AliveDrive Privacy Policy

Effective Date: 24 April 2020

Privacy Summary

Collection and Sale of Personal Data

Do we sell your personal data? No
Do we share or sell aggregate data? No
Do we share your personal data with third party API partners? No
Do we use sensitive categories of personal data, like health information? Yes, location data
Do we delete your personal data when you request account deletion? Yes
Do we retain your personal data for as long as your account is active unless you request deletion? Yes

Privacy Tools and Controls

Can you control who sees your activity and content? Yes
Can you control who sees your location-based activity? Yes
Are privacy controls set to private by default? Yes
Can you download and delete your personal data? Yes
Do all members worldwide have the same suite of tools and controls? Yes
Do we track your device location while you are not using the app? No
Do we use cookies? No
Do we track your browsing activities on other sites? No

Communication

Do we give you advance notice when we make important changes to our Privacy Policy? Yes
Do we send you marketing communications with opt in? Yes

Privacy Policy

Introduction

Cosworth ("we" or "us") is headquartered in Northampton UK and our Services are provided to you by Cosworth Group Holdings Ltd. If you are a resident of the European Economic Area ("EEA"), Cosworth, Inc. is the controller of your personal data for the purposes of EEA data protection law.

Our privacy policy (the "Privacy Policy" or this "Policy") explains the information we collect, how we use and share it, how to manage your privacy controls and your rights in connection with our websites and the related applications and services (collectively, the "Services"). Please also read our Terms of Service which sets out the terms governing the Services.

This policy was written in English. To the extent a translated version conflicts with the English version, the English version controls. Unless indicated otherwise, this Privacy Policy does not apply to third party products or services or the practices of companies that we do not own or control, including other companies you might interact with on or through the Services.

We have appointed GRCI Law as our Data Protection Officer, for questions and comments you can contact our DPO at:

GRCI Law
Unit 3 Clive Court
Bartholomews Walk
Cambridgeshire Business Park
Ely, Cambridgeshire
CB7 4EA, UK
dpoaas@grcilaw.com
+44 (0) 333 800 7000

Information we collect

We collect information about you, including information that directly or indirectly identifies you, if you or your other members choose to share it with us. We receive information in a few different ways, including when you upload activities using the Services. We also collect information about how you use the Services. There are also several opportunities for you to share information about yourself and your activities with us. For example: Account, Profile, Activity, and Use Information.

We collect basic account information such as your name, email address," username and password that helps secure and provide you with access to our Services.

Profile, activity and use information is collected about you when you choose to upload an activity (including date, time and geo-location information as well as your vehicle sensor information) or otherwise use the Services.

We use your contact information so we can respond to your support requests and comments.

Location Information

We process location information when you use the Services. We do not track your device location.

Content You Share

Third-Party Accounts

The Services allow you to sign up and log in using accounts you create with third-party products and services, such as Facebook, Google, or Apple (collectively, "Third-Party Accounts"). If you access the Services with Third-Party Accounts we will collect information that you have agreed to make available such as your name, email address, profile information and preferences. This information is collected by the Third-Party Account provider and is provided to us under their privacy policies. You can generally control the information that we receive from these sources using the privacy controls in your Third-Party Account.

Technical Information and Log Files

We collect information from your browser, computer, or mobile device, which provide us with technical information when you access or use the Services. This technical information includes device and network information, log files and analytics information.

The information stored in log files includes IP addresses, mobile device type, internet service (ISP) and mobile network provider, entry and exit pages, platform type and date/time stamp. This information is used to analyze trends, administer, protect and secure the Services, and gather broad demographic information for aggregate use. IP addresses may be linked to session IDs and device identifiers.

Other Information

We may collect information from you through third parties, such as when we collect your feedback through surveys.

How we use Information

We use the information we collect and receive to operate the Services and to customize them for you. For example, we may use the vehicle information and location information shared with us, for example speed, in order to suggest your best lap. We use the information we collect about you and your activities to customize your experience. For example, we may suggest tracks that may interest you. We also use the information we collect to provide support related to the Services, protect members and enforce our Terms of Service, promote safety, and to communicate with you where you have not opted out of receiving such messages and notifications.

We also use the information we collect to analyze, develop and improve the Services. To do this, we may use third-party analytics providers to gain insights into how our Services are used and to help us improve the Services.

We may also use the information we collect to market and promote the Services, activities on the Services, and other commercial products or services. This includes customizing your "experience. For example, if we see that you drivein a certain area, we may suggest tracks in that area.

Aggregate Information

We do not sell your personal information. We may aggregate the information you and others make available in connection with the Services and post it publicly or share it with third parties. Examples of the type of information we may aggregate include information about usage, demographics, tracks and performance. We may use, sell, license, and share this aggregated information with third parties for research, business or other purposes such as to improve the Services.

How Information is Shared

In addition to sharing aggregated data about our members as described above, we also share personal information in accordance with your preferences, as needed to run our business and provide the Services, and where required for legal purposes, as set forth below.

Service Providers

We may share your information with third parties who provide services to us, such as supporting, improving, promoting and securing the Services, processing payments, or fulfilling orders. These service providers only have access to the information necessary to perform these limited functions on our behalf and are required to protect and secure your information. We may also engage service providers to collect information about your use of the Services over time on our behalf so that we or they may promote us or display information that may be relevant to your interests on the Services or other websites or services.

Affiliates and Acquirors of our Business or Assets

We may share your information with affiliates under common control with us, who are required to comply with the terms of this Privacy Policy with regard to your information. If we become involved in a business combination, securities offering, bankruptcy, reorganization, dissolution or other similar transaction, we may share or transfer your information in connection with such transaction.

Legal Requirements

We may preserve and share your information with third parties, including law enforcement, public or governmental agencies, or private litigants, within or outside your country of residence, if we determine that such disclosure is allowed by the law or reasonably necessary to comply with the law, including to respond to court orders, warrants, subpoenas, or other legal or regulatory process. We may also retain, preserve or disclose your information if we determine that this is reasonably necessary or appropriate to prevent any person from death or serious bodily injury, to address issues of national security or other issues of public importance, to prevent or detect violations of our Terms of Service or fraud or abuse of the Services or its members, or to protect our operations or our property or other legal rights, including by disclosure to our legal counsel and other consultants and third parties in connection with actual or potential litigation.

DMCA Notices

We may share your information with third parties when we forward Digital Millennium Copyright Act (DMCA) notifications, which will be forwarded as submitted to us without any deletions.

How We Protect Information

We take several measures to safeguard the collection, transmission and storage of the data we collect. We employ reasonable protections for your information that are appropriate to its sensitivity. The Services use industry standard Secure Sockets Layer (SSL) technology to allow for the encryption of personal information and credit card numbers. We engage providers that are industry leaders in online security, including Services verification, to strengthen the security of our Services. The Services are registered with site identification authorities so that your browser can confirm our identity before any personal information is sent. In addition, Our secure servers protect this information using advanced firewall technology.

Managing Your Settings

Privacy Controls

We offer several features and settings to help you manage your privacy and share your activities. Most privacy controls are located in your privacy controls page."

Adjust Notification and Email Preferences

We offer various ways to manage the notifications you receive. Any notification that is not sent for administrative or service-related purpose that is necessary to provide the Services you requested (to confirm a purchase, or an update to this Privacy Policy or our Terms of Service, etc.), you can choose to stop receiving certain emails and notifications. This can be done by following the instructions contained at the bottom of each email.

Updating Account Information

You may correct, amend or update profile or account information at any time by adjusting that information in your account settings. If you need further assistance correcting inaccurate information, please contact us at https://support.cosworth.com . We will generally respond to your request within 10-14 business days.

Deleting Information and Accounts and Downloading Your Data

You can delete your account from within AliveDrive Race. You can also delete your account or download your data by contacting us. We will generally respond to your request within 10-14 business days.

After you make a deletion request, we permanently and irreversibly delete your personal data from our systems, including backups. Once deleted, your data (including your account and activities) cannot be reinstated. Following your deletion of your account, it may take up to 28 days to delete your personal information and system logs from our systems. Additionally, we may retain information where deletion requests are made to comply with the law and take other actions permitted by law.

We also provide you the option to remove individual activities you have posted from view on the Services without deleting your account. The activities will typically remain on our systems.

Your Rights and Our Legal Bases

We provide the same suite of privacy tools and controls to all of our members worldwide. Particular rights may be available to you if you reside in certain locations, such as the EEA or California. Learn more about your rights and how to exercise them.

Your Legal Rights in the EEA

If you are habitually located in the EEA, you have the right to access, rectify, download or erase your information, as well as the right to restrict and withdraw consent to processing your personal data for example providing you with direct marketing material and object to certain processing of your information. If you would like to exercise any of those rights, please:

email, us at dpoaas@grcilaw.com.
we ask that you provide enough information to identify you (reference number),
let us have proof of your identity and address (a certified copy of your driving licence or passport and a copy utility bill, bank statement or credit card bill (no less than three months old)), and
let us know the information to which your request relates.

How to complain

We hope that we can resolve any query or concern you raise about our use of your personal data whether it is in relation to this privacy notice, our handling of personal data in compliance with Privacy Shield Principles or any other privacy matter and therefore ask that you contact us in the first instance using the details above.

You may also contact the Supervisory Authority where you reside, for example in the UK, this will be the Information Commissioner who may be contacted at https://ico.org.uk/concerns.

Our Legal Bases

We rely on a number of legal bases to collect, use, share, and otherwise process the information we have about you for the purposes described in this Privacy Policy, including:

as necessary to provide the Services and fulfil our obligations pursuant to the Terms of Service. For example, we cannot provide the Services unless we collect and use your location information where you have consented to the processing where necessary to comply with a legal obligation, a court order, or to exercise and defend legal claims where necessary for the purposes of our, or a third party"s legitimate interests, such as our interests in protecting our members, our partners" interests in collaborating with our members, and our commercial interests in ensuring the sustainability of the Services.

Privacy Shield

Cosworth complies with the EU-U.S. Privacy Shield Framework (Privacy Shield) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and the United Kingdom to the United States in reliance on Privacy Shield. We have certified to the Department of Commerce that we adhere to the Privacy Shield Principles with respect to such information. If there is any conflict between the terms in this privacy policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

Transfers

The Services are operated from the United States. If you are located outside of the United States and choose to use the Services or provide information to us, you acknowledge and understand that your information will be transferred, processed and stored in the United States, as it is necessary to provide the Services and perform the Terms of Service. United States privacy laws may not be as protective as those in your jurisdiction.

Cosworth is an international company, and we may need to provide your personal information to other companies within our group or contractors located outside of the European Economic Area (EEA), for the purposes of collection, transferring, storing and processing of your information to fulfil our contract with you.

We will employ appropriate safeguards where we share your personal data in the form of standard model clauses as approved by the European Commission or under Privacy Shield program.

Retention of Information

We retain information as long as it is necessary to provide the Services to you and others, subject to any legal obligations to further retain such information. Information associated with your account will generally be kept until it is no longer necessary to provide the Services or until your account is deleted. In addition, you can delete some items of information (e.g., profile information) and you can remove individual activities from view on the Services without deleting your account.

If we determine that your account has been inactive for 3 years we will irreversibly delete your account and all associated personal data. You will be notified by email of our intention to delete your account, 1 month and 1 week before deletion. Should you reactivate your account, we will confirm via email that we will no longer delete your account. If you do nothing, we will email you to confirm that you account has been deleted.

Other Cosworth Sites

We maintain certain websites that can be accessed outside of https://www.cosworth.com . The Other Sites maintain the look and feel of the Services, but are hosted by outside service providers with their own terms and privacy policies. If you interact with the Other Sites, your information may be stored, processed, or shared outside of the Services. If you interact with the Other Sites, you acknowledge that you may be subject to the terms and conditions and policies applicable to such Other Site. Please be aware that any personal information you submit to the Other Sites may be read, collected, or used by other users of these forums indefinitely, and could be used to send you unsolicited messages. We are not responsible for the personal information you choose to submit via the Other Sites.