Privacy Policy

ODOWA, publisher of kart-center.com, attaches great importance to protecting your personal data. This policy describes the processing carried out as part of the service, in accordance with the GDPR.

1. Data controller

ODOWA (SASU), 6 rue d'Armaillé, 75017 Paris, France. Contact: [email protected].

2. Data collected

• Account (sign-in via Google): email address, name, profile photo.
• Team and races: team name, members, declared kart number and information you enter.
• Pro subscription: billing data processed by Stripe (name, address); card data never passes through our servers.
• Public timing data: drivers’ names or nicknames, kart numbers and lap times, captured from feeds publicly broadcast by circuits and their providers (notably Apex Timing).
• Technical data: IP address, device type, technical logs and anonymised usage statistics.

3. Purposes and legal bases

• Account creation and management — performance of the contract.
• Provision of features (team, strategy, race management) — performance of the contract.
• Pro subscription management and billing — performance of the contract and legal obligation.
• Displaying results and live timing (public data) — legitimate interest in providing a karting information service.
• Security and prevention of fraud and abuse — legitimate interest and legal obligation.
• Anonymised audience statistics — legitimate interest.

4. Recipients and subprocessors

We use providers acting on our behalf:

• Stripe — payments (name, email, billing address; card data handled exclusively by Stripe).
• Google — authentication (signing in to your account).
• Anthropic (Claude) — generation of editorial content for circuit listings, without users’ personal data.
• Mapbox / OpenStreetMap — map display.
• Scaleway — hosting of servers and the database.
• A transactional email service.

No personal data is sold to third parties for commercial or advertising purposes.

5. Transfers outside the European Union

Data hosting is located within the European Union (France). Some providers may process data outside the EU with appropriate safeguards: Stripe (Data Privacy Framework and Standard Contractual Clauses), Anthropic (Standard Contractual Clauses, zero-retention API policy), Mapbox (Standard Contractual Clauses).

6. Retention periods

• Account: as long as it is active; deletion on request or after 3 years of inactivity.
• Team and race data: during the life of the account; deleted within 30 days after account deletion.
• Billing data: 10 years (legal accounting obligation).
• Technical logs: 12 months maximum.
• Backups: 30 to 90 days.
• Results and public timing data: kept in the archives on the basis of legitimate interest; removal possible on request.

7. Cookies

The site uses only strictly necessary cookies (session, language) and, where applicable, anonymised audience-measurement cookies. No advertising or cross-site tracking cookies are set.

8. Security

Communications are encrypted (TLS). Authentication relies on Google (no password is stored by us) and on session tokens with a limited lifespan. Access is restricted, backups are encrypted and the service is kept up to date.

9. Your rights

You have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw your consent at any time. You may exercise them by writing to [email protected]; we respond within one month at most. You can also delete your account from your settings. You may lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.

10. Minors

Creating an account is reserved for persons aged 15 or over (or with the consent of a legal guardian). Race results may mention participants of any age, as publicly broadcast by circuits; any removal request may be sent to our contact.

11. Changes

This policy may be updated to reflect technical, legal or functional changes. Substantial changes are notified to you.

12. Contact

ODOWA — 6 rue d'Armaillé, 75017 Paris, France — [email protected].