Last updated: August 14, 2026
1. Data controller
The data controller for the personal data collected through nyt-racing.com is:
Controller: Ignacio Yárnoz Tantos
Trade name: NYT Racing
NIF: 78757156G
Address: Calle Luis Cernuda 45, 31500 Tudela, Navarra, Spain
Email: info@nyt-racing.com
Phone: +34 675 018 455
2. Applicable regulations
Personal data will be processed in accordance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, and any other applicable regulations.
3. Data we may process
Depending on the user’s relationship with NYT Racing, the following categories of data may be processed:
Identification and contact data: first name, last name, postal address, email address, and phone number.
Account data: username and data associated with the account created at NYT Racing.
Purchase and billing data: products purchased, order number and date, billing and delivery address, amounts, taxes, payment method, and data necessary to issue invoices and manage the contractual relationship.
Information related to personalized products: names, numbers, texts, images, logos, designs, measurements, colors, or other information that the customer voluntarily provides to manufacture the requested product.
Communication data: content of messages sent via email or contact forms and communications related to orders, incidents, or support.
Technical data: IP address, basic information about the device, browser, technical logs, and other data generated during the use of the site when necessary for security, operation, or fraud prevention.
Data derived from cookies or other similar technologies: only in accordance with the Cookie Policy and the preferences expressed by the user.
NYT Racing does not need to store full bank card details when payment is processed directly by an external payment gateway.
4. Purposes and legal bases
Order management and contractual relationship
The data will be used to process orders, manage payments, prepare and manufacture products, handle shipments, issue invoices, manage returns, warranties, and incidents, and maintain communications related to the purchase.
The legal basis is the execution of the contract or the application of pre-contractual measures requested by the data subject.
Account creation and management
When the user creates an account, the data will be used to manage their access, order history, and functions associated with the account.
The legal basis will be the execution of the contractual relationship or the functionalities requested by the user.
Inquiries and contact form
The data provided through forms or email will be used to respond to inquiries and requests.
When the inquiry is related to a possible purchase, the legal basis may be the application of pre-contractual measures requested by the data subject. In other cases, it may be based on NYT Racing’s legitimate interest in responding to and managing the communications received.
Compliance with legal obligations
Certain order, billing, and transaction data may be kept and processed to comply with tax, accounting, administrative, consumer, and other legal obligations.
The legal basis is compliance with a legal obligation.
Security and fraud prevention
Certain technical and transaction data may be processed with the aim of ensuring website security, preventing abusive use, and detecting or avoiding fraudulent operations.
The legal basis will be the legitimate interest of NYT Racing in protecting its website, its customers, and its activity, always respecting the rights and freedoms of the data subjects.
Commercial communications
When NYT Racing sends commercial communications, it will do so when there is a legal basis that allows it.
When consent is necessary, the user may withdraw it at any time.
The user may request to stop receiving commercial communications at any time using the mechanism included in the communication or by contacting info@nyt-racing.com.
5. Data recipients
Personal data will not be sold to third parties.
May be communicated or accessible only when necessary to categories of suppliers such as:
web hosting and technological infrastructure providers; e-commerce and web maintenance providers; transport and logistics companies; payment gateways and service providers; email and communications providers; security and fraud prevention providers; tax, accounting, or legal advisors; and public administrations, courts, and authorities when there is a legal obligation.
These providers will only receive the data necessary to provide the corresponding service and, when acting as data processors, must process the data according to NYT Racing’s instructions and applicable regulations.
6. International transfers
Some technology providers may have infrastructure or sub-processors located outside the European Economic Area.
When an international transfer of personal data occurs, NYT Racing will require a valid mechanism in accordance with the GDPR, such as an adequacy decision, standard contractual clauses, or another legally recognized guarantee.
7. Retention periods
Data associated with orders and billing will be kept during the contractual relationship and, subsequently, for the periods required by tax, accounting, commercial, consumer, or other applicable legislation.
Inquiry data will be kept for the time necessary to respond to and manage the request and, subsequently, for the period necessary to address possible liabilities.
User account data may be kept as long as the account remains active or as long as it is necessary to maintain it due to the contractual relationship or legal obligations.
Data processed on the basis of consent will be kept until the data subject withdraws it, without prejudice to the periods that may be necessary to comply with legal obligations.
8. Rights of data subjects
The data subject may exercise, where applicable, the following rights:
Access: to know what personal data NYT Racing processes.
Rectification: to request the correction of incorrect or incomplete data.
Erasure: to request the deletion of their data when legally appropriate.
Objection: to object to certain processing based on legitimate interest or other bases that allow this right.
Restriction: to request that processing be restricted in legally provided cases.
Portability: to receive certain data in a structured, commonly used, and machine-readable format or request its transmission to another controller when applicable.
Withdrawal of consent: to withdraw previously granted consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.
Automated decisions: to exercise the rights recognized by regulations regarding individual decisions based exclusively on automated processing when applicable.
To exercise these rights, you may send a request to:
indicating the right you wish to exercise and providing the information necessary to identify your request.
The exercise of rights is generally free of charge.
NYT Racing may request additional information to verify identity only when there are reasonable doubts about the identity of the person making the request.
Requests will be addressed within the timeframes established by the GDPR.
9. Complaints to the supervisory authority
If the data subject considers that the processing of their personal data does not comply with regulations, they may file a complaint with the:
Spanish Data Protection Agency (AEPD)
without prejudice to any other administrative or judicial remedy that may correspond.
10. Cookies
NYT Racing uses cookies and similar technologies necessary for the operation of the site and, where applicable, other categories of cookies subject to user consent.
Detailed information about types of cookies, purpose, provider, duration, and mechanisms to accept, reject, or modify preferences should be consulted in the Cookie Policy.
Cookies that legally require consent must not be used without the user having provided such consent.
The user may subsequently modify or withdraw cookie preferences through the configuration mechanism available on the website.
11. Security
NYT Racing applies reasonable technical and organizational measures aimed at protecting personal data against loss, misuse, unauthorized access, alteration, or disclosure.
However, no system connected to the Internet can guarantee absolute security.
12. Children’s data
NYT Racing’s products and services are not specifically directed at minors.
When consent is necessary to process a minor’s personal data, the age and authorization requirements established by current legislation will apply.
13. Third-party links and services
The website may contain links to or integrate services belonging to third parties.
Processing carried out directly by those third parties will be subject to their own privacy policies, without prejudice to the responsibilities corresponding to NYT Racing when acting as a data controller.
14. Modifications
NYT Racing may modify this Privacy Policy to adapt it to legislative, technical, or processing changes.
The current version will be permanently available at nyt-racing.com and will show the date of its last update.
15. Contact
For any inquiry related to privacy or data protection:
NYT Racing – Ignacio Yárnoz Tantos
Calle Luis Cernuda 45
31500 Tudela, Navarra, Spain
Email: info@nyt-racing.com
Phone: +34 675 018 455