Skip to content

Privacy Policy

Information on the processing of personal data when visiting and using this website under the GDPR and the German BDSG.

1. Controller

The controller responsible for data processing on this website is:

Shooting Club Society e.V.

Chairman: Michael Paa

Wanderweg 8, 93170 Bernhardswald, Germany

Email: verwaltung@shootingclubsociety.de

Phone: +49 177 8226822

Further provider details are available in the legal notice.

2. General information on processing

We process personal data only as far as necessary to provide a functional website and our content and services, or where consent or another legal basis exists.

Legal bases include in particular Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual steps), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests).

Personal data are deleted or restricted as soon as the purpose of storage ceases to apply and no statutory retention duties require otherwise.

3. Hosting and website delivery

This website is technically provided via hosting infrastructure (currently typically Vercel Inc., USA). Technically necessary data such as IP address, time of access, requested file/URL, referrer, browser and operating-system information and success/error status may be processed in server log files.

Processing takes place to deliver and secure the website and to detect abuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and efficient provision of our online offering.

Where data are transferred to third countries (in particular the USA), this is based on appropriate safeguards under Art. 44 et seq. GDPR (in particular Standard Contractual Clauses), where applicable. Further details are available from the respective processor.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser address bar.

5. Cookies and local storage

We currently do not use non-essential tracking, marketing or analytics cookies.

Technically necessary processes may use local browser storage mechanisms where required to operate the site. There is no use for advertising purposes.

If optional analytics or marketing technologies are introduced later, we will update this notice and obtain consent where required (Art. 6(1)(a) GDPR and, where applicable, § 25 TDDDG).

6. Contact form and enquiries

If you contact us via the contact form, we process the data you provide (in particular name, email address, optional phone number, preferred location, experience level, interest, preferred language and your message) to handle your enquiry and related follow-up communication.

Legal bases: Art. 6(1)(b) GDPR where the enquiry relates to concluding or initiating a membership or service relationship; otherwise Art. 6(1)(f) GDPR (legitimate interest in orderly communication) and — where you actively confirm the privacy notice — Art. 6(1)(a) GDPR.

Form data are transmitted in encrypted form. We may use a honeypot check and server-side validation to prevent spam and abuse.

Data are deleted once they are no longer required for the purpose of collection, generally after your enquiry has been fully handled, unless statutory retention duties (e.g. commercial or tax law) require otherwise. In practice we generally retain enquiry correspondence for up to 24 months unless a longer need or duty exists.

7. Email delivery (SMTP)

To deliver enquiries to club administration and — if enabled — automatic acknowledgements, we use SMTP email delivery via our email/hosting provider.

Form data are sent to the administration address stated in the legal notice or configuration. The legal basis corresponds to section 6.

Please note that email transmission on the internet may have security gaps; absolute security cannot be guaranteed. Where necessary, please use an alternative secure channel for highly confidential content.

8. Contact by email and WhatsApp

If you contact us by email at verwaltung@shootingclubsociety.de, the personal data you provide are processed to handle the enquiry (Art. 6(1)(b) or (f) GDPR).

If you contact us via WhatsApp (+49 177 8226822), your data are processed by Meta Platforms Ireland Limited and/or affiliated companies as the messenger provider. WhatsApp is a service with its own privacy responsibility. Please consult WhatsApp’s privacy notices. We recommend not sending particularly sensitive data via messengers.

Our use of WhatsApp for communication is based on Art. 6(1)(f) GDPR or your initiative in contacting us; where required, consent under Art. 6(1)(a) GDPR.

9. Security check (Cloudflare Turnstile, optional)

To protect the contact form against automated abuse, we may use Cloudflare Turnstile (Cloudflare, Inc. / Cloudflare Germany GmbH or affiliates) if configured in the respective environment.

Technically necessary connection data (e.g. IP address, browser information, timestamp) may be transmitted to Cloudflare and a verification token generated. The purpose is spam and bot prevention.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security and functionality of the form). Further information: https://www.cloudflare.com/privacypolicy/

10. Rate limiting (Upstash Redis, optional)

To limit abusive requests we may use a rate limiter based on Upstash Redis if configured. Pseudonymised or truncated connection attributes (e.g. IP-related) may be stored temporarily.

The purpose is protection against overload and abuse (Art. 6(1)(f) GDPR). Retention is short and limited to the protection mechanism.

11. Analytics and reach measurement

We currently do not use tracking tools for marketing or behavioural analytics. Data are not shared with advertising networks.

If we introduce privacy-friendly analytics later, we will update this privacy policy and obtain consent where required.

12. Embedded content and fonts

Where technically possible, fonts and essential assets are served locally to avoid unnecessary third-party connections.

Official logos and media are provided from our own hosting. External map providers (e.g. Google Maps) are currently not embedded.

13. Recipients and processors

Personal data may be transferred to technical service providers that support us with operations, hosting, email delivery, security checks or abuse protection. They process data only to the extent required and on the basis of data-processing agreements or appropriate safeguards where legally required.

Data are not shared with third parties for advertising purposes.

PAA Shooting Academy is legally separate from the club. Personal data are transferred to the cooperation partner only where necessary to handle your specific enquiry and where a legal basis exists (e.g. pre-contractual steps or your consent).

14. Retention

Unless a more specific retention period is stated in the sections above, we store personal data only as long as required for the respective purposes or as required by law.

Server log files are generally deleted or anonymised after a short period unless longer retention is required for security or evidence purposes.

15. Your rights

Subject to statutory requirements, you have in particular the following rights:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)

• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to verwaltung@shootingclubsociety.de is sufficient.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. For Bavaria this is typically the Bavarian Data Protection Authority (BayLDA).

16. Right to object

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then assess whether compelling legitimate grounds on our side override your interests.

17. No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

18. Minors / young people

Our online offering is not directed at children as a particularly vulnerable target group. Information on youth shooting concerns participation under the applicable legal conditions and supervision duties and is not an invitation for minors to submit data unaccompanied.

Parents or legal guardians should submit or accompany enquiries for young people where required.

19. Updates to this privacy policy

We reserve the right to adapt this privacy policy so that it always meets current legal requirements or reflects changes to our services. The new privacy policy will then apply to your next visit.

Last updated: July 2026