Privacy Policy
1. Data Controller
The Rally is organised by private individuals (the “Organiser”).
For all data protection enquiries, please contact:
info@[rallyname]@gmail.com
The Organiser acts as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
We collect and process only data necessary for the organisation, safety, and continuation of the Rally and related expedition activities.
This may include:
-
Full name
-
Contact details (email, phone number)
-
Country of residence
-
Vehicle details
-
Passport information (where required)
-
Emergency contact details
-
Medical declarations relevant to remote travel
-
Payment information
-
Previous participation history
3. Purpose of Processing
Your data is processed for the following purposes:
-
Event registration and administration
-
Safety coordination and emergency planning
-
Logistical and legal compliance
-
Communication regarding the current Rally
-
Operational and organisational requirements
-
Consular, visa, vehicle and evacuation insurance requirements
-
Management of waiting lists
-
Invitation to future editions or related expedition events
-
Maintenance of a limited participant community
We do not sell, rent, or commercially exploit participant data.
4. Legal Basis
Processing is based on:
-
Contractual necessity (participation agreement)
-
Legitimate interest (safe and structured event operation)
-
Consent (where required for future invitations or updates)
-
Legal obligations
Where communication relates to future editions, participants may opt out at any time.
5. International Data Transfers
Due to the international nature of the Rally, personal data may be shared where necessary with:
-
Local authorities
-
Border officials
-
Security providers
-
Medical support teams
-
Insurance providers
-
Consular and visa processing services
This may involve transfers outside the United Kingdom.
Such transfers occur only where necessary for safety, legal compliance, or event execution.
6. Data Retention
Personal data is retained only as long as necessary for:
-
Event execution
-
Legal and insurance requirements
-
Administration of future editions or participant community
Participants may request deletion of their data at any time, subject to legal retention requirements.
7. Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction
-
Request erasure
-
Restrict processing
-
Object to processing
-
Request data portability
You may also lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss.
Access to participant data is limited to those directly involved in the organisation and safety coordination of the Rally.
9. Updates to This Policy
This Privacy Policy may be updated where necessary to reflect legal, operational, or structural changes.
The most current version will always be published on the website.