Privacy Statement

1. Introduction & Scope

This Privacy Statement explains how Creventic B.V. (“Creventic”, “we”, “us”, “our”) collects, uses, and protects personal data through the Creventic app and the systems it connects to, in the course of organising and running our race events. The Creventic app is used across all Creventic series: Michelin 24H Series, Michelin 992 Endurance Cup, Prototype Cup Europe, and Radical Cup Europe.

Data controller: Creventic B.V. is the data controller for all data processed through the app and related event-management systems, regardless of which series or region an event belongs to.

Events in the Middle East are organised by Creventic International DWC-LLC (Dubai), a related entity. All app and systems data processing runs through Creventic B.V.’s systems.

This Privacy Statement covers the app and the operational systems behind our events. It does not cover cookies used on our websites — for that, see our separate Cookie Statement.

2. What Data We Collect

We collect different data depending on your role. This is broader than a single flat list, because a driver, a team manager, a guest, and a visitor each trigger different data needs.

2.1 Account & contact data (all users)

Name
Email address
Contact information (as applicable to your role)

2.2 Driver data

Required for the official event entry and administrative check:

Full name, nationality, gender, date of birth
Email address, mobile phone number
Emergency contact phone number
Home address
Race license number, license grade, and ASN (national sporting authority)
Passport number

Licenses and signed waivers are shared with the circuit hosting each event, for all drivers — this is standard event administration, not specific to any age group (see Section 7). Passport numbers are collected from all drivers but only actually used or shared when a specific circuit’s waiver requires it.

2.3 Minor drivers (16–18 years old)

In addition to the driver data above, for drivers aged 16 or 17 we also collect:

Parental / guardian consent form, including the parent or guardian’s own name, relationship to the driver, contact details, and a copy of their ID
Where a specific circuit requires it, that circuit’s own waiver and/or parental consent form, completed as part of event sign-on

16 is the minimum age for driver participation across our series.

2.4 Guests

Guests (invited by a team or driver) provide: name, date of birth, and — for anyone aged 12 or older — an email address. Guests under 12 may be registered by the inviting team member without their own email, since they do not need independent app access.

2.5 App usage data

Your Pass: a personal QR code used for event access and catering
Catering orders, including payment data processed via our payment provider
Uploaded documents: licenses, signed waivers, entry forms
Tyre registrations and pitstop data (24H Series)
Penalty and fuel registration data
Messages sent via in-app chats with Race Control and Creventic Organisation
Push notification tokens

2.6 Technical / usage data

Device type, operating system, app version
IP address
Diagnostic and crash data

3. Legal Basis for Processing

Contract: processing needed to register you for, and let you participate in, an event (drivers, teams, guests).
Consent: used specifically where required — most notably for minors’ data, see Section 4.
Legitimate interest: event safety, operational support, and improving the app.
Legal obligation: motorsport licensing and administrative requirements imposed by sporting authorities (ASNs) and circuits.

4. Minors

We knowingly process data about minors, in two distinct situations:

4.1 Minor drivers (16–18)

Minor drivers are event participants. Their registration, license, and safety data is required for the official entry, in the same way as for adult drivers. Because they are minors:

A parent or legal guardian must complete a parental/guardian consent form before the driver can be signed on.
The parent/guardian’s own personal data (name, relationship, contact details, ID copy) is collected as part of that consent form.
Where a specific circuit requires its own parental consent form, that form — including the parent/guardian’s data — is also shared with that circuit, for the same operational purpose (see Section 7).
The parent or guardian may exercise the data protection rights described in Section 12 on behalf of the minor.

4.2 Minor guests

Guests under 18 (including young children) may be registered by the team member or driver who invites them. For guests under 12, only a name and date of birth are collected — no independent account or email is required or created for them.

5. Public Visibility of Participation Data

Creventic organises public international motorsport championships. As part of that, certain data about drivers and teams is inherently public and appears in places we don’t fully control:

Name, team, car number and livery, nationality, and results — in entry lists, results, standings, and live timing
Photos, video, and livestream footage from the event
Coverage by media, other outlets, or on social media, including our own

This is a standard and expected part of taking part in a public sporting competition, similar to other professional or semi-professional sports. It’s separate from — and doesn’t affect — the privacy of your operational data (contact details, address, payment information, passport number, medical/emergency information), which remains protected as described elsewhere in this Statement and is never published.

6. How We Use the Data

To register and administer your participation in an event
To provide the app’s functionality: access control, catering, team/guest management, live event information
To communicate with you about the event you’re registered for
To meet licensing, safety, and administrative obligations toward sporting authorities and circuits
To provide customer support and resolve issues
To improve the app and our services
With your permission, to send you information about our programme and partnerships

Marketing communications for ticket purchases

If you purchase a ticket, we may use the email address you provide to inform you about similar products and services — including future events, tickets, offers and promotions — from the Creventic entity you purchased from, and the events it organises (including 24H Series, CR Track Days, Michelin 992 Endurance Cup, and Prototype Cup Europe). You can unsubscribe from this communication free of charge at any time, via the unsubscribe link at the bottom of each email.

Our CRM is the central system behind our operations — the app and our other systems are all connected to it. From there, we share personal data only with parties directly involved in operating our events, and only to the extent necessary for that purpose:

CRM — our central team, driver, and relationship management system, which the app and our other systems connect to
Finance — for invoicing and payment processing
App developers — who build and maintain the app on our behalf
Timekeeping — the timing service that receives tyre and pitstop registrations, and provides live timing data
Circuits — licenses and signed waivers, for all drivers, as standard event administration; plus a circuit’s own consent forms or entry data where a specific circuit requires them
Livestream — our broadcasting partner, for event livestreams and related content

We do not sell personal data. We do not share data with parties unrelated to the operation of our events.

8. International Transfer

Data may be accessed or used by Creventic International DWC-LLC (Dubai) for events organised in the Middle East. Where personal data is transferred outside the European Economic Area, we aim to ensure appropriate safeguards are in place.

9. Retention

We distinguish between two categories of data, each with a different retention approach:

Participation records: your name, and which events, series, and results you were part of, are kept as part of Creventic’s historical records of our events — consistent with standard practice in motorsport, where an organiser’s results history is a recognised, ongoing purpose in its own right.
Operational data: contact details, address, passport number, emergency contact, payment details, and ID copies are retained for 5 years from your last event participation. Many drivers and teams return across multiple seasons, and this window lets us recognise returning participants without asking them to resubmit official documents — such as signed waivers — that we already hold and that remain valid. After 5 years of inactivity, this data is deleted or anonymised.

10. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Cookies

The app itself does not use cookies. For information about cookies used on our websites, see our separate Cookie Statement.

12. Your Rights

If you are in the European Economic Area, you have the right to:

Access, correct, or request deletion of your personal data
Object to our processing of your data
Request that we restrict processing
Receive your data in a structured, portable format
Withdraw consent at any time, where processing is based on consent

For minors, these rights are exercised by a parent or legal guardian.

You can exercise these rights by contacting us at info@creventic.com. We may ask you to verify your identity before responding.

You also have the right to lodge a complaint with a data protection authority — for Creventic B.V., this is the Dutch Autoriteit Persoonsgegevens.

13. Children’s Privacy

Please see Section 4 for a complete description of how we process data about minors, both drivers (16–18) and guests. We do not knowingly collect data from children beyond what is described there. If you are a parent or guardian and believe your child has provided us with data outside of these processes, please contact us at info@creventic.com.

14. Changes to This Statement

We may update this Privacy Statement from time to time. We will post any changes on this page and update the effective date accordingly. We encourage you to review this statement periodically.

15. Contact Us

If you have questions about this Privacy Statement, contact us at info@creventic.com. Creventic does not currently have a designated Data Protection Officer; this email is our general privacy contact point.

On this page