Privacy Policy

Effective date: 31 August 2025

This Privacy Policy explains how Rallyy ("Rallyy", "we", "our", or "us") collects, uses, discloses, and protects personal information when you use our mobile app, websites, and related services for rally events (the "Services").

1) Who We Are

Rallyy provides tools for rally event coordination, including official registration, scheduling, safety workflows, and (where enabled) live streams or telemetry. For the purposes of the EU/UK GDPR, Rallyy is the data controller for personal data processed via the Services unless otherwise stated by a specific event organizer who acts as an independent controller.

2) Personal Data We Collect

a) Account & Profile

Name, email, password (hashed), role (e.g., official, organizer, participant), organization/club, qualifications or licenses, and preferences.

b) Event & Operations

Registrations and assignments, call signs, stage or checkpoint allocations, availability, emergency contacts, incident reports, and audit logs.

c) Device, Usage & Diagnostics

App and browser information, device identifiers, IP address, timestamps, crash reports, and analytics on features used.

d) Location & Telemetry (optional)

Approximate or precise location, motion, and telemetry signals when you opt in (e.g., for stage check-ins, marshal positioning, or safety monitoring). You can disable location sharing at any time in your device settings.

e) Media & Communications

Messages you send to support, forms you submit, and—where enabled—photos, video, or audio you upload or that are captured by event devices in operational areas.

f) Third-Party Login

If you sign in with a third party (e.g., Google), we receive basic profile information (such as name and email) per that provider's terms.

3) How We Use Personal Data

Provide and maintain the Services (account creation, authentication, roles & permissions).
Plan and operate rally events (assignments, schedules, notifications, credential checks).
Enable safety, compliance, and auditing (e.g., incident logs, restricted-area access control).
Communicate with you about updates, security alerts, and administrative messages.
Process support requests and improve the Services through analytics and diagnostics.
Protect against fraudulent, abusive, or unlawful activity and comply with legal obligations.

4) Legal Bases (GDPR)

Contract: to provide the Services you request (e.g., managing your event account and assignments).
Legitimate Interests: to keep the Services secure, improve features, and support operations in ways that do not override your rights.
Consent: for certain optional features (e.g., precise location, certain analytics, or marketing, where applicable). You can withdraw consent at any time.
Legal Obligation: to meet regulatory, safety, and record-keeping requirements.

5) How We Share Personal Data

Event Organizers & Officials: limited data needed for role assignment, safety coordination, and event operations.
Service Providers: hosting, analytics, communications, and operational vendors under contractual confidentiality and security obligations.
When You Ask Us To: sharing at your direction (e.g., linking accounts or publishing your official role in an event roster).
Legal & Safety: if required by law or necessary to protect rights, safety, or the public.

We do not sell your personal information.

6) International Transfers

Your data may be processed in countries outside your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect personal data transferred from the EEA/UK.

7) Data Retention

We keep personal data only as long as necessary for the purposes described in this Policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Event records (e.g., incident logs) may be retained for longer periods where required by safety or regulatory needs.

8) Security

We implement technical and organizational measures designed to protect personal data (e.g., encryption in transit, access controls, monitoring). No method of transmission or storage is 100% secure. If we identify a breach affecting your data, we will notify you and relevant authorities as required by law.

9) Your Rights

Depending on your location (e.g., EEA/UK), you may have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data ("right to be forgotten");
Restrict or object to certain processing, including processing based on legitimate interests;
Data portability (receive your data in a structured, commonly used, machine-readable format);
Withdraw consent at any time, where processing is based on consent;
Lodge a complaint with your local data protection authority.

To exercise your rights, contact us at info@rallyy.nl. We may ask you to verify your identity before responding.

10) Cookies & Tracking

We use cookies and similar technologies to operate and improve the Services, remember preferences, and perform analytics. You can manage cookies in your browser or device settings. Where required, we will seek your consent for non-essential cookies and provide controls via a consent banner.

11) Live Streams, Photos & Media

Operational areas of rally events may include live streams, photos, and on-site cameras. Media may capture officials and participants within event zones.
Some media may be publicly accessible (e.g., event coverage). We take steps to minimize unnecessary personal data exposure and follow organizer requests and applicable laws.
If you upload or submit media, ensure you have the rights and that it complies with event rules and privacy laws.

12) Children

The Services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, please contact us so we can delete it.

13) Changes to This Policy

We may update this Policy to reflect changes to the Services or legal requirements. If we make material changes, we will notify you by posting the updated Policy and revising the "Effective date" above, and, where appropriate, via in-app or email notice.

14) Contact

If you have questions, concerns, or requests about this Policy or your personal data, contact us at:

Email: info@rallyy.nl