Privacy policy

1. Controller

The controller responsible for processing personal data on myhappypace.org is:

Nina Prenner Kardinal König Str. 3 2525 Schönau an der Triesting Austria

Email: info@myhappypace.org

Protecting your data matters to us. We process it exclusively on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021). In this policy we inform you which data we process when you visit our website, for what purpose, and which rights you have.

2. Principles and legal bases

We only process as much data as is necessary to operate this website and to communicate with you. We do not sell data and do not use it for advertising.

Every processing activity relies on one of the following legal bases:

• Consent (Art. 6(1)(a) GDPR) – only when we explicitly ask for it; you can withdraw it at any time with effect for the future.
• Contract and pre-contractual measures (Art. 6(1)(b) GDPR) – for example when you contact us about a collaboration.
• Legal obligation (Art. 6(1)(c) GDPR) – for example statutory retention obligations.
• Legitimate interest (Art. 6(1)(f) GDPR) – secure, stable operation of the website and answering enquiries.

3. Hosting and server log files

Our website is hosted by Base44, Inc. (contact: compliance@base44.com). Base44 processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR, which is part of Base44’s terms of use. Data may also be transferred to countries outside the EU, in particular the USA. This is safeguarded by the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (see section 7).

Each time the website is accessed, the server automatically stores technical data transmitted by your browser:

• IP address
• Date and time of access
• Page accessed and amount of data transferred
• Browser type, operating system and previously visited page (referrer)

We need this data to deliver the website technically and to protect it from misuse and attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We do not combine the log files with other data; they are deleted as soon as they are no longer needed for these purposes.

4. Contact by email

If you write to us by email, we store your email address, your name (if provided) and the content of your message in order to answer your enquiry.

The legal basis is our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR); if it concerns a possible collaboration, also Art. 6(1)(b) GDPR. We delete the data once your enquiry has been dealt with and no statutory retention obligations apply. We do not pass it on without your consent.

5. Social media: Strava, Instagram and TikTok

On our website we link to our Strava club and to our profiles on Instagram and TikTok (@myhappypace.official). These are simple links: no data is transferred to these platforms when our website loads. Only when you click a link are you forwarded to the respective platform; from then on, its privacy provisions apply.

If you follow us on these platforms, interact with posts or join our Strava club, the providers process your data under their own responsibility, in part also in the USA. We only see what you share publicly on the platform or send to us. For the statistics the platforms provide to us about our profiles (for example reach and interactions), we may be jointly responsible with the provider (Art. 26 GDPR). We only receive these statistics in aggregated form, without being able to identify individual people. The legal basis is our legitimate interest in public relations for MyHappyPace (Art. 6(1)(f) GDPR). You can exercise your rights most effectively directly with the respective provider; we are happy to support you with that.

6. Fonts, cookies and Google Analytics

Fonts: The fonts on our website are hosted locally on our server. No connection to servers of Google or other font providers is established when the site is accessed.

Cookie consent with CookieYes: On your first visit we ask you via a banner whether you allow analytics cookies. For this we use the consent tool CookieYes by CookieYes Limited, United Kingdom. CookieYes stores your choice in a cookie (“cookieyes-consent”, lifetime of up to 12 months) so that we respect it on later visits, and logs it with a timestamp and a random consent ID so that we can prove it. The legal basis is our legal obligation to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). For the United Kingdom, an adequacy decision of the EU Commission exists. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.

Technically necessary cookies: Insofar as our hosting provider uses technically necessary cookies (for example for security or load balancing), this is done on the basis of § 165(3) TKG 2021 and Art. 6(1)(f) GDPR. No consent is required for these cookies.

Google Analytics: Only if you agree in the cookie banner do we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This lets us see how many people visit our website, through which channels they arrive (for example Instagram or TikTok) and which content and links are used. Without your consent, no analytics cookies are set.

In this process, cookies with a random identifier are stored and the following data is processed: pages viewed, time spent, scrolling behaviour, clicks on external links, the page you came from, approximate location (country and region), device type, operating system and browser. Google Analytics 4 does not store full IP addresses. The Google Signals feature is deactivated, so your data is not linked to a Google account. The data is deleted after 14 months.

Google processes the data on our behalf on the basis of a data processing agreement. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). You can withdraw it at any time with effect for the future via the “Cookie settings” link in the footer. More about privacy at Google: policies.google.com/privacy

We do not use advertising pixels, embedded videos or maps.

7. Storage period, recipients and third countries

Storage period: We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. After that, it is deleted.

Recipients: Your data is only received by those who need it for the stated purposes: our hosting provider, CookieYes and – only with your consent – Google as processor, as well as, where required, authorities or courts on the basis of legal obligations.

Third countries: We only transfer data to countries outside the EU or the EEA if an adequate level of data protection exists. This is the case with an adequacy decision of the EU Commission (for the USA: for companies certified under the EU-US Data Privacy Framework) or when the EU Standard Contractual Clauses have been concluded.

8. Your rights

You have the right at any time to:

• Access to the data we store about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on our legitimate interest (Art. 21 GDPR)
• Withdraw consent you have given, with effect for the future (Art. 7(3) GDPR)

Simply write to us at info@myhappypace.org or by post to the address given above. We will respond within one month.

Right to lodge a complaint: If you believe we are processing your data unlawfully, you can complain to the supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Changes to this policy

We will update this privacy policy whenever our website or the legal situation changes, for example if we introduce a newsletter, a contact form or a members’ area. The version published here applies in each case.