Privacy Policy

Christof Thalmann, Schoettlstr. 3, 81369 Munich, Germany. ciclismo.racing@protonmail.com

This website is hosted by a third-party provider (Vercel Inc., USA). When you visit, your browser transmits technical data (IP address, browser type, time of request) to the server. Legal basis: Art. 6(1)(f) GDPR. This data may be processed outside the EU; the transfer is covered by Standard Contractual Clauses (Art. 46 GDPR).

We store your email address. It is used to sign in, and sign-in emails are sent by an email delivery provider. Your email address stays private and is not shown to other riders. We also store a display name that other riders in your races can see and, only if you choose, your ranking group (Men or WTNB+), which places you in that ranking in addition to Open. Legal basis: Art. 6(1)(b) GDPR; ranking group: consent, Art. 6(1)(a), withdrawable in your profile.

Account and race data is stored with Supabase (Supabase Inc.) on servers in Frankfurt, Germany, under a data processing agreement.

For each stage you submit, we store the position, elevation, time and, if recorded, power data of your ride, and the results calculated from it. The uploaded file itself is not stored. Other riders in the same race can see your results and ride. Legal basis: Art. 6(1)(b) GDPR. We keep this until you delete your account or the race director removes the race or your entry.

If you send us feedback, we store your message, your email address (to reply to you), the page you came from and your browser type and screen size. Legal basis: Art. 6(1)(f) GDPR (answering your message). We keep it until the matter is resolved, and delete it on request or when you delete your account.

If you connect Strava (Strava Inc., USA), we store your Strava athlete ID and access tokens, encrypted, to load the activities you choose to submit. Legal basis: consent, Art. 6(1)(a) GDPR. You can disconnect in your profile, which deletes the tokens and revokes access at Strava, or revoke it in your Strava settings. See Strava’s privacy policy.

Map tiles are loaded directly from OpenStreetMap (OpenStreetMap Foundation, United Kingdom), so your IP address is sent to its servers whenever a map is shown. Legal basis: Art. 6(1)(f) GDPR. See the OpenStreetMap privacy policy.

We use TelemetryDeck (TelemetryDeck GmbH, Augsburg, Germany) to count page views and a few actions, such as creating an account or submitting a ride. TelemetryDeck does not use cookies and does not store personal data. We send no account, email or ride data, only a random identifier per visit, and we honor Do Not Track and Global Privacy Control. Legal basis: Art. 6(1)(f) GDPR. See the TelemetryDeck privacy policy.

We use only a session cookie to keep you signed in. There are no advertising or tracking cookies, and therefore no cookie banner.

You can delete your account in your profile. We then delete your ride tracks, feedback and Strava tokens, remove your name and ranking group, and disable your sign-in. Finish times and points remain in anonymized form (“Deleted rider”), because the classifications of other riders depend on them.

You may request access, correction, deletion or restriction of your data, or object to its processing under Art. 15 to 21 GDPR. Contact ciclismo.racing@protonmail.com. You also have the right to lodge a complaint with a data protection supervisory authority.