The purpose of this privacy notice is to provide you with information about how Alpine Racing Limited (“Alpine”, “we”, “us” or “our”), processes personal data in connection with: (1) our BWT Alpine Formula One Team website (https://www.alpinef1.com/) and our RISE+ platform (https://rise.alpinef1.com/), as updated by Alpine from time to time (each a “Site”) and together, (our “Sites”), (2) our commercial relationships with partners and vendors, and (3) visits to our premises and premises from which we operate. It does not address processing by Renault UK Limited trading as Alpine in the sale of Alpine cars to the general public, whose privacy notice can be found here. It also describes your data protection rights, including the right to object to some of the processing which Alpine carries out. More information about your rights and how to exercise them is set out below at section 5.
In this policy, you will find the following information:
1 - WHO PROCESSES YOUR PERSONAL DATA?
Alpine is the controller and remains responsible in respect of the personal data processing activities described in this privacy notice. If you have questions about this privacy notice or our processing of your personal data, please contact us using the details set out at section 5.2 below.
2 - WHAT PERSONAL DATA DO WE PROCESS?
"Personal data" means any information that can be used to identify you either directly (such as your name) or indirectly (e.g. using a unique user ID number).
Generally speaking, we undertake to collect only the personal data necessary for each of the purposes for which we process your personal data.
The personal data we collect depends on our interaction with you and includes:
• Identity Data: full name, username and password, user IDs, identification documentation, date of birth, gender and city and country of residence.
• Contact Data: email address, address and telephone number.
• Interests Data: information about you such as your favourite driver, favourite race, whether you are a Formula 1 follower or attendee, the types of merchandise you like, whether you are interested in music, gaming or crypto-currency, your occupation sector and your watch budget, including additional information that we may collect from you, which we may particularly use in connection with user IDs to help us show you or send you more relevant content, offers and communications.
• Usage Data: information about how you use our Sites including the pages that you view and the links that you click, as well as the sites from which you may access our Sites.
• Communications Data: personal data within communications when you contact us by email, call our customer contact centre or otherwise interact with us. This includes any feedback or opinions that you provide to us.
• Marketing and Communications Preferences: your communications and marketing preferences.
• Partner/ Vendor Data: includes information about individuals working for our partners and vendors which includes Identity Data, job roles and details of employer.
• CCTV Data: includes CCTV image data that we collect on our premises.
• Technical Data: information about your device or browser when you use our Sites, including your internet protocol (IP) address, device ID, browser type and version and time zone setting.
The data required to respond to your request or meet the needs of a contract or legal obligation is pointed out in the collection forms . If you do not wish to provide the mandatory data, we may not be able to process your request or provide you with the relevant services. The other information is intended to get to know you better, in particular to send you customised advertisements. This information is therefore optional.
We encourage you to keep us regularly informed in writing of any changes to your personal data.
3 - WHAT IS YOUR PERSONAL DATA USED FOR?
We will provide you with explanations relating to the context of collection of your personal data, the purposes for which we process them and the duration for which we retained them.
3.1 – Context of collection
We collect your personal data in particular when:
• You visit one of our Sites,
• You contact us via an online form, email, telephone, or by any other means,
• You subscribe to our direct marketing communications,
• You respond to one of our surveys,
• You create a user account to access our Sites from your computer or smartphone,
• You interact with us on social media, including through the Facebook, Instagram, LinkedIn, Threads and X "Like", "Share" or " Tweet" buttons on the Alpine Formula One pages, which can lead to collection and exchange of personal data between the social networks and us.
We also process personal data about you that we generate. For example, we use your Interests Data and Usage Data to determine the types of content and advertisements that you may be interested in.
We may also collect personal data about you through other companies in our group, partners or vendors. For example, we collect personal data about you such as Interests Data and Usage Data from the provider of RISE+. In addition, where you interact with a partner advertisement in the RISE+ platform, we receive information from our partners about actions that you take on their sites and this enables us to determine rewards owed to you.
3.2 – Objectives of personal data processing
Within the context of our relationship, and in line with the context in which your personal data is collected, we use personal data for the purposes outlined below.
As noted above, there are instances where we have a legitimate interest to use your personal data. Our legitimate interest will vary depending on what we are using your personal data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data on the basis of a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals’ interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details in section 5.2.
3.3 – The length of time for which we keep your data
In accordance with privacy regulations, we are committed to keeping your personal data only for the time necessary to achieve the objective pursued, to meet your needs, or to meet our legal obligations.
In determining this time, we take into account, in particular, the following:
• The length our relationship including actions on your user accounts,
• The time required to process your request or complaint,
• Your interest in our brands,
• The need to keep a record of your interactions with us, to effectively manage our business relationship, and
• Our legal or regulatory obligations (this is particularly the case for the technical data of our vehicles).
We process personal data in connection with RISE+ for no longer than 6 years from the date that you were last active on your account.
Where we process personal data for marketing purposes or with your consent, we process the personal data until you ask us to stop and for a reasonable time period after this (to allow us to implement your request). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your personal data indefinitely so that we can respect this in the future.
When we no longer need to use your personal data, it is deleted from our systems and records or made anonymous so that we can no longer identify you. However, it may be necessary to archive some of your personal data in order to be able to respond to any legal proceedings, throughout the statutory limitation period provided for in the applicable legislation.
4 - WHO HAS ACCESS TO YOUR PERSONAL DATA?
Within Alpine, we ensure that only those people who are duly authorised for their functions and tasks to process your personal data are given access to your data.
In order to process all or part of your personal data, we call upon trusted third party providers, acting as processors, in accordance with our instructions and solely on our behalf, to fulfil the following functions:
• Hosting, operation, support and maintenance of our databases and Sites
• Customer relations management (communication tools, etc.);
• Provision of services relating to our marketing, including providers of CRM systems and those who assist with the sending of direct marketing communications;
• Organisation of competitions and events;
• Performance of surveys;
We also share personal data with the following third parties:
• The police, fraud prevention and other law enforcement agencies, government and tax authorities in the United Kingdom or abroad in order to detect, investigate and prevent crime (please note that fraud prevention agencies may also enable law enforcement agencies to access and use your information to detect, investigate and prevent crime);
• The courts in the United Kingdom or abroad as necessary to comply with a legal requirement, for the administration of justice, to protect vital interests and to protect the security or integrity of our business operations.
• A purchaser or potential purchaser of our business or otherwise in the event of a merger, re-organisation or similar event;
In some cases, we may share some of your personal data with partners, who will use it for their own purposes. In such a case, these partners shall act as data controllers and their personal data processing policy shall apply to the data shared. For example, when you access partner ads through RISE+, we share personal data about you with our RISE+ partner. That RISE+ partner uses that information to determine what action you take on their site and informs us about that so that we can determine rewards owed to you
5 - WHAT ARE YOUR RIGHTS?
You have several rights under personal data protection regulations:
A right to object to the processing of your personal data based on the legitimate interests lawful basis, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us.
A right to object to processing for direct marketing: you can ask at any time not to receive our communications related to our offers, news and events. This right may, in particular, be exercised via the unsubscribe link in each marketing email. You can also object to profiling.
A right to withdraw your consent at any time, for the purposes for which we obtained your consent. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
A right to information: you have the right to obtain clear, transparent and understandable information about how we use your personal data and about your rights. This policy is an example of this.
A right of access to your personal data: you have the right to obtain information concerning the processing of your personal data (including the data that is used, for what purposes, etc.) and a copy thereof.
A right of rectification: you have the right to correct your data if it is inaccurate or incomplete, despite our efforts to keep it up to date, enabling us to comply with our obligation to have up-to-date data about you.
A right to ’data portability’, i.e., under certain conditions, the right to receive the personal data you have provided to us, in a structured, commonly used computerised format, and for it to be transmitted to a third party if technically possible.
A right to erasure (or right to be forgotten): you have the right to have your data erased or deleted. This right may be limited, for example, in light of our contractual or legal obligations (contract in progress) (prevention of legal action in particular).
If you have any unresolved privacy concerns, you have the right to lodge a complaint with the data protection authority in the country where you normally reside, or where you work or where you believe a breach has occurred. In the UK, this is the Information Commissioner’s Office. For a list of authorities in the European Economic Area, see here.
5.2 – How do I exercise them?
To exercise any of your rights, you can contact us by email at feedback@alpinef1.com, telephone us at 0044 (0)1608678000, or write to us at Whiteways Technical Centre, Enstone, Chipping Norton, Oxfordshire, OX7 4EE, United Kingdom. With regards to direct marketing emails, you can also unsubscribe at any time in the future by using the link that appears in the footer of every email that we send to you. We may request certain information or documents (identity document) when we fail to identify you.
6 – INTERNATIONAL TRANSFERS
Your personal data is stored on secure servers. We put in place, and require from our processors and partners, appropriate data security and data protection measures in line with the latest technologies.
When personal data processing involves transferring data, we ensure that this transfer is carried out under appropriate conditions that ensure an adequate level of protection, security and confidentiality.
Whenever possible, your data is processed in the UK or the European Economic Area (EEA) however in some circumstances, personal data that we collect from you may be transferred to and stored at a destination outside the UK or EEA.
Due to the global nature of our business, your personal data will be disclosed to our Group companies in France. We have put in place standard contractual clauses approved under EEA and UK data protection law to facilitate this transfer.
Where we transfer personal data to third parties in locations which do not provide an adequate level of data protection, we ensure appropriate safeguards are in place to protect the transfer of your personal data to these countries. For example, we ensure that business partners and service providers agree to approved standard contractual clauses (module 1 or 2 depending on nature of relationship). This includes business partners and service providers who are in the US, France and other countries.
7 - MODIFICATION OF INFORMATION
We may change this information from time to time and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
Version 1; 18 February 2025