FIA Motorsport Privacy Notice

Last updated: July 2023

Summary of how the FIA uses your data

The FIA processes the data of individuals and personnel participating in motorsport, as well as their relatives and associates, in order to carry out its commercial and regulatory functions as set out in the FIA’s official Statutes, and for the purposes identified in the International Sporting Code and the FIA’s Sporting, Technical and Financial Regulations, Judicial and Disciplinary Rules, and any other FIA rules and regulations that may apply from time to time. This notice addresses how we process personal data relating to Competitors, Participants and other Competitor, Promoter or Organiser personnel, owners or directors, Drivers, officials, manufacturers and suppliers and their personnel, and any other individual who may be subject to the FIA’s Statutes, International Sporting Code, or Sporting, Technical or Financial Regulations from time to time, or whose data may be processed in connection with these regulations or motorsport related activities, such as members of the press or media who seek accreditation.
The FIA will particularly use your data to allow it to administer and govern its authorised Competitions and Championships, ensure that on and off-track discipline and health and safety are maintained, to uphold the integrity of motorsport and to promote motorsport, the FIA and our Competitions, merchandise and services.
The FIA will process some special category personal data in carrying out these functions. This will usually be done for the purposes of protecting safety within motorsport, particularly Driver safety, for integrity related processing such as anti-doping, and for conducting relevant research into motorsport safety.
Subject to your consent, and applicable law, the FIA may collect personal data relating to diversity, inclusion and disability for monitoring purposes, and for the distribution of Disabled Drivers’ Grants and similar initiatives operated by the FIA from time to time.
Data may be obtained from and shared with a number of third parties. We may obtain data from your employer, or the Competitor or team or motorsport participant with which you have a relationship, or from Promoters or Organisers. Your data may in turn be shared with Promoters, Organisers, Competitors and teams or other motorsport participants and contacts referenced in relevant applications, for example in relation to your conduct or the conducting of due diligence. We share information with our suppliers and professional advisors as necessary for the purposes identified in this notice. Information may be shared with law enforcement or regulatory authorities where there is evidence of relevant criminal conduct. Data is also shared with courts and tribunals as necessary for disciplinary or any other legal proceedings.
This notice sets out more details in respect of your data protection rights, including your right to object to certain processing.

What does this notice cover?

This notice describes how the Fédération Internationale de l’Automobile (the “FIA”, “we”, “us”) will make use of your data where your data is processed in connection with the FIA’s role as the international federation responsible for the governance and commercial promotion of motorsport, and as an organisation responsible for authorising and organising certain motorsport competitions. The FIA also has other privacy notices which may be relevant to you (for example the Main Privacy Notice [https://www.fia.com/data-privacy-notice] available on its website, its employee privacy notice, or notices that may be presented in relation to a specific processing activity).

This notice describes your data protection rights, including a right to object to some of the processing which the FIA carries out. More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section.

What categories of personal data do we collect?

The FIA collects and processes personal data in a number of ways. It collects the following types of personal data:

Identification data: your name, log-in details where you make use of FIA platforms and portals, your gender, age and date of birth;
Contact details: your personal and work addresses, email addresses and phone numbers as appropriate;
Travel related data: personal data necessary to allow the FIA to arrange your travel in addition to your identification information, including your passport and visa details, information on your right to work, dietary requirements and travel preferences and details of any assistance you may require, including if needed details of your disability;
Motorsport participation data: details of your involvement in motorsport or with an individual or body involved in motorsport, including as appropriate information about your role, your employer, details of your licences including your licence number, your FIA driver categorisation, and information collected upon your registration for a licence or during your attendance at or entry application for an event including your health data where required for the issue of a licence or other compliance with the FIA’s Sporting Regulations or details of your close contacts in relation to Covid regulations;
Motorsport performance data: details of your performance in FIA authorised Competitions or other motorsport competitions, including as a Competitor and/or as a Driver;
Integrity and conduct data: details of your behaviour and conduct, including any intelligence or allegations passed to the FIA, and relevant intelligence and evidence collected about such behaviour and conduct including through testimony, press reports, imagery and footage. This include information collected about you where you are subject to the FIA’s Anti-Doping or Anti-Alcohol Regulations, including health information collected as part of an associated test;
Safety data: where you are a Driver, the FIA may process biometric data collected for safety purposes (including through FIA approved biometric gloves), and other information relating to your health including information collected through medical forms, your involvement in an accident taking place during an FIA authorised Competition or Championship, and information collected through re-integration consultations or through management or scrutiny of medical and rescue teams at FIA Championships or FIA authorised Competitions;
Financial data: your payment and bank details, where you are required to make a payment or where we are required to make a payment to you, and details of your compensation where this must be disclosed under the FIA’s Financial Regulations;
Imagery and promotional data: details of your biography, photos and footage of your participation in FIA authorised Competitions or Championships or as otherwise collected in connection with your participation;
Equality, diversity and inclusion data: information required to offer specific FIA grants, such as Disabled Drivers Grants, such as details of disability and impairment, and information requested through equal opportunity monitoring surveys, such as information about your ethnicity, sexual orientation, religion or belief, social background and health conditions.

We collect much of this information from you directly, such as through our various registration, entry and licence forms and portals. We also collect some of this information from other motorsport participants with whom you interact, such as your employer, officials, your previous employers, other Drivers and Competitors and from broadcasters and the media. This is especially true where we carry out our integrity and disciplinary role.

As part of our integrity activities, we also actively gather intelligence from relevant sources, including members of the public and publicly available sources. We also collect data from anti-doping organisations (such as the World Anti-Doping Agency and National Anti-Doping Organisations) and our appointed anti-doping service provider.

Where you choose to involve a third party, for example, your employer, a representative, lawyer or relative, we will receive and share data with this person or organisation.

Why we collect, use and store this personal data

We are usually required to have a lawful basis to process your data. We explain each of these legal bases below. We also set out the purposes for which we process your data. For each purpose, we explain the lawful basis for that processing, the processing operations that we carry out and the categories of data that we process.

Legal bases relied on by the FIA for motorsport related processing

Consent – sometimes we ask for your consent to use your data.

Contract – if we have an agreement in place with you, we may process your data where it is necessary for us to meet our obligations or enforce our rights under the contract.

Legitimate interest – we can process your data when this is necessary for us to achieve a legitimate business purpose, or where this is necessary for someone else to achieve their legitimate purpose. We explain below what interests we, or others, are trying to achieve when we process your data. Where we process personal data on the basis of a legitimate interest, we consider what the impact of the processing will be on affected individuals and determine whether those individuals’ interests outweigh our interests in the processing taking place.

Legal obligation – we have obligations to comply with legal and regulatory requirements under various applicable laws. In certain cases, we have to use your data to meet these obligations.

Vital interests – in exceptional circumstances, we may rely on the need to protect your vital interests to process certain data, particularly sharing information as needed with medical professionals for safety purposes.

Where we process your special category data – such as information relating to your health, biometric data that might identify you, your ethnicity, your religion, your sex life or sexual orientation, your trade union membership or your political opinions – we usually require a further lawful basis. These are as follows:

Explicit consent – we may ask you to consent to use this data;

Medical diagnosis/preventative and occupation medicine – we will only process data for medical purposes where required by law, or under the supervision of a health professional who is subject to an obligation of professional secrecy;

Substantial public interest, as set out in law – the law may make special provision for our processing, for example in relation to health and safety requirements;

Establishment, exercise or defence of legal claims – we are entitled to process special category data where this is necessary to establish, exercise or defend our legal rights;

Scientific research, as permitted by law – we will use your special category data for research where we can demonstrate that we meet legal requirements and have applied appropriate safeguards;

Vital interest – again, in exceptional circumstances, we rely on the need to protect your vital interests to process your special category data.

For certain types of processing, the FIA may be exempt from the requirement to have a lawful basis. This is notably the case where the FIA processes personal data to allow academic or artistic expression. The FIA has explained in this notice where this is relevant to its motorsport related processing.

FIA purposes of processing

The FIA processes your data for the following purposes:

Administering and managing Competitions and Championships, including selecting and authorising Competitors, manufacturers and suppliers, issuing motorsport licences and categorising Drivers, and associated health assessment (legitimate interests, healthcare processing, explicit consent)

We collect and use your personal data so that we can carry out the FIA’s role as a Competition and Championship organiser, and as a governing body providing administrative assistance and management of Competitions and Championships it authorises but does not directly organise. This reflects our legitimate interest in administering and managing these Competitions and Championships, and the legitimate interest of other motorsport participants in ensuring these authorised Competitions and Championships can take place. This includes the collection of personal data to carry out due diligence in the selection and authorisation of Competitors, suppliers and manufacturers, to issue motorsport licences and categorise drivers, to issue media and other access accreditations, to allow Competitors and Drivers to register for specific Competitions and Championships, to appoint and manage relevant officials and to provide administrative support to Competitions and Championships such as issuing additional accreditation, liaising with third parties such as venues, Promoters or Organisers. This also includes our processing relating to checks of your fitness to attend an event, and arranging your travel and accommodation where required. It may also involve the taking of certain payments where required for entry or registration for a particular Competition or Championship or for obtaining a particular categorisation or accreditation.

Where we collect any special category data, particularly safety data collected in accordance with the role of the FIA’s medical teams and medical delegates set out in the International Sporting Code, we rely upon our need to assess your health under the supervision of a healthcare professional where appropriate safeguards are in place. Where we receive your health data in connection with your fitness to attend an event, particularly as this relates to rules connected to Covid-19 protocols, we will typically process this to ensure the health and safety of other participants at these events.

In some cases, if you provide us with special category data to provide administrative or other assistance, we seek your explicit consent to process this information to the extent required by applicable data protection laws. Failure to provide this information, or withdrawing your consent, may result in the revoking of a licence if this would mean you are not eligible for the relevant licence, or may mean that the FIA is unable to provide appropriate assistance.

We use your identification data, contact details, travel related data, motorsport participation data, motorsport performance data, financial data and safety data for this purpose.

We share your information with Organisers, our officials, with appropriate authorities involved in the organisation of a Competition or Championship, with Promoters and with our suppliers for example our IT service providers who host relevant platforms, our professional advisors, and travel agencies involved in our administrative role. Where you are a Driver seeking a licence, we share information relating to your application with your team and representatives and your ASN. We also publish certain information, such as the names and categories of categorised Drivers and details of individuals who have had motorsport licences suspended. We also share information with law enforcement authorities if they have specific questions regarding the administration and management of Competitions and Championships.

Carry out the FIA’s governance, integrity and disciplinary role (legitimate interests, establishing, exercising and defending legal claims, substantial public interest, explicit consent)

We process personal data to carry out the FIA’s governance role in motorsport, including the collection and processing of information to confirm and enforce compliance with the FIA’s Statutes, International Sporting Code and the FIA’s Sporting, Technical and Financial Regulations, Judicial and Disciplinary Rules, and any other FIA rules and regulations that may apply from time to time. This includes the collection of information directly from you, and from third parties with whom you may interact in motorsport, such as your ASN, your employer or team or your relatives. We also receive information from a wider variety of third-party sources where this provides relevant information or intelligence, including the media, members of the public and other motorsport participants.

We will use the data to carry out any necessary disciplinary and other legal processes, including appropriate investigations into possible breaches of our rules and regulations, to take decisions and enforce our decisions, and to publish details of the integrity decisions we take, including details of any bans we may impose. This processing is done to pursue our legitimate interest in maintaining the integrity of our sport, and the legitimate interest of other competitors to ensure motorsport is fair and free from improper influence or cheating.

In some cases, where we collect special category data for this purpose, we may rely on an additional lawful basis to the extent required by applicable data protection laws. Some of our integrity processing relies on specific local laws in the substantial public interest, for example to justify the processing of anti-doping data. We are also entitled to process special category data where we are seeking to establish, exercise and defend legal claims in the enforcement of our rules and regulations, including our Anti-Doping Regulations. However, in some cases we may need to seek your explicit consent. Where we rely on this consent, you may refuse or withdraw this consent at any time, but this may limit your ability to participate in motorsport if this undermines our ability to ensure compliance with our regulations.

The information we use for this purpose is your identification data, your contact details, your motorsport participation data, your motorsport performance data and your integrity and conduct data. It will also include your financial data where disclosure is required under the FIA’s Financial Regulations.

We share your information with other participants in motorsport, including Organisers, Promoters, with your representatives and advisors, with your ASN, your employer, with our officials, with appropriate authorities involved in the organisation of a Competition or Championship, and with our suppliers for example our IT service providers who host relevant platforms, our professional advisors including our legal counsel, forensic experts and auditors, and with the world at large if we choose to publish a decision. We share your information with other sports governing bodies and the World Anti-Doping Agency as required under the World Anti-Doping Code and our own International Sporting Code. We may discuss integrity matters with the media where appropriate. We also share information with law enforcement authorities and other regulatory authorities if they have specific questions regarding integrity matters Competitions and Championships, or where there is evidence of unlawful activity.

Ensuring the health and safety of all participants (legitimate interests, compliance with laws, vital interest, healthcare processing or laws in the substantial public interest)

We collect information about you, including information about your health, for the purposes of ensuring the health and safety of all participants in motorsport, including yourself. This includes information collected from you in relevant medical forms. This will involve the processing of personal data to assess your health and safety whilst participating in a Competition, to ensure that you receive appropriate medical attention in the event of an incident during a Competition, and to ensure we carry out appropriate scrutiny of medical and rescue service providers and can carry investigations of health and safety related incidents during Competitions. We process much of this data on the basis of our legitimate interest of ensuring the health and safety of the participants in motorsport, and the interests of those participants both current and future. In some instances, we may be required to process data by law, where local laws require the maintaining of health and safety records or the engagement with public authorities conducting health and safety investigations. We may also use your personal data for the protection of your vital interests where, exceptionally, we need to share your data with medical professionals in the event of an incident.

Where this data involves the processing of special category data, in particular your safety data, we process this to protect your vital interests, or as necessary to provide medical treatment under the supervision of a healthcare professional. If we are required to collect or share your data to comply with health and safety laws, we rely on these laws in the substantial public interest to justify our processing.

The information we use for this purpose is your identification data, your contact details, your motorsport participation data, your motorsport performance data and your safety data.

We share your information with appropriate medical professionals where this is needed for your diagnosis, treatment or care, including the local ASN doctor present at the relevant Competition. We will also share data with appropriate public authorities as required by local laws. We also share data with our advisors and third-party IT providers to the extent we need to retain information relation to your incident on our systems.

Promoting motorsport, the FIA and our Competitions, merchandise and services (legitimate interest, contractual necessity)

We will use information we collect and receive as part of your participation in Competitions, Championships and any connected media work for the purposes of our legitimate interest in promoting motorsport, the FIA, and our connected Competitions, Championships, merchandise, services and assets. If we have a specific agreement with you, giving us certain rights to use your personal data, we may instead process this on the basis of contractual necessity.

The information we use for this purpose is your identification data, your contact details, your motorsport participation data, your motorsport performance data, your imagery and promotional data and, where necessary for performing a contract with you, your financial data.

We share the information widely for the promotional purposes described above. This involves the sharing of data with specific media partners and broadcasters and commercial partners, but also involves the publication of your data. We also share data with our advisors and third-party IT providers.

Conducting safety related research (consent)

We collect and process data relating to incidents logged in the World Accident Database, for the purpose of analysis and compilation of findings. In accordance with the World Accident Database Guide, we rely on your explicit consent to process any identifiable information in the World Accident Database. We may, if you do not consent or later withdraw your consent, retain anonymised information relating to relevant incidents. We are a joint controller with ASNs for the details of the reports submitted to the World Accident Database. Affected data subjects can find out more about the split of responsibilities between the FIA and its joint controllers, and steps taken to ensure data minimisation, by reviewing the WADB Guide.

The information we use for this purpose is your identification data, your motorsport participation data, your motorsport performance data and your safety data.

We share your information within the World Accident Database with ASNs, our advisors and our provider who hosts and operates the WADB on behalf of the FIA. We also share your data with consultants and administrators who engage in FIA safety research projects or who otherwise assist the FIA with administering the WADB.

Maintaining a record of motorsport (legitimate interests, academic/artistic expression)

As the governing body for motorsport, we collect and retain personal data for our legitimate academic and artistic purposes in creating and curating a history of motorsport. This includes the creation of our electronic library of FIA archives.

The information we use for this purpose is your identification data, your motorsport performance data, and your imagery and promotional data. In the event this contains special category data, for example in placing materials relating to published details of accidents within our electronic library, we process this to allow academic and artistic expression.

We may share this information widely for the purpose set out above. We may publish the information on our websites, share it with journalists or historians, or relevant broadcasters and media contacts, or share it with museums or art galleries. We also share data with our advisors and third-party suppliers.

Equality, diversity and inclusion, including grants (consent)

As a responsible sports organisation, the FIA is committed to ensuring it supports inclusivity in motorsport. The FIA may in some circumstances seek personal data relating to diversity, inclusion and disability for monitoring purposes, based always on your consent. It may also collect equality, diversity and inclusion data for the purposes of providing inclusion related grants, including distribution of the Disabled Drivers Grants and similar initiatives operated by the FIA from time to time.

The information we use for this purposes is your equality, diversity and inclusion data. This will always be collected with your consent. Where it is possible to ensure the anonymisation of your data for these purposes, the FIA will take such steps.

We will not share your identifiable equality, diversity and inclusion data with third party controllers without your consent. We may share your information with our third-party suppliers to the extent that they are assisting us with relevant activities, such as administering a Disabled Driver Grant request. Any information used for diversity monitoring is likely to be shared with a specialist company that advises us on diversity, or that assists us with ensuring that responses are appropriately anonymised.

Business interests (legitimate interests, establishment, exercise and defence of legal claims)

We have a legitimate interest in protecting our business interests and legal rights, including, use in connection with legal claims, compliance, regulatory, auditing, investigative and disciplinary purposes and ethics and compliance reporting requirements. Where we process your special category data for these purposes, we will typically rely upon our need to establish, exercise or defend ourselves from legal claims.

We may process any of the types of data mentioned in this notice for these purposes.

This information will be shared with our advisors and suppliers who provide our IT systems and storage. We share information with legal and other advisers if there are investigations or potential claims. We also disclosure information of this nature in connection with legal processes or litigation or to other relevant regulators, other governing bodies, law enforcement bodies or to teams and other employers where appropriate.

Compliance with laws (legal obligations)

Where necessary to comply with a legal obligation we will store and use your data. This may include responding to requests by government regulators, law enforcement authorities or any other regulatory authority conducting an investigation.

We may process any of the types of data mentioned in this notice for these purposes.

This information will be shared as required to comply with law, including with law enforcement or public authorities as required.

Withdrawing consent

Wherever we rely on your consent, including explicit consent, you will always be able to withdraw that consent. This will not undermine the legitimacy of any processing carried out prior to your consent being withdrawn. If you withdraw consent, this may in some cases impact on your ability to access certain services or events as explained above.

How is personal data shared, where and when?

Your data may be shared with a variety of third parties as described above. Personal data is also shared as necessary within the FIA and within the FIA group, including with our sporting, legal, privacy and IT departments. Your personal data will be shared with the FIA’s third-party service providers, who will process it on behalf of the FIA for the purposes identified above. This may include the providers of insurance services, IT and technology services, survey providers and event organisers. We also share information with our professional advisers.

Personal data may be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.

In the event that FIA’s business is sold or integrated with another business, your details may be disclosed to our advisers and any prospective purchaser's adviser and will be passed to the new owners of the business as required for the purposes above.

For a number of purposes set out above, the data sharing described is likely to result in the sharing of your data with third parties located outside your country; in principle, this may be any country in the world. Where information is transferred outside the EEA, Switzerland or the UK, and where this is to a third party in a country that is not to a country considered adequate under Swiss, EU or UK law, data is usually adequately protected by approved standard contractual clauses, or a vendor's Processor Binding Corporate Rules. In some limited circumstances our transfers may be exempt from adequacy obligations, where transfers are for important reasons of public interest, such as sharing of data for anti-doping purposes. Where we transfer on the basis of an adequacy mechanism, a copy of the relevant mechanism can be provided for your review on request by contacting us using the details set out below.

What rights do I have?

You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format.

In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where it would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in European, Swiss and UK data protection laws and under applicable member state laws. We will inform you of relevant exemptions we rely upon when responding to any request you make.

To exercise any of these rights, you can contact us – or our Data Protection Officer – using the details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred. This may be the CNIL in France. You may also complain to the Federal Data Protection and Information Commissioner in Switzerland.

We will always inform you where information you provide is mandatory. Information that is provided in order to comply with the FIA’s various rules and regulations listed above is mandatory. Failure to provide this information breach our regulations.

Details of the FIA as a controller

The FIA has two primary entities: a French association having its registered office in 8 Place de la Concorde, Paris, and a Swiss association having its registered office in 2 Chemin de Blandonnet, Geneva.

Both entities work together as joint controllers in the processing of personal data relating to motorsport. These entities collaborate on the determination of the purposes and means of processing described in this notice.

The FIA’s Swiss association takes primary responsibility for supporting data subjects, and in handling any requests data subjects may have. You can find the relevant contact details below.

How do I contact you, or your data protection officer?

We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, you can get in touch with us and our Data Protection Officer at dpo@fia.com or by writing to: Commercial Legal, 2 Chemin de Blandonnet, 1215 Geneva 15, Switzerland.

How long will you retain my data?

FIA will retain and process personal data relating to Participants for as long as necessary for the purposes identified above, including for the purposes of satisfying any specific legal requirements, such as accounting or health and safety rules, and, where required for us to assert or defend against legal claims, until the end of the relevant limitation period or until the claims in question have been settled.

After this period, we will take steps to delete your personal data or hold it in a form that no longer identifies, you provided that we have no further lawful basis requiring us to maintain your data.

Where we maintain a record of motorsport, we retain your data indefinitely in order to maintain a historically accurate record.

Updates to this privacy notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.