Controller
Anton Neubauer, Graz, Austria
Email: m(at)an.co.at
In short
racedays.bike sets no cookies and uses no analytics, tracking or advertising. There are no user accounts. Fonts and the map library are hosted on our own server.
Hosting and server logs
The website is hosted by digitalnova GmbH in Austria under a data processing agreement (Art. 28 GDPR). For every page request the web server processes technically necessary data: IP address, time, requested address, referrer and browser identification. It is stored in server logs, used only to keep the service secure and to fix errors, and deleted automatically after 30 days. Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).
Storage in your browser
Some features keep settings only locally in your browser (localStorage); they are not sent to us except as described below:
- light/dark colour scheme
- last chosen filters and country
- saved events
- your own star ratings and a random identifier for ratings
- reminder status
The app also stores pages, images and program files in the browser cache (service worker) so that it loads faster and can be read offline. This storage is required for the features you use (Section 165(3) Austrian Telecommunications Act 2021). You can remove the data at any time in your browser settings ("clear site data").
Star ratings
When you rate an event we store the stars, the event, the time, a hash of your browser's random identifier (so you can change or withdraw your rating) and a salted hash of your IP address (only to limit ratings to 40 per day against abuse). The IP address itself is not stored. A rating is kept until you withdraw it. Legal basis: Art. 6(1)(f) GDPR.
Reminders (push notifications)
If you turn on reminders and allow them in your browser, we store your browser's push address with its keys, language, time zone and the list of your saved events, and which reminders have already been sent. Messages are delivered through your browser's push service (Google, Mozilla, Apple or Microsoft depending on the browser; these providers may process data outside the EU). Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by turning reminders off or in your browser settings. The data is then deleted, as it is when the push service reports the subscription as invalid or your browser has not been in touch for a year.
Map
Only when you open the map view does your browser load map tiles from OpenStreetMap (OpenStreetMap Foundation, United Kingdom), which transmits your IP address and browser identification to their servers. The EU Commission has issued an adequacy decision for the United Kingdom. Details: OpenStreetMap Foundation privacy policy. Legal basis: Art. 6(1)(f) GDPR (showing event locations at your request).
Links to other websites
Links to organisers, registration pages and media lead to third-party websites. Data is only transmitted to their operators once you click; their privacy policies apply there. Event and article images are fetched and delivered by our own server – your browser does not connect to third-party servers for them.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Please contact m(at)an.co.at. As we store no names or accounts, we can usually only match ratings or reminders if you withdraw or turn them off directly in the app. You may also lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).