Privacy Policy
Privacy at a glance
Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, the Austrian Data Protection Act – DSG, and the Austrian Telecommunications Act – TKG 2021). This website is deliberately data-minimising: we use no analytics or tracking tools, no advertising cookies and no external font services.
Controller
The controller responsible for data processing on this website is:
Daniel Konrad Tulla
Natterer Straße 4/1
6162 Mutters, Austria
Phone: +43 664 2025040
Email: office@mountainbikemovement.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Your rights
Under the GDPR you have, in particular, the following rights: the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR).
If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, www.dsb.gv.at.
Hosting and server log files
This website is hosted by an external service provider (host). Any personal data collected on this website is stored on the host's servers. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.
Each time the website is accessed, the host automatically collects information in so-called server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing device, time of the server request and the IP address. This data is not merged with other data sources. It is collected to ensure secure and stable operation of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The log files are stored for a short period and then deleted.
Hosting provider: [please add the name and address of the hosting provider]
Cookies and local storage
This website uses no tracking, analytics or marketing cookies. Only your choice in the cookie notice (consent management) is stored in your browser's local storage so that the notice does not reappear on subsequent visits. This information remains solely on your device and is not transmitted to us or third parties. You can delete this storage at any time by clearing the site data in your browser. The legal basis for this technically necessary storage is § 165(3) TKG 2021 and Art. 6(1)(f) GDPR.
Consent management (cookie notice)
For content that is not strictly necessary – in particular external media (see YouTube) – we obtain your consent via our own cookie notice that runs locally on this website. No data is transmitted to external consent services. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.
Contacting us
If you contact us by email, telephone or via the contact form, we process the data you provide (e.g. name, email address, telephone number, content of your message) in order to handle your enquiry. The contact form on this website opens your own email program and sends the message directly to us – no data is processed or stored on a server of this website. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding). We store this data until your enquiry has been dealt with conclusively and no statutory retention obligations apply.
External media: YouTube
We embed videos from the YouTube platform in privacy-enhanced mode (youtube-nocookie.com domain). In addition, the videos are only loaded after an active click or your consent (two-click solution). Before you click, no connection is established to YouTube/Google servers and no data is transmitted.
As soon as you start a video, the provider may process data (in particular your IP address, information about your browser and device and, where applicable, cookies) and transmit it to Google servers, including in the USA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. For any transfer of data to the USA, Google relies on standard contractual clauses and the EU-US Data Privacy Framework. Further information can be found in Google's privacy policy: policies.google.com/privacy.
Fonts
This website uses only fonts stored locally on our server. When the pages are loaded, no connection to Google Fonts or other external font providers is established and no data is transmitted to third parties.
Social media references
In the footer you will find links to our profiles on LinkedIn, Instagram, Facebook and YouTube. These are simple links; no content or tracking pixels from these platforms are embedded. Only when you click one of these links are you taken to the respective platform, whose own privacy policy then applies.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser's address bar.
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies. Where statutory retention periods exist, the data is deleted once those periods have expired.
Validity and changes to this privacy policy
This privacy policy is currently valid. As this website develops or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.