Privacy Policy
Last updated: March 2026
1. Data Controller
Continental Endurance Championship (CEC) is responsible for data processing on this website. Contact details are listed in the Impressum.
2. What Data We Collect
We collect only the minimum data necessary to operate the website and the league:
- Server logs: IP address, browser type, pages visited, and timestamps — collected automatically by the web server for security and diagnostic purposes. Logs are retained for a maximum of 7 days.
- Poll votes: When you participate in a Driver of the Day poll, a cookie is stored in your browser to prevent duplicate voting. No personal data is associated with your vote.
- Admin accounts: Username and a hashed password are stored in the database for league administrators only.
3. Cookies
This website uses only functional, session-based cookies. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
- Session cookie: Used for admin authentication. Expires when the browser is closed.
- Poll cookie: Stores your vote selection per race to prevent duplicate voting. Expires after 30 days.
No consent banner is required as we do not set non-essential cookies.
4. Third-Party Services
Our website links to and embeds content from the following external platforms. When you interact with these services, their respective privacy policies apply.
Discord
CEC uses Discord for community communication. Visiting our Discord server is subject to Discord's Privacy Policy. We do not transmit any data to Discord from this website automatically.
YouTube
Race broadcasts and highlight videos may be embedded from YouTube (Google LLC). When you play an embedded video, Google may set cookies and collect data per their Privacy Policy.
Twitch
Live race streams are broadcast on Twitch (Amazon). Viewing streams on Twitch is subject to Twitch's Privacy Policy.
We maintain an Instagram account for league news. Following our account on Instagram is subject to Instagram's Privacy Policy.
TikTok
We share short race highlights on TikTok. Viewing content on TikTok is subject to TikTok's Privacy Policy.
Google Fonts
This website loads fonts from Google Fonts. When a page loads, your browser may make a request to Google's servers. This is subject to Google's Privacy Policy.
5. Legal Basis for Processing
Data processing is based on Art. 6(1)(f) GDPR — legitimate interests — for server logs and functional cookies required to operate the service. No consent-based processing occurs on this website.
6. Your Rights Under GDPR
As a resident of the EU/EEA, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) — request a copy of the data we hold about you.
- Right to rectification (Art. 16 GDPR) — request correction of inaccurate data.
- Right to erasure (Art. 17 GDPR) — request deletion of your data.
- Right to restriction (Art. 18 GDPR) — request that we limit how we use your data.
- Right to data portability (Art. 20 GDPR) — receive your data in a machine-readable format.
- Right to object (Art. 21 GDPR) — object to processing based on legitimate interests.
- Right to lodge a complaint — you have the right to complain to your national data protection authority.
To exercise any of these rights, contact us via the details in the Impressum.
7. Data Retention
Server logs are retained for a maximum of 7 days. Poll cookies expire after 30 days. Admin credentials are retained for as long as the account is active and deleted upon request.
8. Changes to This Policy
We may update this privacy policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.