VMS / MEMBERS
Privacy in the member area
These notices supplement the general drivevms.com privacy notice for the optional member area. The controller is Benjamin Kern, Ludwigstr. 13, 64342 Seeheim-Jugenheim, Germany, info@drivevms.com.
After you select sign-in, we redirect you to Discord. The identify permission confirms your stable Discord user ID and current username. We use only the ID and username from basic profile metadata. We do not load or adopt personal avatar images. We do not request your email address, messages or contact lists, and do not receive your Discord password. Discord also processes sign-in under its own privacy policy. A one-time proof key (PKCE) and a random value bound to your browser session protect the association. Access tokens are used only for this check and are not stored as profile data.
Your own profile contains the previously linked names and, where available, iRacing IDs, plus optional gamertag, racing classes, car preferences, preferred number, league/endurance interest and Twitch channel details. A selected complete application can supply missing details after its account association is checked. Applications are not imported in bulk, and no Discord roles or Vault access are granted automatically.
Profile management is optional and based on your consent under Article 6(1)(a) GDPR. You can use VMS and the community without this area. Changes are initially stored privately. A public profile version requires separate optional consent and specific content approval; a Twitch link has its own consent. Any existing consent for private team birthday greetings remains separate. Internal IDs, application documents and birthday details are excluded from the public preview.
Profile management runs on the existing ALL-INKL webhosting. Profiles and server-side session data are held in a protected area outside the public website. After signing in, you can maintain only your own linked profile. The responsible operator handles verified associations, corrections and deletion requests. The application uses no analytics or marketing services; technical hosting connection data is covered by the general privacy notice.
The necessary __Host-vms_member cookie supports the sign-in you explicitly request and protects form actions (Section 25(2)(2) TDDDG). It is a browser session cookie and is not used for advertising. Sign-in expires after 30 minutes without activity and after eight hours at the latest. A one-time sign-in attempt expires after five minutes. Signing out ends the local session.
We retain necessary profile information while you wish to use profile management and delete it after withdrawal or when its purpose ends through the existing manual administration, subject to legal duties or necessary legal claims. Application documents keep their existing retention rules; a login does not archive them indefinitely. Contact info@drivevms.com to withdraw consent for the future or request access, correction, deletion and, where applicable, a copy of your data. The general privacy notice explains further rights and complaints to a supervisory authority.