PRIVACY POLICY

Information on the Processing of Your Personal Data According to Article 13 GDPR

IMPORTANT: This document only serves the purpose to give comprehensive data protection information also to non-German speakers. The contract language for all businesses with Austria Climbing Event GmbH is German. In case of legal confrontation, the German privacy policy is the legal baseline.

General

We are pleased about your visit to our website. The protection of your personal data is a matter of great concern to us. We strictly adhere to the legal provisions of the EU General Data Protection Regulation, the Austrian Data Protection Act, and other applicable legal regulations for the protection, lawful handling, and confidentiality of personal data. Below, we would like to inform you about the processing of your data in connection with your visit and use of the website.

Responsible Entity for the Website According to the GDPR

Austria Climbing Event GmbH

Matthias-Schmid-Straße 12E

6020 Innsbruck, Austria

Phone: +43 512 552320

Fax: +43 512 552320-25

Email: office@austriaclimbing.com

Website: www.austriaclimbing.com

Purposes of Data Processing, Legal Bases, Deletion Periods, and Recipients of Website Data

3.1 Logging of Activities on Our Website (Logfile Data Processing):

your visit to our website, we collect and store access data in log files (known as log files or access logs), to ensure the permanent functionality and accessibility of the website. In this context, we process the following data or information

IP address
Date and time of access
Websites from which you have reached our site (referrer URL)
Operating system
Name of the internet service provider
Product and version information of the browser used
Amount of data transferred, loading time

The legal basis for data processing is our legitimate interest according to Art 6 Para 1 lit f GDPR. This lies in ensuring the functionality, security, and accessibility of the website for all visitors, and, if necessary, in the collection, defense, and assertion of legal claims.

You have the right to object to this data processing (data subject's right to object to data processing in the legitimate interest according to Art 21 Para 1 GDPR). In this case, we will only process your data if there are compelling legitimate grounds for further processing on our part.

A direct inference to your identity is not possible based on the information.

Data transfers: As a rule, we only pass on your data collected based on the use of our website as far as it is absolutely necessary for the fulfillment of the purposes presented (e.g., maintenance of the website via external service providers). However, we may also be legally or officially obliged to pass on data to third parties (e.g., data transfer to law enforcement authorities).

Storage duration: The data will be automatically deleted after the aforementioned purposes have been achieved. Logfile data is retained for a period of 30 days from the date of the website visit.

3.2 Cookies

On our website, we use cookies. Cookies are small files that are stored either temporarily in your internet browser's cache during your browser session (session cookies) or for a set duration on your hard drive (permanent cookies). Cookies enable recognition so that faster and more targeted content can be provided on your future visits to our website, tailored to your needs and preferences.

We generally obtain your explicit consent for the use of cookies via a cookie banner (legal basis Art. 6 Para. 1 lit. a GDPR). Cookies that are technically necessary for the operation of the website (and thus must be set initially) are based on the legal ground of legitimate interest Art. 6 Para. 1 lit. f GDPR.

Consents granted can be revoked at any time without stating reasons, effective for the future. To do this, please activate the cookie banner by clicking on the icon in the left browser window and select the appropriate settings.

You have the right to object to data processing in the legitimate interest (data subject's right to object according to Art. 21 Para. 1 GDPR). In this case, we will only process your data if there are compelling legitimate grounds for further processing on our part.

Overview of Used Cookies:

Technically Necessary Cookies

Purpose: These technically necessary cookies secure basic functions of the website.

Name: CookieConsent

- Purpose: Stores your consent to the use of cookies.
- Duration: 1 year,
- Type: HTML,
- Provider: Website

Name: fe_typo_user

- Purpose: Associates your browser with a session on the server. This only affects the content you see and is not evaluated or further processed by us.
- Duration: Session,
- Type: HTTP,
- Provider: Website

Marketing and Analysis Cookies

Name: dc_gtm--property-id–

- Purpose: Used by DoubleClick (Google Tag Manager) to identify visitors by age, gender, or interests.
- Duration: 2 years,
- Type: HTML,
- Provider: Google

Name: _gcl_au

- Purpose: Used by Google AdSense to experiment with advertising efficiency on websites.
- Duration: 3 months,
- Type: HTML,
- Provider: Google

Name: AMP_TOKEN

- Purpose: Contains a token that can be used to retrieve a Client-ID from the AMP Client-ID service. Other possible values indicate opt-out, ongoing request, or an error in retrieving a Client-ID from the AMP Client ID Service.
- Duration: 1 year,
- Type: HTML,
- Provider: Google

Youtube Cookies

Name: YouTube

- Purpose: Establishes a connection to YouTube to display videos.
- Duration: none,
- Type: Connection,
- Provider: YouTube

In the following, we inform you about the processing purposes and backgrounds associated with each cookie:

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. As a company based in the European Union, we cooperate with Google's subsidiary, Google Ireland Limited (hereafter "Google").

The information generated by the cookie about your use of the website is transmitted to and stored by Google on servers.

On our behalf, Google uses this information to evaluate your use of our website, compile reports on website activities, and provide other services related to website usage and internet usage to the website operator. Usage profiles of the visitors to our website can be created from the transmitted data.

Please note that we cannot exclude the possibility that your personal data may be transferred to the USA. There is an adequacy decision, "Adequacy decision for the EU-US Data Privacy Framework," regarding this.

We obtain your consent for data transfer (legal basis Art 6 Para 1 lit a in conjunction with Art 49 Para 1 lit a GDPR), which you grant us via the cookie banner. No data is transmitted to Google before consent is given. The granting of consent is voluntary and can be revoked at any time with effect for the future. The use of Google services is not possible without the granting of consent as outlined.

You can access the cookie banner by clicking on the icon in the left browser window.

For more information regarding terms of use and privacy for Google Analytics, please visit:

http://www.google.com/analytics/terms/de.html or https://policies.google.com/privacy?hl=de.

DoubleClick

We use the tool Doubleclick by Google on our website, a service provided by Google LLC. As a company based in the European Union, we cooperate with Google's subsidiary, Google Ireland Limited (hereafter "Google").

Doubleclick by Google uses cookies to present you with advertisements relevant to you. A pseudonymous identification number (ID) is assigned to your browser to check which advertisements have been displayed in your browser and which have been accessed. The cookies do not contain personal information. The use of DoubleClick cookies allows Google and its partner websites to display advertisements based on previous visits to our or other websites on the internet.

You can access the cookie banner by clicking on the icon in the left browser window.

For information on how Google handles user data, please see Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Tag Manager

We utilize the "Google Tag Manager" service as a central means of data collection, acquisition, and forwarding of personal data related to website visits. This service, provided by Google LLC, is used in cooperation with Google Ireland Limited (hereinafter "Google"), a subsidiary of Google based in the European Union.

The Google Tag Manager service consolidates the applications we use into a central management interface, which facilitates the administration of website applications for us. The use of Google Tag Manager necessitates setting a Google cookie and transmitting data to Google (the information generated by the cookie about the use of the website is transferred to and stored on Google's servers).

Please be aware that we cannot rule out the possibility of your personal data being transferred to the USA. There exists an adequacy decision, "Adequacy decision for the EU-US Data Privacy Framework," in this regard.

For data transmission, we obtain your consent (legal basis Art 6 Para 1 lit a in conjunction with Art 49 Para 1 lit a GDPR), which you provide to us via the cookie banner. No data is transmitted to Google before consent is given. The granting of consent is voluntary and can be revoked at any time with future effect. The use of Google services is not possible without the provision of consent as outlined.

You can access the cookie settings via the setup button in the left browser window by clicking on the icon.

For more information on how Google handles user data, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google AdSense

Our website uses the "Google Ads" online advertising program and, as part of Google Ads, the conversion tracking, both services of Google LLC. As a company based in the European Union, we collaborate with Google's subsidiary, Google Ireland Limited (hereinafter "Google").

We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our goal is to show you advertising that is of interest to you, to make our website more interesting for you, and to ensure a fair calculation of the incurred advertising costs.

The conversion tracking cookie is set when a user clicks on an advertisement placed by Google. These cookies are small text files that are stored on your end device. These cookies typically lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the advertisement and has been redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.

For details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites, please visit: https://policies.google.com/technologies/partner-sites

If you do not wish to participate in the tracking, you can block this use by disabling the Google Conversion Tracking cookie in your internet browser under "User Settings." You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising according to Art. 6 Para. 1 lit. f GDPR.

You can access the cookie banner by clicking on the "Cookie Settings" icon in the left window of your browser.

For more information about Google's privacy policy, please visit: https://www.google.de/policies/privacy/

You can permanently opt-out of cookies set by Google Ads Conversion Tracking by downloading and installing the browser plugin available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or only be available to a limited extent if you have disabled the use of cookies.

Where legally required, we have obtained your consent for the processing of your data as presented above in accordance with Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "Cookie Consent Tool" provided on the website, or alternatively follow the above-described method to make an objection.

YouTube

We have embedded videos on our website from "YouTube," which is part of Google Inc. As a company based in the European Union, we cooperate with Google's subsidiary, Google Ireland Limited (hereinafter referred to as "Google").

When you play videos, a direct connection between your browser and YouTube is established. Therefore, we have no influence over what data the plugin collects and transmits to YouTube, nor over the subsequent data processing by YouTube. Through this integration, Google may set cookies if you have given your consent via the Google cookie banner. For more detailed information on data processing within YouTube, please visit https://policies.google.com/privacy?hl=de&gl=de.

When using YouTube services, data is automatically transmitted to the company Google Ireland Limited (Google). Google then uses this data for its own purposes (advertising, market research, service development, etc.). Please note that we cannot rule out the possibility that your personal data may be transferred to the USA. In this regard, there is an adequacy decision known as the "Adequacy decision for the EU-US Data Privacy Framework."

We obtain your consent for data transmission (legal basis Art 6 Abs 1 lit a in conjunction with Art 49 Abs 1 lit a GDPR), which you provide to us via the cookie banner. No data is transmitted to Google before consent is given. The granting of consent is voluntary and can be revoked at any time with effect for the future. The use of Google services is not possible without the provision of the consent outlined.

You can access the cookie settings by clicking on the icon in the left window of your browser.

For further information on Google's data protection policies, please visit: https://policies.google.com/privacy?hl=de.

Google Maps

We use the "Google Maps" service on our website. Google Maps is an application of Google. As a company based in the European Union, we collaborate with Google's subsidiary, Google Ireland Limited (hereinafter "Google"). The service facilitates the easier localization of our company.

For data transmission, we obtain your consent (legal basis Art 6 Para 1 lit a in conjunction with Art 49 Para 1 lit a GDPR), which you provide to us by clicking on the cookie banner icon in the left browser window. No data is transmitted to Google before consent is given. The granting of consent is voluntary and can be revoked at any time with future effect. The use of Google services is not possible without the provision of consent as outlined.

When using the Google Maps services, data is automatically transmitted to Google Ireland Limited (Google). Google then uses the data for its own purposes (advertising, market research, service development, etc.). For information on data processing by Google, see https://policies.google.com/privacy?hl=de. Please be aware that we cannot rule out the possibility of your personal data being transferred to the USA. There exists an adequacy decision, "Adequacy decision for the EU-US Data Privacy Framework," in this regard.

You can access the cookie settings by clicking on the icon in the left browser window.

For more information on Google's privacy policy, please visit: https://policies.google.com/privacy?hl=de.

4. Volunteer Applications

On our website, there is the possibility to apply as a volunteer. The data protection information for this can be found here.

5. IFSC Climbing World Cup 2024

5.1 Responsible Parties for the IFSC Climbing World Cup 2024 in terms of the GDPR

For the IFSC Climbing World Cup 2024, Austria Climbing Event GmbH is responsible for the website (as described above), as well as the organization and execution. For the follow-up to the IFSC Climbing World Cup 2024 (especially public relations, promotion of subsequent events), both the Austria Climbing Event GmbH and the Climbing Association of Austria (KVÖ) are independent responsible parties.

You can reach us at:

Austria Climbing Event GmbH

and

Kletterverband Österreich (KVÖ)

Matthias-Schmid-Straße 12E

6020 Innsbruck

Tel: +43 512 552320

Fax: +43 512 552320-25

Email: office@austriaclimbing.com

5.2 Ticketing

On our website, you can purchase tickets for the IFSC Climbing World Cup 2024. For the sale of a ticket, we use the service of Ticketspot UG (94151 Mauth, Germany). We have concluded a corresponding data processing agreement with them. When ordering via the ticket shop, you provide your personal data to them. This data is used to process the orders (collection of orders, sending of tickets, invoicing/accounting, etc.).

Your email address is used to send you the ticket.

As Austria Climbing Event GmbH, we subsequently process the data for the handling of the event and accounting.

The legal basis for these data processing activities is Art. 6 Para. 1 lit. b GDPR (pre-contractual actions, contract, performance of the contract, fulfillment of post-contractual obligations), legal obligation Art. 6 Para. 1 lit. c GDPR (compliance with legal retention obligations), and possibly legitimate interest Art. 6 Para. 1 lit. f GDPR (collection, assertion, and defense of legal claims; in case of credit checks when necessary, protection of the property/assets of the responsible party). You have the right to object to this data processing (data subject's right to object to data processing for legitimate interest according to Art. 21 Para. 1 GDPR). We will only process your data in this case if there are compelling legitimate grounds for further processing on our part.

Data Transfers: The collected personal data is forwarded to third parties as far as it is absolutely necessary for the processing of the order. There may also be data transfers to credit agencies by Ticketspot if a credit check is deemed necessary.

Storage Duration: Your data is generally stored only for the duration necessary for the purposes of processing, and beyond that as long as we are subject to legal data retention obligations. In accordance with tax law requirements, relevant records/documents are retained for a period of 7 years from the end of the calendar year to which they relate.

Payment Processing:
We offer various payment options through PayPal Checkout (PayPal, credit card, direct debit, invoice). These payment options are processed by the service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") - for this purpose, we forward your personal data for the purpose of payment processing to PayPal.

The legal basis for data processing is Art. 6 Para. 1 lit. b GDPR - the data processing is necessary for the performance of the contract (processing of payment). The provision of personal data (payment information) is required for the purchase of our tickets, without which a purchase is not possible.

Please note that PayPal, as a payment service provider, may conduct credit checks on its own initiative and reserves the right to pass on data to third parties. Information on the processing of your personal data by the payment service providers can be found at https://www.paypal.com/at/webapps/mpp/ua/privacy-full?locale.x=de_DE#1-rev

We rely on the legitimate interest Art. 6 Para. 1 lit. f GDPR (collection, assertion, and defense of legal claims; in case of credit checks when necessary, protection of the property/assets of the responsible party). You have the right to object to this data processing (data subject's right to object to data processing for legitimate interest according to Art. 21 Para. 1 GDPR). We will only process your data in this case if there are compelling legitimate grounds for further processing on our part.

Storage Duration:
Your data is generally stored only for the duration necessary for the purposes of processing, and beyond that as long as we are subject to legal data retention obligations. In accordance with tax law requirements, relevant records/documents are retained for a period of 7 years from the end of the calendar year to which they relate.

Visitor Survey:
As part of the purchase of a ticket for the IFSC Climbing World Cup 2024, visitors are informed that the email address provided will be processed by Austria Climbing Event GmbH for sending a visitor survey about this event. The survey is then evaluated, and the results are used to improve our future events. Participation is voluntary and is not a prerequisite for participation in the World Cup.

For this, we rely on the legitimate interest Art. 6 Para. 1 lit. f GDPR (direct marketing: customer survey to improve the service). You have the right to object to this data processing (data subject's right to object to data processing for legitimate interest according to Art. 21 Abs. 2 GDPR).

Data Transfers:
For the evaluation of this survey, we use a research institute. We have concluded a corresponding data processing agreement with them.

Storage Duration:
Your data is generally stored only for the duration necessary for the purposes of processing. The evaluated data are anonymized.

5.3 Photos / Videos / TV / Livestream

It is to be noted that photos and videos may be taken at the event venue for the purposes of documenting and reporting on the event (e.g., via the KVÖ press portal, through social media channels like Instagram, Twitter, Facebook, websites of the responsible parties), published, as well as livestreams and TV broadcasts created and published for the purposes of public relations and to facilitate low-threshold accessibility for non-participants/reporting. The live broadcast is carried out by us as a YouTube stream. It is to be assumed that our partners and other TV stations will further process these for editorial purposes.

YouTube Stream:

For streaming, we use "YouTube," which belongs to Google Inc. As a company based in the European Union, we cooperate with the Google subsidiary Google Ireland Limited (hereinafter "Google").

Therefore, data is transmitted to Google Ireland Limited (Google). Please note that we cannot rule out the possibility that your personal data may be transferred to the USA. There is an adequacy decision, "Adequacy decision for the EU-US Data Privacy Framework," regarding this.

For further information on Google's data protection provisions, please visit: https://policies.google.com/privacy?hl=de.

The legal basis for data processing is our legitimate interest Art. 6 Para. 1 lit. f GDPR (documentation of the event, reporting, public relations, and facilitating low-threshold accessibility for non-participants, as well as possibly collecting, asserting, and defending legal claims). You have the right to object to this data processing (data subject's right to object to data processing for legitimate interest according to Art. 21 Para. 1 GDPR). We will only process your data in this case if there are compelling legitimate grounds for further processing on our part.

You have the right to object to this data processing (data subject's right to object to data processing for legitimate interest according to Art. 21 Para. 1 GDPR). We will only process your data in this case if there are compelling legitimate grounds for further processing on our part.

Storage Duration:
Your data is stored for the duration necessary for the purposes of processing. Permanent archiving is performed for the documentation of athletic performances.

6. Automated Decision-Making Including Profiling

We do not engage in automated decision-making or profiling measures (evaluation of certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or change of location).

7. Data Transfer and General Recipients

We generally only pass on the data we collect through the use of our website as far as it is absolutely necessary for the fulfillment of the stated purposes (operation and maintenance of the website via external service providers, data transfer to email providers in the processing of communication). However, we may also be legally or officially obliged to pass on data to third parties (e.g., data transfer to law enforcement authorities).

In all data transfers, we ensure that only the absolutely necessary information is transmitted and comply with the data protection requirements for data transfer (e.g., strict binding instructions for processors via Article 28 contracts, obligation to confidentiality and secrecy, obligation to maintain an adequate level of protection in the processing of personal data).

Details on data transfers and recipients can be found in the explanations of the processing purposes (see section 3 of this privacy policy).

8. General Data Retention Duration

Your data is stored only as long as it is technically and organizationally necessary to achieve the stated purposes, as well as to fulfill the legal obligations applicable to us. If necessary, we may also retain your personal data on the legal basis of legitimate interest (e.g., collection, assertion, and defense of legal claims) for certain periods. When determining these periods, we ensure that your rights and freedoms are not infringed. If data retention is no longer necessary, we will promptly delete your data.

Details on the storage/retention duration can be found in the explanations of the processing purposes (see above).

9. Rights of Data Subjects / Your Rights to Protect Your Personal Data

You have a number of rights regarding the personal data we process about you. All these rights can be exercised free of charge and without formal requirements (by email, phone, fax, or mail), possibly after proving your identity, using the contact details provided. Your rights in detail:

Right to Access:
You can request information at any time about the data we process about you. In this case, we will inform you in writing about which data we have stored about you, for what purposes we use it, to which categories of recipients we pass it on, and how long we intend to store it. We will comply with your request for information without delay, but at the latest within one month.

Right to Erasure:
You have the right to request the erasure of your data processed by us at any time. We will comply with this request provided that your data is no longer necessary for the purpose of collection, you revoke any existing consent, in cases of unlawful data processing, or if the erasure is required to fulfill a legal obligation.

Right to Rectification:
If we inadvertently process incorrect or incomplete data about you, we will of course correct it. A simple, informal request addressed to us is sufficient for this purpose.

Right to Restriction of Processing:
If the deletion of your data is not possible or desired by you, but you do not agree to further use of the data beyond storage, we are obliged to restrict the further processing of your personal data upon your request.

Right to Data Portability:
Upon your informal request, we will provide you with the data we have stored about you, which we have received based on a contract or your consent, free of charge in a commonly used file format. You can use these data for your own purposes and pass them on to future contractual partners. If you wish and it is technically feasible, we will also directly transfer your data to a recipient you specify. In this case, we will inform you after the transfer has been made. We will comply with your request immediately, but at the latest within one month.

Right to Withdraw Consents:
You can revoke consents you have given for data processing at any time with effect for the future; we will then stop the data processing. The lawfulness of the data processing carried out until the revocation is not affected by the revocation of the consent.

Right to Object:
If we process your data based on our legitimate interest, according to the General Data Protection Regulation, you have the right to object to the further processing of your data. If you exercise this right, we will no longer process your data for the purpose you objected to, unless there are compelling legitimate grounds for further processing on our part that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

10. Right to Lodge a Complaint

The EU General Data Protection Regulation and the Austrian Data Protection Act ensure your rights in the area of data protection mentioned above. If you believe that you have been violated in any of these rights by us, you have the option to lodge a complaint with a data protection supervisory authority. The supervisory authority in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna. Claims against us that you are entitled to based on other legal grounds remain unaffected.

11. Data Security

We take all necessary and appropriate technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operational environment that is up to date with technology.

Access to our website is secured via HTTPS. This means that communication between your device and our servers is encrypted.

12. Miscellaneous

On our website, you may find links to websites for which other organizations, institutions, or companies are responsible. To what extent these collect or process personal data, please refer to the respective privacy information. You can recognize a redirection to another website by the fact that a new browser window/tab opens and a new address or URL is displayed.

We expressly reserve the right to make future changes or adjustments to this privacy policy. If you have any questions or suggestions, please contact us using the contact details provided.

Status of the privacy policy: 4/2024