Privacy statement
CCRally Events processes personal data of members, participants and visitors. Below you can read which data that is, why we need it and what your rights are.
This is a translation for your convenience. In case of any difference, the Dutch version is legally binding.
Last updated: 24 August 2026
Who is responsible
CCRally Events, Weidsteeg 105, 4102 AC Culemborg, the Netherlands. Chamber of Commerce 55029825, VAT NL001928070B64. Questions about your data can be sent to [email protected].
What data we process
- Account and profile. Name, email address, password (stored encrypted), username, and optionally a profile photo, cover photo and short description.
- Your car. Make, model, specifications and photos you add to your garage yourself.
- Taking part in events. Which events you have registered for, with which car, whether you attended and whether payment was made.
- Community. Posts, comments, likes, who you follow and private messages. Private messages are not public, but they are accessible to administrators carrying out technical maintenance.
- Payments. Amount, status and the payment reference of the payment provider. We do not see or store bank account or card details; those stay with the payment provider.
- Invoices. Name, address details and the invoice amount, as required by the tax authorities.
- Contact and applications. What you fill in on the contact form or in a membership application.
Why we process it
- To arrange your account, your membership and your participation in events (performance of the contract).
- To reach you about an event you are taking part in, for example if something changes along the way.
- To process payments and send invoices (legal obligation).
- To make the community work and keep it safe.
- For our newsletter, only if you signed up for it yourself (consent). You can unsubscribe in every email.
Who else sees your data
We do not sell anything on. We do work with a number of suppliers that process data on our behalf:
- Railway, where the platform and the database run.
- Cloudflare R2, where photos are stored.
- Mollie, for iDEAL payments and the membership direct debit.
- Brevo, for sending emails such as confirmations and invoices.
- Laposta, for the newsletter.
Other members see what you post in the community yourself: your profile, your garage and your posts. If you take part in an event, you are visible to the other participants of that event.
Photos from events
During our events, photos and videos are taken that we use on the website, in the newsletter and on social media. If you do not want to be recognisable in them, let us know via [email protected] and we will remove the image.
Cookies
Essential cookies are always on: one cookie to keep you logged in and one that remembers what you chose in the cookie banner. The login cookie stays valid for thirty days and disappears as soon as you log out. If you choose the English version of the site, a cookie also remembers that choice.
On your first visit we also ask whether we may measure how the site is used. If you say yes, Google Analytics 4 and the Meta pixel place cookies that show us which pages are viewed and whether our ads work. If you say no, or make no choice, those services do not load and they place no cookies. Your choice is stored in your browser; if you clear the data of this site, we will ask again.
How long we keep data
- Your account and the content you posted: for as long as your account exists. If you cancel, we delete it.
- Invoices and payment details: seven years, as required by tax law.
- Event participation details: for as long as needed for the administration of that event.
- Newsletter subscriptions: until you unsubscribe.
Security
The connection to the site is encrypted, passwords are stored encrypted and the admin area is protected. We never email you your password; with a new account you receive a link to set one yourself.
Your rights
You may view your data, have it corrected or deleted, and object to its use. Much of this you can do yourself in your profile. For anything else, email [email protected]; we respond within four weeks. If we cannot resolve it together, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
See also our terms and conditions and the community and rally rules.








