Privacy Policy

This Privacy Policy governs the processing of personal data of individuals (hereinafter: user(s) or you) who access the website currently available at untamed.hr and any of its sub-domains (hereinafter: the Website). This includes users who purchase Products and Services, as well as those whose registration for sports events or club memberships is facilitated through the Website, either directly by Untamed or on behalf of sports clubs and event organizers (hereinafter: Organizers).

While this Privacy Policy primarily describes how Untamed d.o.o. (hereinafter: Untamed, we, us, or our) processes your personal data, it also outlines, where applicable, how personal data is processed by Organizers through the Website. In certain cases, Untamed acts as a data processor on behalf of the Organizer, who remains independently responsible for their own data processing practices and privacy obligations. Users are advised to consult the privacy notice of the relevant Organizer for complete information regarding their handling of personal data.

This Privacy Policy forms an integral part of the General Terms and Conditions that govern the use of the Website.

By using our Website, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of the Policy, we kindly ask that you refrain from using the Website and its services.

Data Controller Information

Person responsible for the the Website is Untamed d.o.o., a company with its registered seat at Zadravečka 11, Zagreb, Croatia, OIB: 69583807388, registered with the Court Register under registration number (MBS): 081371051, official email [email protected] (hereinafter: Untamed, we, us, or our).

Collection of Personal Information

When you purchase Products via our Website, both Untamed and the Organizers collect essential personal information. This includes your name, contact details, and payment information, which are necessary for the business purpose of purchasing Products available on the Website.

Untamed also collects personal data strictly as needed to provide specific Services, such as participating in sporting events or registering for clubs organized by the Organizers. In these instances, Untamed acts solely as a service provider or processor on behalf of the Organizers. We handle your data strictly according to the instructions provided by the Organizers. Please note that such processing of your personal data by Organizers is subject to their own privacy notices.

Legal Bases for Data Processing

To provide you with the Website and associated services, facilitate the purchase of Products, and ensure their delivery, both Untamed and the Organizers process personal data based on the following legal bases:

Consent: Your data is processed with your explicit consent, which you may withdraw at any time, affecting future data processing activities.

Contract Performance: Data necessary for the fulfillment of contractual obligations to you, such as providing you with services or Products you have purchased.

Legitimate Interests: Data is processed on the basis of a balance of interests. This includes processing necessary for the legitimate business operations of both Untamed and the Organizers, provided these interests do not disproportionately infringe on your rights and freedoms.

Legal Obligations: Both Untamed and the Organizers may process data to comply with applicable legal, tax, or regulatory requirements.

Types of Data Collected

Untamed or/and Organizer collect the following categories of personal data:

Identity Data: Includes your name, date of birth, and identification documents.
Contact Data: Consists of your address, email address, and phone number, facilitating communication.
Payment Data: Encompasses payment card details, billing address, and transaction history, necessary for processing purchases.
Technical Data: Involves IP address, browser type, device identifiers, and usage data, which help enhance your website experience.
Health Data: Includes any health-related information you provide specifically for services or events, collected only with your explicit consent.
Additional Preferences: Includes specific preferences such as dietary needs, previous riding and competing experience, and other relevant habits to better tailor our services to your needs.
Moto Rally Specific Data: Organizers of moto rally sport events may collect additional information necessary for the safe and effective management of the event, including:
- License and Racing Licence Details: Racing license number and expiration date.
- Vehicle Information: Make, model, and registration details of the vehicle used in the race.
- Safety Gear Compliance: Details about the safety equipment used, such as helmets and protective clothing.
- Emergency Contact Information: To be used in case of an incident during the event.

Purposes and Legal Bases for Processing

Untamed and the event Organizers process your personal data for various purposes:

Contractual Obligations: To provide the services you have requested, such as event registration and participation or membership registration. Organizers specifically use this data to manage event logistics and ensure your participation is smooth and compliant with event requirements.
Consent: We use your personal data to send newsletters and promotional materials only if you have opted in. Similarly, organizers may use your consent to send information about upcoming events or other promotions related to their activities.
Legal Obligations: Both we and the organizers process personal data to comply with applicable laws, such as tax, accounting regulations, and safety requirements for events.
Legitimate Interests: We process data to improve our services, ensure website availability and functionality, and conduct market research. Organizers might also process data under this basis to analyze the performance of their events, optimize participant experience, and develop new offerings.

Sensitive Personal Information

Sensitive personal information refers to data classified as sensitive under applicable privacy and data protection laws. This may include, but is not limited to, social security numbers or national identification numbers, financial account numbers, blood type, and other medical or health-related information relevant to participation in certain sporting events.

Such information may be collected by Untamed and by the Organizer, for example, when required for event safety, insurance purposes, or regulatory compliance. When sensitive personal information is collected, its use and disclosure are strictly limited to what is necessary to provide the requested Services or Products.

We and the Organizers process sensitive personal data only with your explicit consent, when it is directly related to your participation in an event or ensuring the use of Products, or when required to meet legal or regulatory obligations. All sensitive data is handled with enhanced security measures to ensure confidentiality and protection of your privacy.

Data Sharing

Untamed may share your personal data with trusted third parties when necessary for the operation of our services or to fulfill legal or contractual obligations. This may include:

Service providers, such as payment processors, IT support providers, timekeeping services, safety and recovery teams, and others involved in the execution of services offered through the Website.
Event Organizers, who may need access to your data in order to manage event participation, communicate with you, provide on-site services, or meet safety and legal requirements. Organizers may also share your data with third parties involved in the event, such as medical teams, team managers, or volunteers.
Regulatory or governmental authorities, when required to comply with legal obligations.
International partners, sponsors, or affiliates, where necessary for event coordination, promotion, or prize delivery, provided that appropriate safeguards are in place.

When personal data is transferred outside the EU/EEA, we ensure such transfers are carried out in compliance with the General Data Protection Regulation (GDPR), using European Commission-approved Standard Contractual Clauses or other valid legal mechanisms that ensure adequate protection of your data.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations. The duration of retention may vary depending on the nature of the data and the context in which it is processed.

Retention periods are determined based on legal and regulatory obligations, contractual commitments, and our legitimate business interests, such as maintaining accurate records, resolving disputes, and ensuring the proper functioning of our services.

Where data is collected or processed on behalf of an Organizer, they may also determine specific retention periods in line with their own legal obligations and internal policies. In such cases, their privacy notice will provide more detailed information.

Your Rights

You have the following rights regarding your personal data:

Access: Request information about the personal data we hold about you.
Correction: Request correction of incomplete or inaccurate data.
Erasure: Request deletion of your data, subject to legal constraints.
Restriction: Request limitation of data processing under certain conditions.
Portability: Request transfer of your data to another controller.
Objection: Object to processing based on legitimate interests or direct marketing.

To exercise your rights, contact us at [email protected].

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures are designed to ensure a level of security appropriate to the risk and include encryption, access controls, secure storage, and internal procedures for data handling.

Where your data is shared with or processed by Organizers, we expect them to apply equivalent safeguards in accordance with applicable data protection laws and best industry practices.

While we take data security seriously, it is important to note that no method of transmission over the internet or method of electronic storage is entirely secure. Therefore, although we strive to protect your data, we cannot guarantee its absolute security.

Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and better understand how users interact with our content. These technologies support the proper functioning of the Website and help us continuously improve our services.

We use the following types of cookies:

Necessary cookies: Essential for the basic functionality of the Website, such as page navigation and secure access to certain areas. The Website cannot function properly without these cookies.
Analytical cookies: Help us understand how visitors use the Website by collecting information anonymously, which we use to improve performance and usability.
Marketing cookies: May be used by us or third parties to track user behavior across websites in order to display relevant ads or promotional content.

You can manage or disable cookies at any time through your browser settings. However, disabling some cookies may limit the functionality or usability of certain parts of the Website.

For more detailed information, including a list of specific cookies used and their retention periods, please refer to our Cookie Policy.

Third-Party Links

Our Website may contain links to third-party websites or services that are not operated or controlled by Untamed. Please be aware that once you leave our Website, we are not responsible for the privacy practices, security measures, or content of those external websites.

We encourage you to carefully review the privacy policies of any third-party websites you visit before providing them with your personal data, as their data handling practices may differ from ours.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, technological developments, or legal and regulatory requirements. Any updates will be published on our Website along with the revised effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.