This policy explains which personal data rowing.zone processes, why, and what rights you have. It applies to the website and, later, the app.
1. Who is responsible
The controller is the operator named in our Impressum: Aram Lemmerer, trading as rowing.zone, Petritschgasse 6/2/2, 1210 Vienna, Austria. Contact for all privacy questions: mail@rowing.zone.
2. What we process and why
Your account and profile. Email, username, password (stored encrypted), name, and what you add to your rowing profile: country and city, club, year of birth (only visible to admins; used to work out your masters category), side, boat classes, level, 2k time, races you plan and your photos. Purpose: running the community and showing you crew suggestions. Legal basis: contract (Art. 6(1)(b) GDPR). Your city is converted into approximate coordinates (about 1 km) so we can suggest rowers near you; this uses the OpenStreetMap Nominatim service from our server.
Posts, messages, groups and forums. Everything you post or send is stored so it can be shown to the people you share it with. Private messages are visible only to the participants and, for safety reviews after a report, to our moderators. Legal basis: contract.
Race results. If you click “This is me” in your Results tab, we link public World Rowing results to your profile. You can remove them at any time. Legal basis: consent (Art. 6(1)(a)).
Clubs. Club pages use public data (Wikidata, OpenStreetMap, Wikimedia Commons). Club managers who claim a page give us their name and email for verification.
Marketplace orders. When you buy, we pass your name, address, email and order to the vendor who sells the item, because the contract is with them. Payments are processed by Stripe (Stripe Payments Europe Ltd., Ireland); we never see your full card details. Legal basis: contract.
Vendors. We process company data, VAT number (checked in the EU VIES system), verification documents and sales figures. We are legally required to report vendor data and sales to the Austrian tax authority under the DAC7 rules (DPMG). Legal basis: legal obligation (Art. 6(1)(c)) and contract.
Classified ads and trailer board. Your ad, its photos and the contact details you choose to show are public. Legal basis: contract.
Contact form and emails. We use your name, email and message to reply. Emails are sent through our mail provider World4You Internet Services GmbH, Austria. Legal basis: legitimate interest (Art. 6(1)(f)).
Newsletter. Only with your consent; you can unsubscribe in every newsletter. Legal basis: consent.
3. Cookies and external content
We only use cookies that are needed for the site to work: staying logged in, your shopping cart and security tokens. We use no advertising or analytics trackers. Fonts are hosted on our own server.
YouTube videos load only when you click play, from youtube-nocookie.com (Google Ireland Ltd.). Only then is your IP address sent to Google. Maps on the clubs, regattas and trailer pages load map tiles from OpenStreetMap and the map software from cdnjs (Cloudflare); this sends your IP address to these services. Legal basis: legitimate interest in showing a working map.
4. Service providers
Hosting: Kinsta Inc. (USA), on Google Cloud servers, with Cloudflare Inc. as content delivery network. Payments: Stripe. Email: World4You. Live messaging (once enabled): Pusher (MessageBird/Bird, servers in the EU). Push notifications in the app (once released): Expo. These providers process data on our behalf under data processing agreements. Where a provider is outside the EU, transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.
5. How long we keep data
Account data until you delete your account. Unconfirmed sign-ups are deleted after 28 days. Order and invoice data for 7 years (Austrian tax law). Reports and moderation decisions for up to 1 year after resolution.
6. Your rights
You can ask for access, correction, deletion, restriction, data portability, and object to processing based on legitimate interest. You can withdraw consent at any time. You can delete your account yourself under Account settings → Delete account. You may complain to the Austrian data protection authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).
7. Age
rowing.zone is for people aged 16 and over.
8. Changes
We will update this policy when we add features and announce important changes on the site.