete your account and all associated information yourself at any time, using the "Delete Profile" button on your profile page. This permanently and immediately removes your data from our systems.

8. Your rights

Under GDPR Articles 15–21, you have the right to:

• Access the information we hold about you
• Have inaccurate information corrected
• Have your information deleted ("the right to be forgotten")
• Request restriction of processing
• Object to processing
• Receive your information in a structured, machine-readable format (data portability)
• Withdraw consent at any time

To exercise your rights, contact us at vessiaracing@gmail.com. You may also file a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we are processing your personal data in violation of the regulations: datatilsynet.no.

9. Is providing this information mandatory?

Name, email, and password are required to create a user account — without these, we cannot create or manage your account. Profile picture, bio, and the iRacing connection are entirely optional, and choosing not to add them has no impact on your account access.

10. Automated decision-making and profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

11. Security

Your password is stored only as a salted hash and never in plain text. All traffic to the website is encrypted (HTTPS), and access to administrative parts of the system is restricted to team management.