Privacy Policy
1. Data controller
APEXLANE S.R.L., Via Giuseppe Pasquali 17, 82100 Benevento (BN), Italy · VAT and tax code 01902600624 · REA BN-315734.
Contact for any privacy request: apexlane@pec.it (certified email).
2. What data we collect
- Data you give us when you join the waitlist: first name, last name and email address.
- Proof of your consent: date and time of your registration, the version of this notice you accepted, the language you signed up in and, if you confirm your email, the date and time of the confirmation.
- Technical data: a pseudonymised fingerprint of your IP address (a one-way salted hash, never the IP address itself), your browser's user-agent string and, if you arrived through a tracked link (for example a QR code), the name of the campaign.
- Security check: to block spam and automated sign-ups, the form uses Cloudflare Turnstile, which analyses technical signals from your browser and device (such as IP address and browser characteristics) without using cookies for advertising.
3. Why we use it and on what legal basis
- Managing the waitlist and sending you updates about the X SIMRACE ARENA project and its launch — based on your consent (Art. 6(1)(a) GDPR).
- Verifying your email address (when you receive a confirmation link) — to make sure the address belongs to you; based on your consent (Art. 6(1)(a) GDPR).
- Protecting the form against spam, abuse and fraud — based on our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR).
- Keeping a record of your consent — to comply with our accountability obligations (Art. 6(1)(c) and Art. 7(1) GDPR).
Providing your data is voluntary. Without it, however, we cannot add you to the waitlist. We do not use your data for automated decision-making or profiling, and we do not sell it.
4. Who processes your data
Your data is processed by authorised APEXLANE staff and by the following providers, acting as data processors under Art. 28 GDPR:
- Cloudflare, Inc. — website hosting, database (stored in the European Union) and the Turnstile security check.
- Resend (Plus Five Five, Inc.) — delivery of the confirmation email, when email verification is active.
Some of these providers are based in the United States. Where data is transferred outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission (EU-U.S. Data Privacy Framework) or on the Standard Contractual Clauses approved by the European Commission.
5. How long we keep it
- Waitlist data: until you unsubscribe or withdraw your consent and, in any case, for no longer than 24 months from your registration.
- Registrations that are never confirmed by email: deleted automatically after 30 days.
- Rate-limiting records (pseudonymised IP fingerprint): deleted automatically after 24 hours.
6. Your rights
You can at any time ask us to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format (Articles 15–21 GDPR). You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal — simply use the link included in our emails or write to apexlane@pec.it.
You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the EU country where you live or work.
7. Age
The waitlist is intended for people aged 16 or over. If you are younger, please do not sign up without the involvement of a parent or guardian.
8. Cookies
This website does not use advertising, analytics or profiling cookies. All fonts and images are served from our own website. The security check described above only processes the technical data strictly necessary to protect the form.
9. Changes
We may update this notice. The current version is always available on this page, with its date at the top.