Privacy Policy
Summary
race-pilot.com is a product catalogue. The site has no registration or user accounts and no online orders or payments, and we do not store delivery addresses, passwords or card details.
- We only receive personal data that you send us yourself through the enquiry, buy on credit or newsletter forms.
- We use it only to answer your enquiry, process your request, or send you the newsletter if you subscribed.
- We do not record IP addresses together with submitted forms or site searches.
- We do not sell personal data, use it for profiling, or show adverts on the site.
- Google Analytics loads only if you accept analytics cookies.
Data controller
The controller of the personal data processed through this site is M-MOTORSPORT Ltd. („М-МОТОРСПОРТ" ООД), UIC (ЕИК) 202576203, registered office 11 Akademik Yordan Trifonov St., fl. 2, apt. 4, Pleven, Bulgaria, trading as Race Boutique by Race Pilot.
Showroom and correspondence address: 45 Ruse Blvd, Pleven 5800, Bulgaria, email sales@race-pilot.com, phone +359 887 00 70 60.
What data we process and why
Product enquiry
When you send an enquiry from a product page, we process your name, email, phone and question, and the product you are asking about. We use them to reply and to confirm availability, price and fitment for your car. The enquiry is stored in the site's database and emailed to our team.
Buy on credit
For a buy-on-credit request we process your name, email, phone, the product and quantity, an optional amount and message, and the bank you chose — UniCredit Consumer Financing or TBI Bank. We use them to contact you and prepare the credit application. To be assessed, your data may be passed to the bank you chose. If you choose UniCredit, the bank's own terms, which you accept in the form, also apply. The credit assessment and the credit agreement are between you and the bank, under the bank's privacy rules.
Newsletter
If you subscribe to the newsletter, we keep your email address to send you news and offers. You can unsubscribe at any time by writing to sales@race-pilot.com.
"View on your car"
On wheel product pages you can upload a photo of your car to see the chosen wheel on it. The photo is scaled down in your browser and sent to Cloudflare Workers AI, which generates the visualisation. Neither the photo nor the result is stored on the server: they exist only for the duration of the request, and the result is shown only in your browser. We do not use the photo for anything else. If the shot shows a number plate or people, we recommend cropping them out before uploading.
For statistics we record only anonymous usage data: which wheel was chosen, whether your own photo or the demo car was used, whether the visualisation succeeded, how long it took and its approximate cost. These records contain no photo, no IP address and nothing else that could identify you.
Site search
When you search the site, we record only the search phrase, the language and the number of results. We do not record your IP address or anything else that could identify you. We use this to find missing products and improve the catalogue.
Abuse protection
The forms are protected by Cloudflare Turnstile, which checks that a form is sent by a person rather than a bot. To do this, Cloudflare processes technical data from your browser and your IP address. To limit mass form submissions, your IP address is kept temporarily, for 15 minutes, and then deleted automatically. It is never stored with submitted enquiries, requests or subscriptions. For "View on your car", the IP address is kept for 24 hours, together with a fingerprint (hash) of the uploaded photos — not the photos themselves — to limit visualisations and photos (up to 3 a day) per address.
Visit statistics
Only if you accept analytics cookies, we use Google Analytics 4 to understand which pages are visited and how the site is used. Submitted forms are counted as events, without their contents.
Links to external services
- Facebook Messenger: the "Message us" button opens Messenger with a pre-filled message containing the page address. The conversation takes place on Facebook, under Meta's rules.
- Facebook and Instagram: the icons are plain links to our pages and load no content from those networks on the site.
- Google Maps: the Showroom page shows an embedded Google map. When you open it, your browser connects to Google, which may set its own cookies under its rules.
What we do not process
We do not collect special categories of (sensitive) personal data, do not knowingly collect children's data, and make no automated decisions, including profiling, that affect you.
Legal basis
- Enquiries and buy-on-credit requests: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Newsletter and Google Analytics: your consent (Art. 6(1)(a)), which you can withdraw at any time.
- "View on your car": providing the service you asked for by uploading the photo (Art. 6(1)(b)).
- Abuse protection and search statistics: our legitimate interest in keeping the site secure and improving the catalogue (Art. 6(1)(f)).
Recipients of the data
We use trusted providers that process data on our behalf and only on our instructions:
- Cloudflare — site hosting, database, image storage, Turnstile protection and Workers AI (the "View on your car" visualisation).
- Brevo — delivery of enquiry emails to our team.
- Google — Google Analytics (only with your consent) and the embedded map on the Showroom page.
For a buy-on-credit request, your data may be passed to the bank you chose (UniCredit Consumer Financing or TBI Bank). We do not share personal data with any other third party unless the law requires it.
Some of these providers may process data outside the European Union. Any such transfer is made under appropriate safeguards, such as the standard contractual clauses approved by the European Commission.
Retention
- Enquiries and buy-on-credit requests: as long as needed to handle them and for follow-up communication with you, or until you ask us to delete them, unless the law requires a longer period.
- Newsletter subscription: until you unsubscribe.
- Search statistics: up to 90 days, then deleted automatically.
- IP address for rate limiting: 15 minutes ("View on your car": 24 hours).
- "View on your car" photo: not stored.
- "View on your car" anonymous statistics: up to 13 months, then deleted automatically.
- Google Analytics: according to the Google Analytics retention settings.
Security
- All communication with the site is encrypted (HTTPS).
- Access to the site's administration and to stored enquiries is limited to authorised staff and protected by an additional identity check.
- IP addresses are not stored with submitted forms or searches.
- No system is completely secure, but we take appropriate technical and organisational measures to protect your data.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- Access the personal data we process about you.
- Rectify inaccurate data.
- Erase data we no longer need, or after you withdraw consent.
- Restrict processing.
- Object to processing based on legitimate interest.
- Data portability for data you have given us.
- Withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, write to sales@race-pilot.com. We reply within one month, which may be extended by two further months for complex requests; we will tell you if so. We may ask you to confirm your identity, for example by writing from the email you gave in the form. We charge no fee unless a request is manifestly unfounded or excessive.
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, www.cpdp.bg) or with the courts.
Contact
For questions about your personal data:
M-MOTORSPORT Ltd. („М-МОТОРСПОРТ" ООД), UIC 202576203
Race Boutique by Race Pilot · 45 Ruse Blvd, Pleven 5800, Bulgaria
If this policy changes materially, we will update the date at the top of the page.