PRIVACY POLICY
Last updated: 20 July 2026
This notice describes how FL-Racing Technologies processes the personal data collected through the flracingeng.com website, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
FL-Racing Technologies
Registered office: [registered address to be added]
VAT / Tax code: [VAT number to be added]
Email: info@flracingeng.com
2. What data we collect
The site uses no profiling cookies and requires no registration. We collect data only when you write to us.
Data you send through the contact form
- Name — required, so we can reply appropriately
- Email — required, the address we reply to
- Car / ECU — optional, helps us give you a relevant technical answer
- Message — required, the content of your request
Data collected automatically
- IP address — recorded when the form is submitted, to prevent abuse and automated submissions. It is included in the email we receive.
- Technical logs — our infrastructure records standard connection data (date, time, browser type) for security and diagnostics.
3. Why we process it and on what basis
| Purpose | Legal basis |
|---|---|
| Reply to your contact request | Pre-contractual measures at your request — Art. 6(1)(b) GDPR |
| Protect the form from spam and abuse | Legitimate interest in security — Art. 6(1)(f) GDPR |
| Security and stability of the site | Legitimate interest — Art. 6(1)(f) GDPR |
We do not use your data for marketing and we do not sign you up to any newsletter without your separate, explicit consent.
4. Who we share it with
We do not sell or transfer your data to third parties. We rely on providers acting as data processors:
- Cloudflare, Inc. — site hosting, anti-bot protection (Turnstile) and security logs.
- Resend (Plus Five Five, Inc.) — delivery of the email generated by the contact form.
These providers may process data outside the European Economic Area. In that case the transfer takes place under the Standard Contractual Clauses approved by the European Commission.
5. Telemetry sessions in the private area
If you own an FL-Racing Dash paired with the portal, the unit uploads its recorded sessions (engine revs, temperatures, pressures, speed and pedal position over time) to your private area. This data describes how you drove: we treat it as personal data, on the basis of the contract for the supply of the product — Art. 6(1)(b) GDPR.
- sessions are visible only to you after signing in to your account, and travel over an encrypted connection only;
- you can delete them at any time from the private area, and you can unpair the dash to stop further uploads;
- the portal keeps the last 100 sessions per account: older ones are removed automatically;
- technical support: FL-Racing Technologies staff may open your sessions in order to help you (for example to interpret an alarm or check an unusual reading). Access is read-only, limited to whoever administers the portal, and involves no other use: we do not analyse your data for commercial purposes and we do not share it with third parties. If you would rather they had no access, delete the sessions or unpair the dash.
6. How long we keep it
Contact emails are kept for as long as needed to handle the request and any resulting dealings, and in any case no longer than 24 months from the last exchange, unless legal obligations apply. Technical security logs are kept for short periods according to the providers' policies.
7. Cookies
The site installs no profiling, analytics or advertising cookies and does not track your browsing. The Cloudflare Turnstile anti-spam widget on the contact page may use technical identifiers strictly necessary to tell humans from bots: it does not profile and does not track across different sites.
8. Your rights
At any time you may exercise the rights set out in Articles 15-22 of the GDPR:
- access your data and obtain a copy
- request rectification or erasure
- request restriction of processing
- object to processing based on legitimate interest
- receive your data in a structured format (portability)
To exercise them write to info@flracingeng.com: we reply within 30 days. If you believe the processing infringes the GDPR you may lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).
9. Changes
If we update this notice we will publish the new version on this page, changing the "last updated" date at the top.