Last updated: May 1, 2023
YOUR DATA PROTECTION RIGHTS
When you access our Platforms, we function as a “data controller” under the General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (“UK GDPR”). In some cases, we will ask for your consent so that we may process your Personal Information. In other circumstances, we may rely on a different lawful basis, as explained in the section, “How We May Use and Disclose Your Personal Information.”
No matter where you are located, we provide every user with the right to:
- Access. It’s your right to request access to the Personal Information that we process about you.
- Rectification. It’s your right to request that we amend or update your Personal Information where it may be inaccurate or incomplete.
- Erasure. It’s your right to request that we erase your Personal Information, under certain conditions.
- Restriction. It’s your right to request that we restrict the processing of your Personal Information, under certain conditions.
- Object. It’s your right to object to our processing of your Personal Information, under certain conditions.
- Data portability. It’s your right to request a machine-readable copy of your Personal Information, or that we transfer the Personal Information that we have collected to another organization, under certain conditions.
- Not be subject to automated decision-making. It’s your right not to be subject to a decision based solely on autonomous decision-making (that is, a decision made without human involvement), including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.
- Withdrawal of consent. It’s your right to withdraw your consent to us for our processing of your Personal Information, under certain conditions.
You may also always choose to opt-out of a specific marketing newsletter or other email communication by clicking the “unsubscribe” button that appears in each such email.
If you would like to exercise any of these rights, please contact us at [email protected]. We will respond within the time frame required under applicable laws.
Please be aware that your exercise of these rights is subject to certain exceptions, such as to safeguard the public interest as well as our interests (for example, our ability to maintain legal privilege).
TYPES OF PERSONAL INFORMATION WE COLLECT
Personal Information You Provide:
You may be asked to provide us with certain Personal Information when you sign up for an account or a newsletter on one of our Platforms, when you contact us for information about Circuit of The Americas or one of our programs, when you use some of our Apps, when you register for and/or attend Circuit of The Americas events, or when you participate in Circuit of The Americas programs. The Personal Information we request may include:
- Contact information, including your name, postal address, telephone number, or email address;
- Payment information, such as your name, last four digits of a credit card number (credit card payments are processed by a third-party Service Provider (defined below)), telephone number, and billing address, when you make a purchase with Circuit of The Americas; and
- Information regarding your purchase history.
It is always your choice whether to provide us your Personal Information and we will always expressly ask you in advance of collecting such information. However, depending upon the activity, some Personal Information will be mandatory for participation, and we will indicate it as such. If you do not provide the mandatory Personal Information with respect to an activity, you will not be able to engage in that activity.
If we learn that we have inadvertently collected Personal Information from a child on any of our Platforms that are not intended for children, we will take steps to promptly delete that information.
Information We Collect Automatically
A “cookie” is a small data file that a web site transfers to a user’s device and is stored on the user’s browser. As a user moves from one page or one screen to another, a cookie is used to tell us that it is the same device and to remember your preferences. A “web beacon” (also referred to as a “clear gif” or “pixel tag”) is a one-pixel image (which may be visible or transparent), which may be embedded on a web page or in an e-mail message, and which may also provide us with information about usage of that page or e-mail message, including if and when you have opened it.
We use Usage Information to help us administer the Platforms, remember your preferences, deliver content that may be of interest to you, diagnose technical problems, and to support our security efforts. We also analyze the information to understand aggregate trends about how our Platforms are used, to help us better understand the makeup of our Platform users, and to help us improve our Platforms.
Third Party Cookies and Tracking
We use third party service providers to help us collect and understand Usage Information and to support our marketing efforts. A list of companies that host cookies on our Platforms, the services they provide, and information on how you may opt out of certain cookies is included in our Cookie Notice. Most browsers can be set to detect and provide the option to reject browser cookies, but doing so may affect certain features of the Platforms. If you do not or if you no longer want to have cookies placed on your browser by third parties, many of them also offer ways to opt out. To learn more about browser cookies, including how to manage or delete them, refer to the “Tools,” “Help,” or similar section of your web browser.
We do not serve targeted advertising on our Platforms. However, when you use the Internet, third parties that we are not affiliated with may use tracking technologies, including cookies and pixels, to collect information about your online activities over time and across our Platforms and other websites. They may use this information to measure the effectiveness of our marketing and to serve you advertisements that may be of interest to you elsewhere on the Internet. Currently, our websites do not respond to “do not track” signals transmitted by web browsers. “Do Not Track” is different from the Global Privacy Control (GPC), which we do respond to in certain territories. To find out more about GPC, please visit https://globalprivacycontrol.org/.
For more information about third party advertisers and how to prevent them from using your information, visit the NAI’s consumer website at http://www.networkadvertising.org/choices or http://www.aboutads.info/choices/, or http://www.youronlinechoices.com/uk/. If you do want to opt out using these tools, you need to opt out separately for each of your devices and for each web browser that you use on each device.
Personal Information Received from Third Parties
We may receive Personal Information about you from other sources, including our data broker services, data enhancement companies, list rental services, third-party analytics providers, and social media-owned databases, including via your interaction with our social media pages (this includes aggregate data on our social media followers (e.g., age, gender and location), engagement data (e.g., “likes,” comments, shares, reposts and clicks), awareness data (e.g., number of impressions and reach) and individual users’ public profiles).
In addition, we may obtain certain information from our licensees, including name, address, and payment information, to generate a profile of users who interact with our licensees.
Personal Information We Create or Generate
We may also infer certain Personal Information from any combination of the information that we collect directly or that we receive from third-parties, including using automated means to generate information about your likely preferences or other characteristics.
Legal Bases for Using Your Personal Information
If you are in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we will collect, use, access or preserve your personal information under the applicable legal bases for doing so under the GDPR or the UK GDPR. The legal bases depend on your interactions with us and our Platforms.
How We May Use Personal Information
The below table summarizes the purposes for which Circuit of The Americas may use your personal information and, if you are in the EEA or UK, our legal bases for doing so:
|Purpose||Legal Basis, Where Applicable|
|To administer our Platforms, including to provide support to you when you request it, services, and security in partnership with our third-party service providers; and to help us understand and monitor the usage of our Platforms, improve our offerings, and customize and improve the performance of the Platforms.||Our legitimate interests|
|To operate our organization, including by sharing with our subsidiaries, affiliates and other related entities; with our advisors, including lawyers, consultants, accountants; and with others for our lawful business purposes.||Our legitimate interests|
|To protect our rights and the rights and safety of our users, including as may be required by a court order, regulatory inquiry, or other lawful request. Where possible, and where not prohibited by law or where doing so might impact the prevention or detection of a crime, we will direct any such request to you||Our legitimate interests and to fulfill our legal obligations|
|To deliver information to you that you have expressly chosen to receive and to enable your participation in special events or programs that we may offer (if you choose to participate in such events or programs).||Your consent|
|To provide you with marketing materials, including updates and offers. You may unsubscribe or opt out of such electronic communications via the link labeled “unsubscribe” that appears on such communications, or by contacting us at [email protected].||Your consent|
|To create a profile of you in order to provide you with marketing materials that we believe would be likely to interest you.||Your consent|
HOW WE STORE AND PROCESS YOUR INFORMATION
Circuit of The Americas stores your information on our servers, and on our Service Providers’ servers, in the United States.
We, or our Service Providers, may transfer and store information that we collect about you, including Personal Information, across borders from your country or jurisdiction to other countries or jurisdictions around the world, including to entities located outside of the EEA. We will ensure that your legal rights and protections travel with any transfer of personal information, as required by applicable law. Where required, such as in the European Union, United Kingdom, or European Economic Area, we will implement Standard Contractual Clauses with our third parties, or we will rely on another lawful transfer mechanism. You may request details of the transfer mechanism we rely on to transfer Personal Information by sending such request to us at [email protected].
Security of Your Personal Information
We implement and maintain technical and organizational measures to help secure your Personal Information. We host Personal Information in secure, cloud-based environments that use firewalls, encryption and other industry-standard technologies in an effort to prevent interference or access from outside intruders.
While we strive to maintain the security of your Personal Information, we cannot guarantee that information security measures are fail-safe or guarantee that Personal Information on a Platform may not be accessed, disclosed, altered, or destroyed without authorization.
Retention of Your Personal Information
We will retain your Personal Information in accordance with the time period allowed under applicable law, and with consideration for the sensitivity, volume, and type of Personal Information, as well as the purpose for which we have collected it, after which time we will take steps to delete it.
We will retain deidentified, aggregate data for lawfully allowed purposes.
THIRD-PARTY SERVICE PROVIDERS
We contract with third parties to provide certain services and to facilitate the operations of our Platforms (our “Service Providers”), such as data hosting and collection, analytics, content delivery, email marketing, mobile marketing and digital marketing. Our Service Providers may require access to certain Personal Information in order to provide their services.
Types of Cookies We Use
We might use both session and persistent cookies. Session cookies last for as long as you are using your browser, while persistent cookies will last for some time after you close your browser. The time that persistent cookies last is dependent on your browser configuration and the lifespan of each cookie.
The Platforms use four types of cookies: essential, functional, analytics, and marketing cookies.
Essential Cookies: These are required to use our Platforms and to access certain features. Where applicable, the legal basis for use of essential cookies is our legitimate interest to operate our Platforms.
Functional Cookies: These help us to store choices and settings you make, such as your country or account preferences. If you disable these cookies, the functionality of the Platforms may be affected. Where applicable, the legal basis for the collection of information through functionality cookies is your consent.
Analytics Cookies: These allow us to collect information to help us understand how our Platforms are used and the nature of our user base. This includes whether a user has made prior visits to a Platform, usage of the Platform, and areas on the Platforms that are most often visited. This allows us to improve the performance of the Platforms and your experience. Where applicable, the legal basis for the collection of such information by analytics cookies is your consent.
Marketing Cookies: Marketing cookies provide us with some of the same information that we collect from analytics cookies, and also allow us to serve advertising about our organization that we believe may interest you after you have visited our Platforms, and to measure the effectiveness of our advertising. If you disable these cookies you will not receive advertising based on your visits to our Platforms. Where applicable, the legal basis for the collection of such information by analytics and advertising cookies is your consent.
We use the information that is automatically collected through cookies to support our operations, analysis, and promotion of the Platforms. This includes the following:
- to monitor metrics such as total number of visitors and traffic;
- to understand which activities and services are most popular;
- to understand the pages where visitors enter our Sites and the pages viewed;
- to understand generally the location of our users (e.g., zip code information);
- to deliver targeted advertisements that are more relevant to the user;
- to recognize the browsers used to visit our Platforms, so that the content is adapted for the relevant browser;
- to diagnose and fix technology problems; and
- to reduce the repetition in the promotional messages that users see on our Platforms.
Disabling, Deleting, or Opting Out of Cookies
Cookies that are served on our Platforms include:
Google Tag Manager, Google Analytics, Hotjar, LOCALiQ, Meta, Quantcast, Satisfi Labs, Userway, and YouTube.
PRIVACY POLICIES OF OTHER WEBSITES WE LINK TO
Our Platforms may link to other websites or apps, including content offered by third parties that we do not control and whose privacy and data collection practices may differ from ours (“Third Party Platforms”). We are not responsible for the practices employed by any websites or services linked to or from our Platforms, including the information or content contained within them.
How to Contact Us
The Platforms are operated by Circuit of The Americas, located 9201 Circuit of The Americas Blvd, Austin, Texas 78617, [email protected].
To report potential security vulnerabilities, please write to [email protected].