Superbike School Privacy Policy

California Superbike School T/A GME Motocycles Limited (“GME”)

Privacy notice for the processing of personal data

In accordance with the provisions of the General Data Protection Regulation no. 679/2016 ("GDPR")

The company GME Motorcycls Limited (“GME”), trading as superbike school uk, California Superbike School UK as data controller informs you of the following regarding the processing of your personal data pursuant to article13 of EU Regulation 2016/679 on the protection of personal data ("Regulation"). 

1. Data Processing Purposes

GME processes the personal data that you provide upon registration on our website https://www.superbikeschool.co.uk ("Site") and on the specific sections of the same during events, fairs and shows organised or attended by GME and the personal data collected during your interaction with GME, including details of your purchases. 

With reference to the activities of sale and interaction with GME, these also include the activities carried out in points of sale and on-line, such as the managing of your interaction with our websites and internet and mobile applications (registration to websites/Apps and on-line initiatives such as newsletter, mailing list, events, prize contexts, promotions) and providing to you information/material, upon your request. The Privacy Policy of the Site is published at the following web page: https://www.superbikeschool.co.uk. We process your personal data for the following purposes.

a) Purposes necessary for Customer relationship management

GME processes your personal data to manage your registration and interaction with the Site, and to provide you with the products and services that you require. Specifically, GME processes your personal data for the following purposes: to allow registration and authenticated access to the Site; to reply to your requests for information and/or material; to provide you with the requested products, services and assistance, together with relevant after-sale services, including the data processing necessary to manage your electronic signature on contractual documentation (through graphometric signature on tablet); to duly comply with contractual obligations or to carry out pre-contractual activities on your request (for instance, by contacting you after you requested information) also through transmission of data by GME to our main sponsors network (i.e. dealers) or to third parties which GME has a contract with. 

In addition, GME processes your personal data to comply with laws and regulations relevant to the above specified activities and to exercise legal claims.

The provision of data for the purposes indicated above is necessary and the possible failure to provide such data will prevent GME from performing the above mentioned activities, for example from replying to your requests for information, material, from providing the products and services that you have requested. 

b) Additional purposes

With your consent, which is optional, GME uses your personal data for marketing purposes, notably to send you promotional newsletters, commercial or advertising communications, for direct sales, product surveys aimed at detecting Customers’ and Prospects’ satisfaction degree. 

Marketing activities are carried out through e-mail (newsletter), telephone, sms, MMS, chat, banners on the Site, Instant messaging, for social networks, paid search and programmatic campaigns on social media platforms and traditional mail - including sending you invitations for events attended or organised by GME or by our business partners. These communications also include offers on products, services and initiatives of GME’s commercial partnerr and your details may be passed onto these partners for their marketing purposes.  If you wish to opt out of this please email information@superbikeschool.co.uk

With your consent, which is optional, GME uses your personal data for profiling activities by collecting information on your preferences, habits, lifestyle, information on your interaction with GME, as well as the details of your purchases to create group and individual profiles ("profiling") and, if you have given consent for marketing activities, also sending you personalised promotional communications and offers. For these profiling activities we collect also the following information: information we obtain from comparison between information we have with data generally available to the public, for example social network profiles that you decided to make publicly available; information collected through cookies and other tracking technologies on the Site (please refer to our Cookie Policy, available on the home page of the Site (https://www.superbikeschool.co.uk); information collected through data detection systems on your motorcycle - as applicable and only in compliance with the Regulation. Tailored marketing activities are carried out by e-mail (newsletters), telephone, SMS and MMS messages, chats, banners on website, instant messaging, social networks and conventional mail, including invitations to events. 

The provision of data for the marketing and profiling purposes indicated above is optional and the possible failure to provide such data will not have any consequences on the possibility for you to purchase GME products and to receive the information, material, and services that you require, including post sale services.

We may also send you surveys for non-commercial purposes, being absolutely not mandatory, if you would like to help us evaluate and improve the quality of our customer service. We collect data from your survey responses (both service and product surveys) which on their own or if used together with other information we hold about you, may allow us to identify you.

With the account of some social networks, such as Facebook or Twitter, it will indeed be possible to login to our Site (the so-called "social login"). Personal data used for the functioning or registering on the Site are collected directly from you, save when you expressly asks for registration to the relevant login through social network at the first access or following the same if you are already registered. If you use these features, GME will store through the reference social network only the information coming from your profile of which you expressly authorised the sharing from the social network to GME. Matching the social network profile will appear on your relevant social network accounts, whose specific privacy policy should be referred to for further details. Ducati does not send any information about you to social networks.

2. Method of processing and legal grounds for processing

GME will process your personal data with and without the aid of electronic means, based on logics and procedures consistent with the purposes specified below and in compliance with the Regulation, including the aspects of confidentiality and security.

The data may be provided by you when registering at our points of sale on paper forms and/or on electronic means, acquired during visits to our schools, and / or provided during events, fairs and shows in which GME participates or organised by GME or commercial partners, or provided during your interaction with GME’s websites, internet and mobile applications.

In compliance with the Regulations, your personal data is used to update and rectify the information collected previously.

Your personal data is processed based on your consent, a legitimate interest of  GME for the performance of commercial activities, obligations arising from a contract entered into between you and GME, or legal obligations.

You have however the right to withdraw the consent given at any time, thus withdrawal however not affecting the legitimacy of any previous processing.

3. Recipients of your personal data

Personal data are accessed by our duly authorised personnel on a need-to-know basis and disclosed to third parties in the following cases: (i) when disclosure is required by applicable laws and regulations with respect to legitimate third party recipients of communications such as authorities and public bodies for their respective institutional purposes; (ii) in case of disclosure to third parties in the event of extraordinary transactions (e.g. mergers, acquisitions, sale of business, etc.).

Your personal data are also shared with our service providers, e.g. services of a technical and organisational nature for the purposes specified above, like independent contractors, even with associates, delivery, marketing and payment management companies. We provide these entities with only the data necessary to perform the agreed services and they act as Data Processors, based on the instructions received from our preferred partners. 

Finally, in order to provide you with the GME products and services you have requested (e.g. to ensure that you may obtain the same benefits worldwide), other companies in the California Superbike School Group, importers, dealers and our commercial partners may access your personal data under applicable privacy law.

5. Storage of personal data

Your personal data are kept by GME for the time being strictly necessary to pursue the purposes for which they are collected. Legal regulations impose obligations to keep documents for accounting and administrative purposes that according to the ordinary period of limitation of the contractual actions we will cancel after 10 years, starting from the moment of contract termination.

The personal data processed for the "further purposes" listed above, will be kept for a maximum of 5 years for non-Customers and 10 years for Customers and former Customers. Such a term is considered appropriate given the frequency of purchase of our products, which are deemed to be luxury goods. 

Once the retention period has expired, personal data will be automatically deleted or made anonymous.

Upon request to the Data Controller and Data Protection Officer, the Data Subject may receive detailed information on the storage times of personal data processed by GME pursuant to the Regulation.

6. Data Controller and Data Protection Officer

The Controller of personal data processing is: GME Motorcycles Limited, 18 The Ropewalk Nottingham, England,  

The Data Protection Officer can be contacted at the following email address: info@superbikeschool.co.uk.

7. Your rights

You can contact GME as the Data Controller or Data Protection Manager at the above addresses to get an updated list of our data processors (i.e. our service providers), of the parties to whom the data are disclosed and to exercise the following rights as per art. 15 et seq. of the Regulation; to get access to your data to verify their existence and other information related to them, to obtain their rectification or cancellation, to request data portability, to obtain limitation of processing and to lodge a claim to the Supervisory Authority (the Authority for the Protection of Personal Data).

In addition, you may, at any time, object to the processing of your personal data processed for direct marketing purposes and, if required by a particular situation, you may object to the processing of your personal data on the basis of  GME’s legitimate interest unless GME has prevailing legitimate reasons for proceeding with processing (e.g. the exercise or defence of a right in court).

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

DigiTickets

Examples include:

• dtAnonymousID

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie, not your name or contact details.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 25 August 2026