Privacy policy

ART. 13 GDPR

Controller

kaul.navin@gmx.at
+43 660 49 48 270

No data protection officer has been appointed. Privacy enquiries can be sent directly to the email address above.

MARKETING WEBSITE

Website access and technical data

When the production website is accessed, the hosting provider processes technically necessary connection data, including IP address, date and time, requested address, data volume, referrer, browser, operating system and status code. This serves secure delivery, error analysis and prevention of misuse. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is secure and stable operation.

We use Cloudflare Web Analytics (Cloudflare, Inc.) for privacy-conscious, aggregate reach and performance statistics. On the public website, a Cloudflare script reports page views, visits, referring sites, approximate country, device type, browser and loading performance to Cloudflare. The provider states that it does not set cookies or persistent browser identifiers for this service or build individual visitor profiles. Form contents are not included in these statistics. The legal basis is our legitimate interest in improving the website under Art. 6(1)(f) GDPR. Technically necessary connection data is processed when the script is loaded and data is transmitted to Cloudflare. See Cloudflare's privacy policy for more information. We do not embed other analytics or advertising trackers, external web fonts, maps, videos, chats or social-media widgets.

Calculators and package finder

Entries in the race, fitness, fueling and offer calculators are processed in the browser. The marketing website does not transmit or store them. No solely automated decision with legal or similarly significant effect takes place.

External links

Links to Intervals.icu, event organisers or other websites connect to those providers only after you click them. Their own privacy policies then apply.

ENQUIRIES

Contact by form, email or phone

When you submit the contact form, your name, email address, optional phone number, selected topic, goal and message are transmitted securely to the website server at Render. The message to the controller and an automatic copy to your email address are sent through the transactional email service Brevo. Your email address is also used as the reply-to address and is not automatically added to a marketing list.

We process the contact and message data to answer your enquiry, prepare an introductory consultation and, where applicable, take pre-contractual steps. The legal basis is Art. 6(1)(b) GDPR and, for general enquiries, also Art. 6(1)(f) GDPR. Enquiries that do not lead to a contract are normally deleted no later than six months after communication ends unless legal claims or obligations require longer retention.

Technical connection data is processed briefly for rate-limiting and security checks without adding it to the form content or sent message. Do not send diagnoses, medical reports or other detailed health data in the first contact enquiry.

WORKING TOGETHER

Data in coaching and individual analyses

If a contract is concluded, we process — depending on the booked service — identity and contact details, contract and payment data, goals, appointment and availability information, training history, performance, device and activity data, communication and voluntarily provided information about recovery, injury, illness or menstrual cycle. The purposes are contract performance, individual training management, analysis, communication, billing and documentation.

Art. 6(1)(b) GDPR is the legal basis for ordinary contract data. Health data or other special categories are processed only with explicit, voluntary consent under Art. 9(2)(a) GDPR. Consent can be withdrawn at any time for the future. Without information required for a service, individual management may be limited or impossible; voluntary cycle data is never a condition of coaching.

Coaching and analysis data is kept for the duration of the relationship and afterwards only as long as necessary for follow-up, evidence or legal obligations. Tax and billing documents are retained for statutory periods; other training and health data is deleted or anonymised according to the confirmed deletion concept.

SERVICE PROVIDERS

Recipients and transfers

Data is disclosed only to parties that need it for the relevant purpose. These may include email and IT providers, the production host, banks and tax advisers and — when agreed for coaching — Intervals.icu or another explicitly selected training platform. WhatsApp is used only when the athlete chooses that communication channel.

Externally collected test results are not automatically retrieved from their providers. Results you provide are used only for the agreed interpretation. Data is not shared for advertising. Processors are bound under Art. 28 GDPR; transfers outside the EEA require a valid legal basis and appropriate safeguards.

DATA-SUBJECT RIGHTS

Your rights

Where the legal requirements are met, you have rights to information, access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time for the future. Send requests to kaul.navin@gmx.at. Proof of identity may be required to prevent unauthorised disclosure.

If you believe processing breaches data-protection law, you can complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.