Privacy

1. Controller and contact The controller responsible for personal data processed on this website is: THLF Motorsport – Team Happy Life Factory Motorsport - Verein zur Förderung von virtuellen und physischen Motorsportveranstaltungen Sechshauser Straße 58/2/9, 1150 Vienna, Austria ZVR: 1078133788 Email: thlfmotorsport@gmail.com Telephone: +43 664 10 44 285 2. Website operation and hosting When you visit the website, technically necessary connection data is processed, including your IP address, access time, requested resources and, where applicable, browser and device information. This enables delivery of the website, troubleshooting and security. The legal basis is our legitimate interest in secure operation under Article 6(1)(f) GDPR. According to the hosting configuration provided to us, the externally operated website is hosted with Hostinger. The database, administrator authentication and uploaded media use Lovable Cloud. Service providers may process technical data to provide, secure and maintain these services. Access to enquiries and non-public content is limited to authorised persons within their duties and necessary service providers. The exact legal service-provider entities, data-centre locations, subprocessors and technical log retention periods depend on the association’s contracts and service settings. These details and any safeguards for transfers outside the EEA still need to be confirmed for the final version. Storage exclusively within the EU is not guaranteed. 3. Contact form and email When you contact us, we process your name, email address, optional subject and message. Contact-form submissions are stored in our website administration for handling. Email enquiries are received through our Gmail mailbox; the email provider also processes message content and technical delivery information. We use these details to respond to and handle your enquiry. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, or our legitimate interest in communication under Article 6(1)(f) GDPR for other enquiries. The contact form requires your name, email address and message. Without them it cannot submit your enquiry. This process does not involve automated decision-making or profiling. Enquiries are kept only as long as necessary for handling them and, where applicable, to meet legal retention requirements or establish, exercise or defend legal claims. No automatic deletion period is currently configured; the association must delete enquiries that are no longer needed. 4. Team profiles, results and photographs The website may publish names, roles, racing numbers, biographies, race results, voluntarily provided social links and photographs of team members or events. This presents the association and its sporting activities. Depending on the circumstances, publication is based on consent under Article 6(1)(a) GDPR or a legitimate interest in reporting association activities under Article 6(1)(f) GDPR, taking affected individuals’ rights into account. The association must verify the applicable basis and necessary image rights before publication; this policy does not replace consent. Consent can be withdrawn for the future. Please contact us about objections to publication or questions regarding image rights. Content remains published only while its purpose and legal basis continue; justified deletion requests will be reviewed. 5. Administrator access and necessary storage The administration area processes login details and session information for authentication, access control and website management. Login information is processed by the authentication service. The browser stores technically necessary session information for administrator access, particularly in local browser storage. The legal basis is our legitimate interest in secure administration under Article 6(1)(f) GDPR. Session information is managed at sign-out and according to its validity; account data is needed for the duration of authorised access. No analytics or marketing trackers and no embedded YouTube or Twitch players are configured in the reviewed website code. Technically necessary storage does not require marketing or tracking consent. Any additional services require a separate assessment before integration. 6. Fonts and external links Fonts are delivered with the website without connecting to Google Fonts. Links to Instagram, YouTube, Twitch, Discord or partner websites lead to external services. When you open those services, their own data processing and privacy notices apply. 7. Your rights Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw consent at any time for the future without affecting the lawfulness of prior processing. You may object to processing based on legitimate interests on grounds relating to your particular situation. Contact thlfmotorsport@gmail.com to exercise your rights. You also have the right to complain to a data protection supervisory authority, particularly in your country of residence, at your place of work or where an alleged infringement occurred. For Austria: Austrian Data Protection Authority, website https://www.dsb.gv.at. 8. Updates This policy describes the reviewed website features and hosting configuration provided so far. Changes to services or processing require an update. Last updated: 7 November 2026