Personal Data Processing Policy

1. General provisions. Operator details

This Personal Data Processing Policy is drafted in accordance with Federal Law No. 152-FZ "On Personal Data" dated 27.07.2006 and defines how kartracers.ru processes personal data.

The data operator is an individual: Пётр Куценко (Petr Kutsenko).

Contact methods: Telegram @stress_ins; e-mail privacy@kartracers.ru; the data-subject request form at /legal/data-request.

kartracers.ru is a non-commercial sports-statistics resource about amateur and sport karting in Russia, aggregating publicly published race results.

2. Legal grounds for processing

Data of public sporting-event participants (pilot profiles) is processed under the operator's legitimate interest (152-FZ art. 6(1)(7)) — maintaining open karting statistics — provided the rights and freedoms of the data subjects are not violated.

Photographs taken at public sporting events are used under Civil Code art. 152.1(1)(2): consent is not required when an image is captured at an event open to the public, unless the image itself is the primary object of use.

Consent (152-FZ art. 6(1)(1)) applies when a pilot voluntarily claims their profile or authorizes via Telegram.

3. Purposes of processing

The operator processes personal data to:

• maintain open statistics for amateur and sport karting in Russia;
• aggregate and present publicly published race results;
• identify race participants (pilots) and teams to correctly match results across races;
• let pilots voluntarily claim and complete their own profile;
• operate user features (Telegram login, personal settings);
• keep the site secure and analyze traffic (web analytics);
• review data-subject requests.

4. Categories of data subjects and data processed

Race participants (pilots), including profiles built from open sources: first/last name, race photos, city, age category, start numbers, race results and ratings, race history, team membership.

Users authenticated via Telegram: Telegram id, username, first/last name, profile photo, IP address, User-Agent.

Requesters submitting a form on the site (or their legal representatives): the contact details and the content of the request.

The operator does not process special categories of personal data or biometric data for identification purposes.

5. Actions performed and processing methods

The operator performs: collection, recording, systematization, storage, updating, retrieval, use, anonymization, blocking, deletion and destruction of personal data. Pilot profile data (see §4) is published on the site as open sports statistics; other categories are not shared with third parties except as required by Russian law.

6. Retention periods

Pilot profile data is retained until the purpose is achieved or until a deletion/stop-processing request is satisfied, whichever comes first. Consent-based data (claim, Telegram login) is retained until consent is withdrawn. Requester data is retained only for as long as needed to review the request, then deleted or anonymized.

7. Cross-border transfer

The operator does not transfer personal data across borders. Web analytics (Yandex Metrika) is processed on servers located in the Russian Federation, and only after the user's consent to analytics cookies.

8. Data subject rights and how to exercise them

A data subject has the right to: obtain information about the processing of their data; request correction, blocking or deletion of inaccurate/unlawfully obtained data; request that processing stop; withdraw consent; and complain to Roskomnadzor or a court.

Submit a request via the form on the site (recommended), Telegram, or e-mail — see contacts below.

The operator responds within 10 business days (extendable by up to 5 business days with a reasoned notice). Requests concerning minors are reviewed as a priority and must be submitted by a legal representative.

9. Data localization in the Russian Federation

In accordance with 152-FZ art. 18(5), the operator records, systematizes, stores and retrieves the personal data of Russian citizens using databases located within the Russian Federation. The site's servers and databases are located in the Russian Federation.

10. Security measures. Final provisions

The operator takes reasonable legal, organizational and technical measures to protect personal data, including HTTPS/TLS encryption, access control, storage on servers in the Russian Federation, regular backups, and data-minimization.

Contacts: Telegram @stress_ins, e-mail privacy@kartracers.ru, form /legal/data-request.

The operator may amend this Policy; the new version takes effect upon publication on the site. Russian law governs all matters not covered by this Policy.