Privacy Policy

This is a translation of our German privacy policy for your convenience. The German version at /datenschutz/ is the legally binding original.

Here we inform you which personal data we process in our club and for what purpose.

1. Your club membership

As a member of our club, you enter into a membership agreement with us. To fulfil the club's tasks under our statutes, we process the following personal data of you or your officials: name, title, function; date of birth; address (home or delivery address); phone, email. Membership registration and member administration run via the service Vereinsplaner (see "Online membership registration" below).

2. Your participation in our events

We would also like to inform you that photographs and/or films may be taken as part of our club events. These recordings may be used in various media (print, TV, online) and publications (print, online) of our club or the federation. This data is processed on the basis of our legitimate interest.

3. Your visit to our website

The club is responsible for the content of the website and is both the media owner and publisher. During your visit, we collect: the date and time of access, your IP address, the name and version of your browser, and information you send us yourself by email, for example via the free-trial form or the fan shop order (see "Free-trial request" and "Fanshop order" below).

This data is processed to provide this website, to further improve and develop it, and to respond to your inquiries. This website sets no cookies and uses no analytics or tracking tools. Only your browser's session storage is used, to remember whether you have loaded maps by clicking. This entry never leaves your device and is deleted when you close the tab (see "Cookies and browser storage" below).

We use the information you send us only for the stated purpose, keep it secure and do not pass it on to third parties, except to public authorities where the club is legally obliged to do so. You are not obliged to provide us with any data; without it, however, we cannot answer a request, for example about a free trial.

4. Disclosure of your personal data to third parties

We use third-party services to fulfil our contractual and legal obligations and to process your personal data securely, having ensured contractually that these providers also guarantee GDPR-level protection. This concerns the provider of our online registration and member administration, Vereinsplaner (vereinsplaner.com). For this website and our mailbox we use the following processors: Cloudflare, Inc. as website host (see "Hosting") and IONOS SE as email provider (see "Free-trial request"). Services that only receive data after your click (Google Maps) are described under "Plugins and tools".

5. Your rights regarding your personal data

You generally have the rights to information, rectification, erasure, restriction, data portability and objection. Contact us at: BC Salzburg Knights, Ignaz-Harrer-Straße 101/12, 5020 Salzburg. Phone: +43 664 434 82 70, email: office@salzburgknights.at. If you believe the processing of your data violates data protection law, please contact us, we will respond within 30 days at the latest. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at).

6. Copyright

The content of this website is protected by copyright. The information is intended for personal use only; any further use, including storage in databases, reproduction, any commercial use, or distribution to third parties (in full or in part), without the club's consent is prohibited.

7. Disclaimer

Given the technical nature of the internet, no guarantee can be given for the authenticity, accuracy and completeness of the information provided online, nor for the availability or operation of this website. Any liability for direct, indirect or other damages arising from the use or unavailability of this website's data and information is excluded to the extent legally permissible. The club accepts no responsibility for the content of linked external sites.

8. Gender note

All non-specific gender references on the club's website follow the unisex principle and therefore apply equally to all genders.

Detailed privacy information

Hosting

Cloudflare Pages. This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, and delivered via its global server network. When you visit, Cloudflare processes technically necessary data, mainly your IP address, date and time, the page requested, browser and operating system, and the referring page, to deliver the pages and protect them against attacks. This is based on our legitimate interest in a secure, fast and reliable website (Art. 6(1)(f) GDPR).

We have a data processing agreement (Data Processing Addendum) with Cloudflare. Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR), supplemented by standard contractual clauses. More information: cloudflare.com/privacypolicy.

Responsible party

The party responsible for data processing on this website is: BC Salzburg Knights, Ignaz-Harrer-Straße 101/12, 5020 Salzburg. Phone: +43 664 434 82 70, email: office@salzburgknights.at. Unless a more specific retention period is stated, your personal data remains with us until the purpose for processing no longer applies. If you make a justified request for erasure or withdraw consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax law).

Legal bases. Where you have consented, we process your data on the basis of Art. 6(1)(a) GDPR; where it is needed to perform a contract or for steps prior to one, Art. 6(1)(b); to fulfil a legal obligation, Art. 6(1)(c); and where applicable on the basis of our legitimate interest, Art. 6(1)(f) GDPR.

Data transfer to the USA and other third countries

We use services of companies based in the USA or with group links there (Cloudflare as host; Google Maps only if you use that service by clicking). Your personal data may be transferred to and processed in the USA. For companies certified under the EU-US Data Privacy Framework, the European Commission's adequacy decision applies (Art. 45 GDPR). US authorities may nevertheless be able to access this data in certain circumstances.

Your rights in detail

You may withdraw a given consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. You have the right to object to processing based on Art. 6(1)(e) or (f) GDPR for reasons arising from your particular situation, including profiling. You have the right to lodge a complaint with a supervisory authority (in Austria: the Österreichische Datenschutzbehörde, see section 5), the right to data portability, the right to information, rectification and erasure, and the right to request restriction of processing under certain circumstances (e.g. while a disputed accuracy is being verified). This site uses SSL/TLS encryption to protect the transmission of confidential content, recognizable by "https://" and the lock icon in your browser bar. We object to the use of contact data published under our legal disclosure obligation for sending unsolicited advertising.

Data collection on this website

Cookies and browser storage. This website sets no cookies, including no third-party cookies, and uses no analytics or tracking tools. Only your browser's session storage (sessionStorage) is used, for one entry: that you have allowed maps by clicking. This entry stays on your device, is not transmitted to anyone and is deleted when you close the tab. Storing it is strictly necessary for this function you requested (§ 165(3) Austrian Telecommunications Act 2021).

Server log files. Our host Cloudflare automatically collects information in server log files that your browser transmits: browser type and version, operating system used, referrer URL, time of the server request, and IP address. This data is not merged with other data sources and is processed under Art. 6(1)(f) GDPR.

Free-trial request (email). The free-trial form itself neither stores nor sends anything. It combines your entries (name and year of birth of the person who wants to train, email or phone, preferred group, optional message) into a text and opens your own email app with it. We only receive your message once you tap "Send" there.

We use this information solely to organise the free trial and answer your questions. The legal basis is Art. 6(1)(b) GDPR (steps prior to a possible membership at your request). For children under 14, we ask that a parent sends the request. We do not share the data with third parties and delete it once it is no longer needed for the request, unless a membership results.

Our mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as processor; your message is stored there.

Inquiry by email or phone. If you contact us by email, phone or fax, your inquiry including any personal data arising from it is stored and processed for the purpose of handling your request, and is not shared without your consent.

Fanshop order (email). The order form in the fan shop itself neither stores nor sends anything. It combines your entries (name, email address, billing address, optional note, and the items ordered with size and quantity) into a text and opens your own email app with it. We only receive your order once you tap "Send" there. The message travels via your own email provider; we have no influence on that provider's data processing or on the encryption of the transmission.

We use this information to process your order: accept the order, issue the invoice, check receipt of payment, hand out the goods at training and answer questions. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or steps prior to one at your request) and, for invoices and bookkeeping, Art. 6(1)(c) GDPR (statutory retention duties). Providing the data is necessary to place an order; without it we cannot invoice and hand out your order.

Order data needed for invoicing and bookkeeping is kept for 7 years (§ 132 Austrian Federal Fiscal Code, BAO) and deleted afterwards. Enquiries that do not lead to an order are deleted once handled. We do not pass on your data. We only tell the manufacturer of the group order what is ordered (item, size, quantity), but no names or addresses. We do not ship to you; goods are handed out at training. This website itself does not transfer data to countries outside the EU/EEA. Our mailbox is operated by IONOS SE (see "Free-trial request") as processor; your order is stored there.

Plugins and tools

Fonts (self-hosted). This site uses the typefaces Alfa Slab One and Barlow (Google Fonts), which are hosted on our own server. No connection is made to Google's servers.

Google Maps (after click). Maps from Google Maps are only loaded after you click "Load map". The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Doing so transfers, among other data, your IP address and browser data to Google, including servers in the USA, and Google may set cookies. The legal basis is your consent under Art. 6(1)(a) GDPR, which you give by clicking and which applies for the current browser session; it ends when you close the tab. Without a click, no data is transferred. More information: policies.google.com/privacy.

Links to social networks and map services. We link to our profiles on Instagram, Facebook and YouTube and to routes on Google Maps and Apple Maps. These are plain links: simply visiting our website transfers no data to these providers. Only when you click a link do you leave our website, and the respective provider's privacy policy applies.

Online membership registration. Membership registration works via an online form of the service Vereinsplaner (vereinsplaner.com), linked on the "Become a member" page. Your details are only processed once you open the link and submit the form there, for the purposes named under "1. Your club membership" (Art. 6(1)(b) GDPR).