1. General

The security and confidential treatment of your data are important and serious concerns for Schachermayer GmbH; therefore, only state-of-the-art security standards are used. We treat the data entrusted to us as well as the data collected with strict confidentiality and handle it responsibly. Therefore, we inform you in accordance with the relevant data protection regulations (GDPR, Data Protection Amendment Act 2018).

2. Collection and processing of personal data

Your personal data is processed for the purpose of carrying out cycling activities.

The following personal data is processed for this purpose:

1. First and last name
2. Date of birth
3. Height
4. Contact details (address, email address, telephone contact details)
5. Possibly, the name of the club
6. Possibly, the name and contact details of the legal representative

Each time you access our website, usage data is transmitted by the respective internet browser and stored in log files, so-called server log files. This data includes:

1. IP address of the accessing computer
2. User identification on the platform
3. Name of the page accessed
4. Date and time of access
5. The origin URL from which the user came to the accessed page
6. Session identification number

This website is hosted on Google Cloud, and log files and IP addresses are stored there. For more information on the privacy policy, please visit https://policies.google.com/privacy?hl=en.

3. Purpose of data collection

The main purpose that Schachermayer pursues when collecting personal data is to enable you to use the service safely, efficiently, and personally. Personal data is used for the following purposes:

1. Contact and address management
2. Communication with users of the racetrack
3. Scheduling appointments Planning appointment assignments and personnel deployment
4. Safeguarding the rights of data subjects

This data comes partly from the information you provide and, if necessary, we collect additional data from publicly accessible registers.

All data collection related to the proper fulfillment of the contract is based on Art. 6 (1) b GDPR. For sending our newsletter and information, etc., we need your consent, and the processing of your data for this purpose is based on Art. 6 (1) a GDPR. Schachermayer commits to treating your data in accordance with the principles of data protection in accordance with applicable laws.

4. Transfer of data, data transfer to third countries

Schachermayer does not disclose personal data to third parties unless the data subject has expressly consented, or Schachermayer is legally obliged to disclose this data, or the data transfer to external service providers is necessary for the delivery or processing of the order.

The data is only transmitted to the following companies or institutions based on the legal bases mentioned for the stated purposes:

1. Internally within the group: Data processing is centrally managed by the head office for all group companies.
2. Externally within the group: if necessary, external service providers for the processing of the order/contractual relationship, such as shipping service providers, manufacturers (for extended warranties, etc.), suppliers (product adaptation, optimization, etc.), IT service providers.

We use so-called cloud solutions for data storage. It cannot be ruled out that the cloud provider stores data in third countries. However, we only commission cloud providers for data storage who demonstrably comply with all data protection requirements and can provide certifications such as EU-US Privacy Shield.

5. Newsletter

When you subscribe to the newsletter, you transmit the personal data mentioned above and give Schachermayer the right to contact you by email. The data stored as part of the newsletter registration is used exclusively for the newsletter and is not passed on to third parties.

If you unsubscribe from the newsletter – you will find the link for this in every newsletter at the very bottom – all data stored with the newsletter registration will be deleted.

For newsletter distribution, Schachermayer uses the web-based marketing tool from Brevo GmbH, Köpenicker Str. 126, 10179 Berlin. This company processes the data provided by you for newsletter reception (email address).

Newsletter Evaluation

When you receive a newsletter via Brevo, information such as IP address, browser type, and email program is stored to provide us with information about the performance of our newsletter. Based on this data, it can be determined whether the email has been received, opened, and whether links have been clicked.

You can find information about data protection at Brevo on https://www.brevo.com/de/legal/privacypolicy/ or https://www.brevo.com/de/informationen-newsletter-empfaenger/.

6. Cookies and Plugins

Schachermayer uses cookies to customize and optimize the online experience and online time. Cookies contain information about previous accesses to the respective server or information about which offers have been accessed.

Cookies are not used to run programs or load viruses onto the user’s computer. The main purpose of cookies is to provide an offer tailored to the user and to make the use of the service as comfortable as possible.

You will be asked on your first visit to the website which of these types of cookies you would like to allow, and this decision will be saved. To change the settings for cookies and tracking, please click here.

You always have the option to reject the setting of cookies in general. This is usually done by choosing the appropriate option in the settings of the browser used or by additional programs. Details can be found in the help function of the browser used by the user. If you decide to disable cookies, this may reduce the scope of services and may have a negative impact on the use of the services.

7. Analysis Tool

Matomo

Schachermayer uses the open-source web analysis service Matomo on its websites, which is used for statistical evaluation and analysis of website usage. Various log files are recorded, such as IP address, referrer, browser used, and the like. When analyzing with Matomo, IP anonymization is used, whereby the IP address is shortened before the analysis so that it can no longer be uniquely assigned. Matomo is hosted on the servers of Maxcluster GmbH, so all analysis data remains with Schachermayer, and the transfer of the collected data to third parties does not occur.

The data processing is based on Art. 6 (1) sentence 1 lit. a GDPR. Schachermayer pursues the legitimate interest in optimizing the website for external presentation.

Learn more about data protection at Matomo: https://matomo.org/privacy-policy/

8. Google Maps

This website uses Google Maps for displaying interactive maps and creating directions. Google Maps is a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (starting) address entered within the route planner function, may be transmitted to Google in the USA. When you visit a webpage of our internet presence that contains Google Maps, your browser establishes a direct connection to Google’s servers. The map content is transmitted directly to your browser by Google and integrated into the webpage. Therefore, we have no influence on the extent of data collected by Google in this way. According to our knowledge, these are at least the following data:

• Date and time of the visit to the respective webpage,
• Internet address or URL of the visited webpage,
• IP address, (starting) address entered during route planning.

If you do not want Google to collect, process, or use data about you through our internet presence, you can disable JavaScript in your browser settings. In this case, however, you cannot use the map display.

For the purpose and scope of data collection and the further processing and use of data by Google, as well as your related rights and privacy protection settings, please refer to Google’s privacy policy (https://policies.google.com/privacy?hl=en).

9. Social Plugins

On the Schachermayer website, elements of social media services are integrated to display images, videos, and texts. By visiting pages that include these elements, data is transmitted from your browser to the respective social media service and stored there. Schachermayer has no access to this data.

For more information on the purpose and scope of data collection and processing by social media services, refer to the privacy policy. There, you will also find additional information about your rights and privacy protection settings:

For YouTube, Google’s privacy policy applies: https://www.google.com/intl/en/policies/privacy

Facebook Data Policy: https://www.facebook.com/about/privacy

If you do not want Facebook or YouTube to directly associate the data collected through our website with your profile in the respective service, you must log out of the corresponding service before activating the plugins.

10. Data Storage, Data Access, and Data Security

Your data will be stored until the termination of the business relationship or until the expiration of applicable warranty, limitation, and legal retention periods. Additionally, they will be stored until the termination of any legal disputes in which this data is needed as evidence.

The processed data can be accessed by employees of Schachermayer GmbH involved in the processing and the respective process.

The data is protected by access control, access control, access control, input control, disclosure control, order control, availability control, separation control. Security measures are continuously revised according to technological developments.

11. Your Rights

According to the relevant legal provisions, you, as the data subject, have the following rights and remedies. To exercise your rights and for questions, please contact:

Schachermayer GmbH Data Protection Coordinator Schachermayerstraße 2, 4020 Linz datenschutz@schachermayer.com

• Right to information (Art. 15 GDPR) § 43f Data Protection Amendment Act 2018: You have the right to obtain information about whether personal data concerning you is processed and, if so, what personal data about you is processed. You also have the right to be informed about the purposes of the processing, its legal basis, the categories of personal data, disclosure to third parties, and the storage period.
• Right to correction and deletion: You have the right to demand the immediate correction of inaccurate personal data concerning you or, taking into account the purposes of the data processing, the completion of incomplete personal data, as well as the deletion of your data.
• Right to restrict processing: You have the right to restrict the processing of all collected personal data. From the time of the restriction request, this data will only be processed with individual consent or for the assertion and enforcement of legal claims.
• Data portability (Art. 20 GDPR): You have the right to request the unhindered and unrestricted transmission of collected personal data to a third party.
• Right to object (Art. 21 para. 1 GDPR): For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you, which either is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, and has been assigned to the controller, or is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. The controller may no longer process the personal data, unless he can prove compelling legitimate reasons for processing that outweigh the interests, rights, and freedoms of the data subject or the processing serves to assert, exercise, or defend legal claims. You can object to the processing of data for the purpose of direct advertising at any time with effect for the future.

If you take action to enforce your rights listed above, Schachermayer GmbH must respond immediately, but no later than one month after receipt of your request for the requested action or comply with the request.

Your contact person:

Schachermayer GmbH
Data Protection Coordinator
Schachermayerstraße 2, 4020 Linz
datenschutz@schachermayer.com

12. Complaint to the Data Protection Authority

For requests and complaints regarding the violation of the right to information, violation of the rights to confidentiality, rectification, or deletion, the Data Protection Authority is responsible:

Austrian Data Protection Authority
Wickenburggasse 8, 1080 Vienna
Phone: +43 1 52 152-0
dsb@dsb.gv.at