This privacy policy informs you of how GDM Organisation collects, uses, processes, and protects your personal data that you provide through the Wavre Indoor Karting by Apex Timing application and the following URL: www.wik-karting.be
This privacy policy operates in parallel with the terms and conditions of the site www.wik-karting.be.
Your personal data is processed by the company GDM Organisation, headquartered at 117 Boulevard de l’Europe, 1300 Wavre
Email: info@wik-karting.be
Phone: 010 41 75 77
By using the Wavre Indoor Karting by Apex Timing application and the website www.wik-karting.be, users consent to:
Personal data collected on www.wik-karting.be is collected and processed only for the purposes specified in this privacy policy and/or on the relevant pages of the site. The personal data we collect will not be used for any other purpose.
GDM Organisation may process your personal data for the following purposes:
To track your progress within our center, whether in terms of activity performed (time, records,…), purchase history, or signing the liability waiver. Example of data: Photo, waiver signature, age, gender, e-mail address, pseudonym, IP address in the case of mobile application purchases, etc.
The pseudonym allows the pseudonymization of the members, we only use this pseudonym for the part visible to the public.
Various purchase data are collected at checkout. This data can be used to organize loyalty offers and provide a complete commercial follow-up of the customer. Example data: number of purchases, reservation history, loyalty points, virtual wallet associated with a person.
Session data is collected and can be used, for example, for results management or automatic e-mailing. All members can view their session history from their respective member profiles. Example of data: Time history, sessions, etc.
Collecting data at different stages of the customer journey enables us to offer our customers a complete user experience.
Your personal data is stored by GDM Organisation. However, it may also be communicated to our company’s employees or service providers solely upon our request, following our instructions, and except for any other use.
Additionally, the collected personal data may be shared:
Outside of the situations outlined in this policy, personal information will not be disclosed or shared with third parties under any circumstances.
The personal data collected will be retained for as long as necessary to achieve the stated objectives. Once these objectives are fulfilled, the data will be deleted or anonymized.
GDM Organisation is committed to protecting your personal data from unauthorized access and manipulation through organizational and technical measures. Your personal data is processed with full confidentiality by authorized personnel and solely for the purpose of achieving the required objective.
However, please be aware that, in today’s environment, the risks of data breaches and violations of personal data integrity are real.
In the event of an accidental or malicious breach, and in accordance with the General Data Protection Regulation (GDPR), GDM Organisation is committed to notifying the Data Protection Authority directly about the issue.
The General Data Protection Regulation (GDPR), which came into effect in May 2018 in Belgium, stipulates that when your personal data is used, you have certain rights at all times:
In accordance with Article 12 of the GDPR, to exercise your rights, you must contact the entity responsible for processing your personal data in writing, electronically, or orally. A copy of your identity card is also required, and it will not be valid for oral requests.
From the date of receipt of your request, the data controller must inform you of the actions taken regarding your case within a maximum of one month. Note that in certain cases where the request is more complex, the response time can extend to up to three months. If this occurs, you must be informed and the data controller must also provide reasons for the extension.
If the entity responsible for processing your personal data does not respond to your request, it must inform you and provide reasons for the refusal within one month of receiving your request.
You then have the right to seek judicial remedy by filing a complaint with the Data Protection Authority (DPA).