PRIVACY
POLICY

This Privacy Policy describes how ESSEBI MEDICAL SRL ("we", "us", "our"), trading as TOTIM Racing, collects, uses and protects personal data submitted through this website, in accordance with EU Regulation 2016/679 (GDPR) and applicable Republic of San Marino data protection law.

1. Data Controller

ESSEBI MEDICAL SRL
Strada Campo del Fiume 84, 47896 Faetano
Republic of San Marino
Email: customer@totimracing.com

2. Data Collected

When you submit the contact form we collect:

• First name and last name
• Email address
• Phone number (optional)
• Racing series / discipline
• Message content

We do not collect sensitive data, payment data, or data from minors under 16.

3. Purpose and Legal Basis

Your data is processed exclusively to:

• Respond to your enquiry (legal basis: your consent, Art. 6(1)(a) GDPR)
• Provide pre-contractual information about our products (legal basis: Art. 6(1)(b) GDPR)

We do not use your data for marketing without separate explicit consent.

4. Data Retention

Data submitted via the contact form is retained for a maximum of 24 months from the date of your enquiry, or until you request deletion.

5. Data Sharing

We do not sell or share your personal data with third parties, except:

• Aruba S.p.A. — email delivery service, acting as data processor. Data stored and processed within the EU (Italy).
• Where required by law or competent authority.

6. Your Rights

Under GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (without affecting prior processing)

To exercise any right, contact us at customer@totimracing.com. We will respond within 30 days.

7. Cookies

This website uses only a technical session cookie (PHPSESSID) strictly necessary for the secure submission of the contact form. No tracking or profiling cookies are used.

8. Security

We implement appropriate technical measures including CSRF token protection and HTTPS encryption to protect your data in transit and at rest.

9. Changes to This Policy

We may update this policy periodically. The date below reflects the most recent revision. Continued use of the site after changes constitutes acceptance.

Last updated: May 2026