Privacy policy
This translation is for information only; the German version is legally binding.
We care about protecting your data. This website has no advertising, no statistics or analytics services, no embedded content from other providers and no cookies on the public pages. Below we explain which data is nevertheless processed and why.
Controller
Die 160er – Modellbahn in Spur N (registered association, ZVR 695148056)
Daniel-Gran-Gasse 24, A-3003 Gablitz, Austria
Email: contact@die160er.org
Our club is not required to appoint a data protection officer. For questions about data protection, please write to the email address above.
Hosting and server logs
The website is hosted on a server of World4You Internet Services GmbH in Austria, acting as our processor. With every request the server stores technically necessary information in log files: IP address, date and time, requested address, amount of data transferred, the previously visited page, browser and operating system. This information is used solely to ensure the operation and security of the website and to detect errors or attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The logs are not combined with other data and are deleted automatically after the period set by the host.
Cookies
The public pages – home page, exhibitions, contact, legal notice and this page – set no cookies and store nothing in your browser. The language is chosen via the address (“?lang=en”), not via a cookie. A cookie is only used in the members’ area (see below). If a member is signed in, the public pages recognise this existing cookie and show “Signed in as …” in the menu.
Fonts
The fonts Barlow, Barlow Condensed and IBM Plex Mono are hosted on our own server. Loading the page does not connect to Google or other font providers.
Dates and calendar subscription
Our board enters the dates directly on this website; they are stored in our database at World4You. When a date is entered, we store who created it.
If you subscribe to our dates in your own calendar, your calendar app (or, for Google Calendar, a Google server) regularly fetches the dates from our server. This only creates the server logs described above; we do not learn who set up the subscription. Processing by your calendar provider is subject to its privacy policy. To end a subscription, remove the calendar from your app.
Photos
On the home page and under “Exhibitions” we show photos of our modular layout and modules as well as photos from our exhibitions. Exhibitions are public events; visitors or members may be visible in some photos. We publish these photos to report on the club’s activities (Art. 6(1)(f) GDPR). If you recognise yourself in a photo and do not want it to be published, please write to us – we will remove it promptly.
Contact form and email
If you write to us via the contact form or by email, we use your name, email address, the selected topic and your message to answer your enquiry (Art. 6(1)(b) GDPR for enquiries about membership or exhibitions, otherwise (f)). Messages from the form are sent to the club by email and are not stored on the web server. We keep the email as long as needed to handle it and then delete it – unless it leads to a membership or other cooperation.
To protect against mass spam, the server remembers an encrypted checksum of your IP address for one hour, from which the address cannot be recovered. The form sets no cookies and loads no services from other providers (no “captcha”).
Membership application
If you apply for membership online, we store your type of membership, first and last name, address, postcode and town, phone number (optional), email address, date of birth, the two confirmations (declaration of consent, club statutes) and the time of the application on the web server, so that the board can decide on your admission (Art. 6(1)(b) GDPR). The board is informed by email and in the members’ area. We keep the application for the duration of the procedure; if you become a member, your data move into the member administration, otherwise we delete the application when it has been decided – at the latest after one year. The same protection against mass spam as for the contact form applies (an encrypted checksum of your IP address for one hour).
Members’ area
For the members’ area, the club stores for each member the login name, their functions in the club (e.g. member, board), the password only as an encrypted hash, the time of the last login as well as the number of failed login attempts and any temporary lock (protection against password guessing). The legal basis is membership of the club (Art. 6(1)(b) GDPR). When membership ends, the account is deleted.
Each member may optionally store an email address. It is used solely to send a link for setting a new password when the password has been forgotten. The link is valid for one hour and only once; only a checksum of it is stored. Members can change or delete the address themselves at any time.
After login, the site sets a technically necessary session cookie (“die160er”) that only identifies the session. It becomes invalid when signing out or closing the browser. Internal documents such as module data, lists and minutes are only available to signed-in members with the corresponding permission. For internal entries such as repair orders, we store who created or completed them and when.
Links to other websites
Links to other providers, such as our Facebook page, Google Calendar or Google Maps (addresses of dates and of the club evening), are simple links. Data is only transferred to the respective provider when you click such a link; its privacy policy then applies.
Disclosure of data
We do not sell data or pass it on to third parties. The exception is our host World4You, which operates the website and the mailboxes for us. All data is processed in Austria. There is no automated decision-making or profiling.
Your rights
You have the right to access your stored data and to rectification, erasure, restriction of processing and data portability. You may object at any time to processing based on our legitimate interest ((f)). Please contact contact@die160er.org.
If you believe that we process your data unlawfully, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Last updated: October 2026