Privacy policy

Last updated: 14/10/2026

This document describes how DK Rally (hereinafter "we", "the organisers") processes the personal data of users of the website dkrally.cz and of participants in Amatér Rally DK events.

1. Who processes the data

The operator of the website and organiser of Amatér Rally DK events is:

  • Daniel Šimek — promoter and clerk of the course (person responsible for personal data protection)
  • 📧 Email: dansimek@dansimek.com
  • 📞 Phone: 737520017
  • Website and development: Jakub Hanzelka

For requests for access to data, correction, deletion or any question, contact the above directly.

2. What data we process

When you register and use the website we collect the following data:

  • Identification data: first name, surname, email, phone, date of birth
  • Vehicle data: make, model, engine capacity, engine type, drivetrain, registration plate (if provided)
  • Event data: chosen categories (photo, video, shakedown, prologue), co-driver, team
  • Payment data: amount, variable symbol, payment status
  • Profile data: profile photo (optional), driver biography (optional)
  • Account data: password (stored securely using bcrypt), possibly a link to a Google account

3. What we use the data for

  • Managing user accounts on dkrally.cz
  • Processing and recording entries for events
  • Email communication about entries, payments, start lists and results
  • Publishing the crew and vehicle name in start lists, results and the event archive
  • Recording participation in individual seasons and championships
  • Safe running of the event (a driver contact in an emergency)

4. Who we share the data with

We do not share it with anyone. All data stays in the dkrally.cz database and is used solely for the purposes stated above.

The exception is data that is publicly displayed on the website (crew name, vehicle make, results, driver profiles) — this is available to anyone who visits the website.

5. Where the data is stored

  • Server (VPS) of OVH in a data centre in the European Union
  • Emails are sent by the WEDOS mail service in the Czech Republic
  • The connection to the website is encrypted via HTTPS (SSL)
  • Passwords are stored in hashed form (bcrypt — they cannot be decrypted)

6. How long we keep the data

We keep the data for as long as your user account exists. If you want to delete your account, contact the organisers — your account and its data will be removed, except for historical event results, which remain in the archive for statistical and historical purposes (in anonymised form if requested).

7. Your rights

In accordance with the GDPR you have the following rights:

  • Access to data — you can see all your data in your profile on dkrally.cz
  • Correction of data — you can edit it yourself in your profile
  • Deletion of the account — on request from the organisers
  • Withdrawal of consent — by deleting the account
  • Complaint to the authority — you can contact the Office for Personal Data Protection (uoou.cz)

8. Cookies and other technologies

The dkrally.cz website uses only a minimal number of cookies, none for advertising or analytics. We do not track you across other websites and do not pass data to advertising networks.

Essential cookies (always active)

The website cannot work without these cookies. Consent is not required.

Cookie Purpose Duration
PHPSESSID Keeping you signed in and the session state Until the browser is closed
csrf_token Protection against CSRF attacks (forms) For the session
dkr_consent Remembering your cookie choice 12 months

Functional cookies (with your consent)

These cookies improve the website's features but are not essential. You can decline them.

Cookie Purpose Duration
dkr_reactor Anonymous identifier for emoji reactions to entries (without this cookie your reaction history cannot be kept between visits) 24 months

External services

The website uses several external services that may write their own cookies to your device:

  • Google Fonts — to load the Montserrat font it connects to fonts.googleapis.com. Google may record your IP address. Google policies
  • Google OAuth (sign-in with Google) — only if you click "Sign in with Google". Nothing is stored unless you click. Google policies

How to change the settings

If you want to change your cookie consent, click the button below — the settings banner will be shown again.

You can also delete cookies at any time directly in your browser settings.

9. Changes to this document

We may amend this document. You will be informed of more significant changes the next time you sign in.

Questions about your data?
Contact Daniel Šimek (responsible person) by email at dansimek@dansimek.com or by phone at 737520017.