Privacy Policy
Last updated: June 2026
This is a translation provided for convenience. The Spanish version of this Privacy Policy is the legally binding document.
1. Data controller
Gonky Racing · gonkyracing@gmail.com · Spain.
Data Protection Officer: not designated (small independent project).
2. Data we collect
- Steam account: When you log in via Steam OpenID we collect your Steam ID, public profile name and avatar URL. We do not access your Steam password.
- Game statistics: Lap times, positions, incidents and race results generated automatically by Automobilista 2 servers connected to the platform, including servers managed via Node Manager.
- Optional public profile: Bio, social networks and preferences that you voluntarily enter in your account panel.
- Community integrations: If a community integrates Discord, relevant activity data (results, records, notifications) may be sent to the Discord channels configured by that community.
- Technical data: IP address (for authentication and security). Server logs retained for a maximum of 30 days depending on the log type.
- Web analytics: Anonymous usage metrics and Web Vitals with no personal identifier. Google Tag Manager is only loaded if the user accepts optional analytics in the cookie notice.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Authentication and account management | Contract performance (Art. 6.1.b GDPR) |
| Displaying public game statistics | Legitimate interest (Art. 6.1.f GDPR) |
| Sending communications (if enabled) | Consent (Art. 6.1.a GDPR) |
| Security and fraud prevention | Legitimate interest (Art. 6.1.f GDPR) |
| Optional web analytics | Consent (Art. 6.1.a GDPR) |
| Minimum post-deletion retention (Steam ID + sanction flag, max. 2 years) | Legitimate interest (Art. 6.1.f GDPR) and defence of legal claims (Art. 17.3.e GDPR) |
4. Data retention
Account data and statistics are retained while the account is active. You may request deletion at any time (right to erasure). Technical server logs are automatically deleted within a maximum of 30 days depending on the log type.
When a user exercises the right to erasure, their personal data is anonymised immediately. However, under Art. 17.3.e GDPR (necessity for the establishment, exercise or defence of legal claims) and the legitimate interest of preventing sanction evasion (Art. 6.1.f GDPR), we retain for a maximum of 2 years a minimal record containing only: the Steam ID, the deletion date and, if applicable, the reason for any sanction in force at the time of deletion. After this period, the record is automatically and permanently deleted.
5. Sharing with third parties
We do not sell or share personal data with third parties. Data may be shared with infrastructure providers (VPS server in the European Union) under GDPR-compliant data processing agreements. Discord integrations are carried out under the responsibility of each community, which configures its own channels.
6. Your rights
You have the right to:
- Access: Know what data we hold about you.
- Rectification: Correct inaccurate data from your profile.
- Erasure (right to be forgotten): Delete your account and all your personal data.
- Portability: Export your data in a machine-readable format.
- Objection / restriction: Object to processing in certain circumstances.
To exercise these rights, write to us at gonkyracing@gmail.com including your Steam ID or username. We will respond within 30 days.
If you believe the processing is not compliant, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es, or with the supervisory authority of your country of residence.
7. Cookies
Cookie usage is detailed in our Cookies Policy. In summary: we use technically necessary cookies for the site to function, and optional analytics cookies subject to consent.
8. International transfers
Data is stored on servers located in the European Union. No transfers to third countries are made unless covered by a European Commission adequacy decision.