Privacy policy
Last updated: 6 October 2026
This English version is provided for convenience. In case of any discrepancy, the French version prevails.
1. Data controller
The controller of the personal data collected on this website is:
| Company | United4Racing SARL |
| Address | 24 Rue Astrid, L-1143 Luxembourg |
| info@united4racing.lu |
2. Data we collect
The only data collection form on this website is the contact form, available in French and English. It collects:
- Name — to address our reply to you
- Email address — to reply to you
- Subject (press, partnership, general enquiry) — to route your request
- Message — the content of your request
The following is also recorded automatically with your request:
- IP address — to limit abusive submissions and fight spam
- Form language (French or English) — to reply in your language
No other personal data is collected. This website does not set any tracking or analytics cookies.
3. Purpose
The data collected through the contact form is used solely to handle and reply to your request, and to protect the form against abuse. It is never used for commercial, marketing or prospecting purposes.
4. Legal basis
Processing is based on the legitimate interest of United4Racing SARL (Art. 6(1)(f) GDPR): you choose to contact us and expect a reply; protecting the form against spam is part of keeping the website secure. Your data is used for these purposes only.
5. Retention period
Your requests are kept for 3 years from the date they are received, then deleted automatically.
6. Recipients
Your data is accessible only to the United for Racing team. It is never sold or passed on to third parties.
To run the website, we rely on the following processors (Art. 28 GDPR), which process data only on our instructions:
| AlwaysData | Website and database hosting — Paris, France |
| Brevo (Sendinblue SAS) | Sending the emails related to the form (team notification, acknowledgement of receipt) — Paris, France |
Data is processed within the European Union — no transfer outside the EU.
7. Cookies and local storage
This website sets a single technical cookie (__u4r_sid) from your first visit. It serves two strictly necessary purposes:
- CSRF protection — secures the contact form against cross-site attacks (all public pages)
- Admin authentication — keeps users of the administration area signed in
This cookie expires after 7 days. It contains no identifiable personal data (only a random session identifier). It is strictly necessary for the website to work and does not require consent under the ePrivacy Directive.
The website also stores a cookie_notice_seen value in your browser (localStorage), solely so that the cookie notice is not shown on every visit. It contains no personal data and is never sent to the server.
The language you choose (French or English) depends only on the page address (/en/… for English): it is stored neither in a cookie nor in your browser.
This website sets no tracking, analytics, advertising or social media cookies.
8. Embedded YouTube videos
Some pages embed videos hosted on YouTube (Google Ireland Limited). We use YouTube's privacy-enhanced mode (youtube-nocookie.com): YouTube does not set cookies until you start playing a video.
Displaying video thumbnails and players does, however, involve a connection to Google's servers, which then receive your IP address. When you play a video, Google's privacy policy applies: policies.google.com/privacy.
9. Article translation
The English version of our articles is prepared with the DeepL translation tool (DeepL SE, Cologne, Germany) and reviewed by the team before publication. Only the editorial content of the articles is sent to DeepL: no visitor data is ever shared with it.
10. Security log (audit log)
For users with an administration account, a security log records the actions carried out in the administration area:
- IP address
- Browser (User-Agent)
- Action performed (sign-in, content change, etc.)
- Timestamp
This data is processed on the basis of legitimate interest (Art. 6(1)(f) GDPR) for security and traceability purposes. It is accessible only to United4Racing SARL and is kept for 12 months.
This data does not concern visitors to the public website.
11. Your rights
Under the GDPR (Regulation (EU) 2016/679), you have the following rights over your data:
- Right of access (Art. 15) — obtain a copy of your data
- Right to rectification (Art. 16) — correct inaccurate data
- Right to erasure (Art. 17) — ask for your data to be deleted
- Right to restriction (Art. 18) — restrict processing in certain cases
- Right to object (Art. 21) — object to the processing
To exercise these rights, contact us at: info@united4racing.lu
We will reply within one month.
12. Right to lodge a complaint
If you believe your rights are not being respected, you may lodge a complaint with the Luxembourg supervisory authority:
| Authority | CNPD — Commission Nationale pour la Protection des Données |
| Address | 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg |
| Website | cnpd.public.lu |
13. Changes and French version
This policy may be updated at any time. The date of the last change is shown at the top of this page.
This policy is also available in French: Politique de confidentialité. In case of any discrepancy, the French version prevails.