Privacy Policy
Last updated : 8 février 2026
PlanTrackDay is committed to protecting your personal data. This policy describes what data we collect, why we collect it, how we use it and the rights you have.
Data Controller
Les coordonnées du responsable
Data Collected and Purposes
Account Creation
Purpose: to provide access to site features (favourites, sessions, resale).
- Email address (unique identifier)
- Password (stored in hashed form, never in plain text)
- Display name (optional)
- Profile picture and biography (optional)
Legal basis: performance of a contract (terms accepted upon registration).
Place Resale
Purpose: connecting sellers and buyers of track day places.
- Full name
- Email address
- Phone number
Legal basis: explicit consent when publishing a listing or expressing interest.
Sharing: buyer contact details are only shared with the seller if the seller accepts the request. Details are deleted when the listing is closed.
Participant Management (Organisers)
Purpose: to allow organisers to manage registrations for their track sessions.
- First name, last name
- Email and phone (optional)
- Level, vehicle, lap time
Legal basis: legitimate interest of the organiser for event management. Participant data is under the organiser's responsibility.
Organizer connection data
Purpose: compliance with the legal obligation to retain technical connection data for organizers creating or modifying content on the platform.
- IP address
- Date and time of the operation
- Nature of the operation (creation, modification, deletion, publication)
- User identifier and related entity identifier
Legal basis: legal obligation (French LCEN article 6-II, decree no. 2021-1362 of 20 October 2021). This data only concerns organizers, not riders or visitors.
Retention period: 1 year from the date of the operation, in accordance with decree no. 2021-1362.
Access: this data is only disclosed to judicial authorities upon requisition, under the conditions provided by law.
Statistics
We collect anonymous usage statistics (page views per track day/organiser, clicks). No IP address is stored, no tracking cookie is used, no user profile is created for advertising purposes.
Cookies
The site uses a single cookie, strictly necessary for operation:
| Name | Purpose | Duration |
|---|---|---|
| auth-session | Maintaining the authentication session | 30 days |
No third-party, advertising or analytics cookies are used. As this cookie is strictly necessary, no consent is required (Article 82, French Data Protection Act).
Data Retention
Account data: retained as long as the account is active. Deleted upon user request via the account deletion page.
Resale data: retained for the duration of the listing, then deleted within 30 days of closure.
Participant data: under the organiser's responsibility. Retained as long as the track day is listed on the platform.
Organizer technical data (LCEN): 1 year from the date of the operation, automatically purged thereafter.
Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access : obtain a copy of your personal data
- Right to rectification : correct your data directly from your profile
- Right to erasure : delete your account and all associated data from My Profile > Delete my account
- Right to data portability : receive your data in a structured, machine-readable format
- Right to object : object to the processing of your data on legitimate grounds
If you believe your rights are not being respected, you may lodge a complaint with the CNIL (French Data Protection Authority) at www.cnil.fr.
Security
We implement technical and organisational measures to protect your data: encrypted connections (HTTPS), password hashing, strict data access controls, regular backups.
Sub-processors
Data is hosted and processed by the following providers:
| Service | Use | Location |
|---|---|---|
| OVH | Server and database hosting | European Union |
| Brevo | Sending transactional emails | European Union |
Transfers Outside the EU
No personal data is transferred outside the European Union.
Changes to this Policy
We reserve the right to modify this privacy policy. In case of substantial changes, registered users will be notified by email. The last update date is shown at the top of this page.
Contact
For any questions about your personal data or to exercise your rights, a contact form will be available soon on the website.