Privacy Policy APP

1 Introduction

1.1 This Projekt Spielberg Privacy Policy (“Policy“) sets out how Projekt Spielberg GmbH & Co KG, whose registered offices are at Red Bull Ring Straße 1, 8724 Spielberg, Austria and our affiliates (hereinafter “Projekt Spielberg”, “we“, “us“, “our“) collect and process personal information about you when you visit our website (“Website“), use our mobile applications and games (“App“), attend or participate in one of our events, visit one of our restaurants, stay at one of our hotels or book one of our driving experience/facilities.

1.2 Each affiliate that processes your information, including Projekt Spielberg GmbH & Co KG, will be a data controller. For a full list of our affiliates, please click here. By continuing to use this Website or App, you confirm that you have read this Policy.

1.3 The data processing on the social media platforms we use is largely carried out by the operators of the platforms themselves; accordingly, we have only limited influence on this and also do not know exactly what data they process. However, we are jointly responsible with the platform operators for certain processing. At the points where we are involved and jointly responsible for the processing, we naturally ensure that the data is handled in accordance with data protection law. For questions regarding the data of your user profiles, to which we do not have access, the respective operators are responsible themselves. However, you can find more detailed information about this in the respective operators’ own data protection declarations.

1.4 If we change anything important about this Policy (the information we collect, how we use it or why we use it) we will highlight those changes at the top of the Policy and provide a prominent link to it for 30 days following the change and prior to the change taking effect.

2 Information we collect

2.1 Information you give us. You may give us information, including information that can identify you (“personal information“), when you use our Website, correspond with us, enter into any of our competitions, promotions or surveys, post on our websites, subscribe to receive our newsletter, purchase our goods or services, book events via the Website, create an account or use our Apps or when you communicate with us and at us through one of our social media platforms, for example through our chatbot tools. Where we request required information from you, we will collect the information contained in the relevant forms or pages. You may choose to provide additional information to us when you contact us or otherwise interact with us.

2.2 The information you may provide to us when creating a user account may include your name, Account username, email address, gender, country of residence, telephone number or if applicable, your social media credentials. If you register to hold an Account with us, you will also create a unique password, which enables you to access your Account. We will also collect information regarding your favourite content on our Apps and Website (such as video you like) and information relating to content you have selected for offline access (such as videos on our Apps which you download to watch later).

2.3 If you purchase any games, services, apps (including in-app purchases) or other goods on our Website, we will also collect your delivery address, billing address and payment information. Please note that we will not be storing your payment information, this will be done via a third party payments company.

2.4 If you visit one of our restaurants or hotels, we may also collect information about your preferences associated with your visit, such as dietary requirements or your visit preferences.

2.5 If you subscribe to receive one of our newsletters or receive other forms of direct communications from us, then you may provide us with your name, email address, gender, date of birth and interests.

2.6 When you use our Websites, social media channels or Apps, we may use your personal information to create specialised recommendations to enhance your user experience. This can include recommending content for you to watch based on your viewing history or Facebook or Instagram “likes” and interests (as applicable). We will not collect your Facebook, Instagram, YouTube, TikTok, Twitter or Google+ username or password, but we may collect details from these websites that confirm whether you are logged-in to the App using your Facebook, Instagram, YouTube, Twitter or Google+ accounts. This information is used to access and extract certain information about you from your Facebook, Instagram, YouTube, Twitter or Google+ profiles to enhance your user experience and provide you with meaningful content. This is information that you make available to the public on your profile. We do not access your personal account settings.

2.7 With your consent, our Apps may make use of GPS tracking in order to provide you with location-based functions and the Apps may also access the photos and videos that you store on your mobile device to allow you to upload videos and photos for use within the Apps. Finally, the Apps may use push notifications to send you notifications. When you first use the App, you will be asked if you want to activate these functions in your settings menu. If you choose not to activate these functions, or to deactivate them later on, you may not be able to use the App’s full scope of services.

2.8 Information we collect automatically. When you visit our Website, use our Apps, we may automatically collect the following information: your IP address, log-in information, location information, browser type and version, browser plug-in types and versions, operating system and platform, information about your visit including the URL clickstream to, through and from our Website, your advertising ID (if this is supported by your device such as an Apple product or Google product),products you viewed or searched for, videos you have accessed, download errors, length of visits to certain pages, page and App interactions, media download for offline access, screen resolution, device processing power and memory, playback errors and buffering issues, user behaviour such as length of Apps use, and unique device identifiers (for example an IMEI address (a unique number assigned to mobile phones that is used by GSM networks to help them identify valid mobile devices)). We collect information automatically through the use of various technologies, including through “cookies” an “Web-Beacons”.

2.9 We may also collect information about you through our security systems when you visit our premises or attend our events.

2.10 Information we receive from other sources. We may receive information about you from other sources if you use any of the other services we provide on our Website, our Apps, or from other Red Bull entities and affiliates. We are also working closely with third parties (including, for example, business and/or sponsorship partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them (including information that is publicly available).When you visit the website www.gpticketshop.com or order tickets on that website for events which are either organised by Projekt Spielberg GmbH & Co KG or with regard to which Projekt Spielberg GmbH & Co KG holds the ticketing rights, your personal data will be collected and transferred on behalf of Projekt Spielberg GmbH & Co KG to Red Bull GmbH and its affiliated companies of the Red Bull Group. Projekt Spielberg GmbH & Co KG processes and transfers this data in accordance with the Privacy Policy available on www.gpticketshop.com.

3 Why we use your information

3.1 We use the information we collect in order to provide you with the best possible experience when you access our Website or Social media channels or Apps and engage with us, including by using our services and products. This includes using your information for the following purposes:

• (a) providing and improving our products and services: we use your information in order to provide you with the products and services you have requested, including when making a purchase, booking an event, hotel room or driving experience, sending you confirmation emails or contacting you regarding your Account. We use your information to improve and adapt our Website, Apps, products and services to better suit the behaviours and technical capabilities of our users;

• (b) creating and managing your Account: we use your information in order to create your Account and manage our relationship with you. We also use your information to communicate with you regarding your Account and our services;

• (c) administering the Website, social media channels and Apps: we use your information in order to administer our Website, our social media channels and Apps for internal operations, including troubleshooting purposes and to understand any errors you may encounter when using our Website and Apps;

• (d) improving use and content of our web pages and Apps: we use your information in order to improve the content of our web pages and Apps and ensure that it is presented in the most effective manner for you and your devices;

• (e) safety and security: we use information collected on our Website and Apps as part of our efforts to keep our Website and Apps safe and secure and to help manage and administer our IT systems. We use information collected through our security systems to help keep our premises and individuals attending our events safe and secure.

• (f) marketing: we use your information in order to communicate with you and keep you up to date with our activities and events and those of third parties that you may be interested in and to make suggestions and recommendations to you on our Website and Apps about goods or services that may interest you. We will provide you with this information via email (subject to your prior consent if legally required), push notifications on our Apps, personalised notifications on our websites, targeted ads on our Website and Apps and third party platforms, text, social media, by mail or telephone. We may also use your information to send you Christmas and birthday greetings and information about product launches or changes; we may use (subject to your prior consent where required by law) your data from photographs and film footage of our events for pre- and post-event coverage and promotion of these in printed materials, print media, promotional films, integration in printed materials, integration in promotional subjects, creation of promotional films, publications online as well as publication on social media channels (Facebook, Instagram, Xing, LinkedIn, Youtube).

• (g) online advertising: we use your information in order to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you.We also use your information when communicating with you through social media in order to build and maintain our social media brand;

• (h) personalising and tailoring your experience: where permitted by law, we may combine information we receive from third party sources, including from social media websites, with information you give to us and information we collect about you, including cookie and insights information/”Web Beacons”. We may use this information and the combined information for learning more about your preferences as our customer, for enhancing your user experience on our Website, social media channels and Apps and for providing you with information, content and offerings tailored to your needs;

• (i) providing a consistent experience across devices and platforms: we will match information collected from and provided by you on one device or platform with information collected from and provided by you on other devices and platforms;

• (j) providing customer service and managing any complaints or requests: we may use your information in order to provide you with a more efficient customer care service and managing any complaints or requests on your behalf;

• (k) to make necessary disclosures and law enforcement: we may use your information in order to make necessary disclosures in response requests which We are legally required to comply with, to law enforcement or regulatory authority, body or agency or in the defence of a legal claims. Furthermore, to enforce our Terms and Conditions and/or this Policy; and

• (l) administering a sale, transfer or reorganisation of one of our business entities.

4 Legal grounds for using your information

4.1 Our processing of your personal information will be based on a variety of legal grounds, including:

• (a) where you have provided your consent: for example, we require your consent in order to process your personal information for direct marketing activities, when using technology such as cookies or when processing special categories of data such as your dietary requirements;

• (b) where the processing is necessary for the performance of a contract: for example, to allow us to facilitate an event, hotel room or driving experience booking, deliver goods you have ordered on our web shop or facilitate an in-App purchase;

• (c) where we need to comply with a legal obligation: for example, we may need to disclose your data to a law enforcement agency or to your or our representatives acting in a legal dispute; and

• (d) where the processing is necessary for the purposes of our legitimate interests: this includes, for example, to: (1) provide our products and services to you; (2) ensure your Account is adequately protected and to ensure that our Website, Apps, network and information technology are secure and are being used in an appropriate manner; (3) better understand how you use our products, services Apps, Website and social media channels and to make improvements; (4) research and analyse the products and services you want; (5) tailor our content, marketing, promotions and offers to those more relevant to your interests; (6) maintain a profile on both traditional and social media; (7) efficiently communicate and conduct social analytics and content performance on social media; (8) provide security over our business and who we partner with and to monitor the areas around and within our premises to safeguard our employees, customers and members of the public against wrongdoing or criminal activity; (9) develop and maintain relationships with vendors, partners and other companies and dealing with individuals who work for them; (10) to remain aware of updated market practice to ensure that we are offering a service which is competitive and meets the expectations of our customers; and (11) determine the effectiveness of advertising on our Website, Apps and on partner websites (12) promoting our events and products through printed materials, advertisements, coverage and online advertising. In some jurisdictions, this type of processing requires consent. We will obtain your consent where we are legally required do so.

5 How we share and disclose your information

5.1 We may share your information with our Projekt Spielberg affiliates for the purposes outlined at section 3 of this Policy and with third parties, which include third party online platforms, social media platforms, organisations providing a service to us or acting as our agents, including, but not limited to, sub-contractors (including their agents) and professional advisers, advertising agencies, ad networks, IT suppliers, database providers, backup and disaster recovery specialists, email providers and other service providers necessary for improving our products and services.

5.2 We will:
• (a) share aggregated, anonymised or other de-identified data with advertisers, advertising networks and social networks that require the data to select and serve relevant adverts to you and others. We will also use aggregate information to help advertisers reach the kind of audience they want to target;

• (b) make use of the personal information we have collected from you to help our advertisers display their advertisements to a target audience and to present our promotional messages to you. This means you will be presented with advertisements that are more relevant to you as a result of the personal information we hold about you; and

• (c) share your personal data with and access information from analytics and search engine providers that assist us in the improvement and optimisation of the Website and Apps for better personalisation of content and advertising.

5.3 Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your personal information, will only be provided in connection with the performance of their function. They will not be permitted to use your personal data for any purposes other than those outlined in this Policy.

5.4 For the implementation of the bus shuttle and express shuttle services provided by us you are redirected to the website of the tour operator EBA Bus Alliance GmbH, Mohsgasse 11/3 A-1030 Vienna, via Iframe. Projekt Spielberg has no access to the data you are providing via iframe.

6 How to opt in or opt out of direct marketing

6.1 We, and selected third parties, may use the information you give us on our Website, Social media channels and through our Apps or in the context of our business relationship for direct marketing purposes to provide updates, newsletters, information about events or other communications that we think may interest you.

6.2 Where required by law, your prior consent will be obtained before we send you direct marketing. In any event, we will offer you the option to unsubscribe in every communication sent.

6.3 You may object to receiving direct marketing from us at any time by contacting us by email at the email address detailed below in section 17 or selecting the unsubscribe option in our email communications.

7 Analysis and advertising tools

7.1 To ensure our online advertising is tailored and interesting for you, we analyse your behaviour on our sites, partner websites, social media channels, our Apps and your interactions with us. For example, we track when you click articles or our adverts (which are on our websites and third party websites), when you interact with us on social media (by mentioning us or our products), when you directly communicate with us (which may include communicating with our chatbot tools which are used across social media), when you buy tickets to one of our events, when you buy products or services from us, when you attend our events, when you open and interact with our marketing communications and where you have come from to visit our Website or download our Apps.

8 Cookies and other technologies

8.1 We collect information automatically through the use of “cookies”. Cookies may be set by us, or they may be set by third parties. A cookie is a text file containing small amounts of information that a website can send to your browser, which may then be stored on your computer as a tag that distinguishes your computer but does not name you. Some of our Website pages use cookies to better serve you when you return to the Website. You can set your browser to notify you before you receive a cookie, giving you the chance to decide whether to accept it. You can also set your browser to turn off cookies; however, if you do this, some of our Website may not work properly.

8.2 For our Apps, we collect information automatically through the use of unique device identifiers (“IDs”). An ID is a specific string of numbers and letters (a “character string”) which is assigned to your device, but does not name you. The ID allows us and our selected third parties to track your behaviour when you use the App. Almost every App uses ID technology. IDs serve a number of purposes such as remembering your preferences, and generally improving your user experience. IDs may tell us, for example, whether you have used our Apps before or whether you are a new user. They can also help to ensure that adverts you see through the Apps are more relevant to you and your interests. This functionality makes IDs extremely useful to improve your user experience.

9 Links to other websites and social media

9.1 Where we provide links to other websites, we do so for information purposes only. The other websites are outside our control and are not covered by this Policy. If you access other websites using the links provided, the operators of these websites may collect information from you which will be used by them in accordance with their privacy policy, which may differ from ours.

9.2 In some pages of our Website, third parties that provide content, applications or plug-ins through our Website may track your use of content, applications and plug-ins or customize content, applications and plug-ins for you. For example, when you share an article using a social media sharing button on our Website (e.g., Facebook, Instagram, YouTuber Twitter, or Google Plus), the social network that has created the button will record that you have done this.

10 Data retention

10.1 We will not retain your information for longer than is necessary for our business purposes or for legal or regulatory requirements.

10.2 We will retain your information for as long as you have an Account with Projekt Spielberg and for a period of time thereafter if it is necessary to meet our legal obligations, such as retaining the information for tax and accounting purposes. We retain your information in accordance with our internal data retention procedures.

10.3 If you object or opt-out of receiving direct marketing communications from us, we will remove your contact details and marketing permissions to ensure that you do not receive any future marketing communications from us. Also, we will not delete personal data if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.

10.4 In all cases, we will continue to protect your personal data in accordance with the terms of this Policy. We will also routinely refresh our information to ensure we keep it up-to-date.

11 Your rights

11.1 Subject to applicable law, you may have the following rights, in certain circumstances, in relation to your personal information:

• (a) Right to access your personal information. If you wish to obtain a copy of the personal information that we hold about you, please contact us at the email address stated below. Before responding to your request, we may ask you to verify your identity and to provide further details about your request. We will endeavour to respond within an appropriate timeframe and, in any event, within any timescales required by law.

• (b) Right to rectify, erase or restrict the processing of your personal information. If you wish to rectify, erase or restrict the processing of your personal information please contact us at the email address stated below. It is your responsibility to ensure that you submit true, accurate and complete information to us and keep this information up to date.

• (c) Right to withdraw consent. Where you have provided your consent to processing, you may withdraw your consent at any time by contacting us at the email address stated below in section 17.

• (d) Right to data portability. You can ask us to help you move some of your information to other companies. To help with that you have a right to ask that we provide your information in an easily readable format to another company. You can email your request to the email address stated below in section 17.

• (e) Right to object. You can object to the way we process your personal information or object to direct marketing based on profiling where this is based on legitimate interests, by emailing your request to the email address stated below in section 17.

• (f) Right not to be subject to an automated decision (see section 17 below for more details).

• (g) Right to lodge a complaint with a supervisory authority. You can get in touch with your local regulator if you have a complaint in relation to how we handle your personal information.

11.2 If you have chosen to have an Account then you can access the personal information we hold about you via your Account to obtain a copy of it and to correct, amend, or delete information that is inaccurate. You can also close your Account at any time.

11.3 For requests to exercise your data subject rights as well as the revocation of your consent in connection with the processing of data in the context of page insights of our social media channels, please use the forms linked in the data protection information of the social media operators or contact the operator directly.

11.4 If you would like to exercise any of your rights listed above, you can contact us at the email address detailed in section 17.

12 Profiling

12.1 We may use your data in order to try and learn more about you so that we can aim to better predict what products and services you may be interested in.

12.2 On some of our e-commerce websites, we engage service providers who use automated decision making in order to verify your address and assess your creditworthiness. This allows us to ensure we use correct address data and to evaluate the risk of non-payment for our products and services.

13 Information security

13.1 We apply physical, technical and administrative measures to protect your personal information that is under our control from unauthorised access, collection, use, disclosure, copying, modification or disposal. All information you provide to us is stored on secure servers.

13.2 Where you have a password, which enables you to access our Website or App, you are responsible for keeping this password secure and confidential.

14 International transfers

14.1 Given that the Internet is a global environment, using the Internet to collect and process personal information necessarily involves the transmission of data on an international basis. While we generally store all of the personal information that we collect about you through our Website, social media channels or App in your region (for example for European visitors, in the European Economic Area), it is possible that your personal information will be transmitted to parties outside your region (where data protection laws may be different e.g. in the United States).

14.2 If such transfer happens, we have implemented safeguards and data protection solutions to ensure your information is adequately protected in any third countries e.g. by using standard contractual clauses. If you would like to obtain the details of such safeguards, you can request these by contacting us by email detailed in section 17.

15 Use of this Website or of our Apps by minors

15.1 By using this Website or App, you confirm that you are over the age of 14. For this Website or App, if you are aged 14 or under, you must seek your parent’s/guardian’s permission beforehand. Users without this consent are not allowed to provide us with information and, in the event that they do so, we will cease to process their information as soon as we find out.

16 Changes to the Policy

16.1 This Policy was last updated on June, 15th 2021. A notice will be displayed for 30 days whenever this Policy is changed in a material way. By continuing to use our Website or App, you confirm your acceptance of the relevant changes.

17 Questions, Concerns, Complaints about this Policy

17.1 This Website or App is maintained by Projekt Spielberg GmbH & Co KG. If you have a question, concern or complaint about this Policy or our handling of your information, you can contact us by email to office@redbullring.com