Swiss-Racing
Privacy policy
Updated: 2 September 2026
In plain terms: no advertising, no ad trackers, no resale, no commercial profiling. We do not collect anything just because we could. But three providers do get to see something: our host, Google (the site's typefaces, and the bot filter on our forms) and, if you pay online, the payment provider. This page says exactly what, why, for how long, and what you can demand from us.
1. Who is responsible
Swiss-Racing, a Swiss association under articles 60 ff. of the Civil Code, registered in Cartigny (canton of Geneva). The association decides what is collected and why, which makes it the controller under the Swiss Federal Act on Data Protection (FADP, revised).
Contact for any data protection matter: info@swiss-racing.com. Full details in the legal notice.
2. What we collect, and why
Nothing is collected behind your back, and nothing is collected "just in case". This is the complete list.
| When | What we receive | What for |
|---|---|---|
| You visit a page | Standard server logs: IP address, date and time, page requested, browser | Running and protecting the site. Purged automatically by the host. |
| Contact form | Name, e-mail, message | Replying to you, nothing else. |
| Membership form | Name, first name, e-mail, and whatever you fill in yourself | Handling your membership request. No membership is ever approved automatically: a committee member reviews every request. |
| Newsletter | Your e-mail address | Announcing upcoming rides. Unsubscribe whenever you like, by e-mail. |
| Members area | Account credentials, nickname, title, membership fee status, ride registrations, payment history | Keeping the membership register and the association's accounts, as the law requires of any association. |
| Submitting a form | The bot filter logs the IP address, a timestamp and the outcome of the check | Detecting and blocking automated submissions. See section 3. |
We run no audience analytics, no ad targeting, no profiling: no Google Analytics, no Facebook pixel, no measurement tool of any kind. No data is sold, rented or passed to a third party for commercial or advertising purposes.
One exception deserves to be named: the site's typefaces are loaded from Google Fonts. Your browser therefore fetches them from Google, which receives your IP address in the process — on every page, not only those carrying a form. No cookie is set for this and we derive nothing from it, but we would rather write it down than let you believe this site talks to nobody.
3. The bot filter (Google reCAPTCHA)
Since 31 August 2026 the site's forms (contact, membership, newsletter) are protected by Google reCAPTCHA v2 — the "I'm not a robot" checkbox. We added it because the forms were receiving automated spam.
This has to be said plainly: that service does see things. To tell a human from a program, reCAPTCHA analyses, on the page carrying the form, your IP address, information about your browser and device, and the way you interact with the page (mouse movement, typing, time spent). It also sets its own cookies. Google processes this, not us: all we get back is the verdict, "human" or "bot".
The widget only loads on pages that carry a form. If you fill in no form, none of this applies to you. If you would rather avoid it, write to us directly at info@swiss-racing.com — a membership request or a question by e-mail counts exactly the same.
Since 2 April 2026, Google acts as a processor for reCAPTCHA: it handles this data on our behalf and on our instructions, no longer for its own account. Details on Google's side: privacy policy and terms of service.
4. Online payments
In the members area, membership fees, ride registrations and orders can be paid online. Those payments are handled by Stripe. Your card details are entered at Stripe and go straight to Stripe: the association never sees your card number and stores it nowhere. We keep only the amount, the date, the payment method and the status (paid / pending), because the association's accounts require it.
5. Cookies
No advertising cookies, no analytics cookies. What you may come across:
- a technical session cookie if you log into the members area — it keeps you signed in and disappears when you log out;
- depending on your browser, a technical cookie remembering your language or the sound setting on the home page;
- the cookies set by Google reCAPTCHA on pages carrying a form (section 3);
- the cookies set by Stripe during a payment (section 4).
We show no consent banner: none of these cookies is used to track you for advertising or statistical purposes. You can block them in your browser — the members area and the forms will then stop working, the rest of the site will not.
6. Who else sees your data
Nobody beyond the providers strictly needed to run the site. Here they are, in full:
| Provider | Role | Where |
|---|---|---|
| Infomaniak Network SA | Hosting of the site, the database and the mail | Geneva, Switzerland |
| Google Ireland Ltd / Google LLC | reCAPTCHA bot filter, and typefaces (Google Fonts) | Ireland, United States |
| Stripe | Online payments | Ireland, United States |
Transfers abroad. The last two involve transferring data outside Switzerland, in particular to the United States. Since 15 September 2024 the Swiss Federal Council recognises (Annex 1 to the Data Protection Ordinance) that US companies certified under the Swiss–U.S. Data Privacy Framework provide an adequate level of protection within the meaning of art. 16 FADP. These transfers take place on that basis, failing which on standard contractual clauses.
7. How long we keep what
| Data | Retention |
|---|---|
| Server logs | Per the host's policy, a few weeks |
| Bot filter log | 12 months |
| Contact form messages | 1 year after the last exchange |
| Membership requests not taken further | 1 year |
| Newsletter subscription | Until you unsubscribe |
| Membership register | For as long as you are a member |
| Accounting records (fees, registrations, orders) | 10 years — statutory retention period (art. 958f CO) |
8. Your rights
Swiss data protection law gives you the right, at any time and free of charge, to:
- know what data we hold about you and obtain a copy (art. 25 FADP);
- have inaccurate data corrected (art. 32 FADP);
- have your data erased, or object to a processing operation — subject to what we are legally required to keep, accounting records in particular;
- receive the data you provided in a common format, or ask us to transfer it to someone else (art. 28 FADP);
- withdraw your consent where a processing operation rests on it, for instance the newsletter.
One address for all of it: info@swiss-racing.com. We answer within 30 days. We may ask you to prove your identity — which is precisely there to protect you.
If our answer does not satisfy you, you may turn to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch, or to the civil courts.
9. Security
The site is served entirely over HTTPS. The members area is password-protected, and passwords are stored as hashes, never in clear text. Access to the membership register is limited to the committee members who need it. Technical files (logs, backups, configuration) are out of reach from the web. No measure is perfect: should an incident affect your data and pose a risk to you, we would contact you and report the case to the FDPIC, as art. 24 FADP requires.
10. Changes
This policy changes as the site changes. The date at the top gives the last revision. The 1 September 2026 revision documented the arrival of the bot filter and listed the providers; the 2 September one adds Google Fonts, which had been left out.
11. Contact
A question about this page, or a request to make? info@swiss-racing.com