Privacy notice

Website operator

Hosting and access

Cloudflare serves the site. Your browser sends connection details, including your IP address and the requested URL, to deliver the site and protect it from abuse. We process this data on the basis of our legitimate interest in operating and securing the site (Article 6(1)(f) GDPR).

Browser storage and external links

The site can remember your settings and saved events in your browser. You can clear this data in your browser settings. If you follow an organizer’s link, that site’s privacy notice applies.

Interactive maps

Opening a map loads map tiles from the selected map provider, including OpenStreetMap. Your browser sends your IP address and the requested map area to that provider. We use these requests to display the event and course maps (Article 6(1)(f) GDPR).

Contact

If you email us, we use your address and message to reply. We process these details to handle your request (Article 6(1)(b) or (f) GDPR) and retain them for as long as the request or applicable retention requirements call for.

Account and newsletter

Accounts use your email address and saved events to provide the service you request (Article 6(1)(b) GDPR). Login links expire after 20 minutes and are bound to the requesting browser. A necessary security cookie lasts up to one hour. A necessary session cookie maintains access for up to 14 days. You can delete your account and its saved events in your account settings.

Newsletter sign-up is separate and requires your consent (Article 6(1)(a) GDPR). We record your email address, language and confirmation to manage the subscription and document consent. Each newsletter includes an unsubscribe link. We use Cloudflare D1 for account and subscription data and Amazon SES to deliver email.

Confirmation links expire after 48 hours. During later sign-ups, the service removes unconfirmed registrations older than 30 days and unsubscribed records older than 1,095 days. Rate limits temporarily store keyed hashes of an address or IP address. You can contact the operator to request deletion of your newsletter data.

Service providers and international processing

Cloudflare operates a global network. Amazon SES uses the Frankfurt region for our email delivery. Processing can involve providers outside the EEA. The providers describe their data processing and transfer safeguards in their privacy information. Cloudflare privacy, AWS privacy.

Your rights

You can contact the operator to request access, correction, deletion, restriction or portability of your data, object to processing or withdraw consent. You can also complain to a data protection authority.