1 Controller
Aaron Aurelius Szudarek
Webgasse 42, 1060 Vienna, Austria
Email: info@Handballcamps.at
Telephone: +43 681 84081197
For any questions about the processing of personal data or the exercise of data-subject rights, an informal message to this address is sufficient.
This website and the request form are intended for adult parents and legal guardians. Minors may not submit a request themselves.
2 Overview: which data we use and why
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Registration / expression of interest | Child's name, date of birth, handball experience, optional shirt size, optional group request and voluntarily provided allergy information; optional care hours; name, postcode, email address and telephone number of the parent or legal guardian; selected date; confirmations and records of consent | Article 6(1)(b) GDPR (steps taken prior to entering into a contract) and Article 6(1)(f) GDPR for the child's data; additionally, Article 9(2)(a) GDPR (explicit consent) for voluntary health information | 12 months from receipt, followed by automatic daily deletion; separate contractual and accounting records are retained only in accordance with statutory obligations |
| Website operation and security | Server log data (IP address, time, requested resource, browser and device information) | Article 6(1)(f) GDPR (secure and stable operation) | Only for as long as necessary for secure and stable operation; otherwise in accordance with the hosting provider's contractual deletion rules |
| Internal administration area | Technically necessary session cookie for the signed-in administrator (the cookie itself does not contain personal data) | Section 165(3) TKG 2021 and Article 6(1)(f) GDPR | A maximum of 8 hours or until sign-out |
3 Visiting the website and hosting
When you visit the website, technically necessary log data is processed. It is used to provide the website securely, analyse errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR; the legitimate interest lies in the secure and stable operation of the website.
The website is provided through ChatGPT Sites. For users in the European Economic Area and Switzerland, the provider is OpenAI Ireland Ltd, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes the data collected through the website as a processor on the basis of the ChatGPT Sites Data Processing Addendum.
OpenAI may use further processors for hosting, infrastructure, security and support. OpenAI provides its current list of subprocessors. ChatGPT Sites does not currently offer guaranteed data residency. Where data is processed outside the EEA or Switzerland, OpenAI states that the transfer is based in particular on adequacy decisions or standard contractual clauses pursuant to Article 46 GDPR.
4 Registering for a camp
When a parent or legal guardian submits the registration form, we process the contact details entered in the form as well as the child's name, date of birth, handball experience, optional shirt size and optional group request and, if entered, voluntarily provided allergy information. We use this information only to assign the registration to a camp, organise training groups, ask follow-up questions, prepare safe care and notify the family about suitable dates based on the postcode. For a group request, please enter only the first name of a child your child knows; we cannot guarantee that they will be placed in the same group.
Allergies may be provided voluntarily where this is necessary for catering and safe care at camp. This information is health data and therefore belongs to the special categories of personal data under Article 9 GDPR. It is stored only where the parent or legal guardian has given separate explicit consent in the form pursuant to Article 9(2)(a) GDPR. Providing this information is voluntary and is not required to submit a request.
Consent to process health data can be withdrawn at any time with effect for the future by sending a message to info@Handballcamps.at. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. After a withdrawal, the voluntarily provided health information is deleted unless a legal obligation requires otherwise.
The registration is submitted by the parent or legal guardian, who confirms their authority to represent the child when submitting it. We retain the time of confirmation and the version of this privacy information as evidence. Where voluntary health information is provided, we also retain the time and text version of the explicit health-data consent. The IP address is not stored with the registration. To prevent automated bulk submissions, it is briefly converted into a pseudonymised key. This key is used only to check a ten-minute window. Expired entries are removed during subsequent requests and are discarded no later than the end of the short-lived server instance; they are neither retained permanently nor transferred to the registration database.
Form data is deleted no later than twelve months after receipt by a daily deletion process. If a contract is concluded, separate contractual or accounting records may have to be kept longer due to statutory retention obligations, such as Section 132 BAO.
5 Recipients and disclosure
Access is limited to persons within the camp organisation who process registrations and to technical service providers to the extent necessary (hosting and database). The data is not used for advertising, sold as address data or shared with sponsors. Sponsoring partners do not receive participant data.
Voluntary allergy information is available only to those persons involved in organisation, care and, where applicable, catering who need it to prepare and safely run the specific camp.
An optional parent information channel, such as a messenger group, is used only if offered and on the basis of voluntary consent pursuant to Article 6(1)(a) GDPR. It is not required for participation in the camp.
7 Your rights
Subject to the conditions of the GDPR, data subjects have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). Any consent given may be withdrawn at any time with effect for the future. Parents or legal guardians exercise these rights on behalf of children.
Please send requests to info@handballcamps.at. We respond within one month (Article 12(3) GDPR).
Complaints may be submitted to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.
8 Data security and automated decisions
Data is transmitted in encrypted form via HTTPS. The administration area is password-protected, secured against repeated sign-in attempts and excluded from search engines. Access is limited to authorised persons. Registration data is removed by a daily deletion process once the retention period has expired.
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.
9 Updates
This information will be updated if functions, service providers or legal requirements change.
Date and version of this information: 8 September 2026