Last updated: October 2026
This notice explains how we collect, use and protect personal data when you visit dinaricrally.com, contact us, subscribe to our news or take part in the Dinaric Rally. We process personal data in line with the EU General Data Protection Regulation (GDPR) and Croatian data protection law.
Who is responsible for your data
The controller for this website and for the Dinaric Rally event is:
- Sports Club UNTAMED (Sportski klub UNTAMED)
- Zadravečka 11, 10040 Zagreb, Croatia
- E-mail: org@dinaricrally.com
- Phone: +385 95 906 1237
Booking, registration and payment of entry fees are handled for us by Untamed d.o.o. (Zadravečka 11, Zagreb), under a contract with Sports Club UNTAMED, through the shop at untamed.hr. For rally registrations Untamed d.o.o. acts on our behalf and this notice applies; the privacy policy published on untamed.hr also covers the shop itself, including payment.
What data we process and why
Visiting the website
Our hosting provider records technical data such as IP address, browser type, the page requested and the time of the request. We need this to deliver the website and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). Server logs are deleted automatically after a short period, usually within 30 days.
Contact form and e-mail
When you write to us, we use your name, e-mail address and message to answer you (Art. 6(1)(b) and (f) GDPR). The form also sends you an automatic confirmation by e-mail. We keep the correspondence for as long as needed to deal with your request and for up to two years afterwards, unless the law requires longer.
Newsletter
We send news only if you subscribe and confirm your subscription through the link in our confirmation e-mail (double opt-in, Art. 6(1)(a) GDPR). We store your e-mail address, name if given, language, the time of subscription and confirmation, and basic statistics on whether e-mails are opened. You can unsubscribe at any time with the link in every newsletter. Your data is then removed from the mailing list.
Taking part in the rally
To organise the event we process the data of riders, drivers and registered assistance crews: name, contact details, nationality, date of birth, identity document details where required, racing licence and insurance details, vehicle data, safety equipment, emergency contact, riding experience, dietary needs and, where you provide it, health information relevant to your safety. We do this to perform the contract with you (Art. 6(1)(b) GDPR), to comply with sporting and legal rules (Art. 6(1)(c) GDPR) and, for health data, on the basis of your explicit consent or to protect vital interests (Art. 9(2)(a) and (c) GDPR).
As usual in motorsport, the entry list, start numbers, results and classifications are published on this website with name, nationality, vehicle and team. During the rally, competitors’ and registered assistance vehicles carry a GPS tracker. Their positions are used for safety and timing and are shown in the live tracking application. Results and live tracking are provided by our timing and tracking provider (raceadmin.eu).
Photos and videos are taken at the event and may be published on this website, on social media and in event reports (legitimate interest in reporting on a public sporting event). If you object to a particular picture of you, contact us and we will remove it where possible.
We keep participant data for as long as needed for the event, for protests and claims, and for statutory retention periods (accounting records up to 11 years under Croatian law). Published results remain part of the event’s history.
Cookies and similar technologies
We use cookies that are necessary for the website to work. Statistics and marketing cookies are only set after you agree in the cookie banner. You can change or withdraw your consent at any time with the “Manage consent” button on the website. Details of each cookie are listed in our Cookie Policy.
With your consent we use:
- Google Tag Manager and Google Analytics 4 (Google Ireland Ltd.) to understand how the website is used;
- Google Ads conversion tracking and remarketing (Google Ireland Ltd.);
- Meta Pixel (Meta Platforms Ireland Ltd.) to measure our Facebook and Instagram advertising.
We use Google Consent Mode: if you do not consent, Google receives no analytics or advertising cookies from our site. Embedded content such as YouTube videos or maps is loaded only after you agree to it.
Who receives your data
We share personal data only where needed. Providers who process data on our behalf do so under data processing agreements. Recipients are:
- Untamed d.o.o., Zagreb (booking, registration and payment of entry fees);
- Hostinger (website hosting, EU data centres);
- Brevo (Sendinblue SAS, France) for the newsletter and e-mails sent by the website;
- raceadmin.eu for timing, results and GPS live tracking;
- Google and Meta as described above;
- timing, safety, recovery and medical teams, insurers and the sporting authorities, where needed for your participation and safety;
- sponsors and partners, only where needed to deliver a prize or service to you.
Some providers, such as Google and Meta, may transfer data to the United States. These transfers rely on the EU–U.S. Data Privacy Framework or on the European Commission’s standard contractual clauses. We do not sell your personal data.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time; this does not affect processing carried out before. To use your rights, write to org@dinaricrally.com. We answer within one month.
You can also lodge a complaint with the Croatian supervisory authority, the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the authority in your own EU country.
Security
The website uses an encrypted connection (HTTPS). We protect personal data with appropriate technical and organisational measures and give access only to people who need it. If a data breach occurs that is likely to put your rights at risk, we will inform the supervisory authority and, where required, you.
Links to other websites
Our website links to other sites, such as partners, agencies, social networks and untamed.hr. Their own privacy policies apply there.
Changes to this notice
We update this notice when our services or the law change. The version published on this page applies.