Privacy Policy

1. General Information

The protection of your personal data is important to us. We process personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and other applicable data protection regulations.

This Privacy Policy informs you about which personal data we process on this website, for what purposes this processing takes place, on what legal basis the processing is carried out and what rights you have.

2. Controller

The controller responsible for data processing on this website is:

EBA – European BBQ Association
ZVR number: 1891489982
Neudorfstraße 21
8410 Wildon
Austria

Authorised representative: Boris Winkler

Email: winkler@europeanbbq.com
Phone: +49 151 62456611
Website: www.europeanbbq.com

3. Contact for Data Protection Requests

If you have any questions regarding data protection or wish to exercise your rights as a data subject, you can contact us at the following email address:

winkler@europeanbbq.com

If a separate data protection contact address is set up, it can be added here:

Data protection contact: [please add]

4. Processing of Personal Data When Visiting the Website

When you access our website, technical information is automatically processed by the web server. This may include, in particular, the following data:

• IP address
• date and time of access
• pages and files accessed
• browser used
• operating system used
• referrer URL
• amount of data transferred
• server log files
• technical error and security logs

This data is processed in order to technically provide the website, ensure system security, analyse errors and prevent misuse.

The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure, stable and technically error-free provision of our website.

Server log files are stored only for as long as required for technical and security-related purposes and are then deleted or anonymised, unless longer storage is required for legal reasons.

5. Hosting

Our website is hosted by the following provider:

Hostinger International Ltd.
[Address to be added, if desired]

As part of the hosting services, personal data generated when visiting and using the website may be processed. This may include, in particular, IP addresses, technical access data, form data, user accounts, team profile data, uploaded content and technical system data.

The hosting provider processes data on our behalf. A data processing agreement pursuant to Art. 28 GDPR should be concluded with the hosting provider.

The processing is carried out for the technical provision, security and maintenance of the website.

The legal basis is Art. 6(1)(f) GDPR. Where data processing on behalf of the controller takes place, the processing is additionally based on Art. 28 GDPR.

6. WordPress Content Management System

This website uses WordPress as its content management system.

WordPress is used for the technical creation, management and delivery of website content. Personal data may be processed as part of its use, in particular when user accounts are created, forms are used or team profiles are created and managed.

The data processed may include, in particular:

• name
• email address
• username
• password in encrypted form
• role and permission information
• login times
• technical usage data
• IP address
• content entered or uploaded by users

The processing is carried out for the technical provision of the website, the management of user accounts and ensuring functionality.

Depending on the use, the legal basis is Art. 6(1)(b) GDPR, where processing is necessary for the provision of a user account or platform function, and Art. 6(1)(f) GDPR for the secure and functional provision of the website.

7. WordPress Theme Astra

This website uses the WordPress theme Astra.

The theme is used for the design and technical presentation of the website. To the best of our current knowledge, the theme itself does not independently process personal data of website visitors beyond the normal technical provision of the website.

If personal data is processed through extensions, external services or theme functions, this will be described separately in this Privacy Policy.

8. Elementor

This website uses Elementor for the design and management of website content.

Elementor is used for the visual creation and presentation of page content. Technical data required for displaying the website may be processed. If forms, integrations or external services are embedded via Elementor, additional personal data may be processed depending on the configuration.

The processing is carried out for the technical and visual provision of the website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the professional, user-friendly and technically functional presentation of our website.

9. Contact Forms with WPForms

We use WPForms on our website to provide contact forms and other form functions.

When you complete a form on our website, the data you enter is processed. This may include, in particular:

• name
• email address
• phone number
• subject
• message
• team name
• country
• website or social media links
• other voluntarily provided information
• IP address and technical form metadata, where enabled

The processing is carried out for the purpose of handling your enquiry, communicating with you and managing incoming messages or registrations.

The legal basis is Art. 6(1)(b) GDPR, provided your enquiry relates to contractual or pre-contractual communication. In other cases, the processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in processing and documenting enquiries.

Form data is stored only for as long as required to process the enquiry or as long as statutory retention obligations apply.

10. Team Management and Team Profiles

On our website, BBQ teams, organisations or partners can create, submit or edit team profiles. The team management system was developed specifically for this website.

As part of registration, profile creation and profile management, the following personal data may be processed in particular:

• name of the contact person
• email address
• username
• password in encrypted form
• team name
• country
• region or city
• website
• social media profiles
• team description
• logos
• images
• uploaded files
• publicly visible profile information
• internal profile status information
• change and login data
• technical access data

The data is processed in order to provide team profiles, manage user accounts, display teams on the website, enable changes and provide the platform function of EuropeanBBQ.com.

Some of the data entered may be publicly visible on the website, in particular team name, country, description, images, logos, website and social media links, provided that these have been submitted by the team and are intended for publication.

The processing is based on Art. 6(1)(b) GDPR, insofar as it is necessary for the provision of the user account and team profile function. In addition, processing is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in managing, presenting and quality-assuring the European BBQ team community.

Where users upload images, logos or other content, they confirm that they hold the necessary rights to this content and that the content may be published on the website.

We reserve the right to review, reject, edit or remove submitted team profiles and content before publication, particularly if they violate legal provisions, third-party rights or our terms of use.

Team profiles and user accounts are stored for as long as the profile is active or as long as storage is required for platform management. Deletion may be requested, provided there are no statutory retention obligations or legitimate reasons for continued storage.

11. Publication of Team Data

If teams provide information for publication, this data may be publicly accessible worldwide. This applies in particular to:

• team name
• country
• region or city
• team description
• images
• logos
• website
• social media links
• competition information or achievements

Please note that publicly published information may be indexed by search engines and stored or further processed by third parties. Complete removal from search engines or external archives is not fully within our control.

Publication takes place on the basis of the information provided by the respective team and on the basis of Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

12. User Accounts and Login

When a user account is created, we process the data required for registration and login. This includes, in particular:

• username
• email address
• encrypted password
• user role
• login data
• technical security data

The processing is carried out to provide and secure the user account.

The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure management of user accounts and the protection of the platform against misuse.

13. Uploads of Images, Logos and Files

As part of the team profile function, users can upload images, logos or other files.

Personal data may be processed in this context, particularly if images show identifiable persons or contain metadata. Users are responsible for uploading only content for which they have the necessary rights and consents.

We recommend that users avoid including unnecessary personal data in image files or filenames before uploading and remove image metadata where possible.

The processing is carried out for the presentation and management of team profiles.

The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.

14. Google Fonts

This website uses Google Fonts for the consistent display of fonts.

If Google Fonts are loaded externally via Google servers, a connection to Google servers may be established when visiting our website. Technical data may be transmitted to Google, in particular:

• IP address
• requested font or requested Google URL
• browser and operating system information
• referrer URL
• technical header information

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The integration is used for the consistent and appealing presentation of our website.

The legal basis, where consent is obtained via a cookie or consent tool, is Art. 6(1)(a) GDPR. If Google Fonts are hosted locally and no connection to Google servers is established, no visitor data is transmitted to Google in connection with font delivery.

For data protection reasons, we recommend hosting Google Fonts locally on your own server.

15. Cookies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and contain certain information.

We distinguish between:

• technically necessary cookies
• functional cookies
• analytics cookies
• marketing cookies
• cookies from external services

Technically necessary cookies are required for the website to function. These may include, in particular, login cookies, security cookies, session cookies and cookies used to store your cookie settings.

Non-essential cookies, in particular for analytics, marketing or external media, are only set with your consent, where such services are used.

The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR. The legal basis for cookies requiring consent is Art. 6(1)(a) GDPR.

You can change your cookie settings at any time via the “Cookie Settings” link or a corresponding button on the website.

16. Cookie Consent Tool

This website should use a cookie consent tool to obtain and document consent for non-essential cookies and external services.

Cookie tool used: [please add, e.g. Real Cookie Banner, Borlabs Cookie, Cookiebot or Complianz]

The following data may be processed:

• consent status
• date and time of consent
• selected categories
• technical browser information
• anonymous or pseudonymous consent ID

The processing is carried out to obtain, manage and document consent.

The legal basis is Art. 6(1)(c) GDPR for compliance with legal obligations and Art. 6(1)(f) GDPR for the legally compliant documentation of consent.

17. Embedded External Content

Our website may include content from external providers, for example videos, maps, social media content or external media.

Currently used external services: [please add]

Possible services may include:

• YouTube
• Google Maps
• Instagram
• Facebook
• Vimeo
• other external media

When such content is loaded, personal data, in particular IP address and technical browser data, may be transmitted to the respective provider.

External content should only be loaded after your consent, unless it is technically necessary.

The legal basis is Art. 6(1)(a) GDPR, where consent is required.

18. Analytics and Tracking Tools

We are currently not aware of any analytics or marketing tracking tools being used.

If services such as Google Analytics, Google Tag Manager, Meta Pixel, Google Ads Conversion Tracking or similar tools are used in the future, this Privacy Policy will be updated accordingly. Such services may generally only be activated after the user has given consent, unless they are technically necessary.

Analytics or tracking tools used: [please add or enter “none”]

19. Newsletter

We are currently not aware of any newsletter service being used.

If a newsletter is offered in the future, personal data such as email address, name, registration date, IP address and consent status will be processed. Registration should be carried out using a double opt-in procedure.

Newsletter service: [please add or enter “none”]

The legal basis in this case would be Art. 6(1)(a) GDPR. It must be possible to unsubscribe from the newsletter at any time.

20. Communication by Email

If you contact us by email, we process your email address, the content of your message and any other personal data you may provide.

The processing is carried out to handle your enquiry and communicate with you.

The legal basis is Art. 6(1)(b) GDPR, provided your enquiry is related to contractual or pre-contractual communication. In other cases, the processing is based on Art. 6(1)(f) GDPR.

21. Recipients of Personal Data

Personal data may be transferred to the following recipients or categories of recipients where necessary:

• hosting provider
• technical service providers
• website administrators
• plugin and software providers, insofar as they are technically integrated
• external providers, where their services are used
• authorities, where legally required
• legal advisers, where necessary for the assertion or defence of legal claims

Personal data is only shared where this is legally permitted, necessary for the fulfilment of our tasks or where consent has been given.

22. Data Transfers to Third Countries

When using certain external services, in particular providers based outside the European Union or the European Economic Area, personal data may be transferred to third countries.

This may be relevant in particular for services provided by Google or other international providers.

Such a transfer only takes place where there is an appropriate legal basis, for example an adequacy decision by the European Commission, standard contractual clauses or explicit consent.

23. Storage Period

We store personal data only for as long as required for the respective purposes or as long as statutory retention obligations apply.

In general, the following storage periods apply:

• contact enquiries: for as long as required for processing and documentation
• user accounts: for as long as the account is active or legal reasons for storage exist
• team profiles: for as long as the profile is active or required for platform management
• server log files: only for a limited period, where technically and security-relevant necessary
• consent data: for as long as required to document consent
• legally relevant documents: in accordance with statutory retention periods

Once the respective purpose no longer applies, personal data will be deleted or anonymised, unless statutory obligations prevent this.

24. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

These include, in particular:

• SSL/TLS encryption
• access restrictions
• secure passwords
• user roles and permissions
• regular updates of WordPress, themes and plugins
• technical security measures of the hosting provider
• backups
• protection against unauthorised access

Please note that data transmission over the internet may nevertheless be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

25. Your Rights

Under the GDPR, you have the following rights:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object
• right to withdraw consent
• right to lodge a complaint with a supervisory authority

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future.

To exercise your rights, you can contact us at the following email address:

winkler@europeanbbq.com

26. Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

The competent authority for Austria is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

27. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, technical functions, services used or data processing on this website change.

The current version is available on this website at all times.

28. Last Updated

July 2026