Privacy Policy

The controller responsible for data processing on this website is:

Arthur Joseph Lenné
Uhlandstraße 18, 01069 Dresden
E-Mail: kontakt@concordia-dresden.de

We process personal data only to the extent necessary to provide a functioning website, to improve our offer, or to communicate with you. The legal bases are in particular Art. 6 Abs. 1 lit. a, b, and f GDPR.

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you call up the page, technical data is automatically processed (e.g. IP address, browser type, time of access, requested files) in server log files in order to ensure the stability and security of operation.

Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in secure and efficient website operation). A data processing agreement has been concluded with the host in accordance with Art. 28 GDPR (Vercel DPA).

Intro Status (sessionStorage)
When you first visit the start page, we store locally whether the intro animation has already been shown (cd-intro-seen in sessionStorage). Purpose: Avoid repeating the animation per browser session. Access to the terminal equipment is based on § 25 (2) no. 2 TDDDG (German Telecommunications-Digital-Services-Data Protection Act, strict technical necessity). The subsequent processing is based on Art. 6 (1) lit. f GDPR.

Cookie Consent (localStorage)
Your decision on the cookie banner is stored in localStorage (cd-cookie-consent) so that we do not have to ask you again on every visit. Access to the terminal equipment is based on § 25 (2) no. 2 TDDDG. The subsequent processing is based on Art. 6 (1) lit. f GDPR or Art. 6 (1) lit. a GDPR for optional statistics.

With your consent, we collect anonymous usage statistics (e.g. page views, referral source, approximate location at country level, device type, interactions) in order to continuously improve our online offer.

Access to your terminal equipment is based on your consent according to § 25 (1) TDDDG, further processing according to Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future — via the Cookie Settings link in the footer.

We integrate fonts via next/font from Next.js. The fonts are self-hosted during the build and are not loaded from Google servers at runtime. No transmission of personal data to Google takes place.

On our website, we link to external services (including Instagram, Strava, YouTube). If you click on these links, the privacy policies of the respective providers apply.

If you contact us by email, we process the data you provide to process your request. Legal basis: Art. 6 Abs. 1 lit. b GDPR (pre-contractual communication) or Art. 6 Abs. 1 lit. f GDPR.

When you submit the form at /fahrer-bewerbung, we process the data you provide there: name, date of birth, racing category, information about your results, email address, and optionally a phone number and message. Optionally, we also process a PDF file you upload (performance test). Technically, we also store a pseudonymous hash of your IP address (not the IP itself) and the time of your consents.

The legal basis for processing the application data is Art. 6 Abs. 1 lit. b GDPR (taking steps at your request prior to entering into a contract — reviewing your application). The pseudonymous IP hash serves to protect the form against abuse and spam; the legal basis for this is Art. 6 Abs. 1 lit. f GDPR (legitimate interest).

If you upload a performance test, that PDF may contain health data (for example lactate values, VO2max or medical information). We process these special categories of personal data under Art. 9 GDPR solely on the basis of your explicit consent under Art. 9 Abs. 2 lit. a GDPR, which you give separately in the form.

The form data and the file are stored with Supabase Inc. The data is held in a data centre in the European Union (Frankfurt am Main; infrastructure: Amazon Web Services). A data processing agreement under Art. 28 GDPR is in place with Supabase (Supabase DPA: https://supabase.com/legal/dpa).

As soon as an application arrives, we send ourselves an email notification that contains only your name and the selected category. We use the service Resend, operated by Resend, Inc. (USA), to send this email. A data processing agreement under Art. 28 GDPR is in place with Resend; the transfer to the USA is covered by the European Commission's Standard Contractual Clauses. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in handling your application promptly).

We keep your application until the selection process is complete and then delete it at the latest six months after our decision if no collaboration comes about. If a collaboration does come about, we continue to process the necessary data on a contractual basis. Providing the data is voluntary but necessary for us to handle your application. You can withdraw your consents at any time with effect for the future (an email is sufficient); this does not affect the lawfulness of processing carried out beforehand.

You have the following rights against us regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 Abs. 3 GDPR)

To exercise your rights, please contact kontakt@concordia-dresden.de.

You have the right to lodge a complaint with a data protection supervisory authority — e.g. with the Saxon Data Protection Commissioner, Devrientstraße 5, 01067 Dresden (https://www.saechsdsb.de).

We adapt this privacy policy when technology, the legal situation, or our offers change. Related page: Legal Notice.