Privacy Policy

The controller responsible for data processing on this website is:

Concordia Dresden
Arthur Joseph Lenné und Gustav Lenné
Uhlandstraße 18, 01069 Dresden
E-Mail: kontakt@concordia-dresden.org

We process personal data only to the extent necessary to provide a functioning website, to improve our offer, or to communicate with you. The legal bases are in particular Art. 6 Abs. 1 lit. a, b, and f GDPR.

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you call up the page, technical data is automatically processed (e.g. IP address, browser type, time of access, requested files) in server log files in order to ensure the stability and security of operation.

Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in secure and efficient website operation). A data processing agreement has been concluded with the host in accordance with Art. 28 GDPR (Vercel DPA).

Intro Status (sessionStorage)
When you first visit the start page, we store locally whether the intro animation has already been shown (cd-intro-seen in sessionStorage). Purpose: Avoid repeating the animation per browser session. Access to the terminal equipment is based on § 25 (2) no. 2 TDDDG (German Telecommunications-Digital-Services-Data Protection Act, strict technical necessity). The subsequent processing is based on Art. 6 (1) lit. f GDPR.

Cookie Consent (localStorage)
Your decision on the cookie banner is stored in localStorage (cd-cookie-consent) so that we do not have to ask you again on every visit. Access to the terminal equipment is based on § 25 (2) no. 2 TDDDG. The subsequent processing is based on Art. 6 (1) lit. f GDPR or Art. 6 (1) lit. a GDPR for optional statistics.

With your consent, we collect anonymous usage statistics (e.g. page views, referral source, approximate location at country level, device type, interactions) in order to continuously improve our online offer.

Access to your terminal equipment is based on your consent according to § 25 (1) TDDDG, further processing according to Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future — via the Cookie Settings link in the footer.

We integrate fonts via next/font from Next.js. The fonts are self-hosted during the build and are not loaded from Google servers at runtime. No transmission of personal data to Google takes place.

This website links to external services, including a WhatsApp community (WhatsApp Ireland Limited, a Meta company). Merely visiting our website does not transfer any data to these services. Only when you click a link do the privacy terms of the respective provider apply.

If you contact us by email, we process the data you provide to process your request. Legal basis: Art. 6 Abs. 1 lit. b GDPR (pre-contractual communication) or Art. 6 Abs. 1 lit. f GDPR.

If you apply for membership via the form on this website, we process the data you enter there (name, contact details, date of birth, address, details on licence, fee and payment interval, any optional information about yourself and, for minors, the name and email of a parent or guardian) to decide on your admission and to manage your membership. Our server sends the details directly to easyVerein, our club management software (SD Software-Design GmbH), where it creates a membership application. They are not stored on the web server itself.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or the membership relationship). easyVerein processes the data as a processor under Art. 28 GDPR, solely on our behalf. To prevent automated abuse, we count applications per IP address: only a hash of the IP address is stored for one hour with Upstash (Upstash Inc., EU storage location) as a processor; the legal basis is Art. 6(1)(f) GDPR. If no membership comes about, we delete the application once it is no longer needed. The data is never sold to third parties.

If you sign up for the guide “Your first licensed race”, we process your email address to send you the guide and, at longer intervals afterwards, emails from the club. Our server passes the address to Brevo (Sendinblue SAS, Paris, France), our email service. You first receive a confirmation email (double opt-in); only after you click it do we add you to the list. The address is not stored on the web server itself.

The legal basis is your consent under Art. 6(1)(a) GDPR. Brevo processes the data as a processor under Art. 28 GDPR. You can unsubscribe at any time via the link in every email or by writing to us; we then delete the address. To prevent automated abuse, we count sign-ups per IP address (only as a hash, for one hour, with Upstash).

You have the following rights against us regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 Abs. 3 GDPR)

To exercise your rights, please contact kontakt@concordia-dresden.org.

You have the right to lodge a complaint with a data protection supervisory authority — e.g. with the Saxon Data Protection Commissioner, Devrientstraße 5, 01067 Dresden (https://www.saechsdsb.de).

We adapt this privacy policy when technology, the legal situation, or our offers change. Related page: Legal Notice.