Gravitas Nexus B.V. Privacy Policy

Last Updated: November 3, 2025

1. Introduction

Welcome to Gravitas Nexus. We are committed to protecting and respecting your privacy. Your trust is fundamental to our business.

This Privacy Policy explains how Gravitas Nexus B.V. We collect, use, store, share, and protect your personal data when you visit our website, contact us, or register for our ultra-luxury driving and networking experiences.

Gravitas Nexus B.V. is the Data Controller for your personal data under the General Data Protection Regulation (GDPR).

2. What Personal Data Do We Collect?

We may collect and process the following categories of personal data:

• Identity and Contact Data:

  • Full name.

  • Email address.

  • Phone number.

  • Company and job title.

  • Postal address.

• Event Participation and Verification Data:

  • Copy of your valid driver's license (for verification purposes).

  • Vehicle insurance details (if you are using your own vehicle).

  • Emergency contact information.

  • Payment and billing information (processed securely by our payment service providers).

• Sensitive Data (with your explicit consent):

  • Dietary requirements or allergies (for catering purposes during events).

  • Any relevant medical conditions that may affect your ability to drive safely.

• Technical and Website Usage Data:

  • IP address.

  • Browser type and operating system.

  • Cookie data and tracking technologies (please see our Cookie Policy).

  • Pages visited and time spent on our site.

• Communications Data:

  • Any information you voluntarily provide when you contact us via email, phone, or contact forms.

3. How and Why We Use Your Data (Legal Basis)

We only use your personal data when the law allows us to. The primary legal bases under GDPR for our processing are:

Purpose of ProcessingData UsedLegal Basis (GDPR)To Provide our ServicesIdentity, Contact, Event, PaymentPerformance of a Contract (Art. 6.1.b)(To organize and manage your event participation)To Verify Driving EligibilityDriver's LicensePerformance of a Contract (Art. 6.1.b) & Legal Obligation (Art. 6.1.c)(To ensure participants are legally licensed)To Manage Health & Safety at EventsDietary, Medical DataExplicit Consent (Art. 9.2.a)(To provide appropriate catering and ensure safety)To Respond to Your InquiriesContact, CommunicationsLegitimate Interest (Art. 6.1.f)(To provide effective customer service)(to respond to you)To Improve our Website and ServicesTechnical, Usage DataLegitimate Interest (Art. 6.1.f)(Analyzing site usage to enhance user experience)(to develop our business)Marketing and CommunicationsContact (Email)Consent (Art. 6.1.a)(Sending newsletters, offers, event information)(You may withdraw consent at any time)Legal and Tax ComplianceIdentity, Payment, BillingLegal Obligation (Art. 6.1.c)(Maintaining accounting records per Dutch law)

4. Who Do We Share Your Data With?

We do not sell your personal data. We only share it when strictly necessary to provide our Services or comply with the law:

• Event Partners: We may share necessary information (such as your name and dietary needs) with hotels, restaurants, vehicle providers, and other logistical partners involved in organizing the event.

• Third-Party Service Providers: We use trusted suppliers for business functions, such as payment processors, web-hosting providers, email marketing services, and event management software. These providers are contractually bound to protect your data and may only use it for the purposes we specify.

• Legal Advisors and Authorities: We may disclose your data to our professional advisors (lawyers, auditors) or to government bodies (police, tax authorities) if we are legally required to do so, or to protect our legal rights or the safety of others.

5. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place to protect your data, such as:

• Ensuring the destination country has been deemed "adequate" by the European Commission.

• Using Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized use, access, alteration, or disclosure. This includes SSL encryption on our website, strict access controls, and staff training.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Data related to events (including waivers) will be kept for the period necessary to defend against any legal claims (typically subject to statutory limitation periods).

• Tax and billing records will be kept for the period required by Dutch tax law (currently 7 years).

• Marketing data will be kept until you withdraw your consent.

8. Your Data Protection Rights (GDPR)

You have the following rights over your personal data:

• Right of Access: Request a copy of the personal data we hold about you.

• Right of Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure ("Right to be Forgotten"): Request the deletion of your data where it is no longer needed.

• Right to Restrict Processing: Request that we limit the use of your data.

• Right to Data Portability: Request that we transfer your data to you or a third party in a structured format.

• Right to Object: Object to our processing based on legitimate interests (including direct marketing).

• Right to Withdraw Consent: Withdraw your consent at any time (this will not affect the lawfulness of processing based on consent before its withdrawal).

To exercise any of these rights, please contact us at [Privacy Email, e.g., privacy@gravitasnexus.com].

9. Cookie Policy

Our website uses cookies. Some are essential for the site to function, while others help us analyze traffic and improve your experience. We will ask for your consent for non-essential cookies via a cookie banner. [Optional: For full details, please see our separate Cookie Policy].

10. Changes to This Privacy Policy

We may update this policy from time to time. The most current version will always be available on our website. We will notify you of any significant changes.

11. Contact and Complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact our Privacy Officer:

Gravitas Nexus B.V.

Attn: Privacy Officer

If you feel we have not addressed your concerns adequately, you have the right to lodge a complaint with the relevant data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (AP).