Privacy Policy
CIRCUIT OF THE AMERICAS PRIVACY POLICY
Last updated: August 24, 2026
Download Privacy Policy
Thank you for visiting a Site owned and operated by Circuit of The Americas or an App published by Circuit of The Americas (from which you have linked to this Privacy Policy). “Sites” refers to Internet web sites and “Apps” refers to apps for use on mobile communication devices such as smartphones and tablets. “Platforms” refers to Sites and Apps collectively that are owned and operated by Circuit of The Americas LLC and its affiliates and subsidiaries (which we also refer to as “COTA,” “we,” “us,” or “our”).
This Privacy Policy explains the types of information we may collect from you or that you may provide when you visit or use the Platforms, as well as information provided to us or collected by us offline at our events and physical properties, and when you otherwise communicate with us, including during sales and support calls, and our practices for collecting, using, maintaining, protecting, and disclosing that information. This Privacy Policy does not apply to information collected through any other means, including on any other Sites or Apps or through products and services operated by third parties.
Please read this Privacy Policy carefully. If any term in this Privacy Policy is unacceptable to you, please do not use our Platforms, visit any of our physical properties or attend our events, or provide us with any personal information. By accessing any of our Platforms where this Privacy Policy is posted or otherwise engaging with services that direct to this Privacy Policy, you acknowledge that you have read and understood this Privacy Policy.
Throughout this Privacy Policy, we refer to personal information, which refers to information that lets us know the specifics of who you are. It includes information that directly or indirectly identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to, you as an individual or to your household, or as otherwise defined by applicable law (“Personal Information”).
We reserve the right to update this Privacy Policy from time to time by posting the updated Privacy Policy online. When we do, the “Last Updated” line above will be revised, indicating the effective date, and any additional notification will be provided in accordance with applicable law. Your access of the Platforms or use of other services after such change will be deemed acceptance of the new Privacy Policy.
YOUR PRIVACY RIGHTS
The following sub-sections outline your privacy rights, which may vary depending on where you are located.
Residents of the European Economic Area (“EEA”)/European Union (“EU”) and United Kingdom (“UK”)When you access our Platforms, visit our physical properties, attend our events, or otherwise communicate with us, we function as a “data controller” under the General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (“UK GDPR”). In some cases, we will ask for your consent so that we may process your Personal Information. In other circumstances, we may rely on a different lawful basis, as explained in the section, “How We May Use and Disclose Your Personal Information.”
- Be informed. It’s your right to be informed of how we process your Personal Information. We inform you through this Privacy Policy, through information provided to you through the Platforms, and by answering your questions about our Privacy Policy when you contact us.
- Access. It’s your right to request access to the Personal Information that we process about you.
- Rectification. It’s your right to request that we amend or update your Personal Information where it may be inaccurate or incomplete.
- Erasure. It’s your right to request that we erase your Personal Information, under certain conditions.
- Restriction. It’s your right to request that we restrict the processing of your Personal Information, under certain conditions.
- Object. It’s your right to object to our processing of your Personal Information, under certain conditions.
- Data portability. It’s your right to request a machine-readable copy of your Personal Information, or that we transfer the Personal Information that we have collected to another organization, under certain conditions.
- Not Subject to Automated Decision-Making. It’s your right not to be subject to a decision based solely on autonomous decision-making (that is, a decision made without human involvement), including profiling, where the decision would have a legal effect on you or produce a similarly significant effect. Please note that we do not currently engage in any such practices.
- Withdrawal of consent. It’s your right to withdraw your consent to us for our processing of your Personal Information, under certain conditions. The withdrawal of your consent does not affect the lawfulness of the processing based on your consent before such withdrawal.
- Right to lodge a complaint. Data subjects located in the EU/EEA or the UK have the right to lodge a complaint with the competent supervisory authority.
When you access our Platforms, visit our physical properties, attend our events, or otherwise communicate with us, we function as a “business” under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “California Law”). Subject to certain exceptions, California Law provides consumers with specific rights regarding their Personal Information, including the following:
- Right to Know. You have the right to request that we disclose the Personal Information we collected about you, including the categories of Personal Information, the categories of sources from which Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we have collected about you. We inform you through this Privacy Policy, through information provided to you through the Platforms, and by answering your questions about our Privacy Policy and practices when you contact us and/or submit a request to know.
- Right to Delete. You have the right to request that we delete any of your Personal Information we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our Service Providers to delete) your Personal Information from our records, unless an exception applies.
- Right to Correct Inaccurate Personal Information. You have the right to request that we correct any of your Personal Information we maintain about you that is inaccurate.
- Right to Opt Out of Sales or Sharing of Personal Information. We do not sell your Personal Information for monetary profit. However, we may engage in certain information disclosure activities that may be considered “sales” or “sharing” under California Law. If we sell your Personal Information to or share such information with third parties, you have the right to opt out of the sale or sharing of such information. To exercise the right to opt out, you (or your authorized representative) may submit a request to us by visiting the Your Privacy Choices link on the homepage. If you have an opt-out preference signal enabled, you will automatically be opted out of the sale or sharing of your information, but we may ask you to confirm your preference if you have previously consented to the sale or sharing of your Personal Information. For additional information regarding how an opt-out preference signal will be processed and how you can use an opt-out preference signal, please see the “Third-Party Cookies and Tracking” sub-section, below.
- Right to Limit the Use and Disclosure of Sensitive Personal Information. You have the right to limit how we use and disclose your sensitive Personal Information. To exercise the right to limit, you (or your authorized representative) may submit a request to us by visiting the Your Privacy Choices
If a transaction requires the use or disclosure of your sensitive Personal Information in order to complete the transaction, we will notify you and provide instructions on how you can reauthorize such use or disclosure. - Right to Non-Discrimination. We will not discriminate against you for choosing to exercise any of your rights. If you exercise certain rights, understand that you may be unable to use or access certain features of the Platforms or other COTA services and offerings.
In addition to your rights under California Law, California Civil Code Section 1798.83 permits California residents to request information regarding our disclosure, if any, of their Personal Information to third parties for their direct marketing purposes. If this applies, you may obtain the categories of Personal Information disclosed and the names and addresses of all third parties that received Personal Information for their direct marketing purposes during the immediately prior calendar year (e.g., requests made in 2026 will receive information about 2025 sharing activities). To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident, and provide a current California address for our response. You may make this request in writing by contacting us via the methods described in the “How to Contact Us” section, below.
Residents of Other U.S. States
When you access our Platforms, visit our physical properties, attend our events, or otherwise communicate with us, we function as a “controller” under comprehensive state privacy laws. Subject to certain exceptions, if you are an eligible resident of a state in which there is a comprehensive privacy law in effect, including Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia, you have rights with respect to the Personal Information, also known as personal data, that we collect about you, including the following:
- Right to Know or Access. You have the right to confirm whether we process your Personal Information and the categories of Personal Information processed, and to access such Personal Information. You also have the right to obtain your Personal Information in a portable, and to the extent reasonably feasible, readily usable format that you can transmit without hindrance. In addition, Delaware and Maryland residents have the right to obtain a list of the categories of third parties to which we have disclosed their Personal Information, Connecticut, Minnesota, and Oregon residents have the right to receive a list of specific third parties to which we have disclosed any Personal Information, and Vermont residents have the right to receive a list of all third parties to which we have sold Personal Information.
- Right to Delete. You have the right to request that we delete the Personal Information you have provided to us or that we have otherwise obtained about you.
- Right to Correct. You have the right to request that we correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information.
- Right to Opt Out. You have the right to opt out of the processing of your Personal Information for the purposes of (i) targeted advertising, (ii) the sale of your Personal Information, and (iii) profiling in furtherance of decisions that produce legal or similarly significant effects.
Please note that we do not engage in such profiling as defined under applicable law, but we may sell or use your Personal Information for targeted advertising purposes. If you have an opt-out preference signal enabled, you will automatically be opted out of the sale or use of your information for targeted advertising, but we may ask you to confirm your preference if you have previously consented to such processing activities. For additional information regarding how an opt-out preference signal will be processed and how you can use an opt-out preference signal, please see the “Third-Party Cookies and Tracking” sub-section, below.
NOTICE TO LOUISIANA AND TEXAS CONSUMERS: We may sell your sensitive personal data.
- Right to Appeal. You have the right to appeal our decision with regard to your request to exercise any rights described herein.
The exact scope of these rights may vary by state. You do not need to create an account with us to exercise your state privacy law rights.
Email Opt Out
We always allow individuals to opt out of a specific marketing newsletter or other email communication by clicking the “unsubscribe” button that appears in each such email, or by contacting us at [email protected]. Please note that if you unsubscribe from receiving these newsletters/emails, we may still send you non-promotional emails, such as those about your account or our ongoing business relations.
Exercising Your Rights and Identity Verification
If you would like to exercise any of the above-mentioned rights that apply to you, please contact us at [email protected]. You may also call us at 512-655-6585 or submit a request via our interactive form, available at our Do Not Sell Request Form. We will respond within the time frame required under applicable law.
In addition, to the extent you have provided consent for our collection and/or processing of your Personal Information and wish to revoke that consent, please contact us by email ([email protected]) or phone (512-655-6585).
Please be aware that your exercise of these rights is subject to certain exceptions, such as to safeguard the public interest as well as our interests (for example, our ability to maintain legal privilege).
Please also note that we may require you to prove your identity to exercise certain rights. Depending on your request, we may ask for information such as your name, telephone number, email address, and/or date of last communication with us. We may also ask you to provide a signed declaration confirming your identity. We will only use Personal Information provided in your privacy rights request to verify your identity or authority to make the request.
Only you, your parent or guardian (if you are under 13 years of age), conservator, a person to whom you have given power of attorney, or an authorized agent may make a verifiable privacy rights request related to your Personal Information. You may, however, make a verifiable privacy rights request on behalf of your minor child if necessary. Your verifiable consumer request must provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative. We cannot respond to your request if we cannot verify your identity or authority to make the request.
TYPES OF PERSONAL INFORMATION WE COLLECT
In the preceding twelve (12) months, we have collected the following categories of Personal Information from the sources discussed below.
Personal Information You Provide
You may be asked to provide us with certain Personal Information when you sign up for an account or a newsletter on one of our Platforms, when you contact us for information about COTA or one of our programs, when you use some of our Apps, when you register for and/or attend COTA events, or when you participate in COTA programs. The Personal Information we request, and that you provide directly to us and/or allow us to obtain directly from your device, may include:
- Identifiers, including your name, postal address (shipping and billing address), telephone number, or email address;
- Payment information, such as your name, last four digits of a credit card number and expiration date (credit card payments are processed and stored by a third-party Service Provider), telephone number, and billing address, when you make a purchase with COTA;
- Precise geolocation information, including precise geolocation information collected from use of the Apps in connection with your visits to our physical properties;
- Visual information, including photos that are uploaded to Apps for identity verification purposes;
- Biometric information, including in relation to facial recognition technology;
- Commercial information, including information regarding your purchase history; and
- Communications, including chat messages and phone calls, which may be monitored and recorded, including by Service Providers that incorporate or rely upon artificial intelligence (AI) technology.
It is always your choice whether to provide us your Personal Information. However, depending upon the activity, some Personal Information will be mandatory for participation, and we will indicate it as such. If you do not provide the mandatory Personal Information with respect to an activity, you will not be able to engage in that activity.
If we learn that we have inadvertently collected Personal Information from a child on any of our Platforms that are not intended for or directed to children, we will take steps to promptly delete that information.
Information We Collect in Connection with Your Attendance at Events or Visits to Physical Properties
When you purchase tickets for and visit any of our physical properties or attend our events we may collect certain Personal Information. This may include:
- Identifiers, including your name, email address, and driver’s license;
- Biometric information, including through our use of facial recognition technology; and
- Visual and audio information, including CCTV footage from cameras deployed throughout our physical properties and at events and photos taken on rides or amusements.
Please note that this information may be collected in addition to information collected via the Apps that are used to support or enhance your visits to our physical properties or attendance at events.
Information We Collect Automatically
We, and our Service Providers, automatically collect certain information when you visit or interact with the Platforms. Such information may include, among other things:
- Identifiers, including your Internet Protocol address and mobile device identifier;
- Internet or other electronic network activity information, including the Uniform Resource Locator (“URL”) from which you arrived, the URL to which you next go, browser information, type of operating system, and information about your use of the Platforms such as the pages or sections you visit most frequently, the time you spend there, and how you move through the Platforms. We refer to this type of information as “Usage Information,” which we collect from your device(s) through the use of cookies, web beacons, third-party analytics providers, or other similar tracking technologies. For more information about cookies and Usage Information, see the “Third-Party Cookies and Tracking” sub-section, below; and
- Geolocation data, such as a city or zip code and/or tied to your IP address and cookies on your device.
We, and our Service Providers, automatically collect certain information when you visit or interact with the Platforms. Such information may include, among other things:
Third-Party Cookies and Tracking
As indicated above, we and our Service Providers collect Usage Information via cookies, web beacons, and other similar tracking technologies. A “cookie” is a small data file that a web site transfers to a user’s device and is stored on the user’s browser. As a user moves from one page or one screen to another, a cookie is used to tell us that it is the same device and to remember your preferences. A “web beacon” (also referred to as a “clear gif” or “pixel tag”) is a one-pixel image (which may be visible or transparent), which may be embedded on a web page or in an email message, and which may also provide us with information about usage of that page or email message, including if and when you have opened it.
We use Usage Information to help us administer the Platforms, remember your preferences, deliver content that may be of interest to you, diagnose technical problems, and to support our security efforts. We also analyze the information to understand aggregate trends about how our Platforms are used, to help us better understand the makeup of our Platform users, and to help us improve our Platforms. In addition, we and our Service Providers collect and use Usage Information to support our marketing efforts.
A list of companies that host cookies on our Platforms, the services they provide, and information on how you may block or delete certain cookies is included in our Cookie Notice. Most browsers can be set to detect and provide the option to block or delete browser cookies, but doing so may affect certain features of the Platforms. If you do not or if you no longer want to have cookies placed on your browser by third parties, many of them also offer ways to opt out. To learn more about browser cookies, including how to manage or delete them, refer to the “Tools,” “Help,” or similar section of your web browser.
We do not serve targeted advertising on our Platforms. However, when you use the Internet, third parties that we are not affiliated with may use tracking technologies, including cookies and pixels, to collect information about your online activities over time and across our Platforms and other websites. They may use this information to measure the effectiveness of our marketing and to serve you advertisements that may be of interest to you elsewhere on the Internet. Currently, our websites do not respond to “do not track” signals transmitted by web browsers. “Do Not Track” is different from the Global Privacy Control (“GPC”), which we do respond to, in accordance with applicable law. The GPC is currently the only opt-out preference signal we can recognize. To find out more about GPC, please visit https://globalprivacycontrol.org/.
For more information about third-party advertisers and how to prevent them from using your information, visit the NAI’s consumer website at https://thenai.org/how-to-opt-out/ or https://optout.aboutads.info/, or http://www.youronlinechoices.com/uk/. If you do want to opt out using these tools, including the GPC, you need to opt out separately and/or configure your settings for each of your devices and for each web browser that you use on each device, and after you erase cookies on your browser. Please note that you still may receive generalized ads after opting out and the GPC does not impact essential cookies used on the Platforms.
Personal Information Received from Third Parties
We may receive Personal Information about you from other sources, including our data broker services, data enhancement companies, list rental services, third-party analytics providers, and social media-owned databases, including via your interactions with our social media pages (this includes aggregate data on our social media followers (e.g., age, gender, and location), engagement data (e.g., “likes,” comments, shares, reposts, and clicks), awareness data (e.g., number of impressions and reach) and individual users’ public profiles).
In addition, we may obtain certain information from our licensees, including identifiers (e.g., name and address) and payment information, to generate a profile of users who interact with our licensees.
Personal Information Inferences
We may also infer certain Personal Information from any combination of the information that we collect directly or that we receive from third parties, including using automated means to generate information about your likely preferences or other characteristics.
In all cases, we will only use your Personal Information consistent with this Privacy Policy, or as disclosed at the time of collection.
HOW WE MAY USE AND DISCLOSE YOUR INFORMATION
Legal Bases for Using Your Personal Information
If you are in the EEA/EU or the UK, we will collect, use, access, or preserve your Personal Information under the applicable legal bases for doing so under the GDPR or the UK GDPR. The legal bases depend on your interactions with us and our Platforms.
How We May Use Personal Information
The below table summarizes the business or commercial purposes for which COTA may collect and use your personal information and, if you are in the EEA/EU or UK, our legal bases for doing so:
| Purpose | Legal Basis, Where Applicable |
| To administer and provide our Platforms (and their contents), events, and physical properties, including to provide support to you when you request it, services, and security in partnership with our third-party Service Providers; to fulfill or meet the reason you provided the information; and to help us understand and monitor the usage of our Platforms, improve our online and offline offerings, and customize and improve the performance of the Platforms, events, and physical properties. | Our legitimate interest to conduct and develop our business |
| To perform our contractual obligations; to send you transactional or relationship messages, such as receipts, account notifications, customer service responses, and other administrative messages; and to provide required information regarding purchases (e.g. shipping information, event logistics, entry tickets, or post-event summary communications). | Performance of contractual obligations with you |
| To transfer your Personal Information to a new or reorganized entity in the event of a reorganization, merger, sale, assignment, bankruptcy, or similar change, for the new entity to use consistent with this Privacy Policy. | Our legitimate interests |
| To operate our organization, including by sharing with our subsidiaries, affiliates, and other related entities; with our advisors, including lawyers, consultants, and accountants; and with others (including Service Providers) for our lawful business purposes. | Our legitimate interests |
| To resolve disputes, and to prevent, investigate, and defend our interests or the interests of our customers and users of the Platforms, including by sharing Personal Information with entities that assist us in those endeavors. | Our legitimate interest to establish, exercise or defend legal claims |
| To comply with legal obligations to which we are subject, including as may be required by a court order, regulatory inquiry, or other lawful request. | To fulfill our legal obligations |
| To help maintain the safety, security, and integrity of our Platforms, events, physical properties, products and services, databases, other technology assets, and business, and for system administration. | Our legitimate interest to maintain the security of our Platforms, events, physical properties, products and services, databases, other technology assets, and business, and to conduct system administration |
| To deliver information to you that you have expressly chosen to receive and to enable your participation in special events or programs that we may offer (if you choose to participate in such events or programs). | Your consent |
| To communicate with you about our Platforms and provide you with marketing materials, including updates and offers and through our use of targeted advertising. You may unsubscribe or opt out of such electronic communications via the link labeled “unsubscribe” that appears on such communications, or by contacting us at [email protected]. | Your consent |
| To create a profile of you in order to provide you with marketing materials that we believe would be likely to interest you. | Your consent |
| Any other purpose disclosed by us when you provide the information or with your consent. | Your consent |
Please note that we do not collect, use, or sell Personal Information for the purpose of training large language models.
To Whom We Disclose Your Personal Information
In the preceding twelve (12) months, we may have disclosed Personal Information about you to the following categories of third parties and as otherwise described in this Privacy Policy or at the time of collection, for the purposes described in the preceding sub-section:
- With third parties that provide certain services and help facilitate the operations of our Platforms and other services and offerings (our “Service Providers”), including data hosting and collection providers, email and text messaging providers, content delivery providers, analytics providers, advertising and marketing partners, payment processors (whose privacy policies may apply instead of and/or in addition to this Privacy Policy), and fraud prevention and identity verification vendors. Service Providers may require access to, or collect on our behalf, certain Personal Information in order to provide their services, including vendors that provide call recording services to us (for quality and training purposes) and those that support identity verification processes;
- With business partners, including event promoters, co-organizers, and sponsors;
- To our accountants, auditors, lawyers, and other outside professional advisors, subject to appropriate contractual obligations of confidentiality;
- Where required by law, court order, or subpoena if we believe disclosure is in accordance with, or required by, applicable law or legal process or where necessary to prevent, detect, or prosecute criminal offenses, or to protect our rights, property, and safety or the rights, property, and safety of others;
- In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company;
- Between and among our company and our current and future parents, affiliates, subsidiaries, and other companies under common control and ownership; and
- With your consent or at your direction, including in relation to your use of third-party Apps or services that you choose to use.
Your Personal Information may also be transferred to Le Mans Endurance Management, co-organizer of the Lone Star Le Mans, part of the FIA World Endurance Championship, a company registered in France under the SIREN number 451 336 184, VAT No FR 17 451 336 184, with its registered address at Circuit des 24 Heures, 72019 Le Mans Cedex 2, France, (hereinafter referred to as “LMEM“). LMEM will act as an independent controller, solely for the purposes detailed below, and in accordance with applicable legislative and regulatory provisions:
| Legal Grounds | Purposes |
| Execution of the agreement | Co-organization of the Lone Star Le Mans event part of the FIA World Endurance Championship. |
| Consent | Personalized offers sent via electronic communication (email, SMS, etc.) including for (i) upcoming events of the same nature (FIA WEC Races) and any related services, and (ii) services related to its video platform broadcasting motor racing events. Creation and management of events related to races and circuits. |
| Legitimate interest | Development of commercial and user statistics. |
The Personal Information transmitted to LMEM is processed in accordance with its privacy policy, including the retention period, which can be consulted here: https://www.fiawec.com/fr/page/politique-de-confidentialite.
LMEM may be contacted through the following address:
- Email: [email protected]
- Postal: CIRCUIT DES 24 HEURES F-72019 LE MANS CEDEX 2
Please note that, in the last twelve (12) months and as indicated above in the “How We Use Personal Information” section, we also may have disclosed certain categories of Personal Information, including identifiers, commercial information, and internet or other similar network activity, to advertisers and advertising networks to show you targeted advertisements on third-party properties and to expand the reach and effectiveness of our own marketing campaigns. These activities may be considered “sales,” “sharing,” or “targeted advertising” under certain state laws. We do not, however, knowingly sell or share the Personal Information of consumers under 16 years of age.
We may also process and disclose information to third parties if the information has been de-identified or aggregated in a way so it cannot be used to identify you.
TEXT/SMS COMMUNICATIONS
If you consent to receive communications via text message, we will send marketing and/or non-marketing communications to the phone number you provide, which may utilize or be sent using automated telephone dialing equipment and may include artificial intelligence (“AI”)-generated content. We do not share SMS consent or your mobile telephone number or other opt-in data with third parties for their marketing purposes. However, as indicated above, we may disclose this information to Service Providers that support our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages. If related to an event, we may also share certain information with the event promoter who may then contact you about the event.
Message frequency may vary. Message and data rates may apply. You are not required to consent to such communications as a condition of purchasing products or services. To opt out at any time, text STOP. Please note that you may be subscribed across different short codes used by us, and therefore you must separately submit an opt-out request to each short code from which you wish to unsubscribe. After revoking consent, you may receive a confirmation text that you have been opted out. For assistance, text HELP or visit our website at https://circuitoftheamericas.com/.
For additional information, please review the section titled “COTA Text Message Program Terms” in the COTA Website Terms of Use.
PUSH NOTIFICATIONS
With your consent, we may send promotional and other push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.
HOW WE STORE AND PROCESS YOUR INFORMATION
Storage
COTA stores your information on our servers in the United States. Our Service Providers’ servers may be located in the United States or elsewhere.
Cross-Border Transfers
We may transfer and store information that we collect about you, including Personal Information, across borders from your country or jurisdiction to other countries or jurisdictions around the world, including to entities located outside of the EEA. We will implement reasonable measures designed to ensure that your legal rights and protections travel with any transfer of Personal Information, as required by applicable law. Where required, such as in the EU, UK, or EEA, we will implement Standard Contractual Clauses with our third parties, or we will rely on another lawful transfer mechanism. You may request details of the transfer mechanism we rely on to transfer Personal Information by sending such request to us at [email protected].
Security of Your Personal Information
We implement and maintain reasonable technical and organizational measures to help secure your Personal Information. For example, we host Personal Information in secure, cloud-based environments that use firewalls, encryption, and other industry-standard technologies in an effort to prevent interference or access from outside intruders.
While we strive to maintain the security of your Personal Information, we cannot guarantee that information security measures are fail-safe or guarantee that Personal Information on the Platforms may not be accessed, disclosed, altered, or destroyed without authorization.
Retention of Your Personal Information
We will retain your Personal Information in accordance with the time period allowed under applicable law, and with consideration for the sensitivity, volume, and type of Personal Information, as well as the purpose for which we have collected it, after which time we will take steps to delete it. When determining the retention period, we take into account criteria such as the type of services requested by or provided to you, the nature and length of our relationship with you, use of our Platforms, and the impact on Platform functionality if we delete your Personal Information.
We may retain deidentified, aggregate data for lawfully allowed purposes.
COOKIE NOTICE
As noted above, we use cookies and other tracking technologies, such as web beacons, to collect and store information when you visit our Platforms. A “cookie” is a small data file that a web site transfers to a user’s device and is stored on the user’s browser. As a user moves from one page or one screen to another, a cookie is used to tell us that it is the same device and to remember your preferences. A “web beacon” (also referred to as a “clear gif” or “pixel tag”) is a one-pixel image (which may be visible or transparent), which may be embedded on a web page or in an email message, and which may also provide us with information about usage of that page or email message, including if and when you have opened it.
Types of Cookies We Use
We might use both session and persistent cookies. Session cookies last for as long as you are using your browser, while persistent cookies will last for some time after you close your browser. The time that persistent cookies last is dependent on your browser configuration, including whether you delete cookies, and the lifespan of each cookie.
These cookies may be “first-party” cookies, which are served by us, or “third-party” cookies, which are served by a domain other than ours. While we allow third parties to access the Platforms to place cookies on users’ devices, the information those cookies supply is controlled by the third party and subject to their privacy policy.
The Platforms use four types of cookies: necessary, functional, analytics, and marketing cookies.
Necessary Cookies: These are necessary for the Platforms to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to requests for services, such as setting your privacy preferences, logging in, or filling in forms. You may be able to set your browser to block or alert you about these cookies, but some parts of the Platforms will then not work. Where applicable, the legal basis for use of essential cookies is our legitimate interest to operate our Platforms.
Functional Cookies: These enable the Platforms to provide enhanced functionality and personalization. They help us to store choices and settings you make, such as your country or account preferences. If you disable these cookies, the functionality of the Platforms may be affected. Where applicable, the legal basis for the collection of information through functional cookies is your consent.
Analytics Cookies: These allow us to count visits and traffic sources so we can measure and improve the performance of our Platforms. This includes whether a user has made prior visits to a Platform, usage of the Platforms, and areas on the Platforms that are most (and least) often visited. This allows us to improve the performance of the Platforms and your experience. These cookies may also be used, together with some marketing cookies, to show more relevant ads across the web and to measure interactions with the ads we show. If you do not allow these cookies, we will not know when you have visited our Platforms and will not be able to monitor performance. Where applicable, the legal basis for the collection of such information by analytics cookies is your consent.
Marketing Cookies: Marketing cookies provide us with some of the same information that we collect from analytics cookies, and also allow us to serve advertising about our organization that we believe may interest you after you have visited our Platforms, and to measure the effectiveness of our advertising. They also may be used by advertising partners to build a profile of your interests. If you disable these cookies, you will not receive advertising based on your visits to our Platforms. Where applicable, the legal basis for the collection of such information by marketing cookies is your consent.
How We Use Cookies
We use the information that is automatically collected through cookies and other tracking technologies to support our operations, analysis, and promotion of the Platforms. This includes the following:
- to make the Platforms work as expected and enhance user experience;
- to monitor metrics such as total number of visitors and traffic;
- to understand which activities and services are most popular;
- to understand the pages where visitors enter our Sites and the pages viewed;
- to understand generally the location of our users (e.g., zip code information);
- to deliver targeted advertisements that are more relevant to the user;
- to recognize the browsers used to visit our Platforms, so that the content is adapted for the relevant browser;
- to diagnose and fix technology problems; and
- to reduce the repetition in the promotional messages that users see on our Platforms.
Disabling, Deleting, or Opting Out of Cookies
You may click the “Consent Preferences” cookie icon (found in the lefthand corner on each page of our Sites) to make choices about cookies we and our third parties place on our Platforms. If you do not or no longer want to have cookies placed on your browser by third parties, many of them also offer ways to opt out. You should review the third party’s website for instructions. Most browsers also allow at least some control of most cookies through browser settings, and you may also delete existing cookies through your browser. In addition, you may enable the Global Privacy Control to communicate your privacy preferences, which will, depending on where you reside, opt you out of certain disclosure practices.
You can find out more information about cookies in general and how to manage them by visiting the website www.allaboutcookies.org.
List of Specific Cookies
Below is a detailed list of the first- and third-party cookies we use on our Platforms:
First-Party Cookies
| Type of Cookie | Name | Duration | Purpose | Categories of Personal Information Processed |
|---|---|---|---|---|
| Necessary | tbits | 1 year | *.thecircuit.com | Necessary |
| Necessary | __spdt | 1 year | Description is currently not available. | Necessary |
| Necessary | wpl_user_preference | 1 year | No description available. | Necessary |
| Necessary | _zitok | 1 year | Description is currently not available. | Necessary |
| Necessary | __cf_bm | 1 hour | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. | Necessary |
| Necessary | _cfuvid | Session | Cloudflare sets this cookie to track users across sessions to optimize user experience. | Necessary |
| Necessary | cf_clearance | 1 year | Cloudflare sets the cookie to manage and verify CAPTCHA challenges. | Necessary |
| Necessary | session_id | Never Expires | This cookie is used to get or set the session id for the current session. | Necessary |
| Necessary | cookieyes-* | 1 year | CookieYes sets this cookie for consent solution management. | Necessary |
| Necessary | rocket-lazyload | Session | lazyload.min.js | Necessary |
| Necessary | owl-carousel-js | Session | owl.carousel | Necessary |
| Necessary | glide-theme-scripts | Session | bundle.min.js | Necessary |
| Necessary | fs-consent, | Persistent (default 120 days) | Store user cookie consent preferences and category choices (Consent Pro / Finsweet). Required for consent management system. | Identifiers; Internet or other similar network activity |
Third-Party Cookies
| Type of Cookie | Name | Duration | Purpose | Categories of Personal Information Processed |
|---|---|---|---|---|
| Necessary | VISITOR_PRIVACY_METADATA | 6 months | YouTube sets this cookie to store the user’s cookie consent state. | Necessary |
| Necessary | tradablebits-signup | Session | signup.thecircuit.com | Necessary |
| Necessary | NID | 1 year | Google sets the cookie for advertising purposes. | Necessary |
| Necessary | VISITOR_INFO1_LIVE | 6 months | A cookie set by YouTube to measure bandwidth. | Necessary |
| Necessary | __cf_bm | 6 months | google.com/recaptcha | Necessary |
| Necessary | rc::a | Persistent | google.com/recaptcha | Necessary |
| Necessary | rc::c | Session | Session | Necessary |
| Necessary | __cf_bm, cf_clearance (Cloudflare) | Session | Cloudflare bot management and Turnstile challenge cookies for form protection and security. | Necessary |
PRIVACY POLICIES OF OTHER WEBSITES WE LINK TO
Our Platforms may link to other Sites or Apps, including content offered by third parties, that we do not control and whose privacy and data collection practices may differ from ours (“Third-Party Platforms”). We do not endorse, and are not responsible for the practices employed by any websites or services linked to or from our Platforms, including the information or content contained within them.
When you go via our link to Third-Party Platforms, you become subject to their terms of use and privacy policies rather than ours. You should review these other website privacy policies regarding any Personal Information that they may collect about you.
How to Contact Us
The Platforms are operated by Circuit of The Americas, located 9201 Circuit of The Americas Blvd., Austin, Texas 78617.
For questions or concerns about the Platforms, this Privacy Policy, the Personal Information we hold about you, or exercising your privacy rights, please write to [email protected]. You may also have the right to lodge a complaint about our privacy practices with a supervisory authority.
To report potential security vulnerabilities, please write to [email protected].