Privacy Policy

Protecting your personal data matters to us. We process your data solely on the basis of the applicable law (GDPR, the Austrian Data Protection Act, TKG 2021). This privacy policy tells you which data is processed on st-trail.at and for what purpose.

Controller:
Trailrunning Club Sonnenterrasse
Register number (ZVR) 1890997058
c/o TVB Salzburger Sonnenterrasse
Markt 12, 5621 St. Veit im Pongau, Austria

Contact for data protection enquiries: info@st-trail.at

This website is hosted by obinet; the servers are located in Austria or elsewhere in the EU. When you visit the site, the web server automatically processes what are known as log files: IP address, date and time of access, the page requested, the amount of data transferred, the referrer URL and details of your browser and operating system.

This data serves solely to keep the site running smoothly, to analyse faults and to fend off attacks (legal basis: legitimate interest under Art. 6(1)(f) GDPR). It is not combined with any other source of data. Log files are kept only as long as they are needed for these purposes and are then deleted.

When you register for the Sonnenterrassen Trail through our registration form, we process the data you provide (e.g. name, year of birth, gender, address, email address, telephone number, club or team, chosen race) in order to carry out your participation in the event – that is, for registration, managing places, handing out race numbers, timing and the results service. The legal basis is the performance of a contract under Art. 6(1)(b) GDPR.

To process your registration, your data is passed to the participant management system we use, which processes it in order to run the event. The entry fee is paid through the payment service provider Stripe (see the separate section).

The process data stored locally on this website during registration (the registration and payment flow) is deleted after 90 days. Beyond that, we keep participation data for as long as it is needed to run and follow up the event and to meet statutory retention obligations.

We use the payment service provider Stripe to collect the entry fee (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland; parent company: Stripe, Inc., USA). When you pay, the data required for this (e.g. name, email address, payment details, amount) is transmitted directly to Stripe. Your full card or account details are not stored on our servers.

The legal basis is the performance of a contract (Art. 6(1)(b) GDPR). Processing a payment may involve a transfer of data to the USA; Stripe bases such transfers on the European Commission’s standard contractual clauses under Art. 46 GDPR. You will find further information in Stripe’s privacy policy: stripe.com/at/privacy.

As part of the event we publish start lists and results lists showing name, year of birth, club or team and place of residence – on this website, in the start and finish area and to the media. Publishing them is an essential part of a public sporting event. The legal bases are the performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in running the competition transparently (Art. 6(1)(f) GDPR).

You may object at any time to your data being published in start lists and results lists. Please send your objection to the club (address above); we will then remove your data from the lists under our control.

This website uses only technically necessary cookies. No tracking, analytics or advertising cookies are used.

• Session cookie: set during registration to keep your session alive while you register, and deleted once the session ends.
• Checkout reminder: briefly remembers whether a registration you started has not yet been completed, so that we can remind you the next time you visit.

The legal basis is our legitimate interest in providing the website technically (Art. 6(1)(f) GDPR) in conjunction with § 165(3) TKG 2021. Technically necessary cookies do not require consent, which is why this website does not show a cookie banner.

We use the service CleverReach to send our newsletter (CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany). Signing up for the newsletter always uses the double opt-in procedure: after entering your address you receive an email with a confirmation link, and only once you have confirmed is your address added to the mailing list. The newsletter is currently offered only in connection with registering for the event.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email or by writing to the club. Further information: cleverreach.com/de/datenschutz.

We embed videos (YouTube, Vimeo) and map services using “click to load”: when you open a page, no data is transmitted to the respective provider at first; you only see a preview image. The connection to the provider is established only when you actively click on such content. Your IP address and possibly further data are then transmitted to the provider – and, where the provider is based in the USA, to that country as well.

The legal basis for loading the content is the consent you give by actively clicking (Art. 6(1)(a) GDPR). Information on how your data is processed can be found in the privacy policies of the respective providers.

A runner app is planned for future events, offering push notifications and GPS live tracking during the race. Both functions are activated only with your express, separate consent (Art. 6(1)(a) GDPR): you receive push messages only if you allow them in the app, and your location data is processed only if you switch live tracking on yourself.

You can withdraw either consent at any time with effect for the future – directly in the app or by writing to the club. Before the app launches we will set out here in detail how the associated data is processed.

You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object (Art. 21 GDPR). You may withdraw consent you have given at any time with effect for the future. To do so, please contact the controller (address above).

If you believe that the processing of your data breaches data protection law, you may lodge a complaint with the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Last updated: August 2026. We will amend this privacy policy as soon as the services or procedures we use change.