Privacy Policy

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) is:

CFC Die Kampfkunstschule
CFC Die Kampfkunstschule (association, ZVR 806506505), represented by Erich Ferlesch
Austrian register no. (ZVR): 806506505
Karawankenweg 13, 9500 Villach, Österreich
Phone: +43 676 5205470
Email: office@cfc-combat.com

We process our users' personal data only insofar as this is necessary to provide a functioning website as well as our content and services. Processing generally takes place only with consent (Art. 6(1)(a) GDPR), to perform a contract or to carry out pre-contractual measures (Art. 6(1)(b) GDPR), to fulfil legal obligations (Art. 6(1)(c) GDPR), or on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention periods prevent deletion.

This website is hosted by an external service provider (hosting provider). The personal data collected on this website is stored on the servers of the host or the infrastructure partners it uses. This may include, among other things, IP addresses, contact requests, meta and communication data, contract data, website access data and other data generated via the website.

The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast and efficient provision of our online offering (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the provider.

When you access this website, information that your browser transmits is automatically collected. This includes in particular:

• browser type and browser version
• operating system used
• referrer URL (previously visited page)
• host name of the accessing device / IP address
• date and time of the server request

This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and security of our website.

Our website uses cookies. Cookies are small text files stored on your device. Necessary cookies are required for the technical operation of the website and are set on the basis of Art. 6(1)(f) GDPR (e.g. to store your language and cookie settings).

Cookies that are not technically necessary (in particular for statistics and analysis) are only set after your explicit consent via our cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future by deleting the cookies stored in your browser (key “cfc-cookie-consent”) and reloading the page. The banner will then reappear and you can make a new selection.

This website uses – provided you have consented in the cookie banner – Google Analytics, a web analytics service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies that enable an analysis of website usage. The information generated about your use of this website is usually transmitted to and stored on a Google server. The IP address is truncated (IP anonymisation).

The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Analytics is not loaded. A transfer of data to third countries (in particular the USA) cannot be ruled out; Google relies on standard contractual clauses, among other things. Further information can be found in Google's privacy policy at policies.google.com/privacy.

To display our location, we embed map material from the Google Maps service (provider: Google Ireland Limited). When the page with the map is accessed, data (in particular your IP address) is transmitted to Google and may be processed there. The use serves the interest of an appealing presentation of our offering and the easy findability of our location (Art. 6(1)(f) GDPR). Further information: policies.google.com/privacy.

To display fonts consistently, this website uses so-called web fonts from Google. When a page is accessed, your browser loads the required fonts in order to display text correctly. For this purpose, your browser establishes a connection to Google's servers, transmitting your IP address. Use is based on Art. 6(1)(f) GDPR (consistent, appealing presentation of the online offering).

On some pages we embed videos from our YouTube channel (provider: Google Ireland Limited) in extended privacy mode (youtube-nocookie.com): thumbnails and the video are only loaded once you actively start a video. Your IP address is then transmitted to YouTube and cookies may be set. The legal basis is Art. 6(1)(f) GDPR (appealing presentation of our offer) or your consent pursuant to Art. 6(1)(a) GDPR. More information: policies.google.com/privacy.

If you consented in the cookie banner, we use Microsoft Clarity (Microsoft Ireland Operations Limited) for anonymised analysis of website usage (e.g. click and scroll behaviour). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. More information: privacy.microsoft.com.

Subject to your consent, we use the Google Ads tag to measure which ads led to an enquiry (provider: Google Ireland Limited). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. More information: policies.google.com/privacy.

To display our Google reviews we embed a service that retrieves the publicly available reviews of our business profile. Your IP address may be transmitted to that provider. The legal basis is Art. 6(1)(f) GDPR (presentation of customer feedback).

For payment of the first training module we use — depending on the payment method chosen — the payment provider Stripe (Stripe Payments Europe Ltd., Dublin), or we send you our bank details for a transfer. With card payments the payment data is processed directly by Stripe; we never receive complete card details. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). More information: stripe.com/privacy.

Our website contains a link allowing you to contact us via WhatsApp (provider: WhatsApp Ireland Limited). Data is only transmitted to WhatsApp once you click this link; WhatsApp's privacy policy then applies in addition. The legal basis is Art. 6(1)(f) or (b) GDPR (simple contact).

Our shop is operated by an external provider (Spreadshirt/Spreadshop) and is merely linked. When you click the shop link you leave our website; from that point only the shop provider's privacy policy applies. No data is transmitted to the shop provider from our website.

If you contact us by email or phone, your details (e.g. name, email address, phone number and your message) are stored for the purpose of processing your enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (efficient processing of enquiries). We do not pass on this data without your consent and delete it as soon as processing is complete and no statutory retention obligations prevent deletion.

Via the registration form for a trial lesson or for a callback or appointment request, we collect the data you enter – in particular first and last name, email address, phone number, your preferred date and voluntary messages. We use this data exclusively to organize and carry out the requested trial lesson or to contact you.

The legal basis is Art. 6(1)(b) GDPR (carrying out pre-contractual measures at your request). The data is stored in a secured database of our backend service provider, with whom a data processing agreement pursuant to Art. 28 GDPR is in place. We delete this data as soon as it is no longer required for the stated purpose, provided no statutory retention periods apply.

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser's address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

With regard to your personal data, you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to office@cfc-combat.com is sufficient.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
www.dsb.gv.at