Processing of personal data during the operation of subscriptions

Supplement to the FATRACING Personal Data Processing Policy

Revision of October 20, 2026

The operator is an autonomous non—profit organization for the development of cycling "FAT RACING CLUB (RACING)", TIN 5300020110, OGRN 1255300002616. Address: 173000, Russia, Novgorod region, Veliky Novgorod, Fedorovsky Ruchey str., 14, sq. 21. Personal data contact: fatracing@yandex.ru. The main policy is posted on https://fatracing.ru/privacy. This add-on describes only Premium, PRO and the waiting list for their launch.

1 Contract execution and mandatory payments

To issue and maintain a subscription, the account ID, email, details of the selected tariff and PRO card, price, validity period, auto-renewal status, order and payment IDs, bank-issued payment method binding ID, refund information, user requests, and confirmation of terms and agreement to autopayments are processed. Name, phone number, information about the organization and its representative are processed to the extent necessary for a specific order.

The grounds are the conclusion and execution of the contract at the user's initiative and the fulfillment of duties established by law. These necessary operations do not require substituting the contract with a separate general consent «for all actions». The operator retains evidence of the applicable processing ground.

Technical information about confirming and revoking consents, including time, version of the text and linking to the account, is processed to confirm the expression of will and resolve disputes. The IP address and browser information are included in such a log only when actually collected and in the required volume. Payment details of the card are entered at the bank; the Operator does not receive or store CVV/CVC and the full card number.

2 Data recipients

The necessary data is transmitted to the payment provider JSC 'TBank', organizations providing issuance of fiscal receipts, the fiscal data operator and authorized bodies — in applicable cases. For the provision of services, Russian hosting and mail providers may be involved with contractual definition of processing purposes and protection measures.

For PRO, mandatory information about the advertiser, agreement, placement, and calculations is transmitted to the advertising data operator and to the Unified State Register of Legal Entities in the volume established by law. Public display of an individual's data is carried out only if there is a suitable legal basis, including separate consent to dissemination when it is required.

3 Terms and termination of processing

The data of the current subscription is used until the contract is completed. After its termination, only the information necessary for calculations, accounting, and tax records, fulfillment of other legal requirements, and protection of the parties' rights within the applicable terms is retained. When the goals are achieved and there are no other grounds, the data is deleted or anonymized.

Withdrawal of consent for optional processing stops the corresponding processing. It does not cancel the obligation to retain documents and data for which there is an independent legal ground. Withdrawal of consent to use the saved payment method immediately excludes the initiation of new regular charges for the corresponding subscription.

4 Waiting list and messages

Signing up for the waitlist does not create a subscription, does not reserve a PRO spot, and does not give consent for charges. For notifications about the launch, the selected tariff, email, account ID, and confirmation data for separate consent are processed. Telegram is used for such delivery only if the user has separately chosen this channel and linked their account.

The waiting list data is used until the selected notification is sent, consent is revoked, or 12 months have passed since registration, whichever comes first. After the goal is completed, the contact is removed from the waiting list; minimal information about granting and revoking consent may be retained if there is a legal basis for protecting the rights of the parties.

5 Public status and user rights

Buying Premium does not automatically authorise publication of payment information. A public Premium badge on a linked profile is shown only if the user chooses it separately and provides the required consent to the dissemination of their data. Payment amounts, card details, email addresses and transaction history are not published.

The user has the right to request information about processing, clarification, termination of unlawful processing and deletion of data in cases provided for by law by sending an appeal to fatracing@yandex.ru. To execute the request, the Operator has the right to request a proportionate confirmation of account ownership without requiring redundant data.