Data privacy statement

The protection of your personal data is important to us. With this data privacy statement, we aim to explain to you in more detail what personal data we collect when you use trail-hub.com and for what purpose the data is used.

1. Contact information and responsible party
Responsible for the processing of your personal data is:

Trail-Hub
Laueliweg 5
3652 Hilterfingen
Switzerland

If you have any questions or suggestions regarding data protection, please feel free to email us at info@trail-hub.com.

2. Subject matter of data protection
The subject of data protection is personal data, i.e. all information relating to an identified or identifiable natural person.

3. Automated data collection
When accessing our website, your device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

URL of the page accessed
The latency of the network connection
Date and time

In this case, the processing takes place on the basis of our predominant legitimate interests mentioned above (Art. 6 Para. 1 lit.f GDPR).

4. Registration data
To be able to use all functions of trail-hub.com, you might habe to register. For this you have to provide the following mandatory information:

Email address
Username
Password
Alternatively, you can log in with your Facebook or Google account. In this case, we receive the following personal data from Facebook or Apple in order to create a user account for you:

Name
Email address
Photo (Facebook only)
An authentication token

Your registration data is required to set up and manage a user account for you and so that you can use all the features of our website. In this case, you conclude a (free) usage contract with us on the basis of which we collect this data (Art. 6 Para. 1 b GDPR).

In order to conclude the contract, you have to provide us with this data. However, you are neither contractually nor legally obliged to conclude the contract and thus to provide the data.

In addition, you can provide further voluntary information as part of the registration. This information is voluntary and not necessary to register you. Please note, however, that this information may be visible to other users according to your settings. We collect this data in order to be able to provide you with the corresponding functions of our website, Art. 6 Para. 1 lit. b GDPR.

When you log in to trail-hub.com, we also save your IP address for a short period of time in order to be able to detect and prevent possible attacks and mass misuse of logins to trail-hub.com (e.g. so-called brute force attacks) by blocking these IP addresses temporarily if necessary. The processing takes place in order to ensure the security of the processing according to Art. 32 GDPR and based on our legitimate interest in protecting us from misuse of our service (Art. 6 Para. 1 lit.f GDPR). Data is only stored for as long as it is necessary for these purposes.

5. Inquiries
If you send us inquiries by email or other means, your details will be saved and used to process the request.

We store inquiries about contracts or of potentially legal relevance during the general limitation period, i.e. three years from the end of the year in which we received your inquiries. We save all other inquiries for a period of 24 months. After that, your inquiries will be deleted unless we are legally obliged to keep them longer.

The storage takes place on the basis of our legitimate interest, the proper documentation of our business operations and the securing of our legal positions (Art. 6 Para. 1 lit.f GDPR). For inquiries about contracts, the data is saved for the initiation and implementation of the respective contractual relationship (Art. 6 Para. 1 lit. b GDPR) and, if applicable, for the fulfillment of legal obligations (Art. 6 Para. 1 lit. c GDPR).

6. Newsletter
If you register with us, we will inform you about news about our services on the trail-hub.com platform about once a month.

In this case, the collection and processing of your personal data takes place due to our legitimate interest in promoting similar services to your user account with trail-hub.com (Art. 6 Para. 1 lit. f GDPR, § 7 Para. 3 UWG).

You can object to this at any time – even when registering – by deactivating the corresponding checkbox or by clicking on the link to unsubscribe in the respective emails.

7. ReCAPTCHA
We use reCAPTCHA, a service from Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”), which is integrated into our website and shows the so-called Captchas – small tasks that are easy for people to solve but for machines are difficult to manage. These Captchas help us to prevent the automatic creation of user accounts and thus spam, fraud and other abuse in our community.

If you call up our registration form, reCAPTCHA will collect device and possibly personal data from you in order to be able to recognize whether you are a human user or a spam bot.

Further information can be found in Google’s privacy policy.

We use reCAPTCHA on the basis of our legitimate interest in protecting ourselves from spam, fraud against us and our users and other misuse through automatically created accounts (Art. 6 Para. 1 lit. f GDPR).

8. Cookies
We save so-called “cookies” in order to be able to offer certain functions of our website and to optimize the use of our website. “Cookies” are small files that are saved on your device with the help of your internet browser.

Specifically, we use the following cookies (unless other cookies are specified elsewhere in this data protection declaration):

Session cookies: These cookies are required to save certain technical data during your visit to our website, e.g. to determine whether you have logged in.
Login cookies: These cookies are required to save your login over a session if you want to.
The legal basis for the use of these cookies is Section 15 (1) TMG and Article 6 (1) lit. b GDPR, insofar as these are necessary for the use of our website and the functions you have called up. We also use cookies based on the consent you have given.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/rcb/data-processing/” rel=”noreferrer” target=”_blank”>https://devowl.io/rcb/data-processing/</a>.

The legal basis for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

9. Trail-Hub.com’s Official Facebook Page
You can also find us on Facebook at Trail-Hub.com | Facebook.

When you visit our Facebook page, we process certain data about you when you interact with our page, mark a post with “Like” or comment on it, or provide other content. The data processing in this regard takes place regularly on the basis of our legitimate interest in providing the corresponding functions on our Facebook page, as well as on your consent to Facebook (Art. 6 Para. 1 lit. a GDPR) or your contractual relationship with Facebook (Art. 6 para. 1 lit.b GDPR). In addition, together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, we are responsible for the processing of so-called Insights data when you visit our Facebook page.

With the help of this Insights data, Facebook analyzes the behavior on our Facebook page and provides us with this data in an anonymous form. For this purpose we have concluded an agreement on the shared responsibility of data processing with Facebook Ireland Ltd., here. Facebook Ireland Ltd. among other things, undertakes to assume primary responsibility in accordance with the GDPR for the processing of Insights data and to fulfill all obligations under the GDPR with regard to the processing of Insights data. The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook page, Art. 6 para. 1 lit f. GDPR. We also draw your attention to the following:

If you, as a registered Facebook user, visit or like our Facebook page, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”) collects personal data from you. If you are not registered on Facebook and visit the Facebook page, Facebook can collect pseudonymous usage data from you.

The following information is collected by Facebook:

View a page, post, or video from a page
Subscribe to or unsubscribe from a page
Mark a page or a post with “Like” or “Unlike”
Recommend a page in a post or comment
Comment, share, or ‘like’ a page post with a specific response (including the type of response)
Hide a page post or report it as spam
From another page on Facebook or from a website outside of Facebook, click on a link that leads to the page
Move the mouse over the name or profile picture of a page to see a preview of the page content
Click on the website, telephone number, “plan route” button or another button on a page
Information about whether you are logged in using a computer or a mobile device while visiting or interacting with a page or its content.
You can find more information in Facebook’s data protection information here.

Facebook also processes the data in the USA. There is no adequacy decision by the EU Commission for the USA. Therefore, with Facebook, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find out more about how Facebook uses your data when you visit or like our Facebook page here.

10. Google Analytics
If you consent, we will use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”). Google Analytics collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analyses and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

Your data remains stored with Google Analytics for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google’s privacy policy.

The use of Google Analytics is based on your consent (Art. 6 Para. 1 a GDPR).

You can revoke your consent at any time and deactivate Google Analytics using a browser add-on. You can download this here. Alternatively, you can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.
10.1. Google Optimize
If you consent, along with Google Analytics we will use Google Optimize, a web analytics service provided by Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”). Google Optimize collects pseudonymous data from you about the use of our website, including your shortened IP address, and uses cookies. This data is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website for us, to create reports on the use of our website and to generate further analyses and evaluations related to the use of our website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

Your data remains stored with Google Optimize for a period of 14 months. After this period, the data will be deleted and only aggregated statistics will be kept.

For more information about how Google uses your data, see Google’s privacy policy.

The use of Google Optimize is based on your consent (Art. 6 Para. 1 a GDPR).

You can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.

11. Social plugins
If you want, you can use social plugins to share the content of our website on social networks. We have provided a two-click solution: If you want to share content via such a plugin, you must first click on an icon of the corresponding social network. This click then unlocks the plug-in of the respective social network for the future.

Only then will various data be transmitted to the respective social network. This can include:

Date and time of the visit to the website
URL of the website you are on
URL of the website you previously visited (“referrer”)
Browser used
Operating system used
Your IP address
You can withdraw your consent by clicking on “Privacy Settings ” at the bottom of the page.

If you are logged into the respective social network while visiting our site, the provider may recognize that you visited our site and assign the visit to your account. If you use the plugin functions (e.g. clicking the “Like” button, submitting a comment), this information will also be transmitted from your browser directly to the respective social network and saved there if necessary. The purpose and scope of the data collection and the further processing and use of the data by the networks can be found in the data protection information of the respective social network.

12. Integrated third-party content
We have also included third-party content on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third party provider. In particular, it is not excluded that these providers can take note of the IP address assigned to you. As far as personal data is processed, this is done on the basis of the data protection declarations of the respective third party providers. The inclusion of your data is processed to allow us to display corresponding content and to offer necessary functions, as well as allowing us to operate our website more efficiently as long as this doesn’t infringe on your own legitimate interests (Art. 6 para. 1 lit. f GDPR). We include the following third-party content:

Mapbox
We incorporate map tools from Mapbox, a service of Mapbox, Inc., 740 15th Street NW, 5th Floor, Washington, District of Columbia 20005 (“Mapbox”). These allow us to show you different maps. There is no adequacy decision by the EU Commission for the USA. Therefore, with MapBox, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Mapbox’s privacy policy here.

YouTube
We use YouTube videos. YouTube is a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA, for users from the EU of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Google’s privacy policy click here.

Vimeo
We integrate videos from Vimeo. Vimeo is a service of Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. There is no adequacy decision by the EU Commission for the USA. Therefore, with Vimeo, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR.

You can find Vimeo’s privacy policy here.

Google Fonts
We use Google Fonts, a service of Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA (“Google”) to embed fonts. We do not transmit any personal data to Google. Google also does not use cookies. However, for technical reasons your browser will transmit your IP address to Google.

There is no adequacy decision by the EU Commission for the USA. Therefore, with Google, we adhere to the standard data protection clauses approved by the EU Commission in accordance with Art. 46 Para. 2 lit. c GDPR. To view Google’s privacy policy, click here, for further information on data processing at Google Fonts, click here.

18. Applications
If you apply to us, we will process your application documents and the information they contain to process your application or to decide on the establishment of an employment relationship. Your application documents will only be made available to those responsible for applying within our company. The data processing takes place on the legal basis of § 26 paragraph 1, 3 BDSG.

Should we unfortunately not be able to offer you a job, your application documents will generally be kept for up to 4 months after the end of the respective application process in order to be able to answer questions in connection with your application. Further storage can take place if this is necessary for the provision of evidence, in particular for defense, assertion or enforcement of claims (Art. 6 Para. 1 lit.f GDPR).

In addition, we only save your applicant data if you have expressly consented to it (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time with future effect. For example, you can use the contact details above. Revocation does not affect the processing that took place before your revocation.

13. Automated decision making and visitor profiling
We do not use automation to make specific decisions in regards to profiling.

14. Deletion of your data
Unless otherwise stated, we will delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the preceding paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website plus a period of 30 days in which we keep backup copies after the deletion. We will also keep your data if we are obliged to do so for legal reasons or if the data is needed for criminal prosecution or to secure, assert or enforce legal claims.

If you delete your user account, your profile will be completely and permanently deleted. However, we will keep backup copies of your data for a period of 30 days before they are finally deleted, provided that this data is no longer required for legal reasons or for criminal prosecution or to secure, assert or enforce legal claims.

As far as data has to be kept for legal reasons, processing is restricted. The data will then no longer be available for further use.

Storage beyond the contractual relationship takes place on the basis of our aforementioned legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR.

15. Your rights as a data subject
15.1. Right to information
You have the right to receive information from us at any time on request about the personal data processed by us in the scope and under the conditions of Art. 15 GDPR and § 34 BDSG. To do this, you can submit an application by post or email to the above address.

15.2. Right to correct incorrect data
You have the right to request that we immediately correct your personal data if it is incorrect. For this, please contact the contact addresses given above.

15.3. Right to cancellation
You have the right, under the conditions described in Art. 17 GDPR and § 35 BDSG, to request that we delete your personal data. These requirements provide in particular a right to erasure if the personal data is no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the obligation to erase them under EU law or the law of the Member State to which we are subject. For the period of data storage, see also section 15 of this data protection declaration. In order to assert your above right, please contact the above address.

15.4. Right to restriction of processing
You have the right to request that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the correctness of the personal data between the user and us is controversial, for the duration that requires the correctness to be checked and in the event that the user requests a restricted processing instead of the deletion in the case of an existing right to deletion; furthermore in the event that the data is no longer required for the purposes pursued by us, but the user needs it to assert, exercise or defend legal claims and if the successful exercise of an objection between us and the user is still controversial. In order to assert your above right, please contact the above address.

15.5. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common, machine-readable format in accordance with Art. 20 GDPR. In order to assert your above right, please contact the above address.

15.6. Right to object
You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation on the basis of Art. 6 Para. 1 (GDPR). Your right to objection exists for reasons arising out of your particular situation, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if the processing is necessary for the assertion and exercise of or defence against legal claims (Art. 21 (1) GDPR).

15.7. Right to complain
You have the right to contact a supervisory authority of your choice in the event of complaints.

15.8. Data processing when exercising your rights
Finally, we would like to point out that we exercise the rights according to Process Art. 15 to 22 GDPR to use personal data transmitted by you for the purpose of implementing these rights and in order to be able to provide proof of this. This processing is based on the legal basis of Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 ( 2) BDSG.

16. Changes to this data protection declaration
The current version of this data protection declaration is always available at https://trail-hub.com/privacy/

Status as of April 21st, 2022