Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Austria eXtreme Triathlon Association
President Maria Schwarz
Lendplatz 34
8020 Graz
Austria

E-Mail: office@autxtri.com
Association Registration Number (ZVR): 206118759

Member of the Austrian and Styrian Triathlon Federation.

Contact for data protection inquiries:
Hugo Schwarz
E-Mail: office@autxtri.com

2. General Information

The protection of your personal data is very important to us. We process your data exclusively in accordance with the applicable legal regulations, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act (TKG 2021).

This Privacy Policy informs you about the most important aspects of data processing in connection with our website and association activities.

3. Categories of Personal Data Processed

We process personal data only to the extent necessary for the provision of our website, the organization of association activities, and communication with members, participants, and interested persons.

The following categories of data may be processed:

Master data (e.g. name, address)
Contact details (e.g. e-mail address, phone number)
Membership and contract data
Payment information
Communication data
Website usage data
IP address and technical access data

4. Purpose and Legal Basis of Processing

Personal data is processed for the following purposes:

Administration of memberships
Organization of events and competitions
Communication with members and interested parties
Sending newsletters
Providing and securing the website
Public relations and association communication
Compliance with legal obligations

Legal bases under the GDPR include:

Art. 6(1)(a) GDPR – consent
Art. 6(1)(b) GDPR – performance of a contract
Art. 6(1)(c) GDPR – legal obligation
Art. 6(1)(f) GDPR – legitimate interest

Our legitimate interest lies particularly in the secure operation of the website, efficient association management, and public communication.

5. Contact Requests

If you contact us by e-mail or via a contact form, the data you provide will be stored for the purpose of processing your request and any follow-up questions.

The processing is based on Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.

The data will be deleted once it is no longer required for the purpose for which it was collected and no legal retention obligations apply.

6. Membership and Event Registration

In the context of memberships or event registrations, we process personal data necessary for the organization and administration of association activities.

This may include:

Name
Date of birth
Contact details
Club affiliation
Race and result data
Payment information

The processing is carried out for the performance of a contract pursuant to Art. 6(1)(b) GDPR.

Legal retention obligations, especially under tax and association law, remain unaffected.

7. Newsletter

You may subscribe to our newsletter through our website or during events.

For this purpose, we require your e-mail address and your consent pursuant to Art. 6(1)(a) GDPR.

Subscription is carried out using the double opt-in procedure. After registration, you will receive an e-mail requesting confirmation of your subscription.

You may unsubscribe from the newsletter at any time via the unsubscribe link included in each newsletter or by contacting us directly.

8. Use of Mailchimp

We use “Mailchimp”, a newsletter service provided by Intuit Inc., USA, to send newsletters.

Personal data, especially e-mail addresses and usage data, may be transferred to servers in the United States.

The transfer of data is based on the Standard Contractual Clauses pursuant to Art. 46 GDPR.

Further information:
https://mailchimp.com/legal/privacy/

9. Hosting

Our website is hosted by an external hosting provider.

For the purpose of secure and stable website operation, the following data may be processed:

IP address
Date and time of access
Browser information
Operating system
Referrer URL
Accessed pages

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

10. Server Log Files

Our hosting provider automatically collects and stores information in so-called server log files.

These data are used exclusively to ensure technical operation, system security, and error analysis.

No merging of these data with other data sources takes place.

The data are stored for a maximum period of 14 days.

11. Cookies

Our website uses cookies to improve functionality and user experience.

Technically necessary cookies are stored on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

All other cookies, especially analytics and marketing cookies, are only used with your explicit consent pursuant to Art. 6(1)(a) GDPR.

You may change or withdraw your cookie settings at any time.

12. Google Analytics

Subject to your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited.

Google Analytics uses cookies to analyze the use of our website.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

IP anonymization has been activated.

Data may be transferred to servers of Google LLC in the United States. Such transfers are based on the Standard Contractual Clauses pursuant to Art. 46 GDPR.

You may withdraw your consent at any time.

Further information:
https://policies.google.com/privacy

13. Social Media

We maintain online presences on social networks and platforms to provide information about our association activities.

Personal data may be processed by the respective platform operators.

We currently maintain profiles on:

Facebook / Meta
Instagram
YouTube
LinkedIn

The use of these services is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

For detailed information, please refer to the privacy policies of the respective providers.

14. Embedded Third-Party Content

Our website may include content from third-party providers, such as:

YouTube videos
Vimeo videos
Google Fonts

Your IP address may be transmitted to these providers.

Such integrations are used either with your consent or based on our legitimate interest in providing an appealing and functional website.

15. Data Retention

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Under Austrian tax and association law, retention periods generally amount to seven years.

16. Rights of Data Subjects

You have the following rights under applicable law:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to withdraw consent
Right to object to processing

If you believe that the processing of your data violates data protection law, you may lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

https://www.dsb.gv.at/

17. Data Security

We implement appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Our security measures are continuously improved in line with technological developments.

18. SSL/TLS Encryption

This website uses SSL/TLS encryption to ensure secure transmission of confidential information.

19. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary to ensure ongoing compliance with legal requirements.

Last updated: May 2026