Privacy policy

This English version is provided for convenience. In case of any discrepancy, the German version is legally binding.

We take the protection of your personal data seriously. We process your data solely on the basis of the statutory provisions (the GDPR (DSGVO) and the Austrian Data Protection Act (Datenschutzgesetz), as amended). This privacy policy explains the key aspects of data processing on this website.

1. Controller

Ninjaverband Austria
Rudolfstraße 27
8010 Graz, Austria
Email: fullsend@ninjaverband.at

2. What data we process

a) Access data (server logs)

When you visit this website, our web hosting provider automatically stores information that your browser transmits in what are known as server log files. This includes in particular:

browser type and browser version
operating system used
referrer URL
date and time of access
IP address (in shortened or anonymised form)

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). This data is not combined with data from other sources and is deleted after a short period, unless it is needed to investigate security incidents.

b) Contact by email

If you contact us by email, the data you provide (email address, name, content of the message) is processed in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry). The data is deleted as soon as it is no longer required for the purpose for which it was processed, unless statutory retention obligations require otherwise.

3. Web hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The provider processes personal data on our behalf (in particular server log data). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

4. Google Fonts

This website loads fonts from external servers via the Google Fonts service (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). This establishes a connection to Google’s servers, and your IP address may be transmitted to Google in the process. We do this to ensure that fonts are displayed consistently, on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. A transfer of data to third countries (in particular the USA) cannot be ruled out; any such transfer is based on the European Commission’s Standard Contractual Clauses.
Further information: https://policies.google.com/privacy

5. Cookies & audience measurement (Google Analytics 4)

This website uses Google Analytics 4 (GA4), a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 collects anonymised information about how visitors use this website (e.g. pages viewed, time spent on the site, approximate region of origin) so that we can improve what we offer. Your IP address is shortened and is not combined with other Google data.

Google Analytics is only loaded with your consent (cookie notice on your first visit). Legal basis: § 165(3) TKG 2021 and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings; full details are in our cookie policy. You can also block collection with the opt-out browser add-on at tools.google.com/dlpage/gaoptout. More information on privacy at Google: policies.google.com/privacy.

Apart from this, this website does not use any other tracking or marketing cookies. Functional storage (e.g. starred athletes or the offline version of the start times) stays on your device — see our cookie policy.

Where this website contains links to social media profiles (e.g. Instagram, Facebook, YouTube), these are plain links with no active integration (no “social plugins”). No data is transmitted to the provider concerned unless you actively click the link.

7. Images & event photos

Photos of our events and training sessions shown on this website are used solely for the purposes permitted for associations and publicly accessible sporting events (reporting, documentation, public relations on the basis of Art. 6(1)(f) GDPR or – where required – on the basis of consent pursuant to Art. 6(1)(a) GDPR). If you can be identified in a photo and do not wish us to continue showing it, please send us a short message – we will remove it promptly.

8. Your rights

With regard to your personal data, you have the following rights:

right of access (Art. 15 GDPR)
right to rectification (Art. 16 GDPR)
right to erasure (Art. 17 GDPR)
right to restriction of processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to object (Art. 21 GDPR)
right to withdraw your consent (Art. 7(3) GDPR)

To exercise your rights, please contact fullsend@ninjaverband.at. You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) (www.dsb.gv.at).

9. Changes to this policy

We reserve the right to update this privacy policy as necessary if the legal framework or the data processing on this website changes. The current version is always available on this page.

Last updated: 21 April 2026