Privacy Policy
Privacy at a glance
Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, the Austrian Data Protection Act – DSG, and the Austrian Telecommunications Act – TKG 2021). This website is deliberately data-minimising: we use no advertising or tracking cookies and no external font services. For basic reach measurement we only use the cookie-free, server-based statistics of our host (IONOS WebAnalytics) – details below.
Controller
The controller responsible for data processing on this website is:
Daniel Konrad Tulla
Natterer Straße 4/1
6162 Mutters, Austria
Phone: +43 664 2025040
Email: office@mountainbikemovement.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Your rights
Under the GDPR you have, in particular, the following rights: the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR).
If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, www.dsb.gv.at.
Hosting and server log files
This website is hosted by an external service provider (host). Any personal data collected on this website is stored on the host's servers. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.
Each time the website is accessed, the host automatically collects information in so-called server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing device, time of the server request and the IP address. This data is not merged with other data sources. It is collected to ensure secure and stable operation of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The log files are stored for a short period and then deleted.
Hosting provider: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
Reach measurement (IONOS WebAnalytics)
For the statistical analysis of website usage we use IONOS WebAnalytics, a service of our host IONOS SE. The service works on the basis of the server log files and uses no cookies and no tracking code embedded in the pages. It evaluates in particular the pages accessed, the date and time of access, the volume of data transferred, the referring page (referrer), the browser and operating system used, and the shortened (anonymised) IP address. The data is not merged with other data and individual visitors are not identified.
The purpose of the processing is the needs-based design and statistical analysis of our website. The legal basis is our legitimate interest in data-minimising reach measurement pursuant to Art. 6(1)(f) GDPR. You may object to this processing at any time with effect for the future; please use the contact details given under “Controller”. The analysis is carried out on our behalf by IONOS on the basis of a data processing agreement (Art. 28 GDPR). For more information, see the IONOS privacy policy.
Cookies and local storage
This website uses no tracking, analytics or marketing cookies. Only your choice in the cookie notice (consent management) is stored in your browser's local storage so that the notice does not reappear on subsequent visits. This information remains solely on your device and is not transmitted to us or third parties. You can delete this storage at any time by clearing the site data in your browser. The legal basis for this technically necessary storage is § 165(3) TKG 2021 and Art. 6(1)(f) GDPR.
Consent management (cookie notice)
For content that is not strictly necessary – in particular external media (see YouTube) – we obtain your consent via our own cookie notice that runs locally on this website. No data is transmitted to external consent services. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.
Contacting us
If you contact us by email, telephone or via the contact form, we process the data you provide (e.g. name, email address, telephone number, content of your message) in order to handle your enquiry. The contact form on this website opens your own email program and sends the message directly to us – no data is processed or stored on a server of this website. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding). We store this data until your enquiry has been dealt with conclusively and no statutory retention obligations apply.
External media: YouTube
We embed videos from the YouTube platform in privacy-enhanced mode (youtube-nocookie.com domain). In addition, the videos are only loaded after an active click or your consent (two-click solution). Before you click, no connection is established to YouTube/Google servers and no data is transmitted.
As soon as you start a video, the provider may process data (in particular your IP address, information about your browser and device and, where applicable, cookies) and transmit it to Google servers, including in the USA. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. For any transfer of data to the USA, Google relies on standard contractual clauses and the EU-US Data Privacy Framework. Further information can be found in Google's privacy policy: policies.google.com/privacy.
Fonts
This website uses only fonts stored locally on our server. When the pages are loaded, no connection to Google Fonts or other external font providers is established and no data is transmitted to third parties.
Social media references
In the footer you will find links to our profiles on LinkedIn, Instagram, Facebook and YouTube. These are simple links; no content or tracking pixels from these platforms are embedded. Only when you click one of these links are you taken to the respective platform, whose own privacy policy then applies.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser's address bar.
Storage period
Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies. Where statutory retention periods exist, the data is deleted once those periods have expired.
Validity and changes to this privacy policy
This privacy policy is currently valid. As this website develops or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy.