Privacy Policy

This policy explains how we handle personal data when you visit this website or contact us through it. We process personal data under the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

1. WHO IS RESPONSIBLE

LW Sports Management OG
Waagstrasse 16, 9170 Ferlach, Austria
Company register number: FN 631707 g
VAT identification number: ATU 80886105

Email: sport@nordichockeyacademy.com
Phone: +43 699 15303011

We have not appointed a Data Protection Officer. Please send any questions about your data to the email address above.

2. WHAT THIS POLICY COVERS

This policy covers visitors to this website and people who contact us through it.

It does not cover what happens to a player's information once they join the academy. Players and their guardians receive separate information about that when they enrol.

3. VISITING THE WEBSITE

Our hosting provider automatically records technical data each time a page is requested: your IP address, the date and time, the pages you viewed, the page you came from, and your browser and operating system.

Why: to deliver the site, keep it stable and secure, and detect misuse.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is running a secure and functional website.
Kept for: 30 days.

4. CONTACTING US AND APPLYING

When you use our contact or application form, or email or call us, we process what you give us. For an application this is typically the player's name, date of birth, nationality, country and city, contact details, playing history, and the name and contact details of a parent or guardian where the applicant is under 18.

Why: to answer you, and to assess an application and take steps towards a possible agreement.
Legal basis: Article 6(1)(b) GDPR where your message concerns a possible agreement with us. Otherwise Article 6(1)(f) GDPR, our legitimate interest in replying to people who contact us.
Kept for: general enquiries, 12 months after the matter is closed. Applications that do not lead to a place, 12 months after the decision. Applications from players who join, three years after they leave the programme.

Our kit sizing form, which is available to enrolled players and their guardians, also collects the player's height, weight and equipment sizes. We use these only to order the correct equipment and team wear, on the basis of Article 6(1)(b) GDPR. Apart from this, we do not ask for health information through this website. If you send us health information unprompted, we will delete it unless it is needed for a matter you have asked us to deal with.

5. APPLICANTS UNDER 18

Many applicants are minors. Where an applicant is under 18, we ask for a parent or guardian to complete and submit the form, and we rely on their consent where consent is required.

We collect only what we need to assess an application. We do not use information about minors for advertising or profiling.

A parent or guardian can exercise all the rights in section 10 on behalf of their child.

6. PLAYER PROFILES ON THIS SITE

We publish profiles of players in our teams, showing name, nationality, squad number, position and a photograph. We do not publish dates of birth.

Why: to present our teams and our activities.
Legal basis: Article 6(1)(a) GDPR, consent. For players under 18, consent is given by a parent or guardian. We also rely on Article 6(1)(f) GDPR where we report on matches and results, taking account of the protection given to a person's image under § 78 of the Austrian Copyright Act.

Consent can be withdrawn at any time, with effect for the future. Write to us and we will remove the profile from this website and from channels we control.

7. COOKIES AND ANALYTICS

Some cookies are needed for the site to work. These are set under § 165(3) TKG 2021 and Article 6(1)(f) GDPR and cannot be switched off.

We also use Google Analytics to understand how the site is used. These cookies are set only after you agree through our cookie banner, under § 165(3) TKG 2021 and Article 6(1)(a) GDPR. Nothing is loaded before you agree. You can change or withdraw your choice at any time through the cookie settings link in the footer.

Services on this site:

Webflow — Webflow, Inc., United States — hosting and delivery of the site. Necessary.
Cookiebot — Usercentrics A/S, Denmark — managing and recording your cookie choices. Necessary.
Google Analytics 4 — Google Ireland Limited — measuring how the site is used. Set only with your consent.

You can also set your browser to refuse or delete cookies, though this may affect how the site works.

8. WHO ELSE SEES YOUR DATA

We share personal data only where it is needed, and only with:

our website platform and hosting provider (Webflow)
our email provider
our consent management provider (Cookiebot)
our analytics provider (Google), where you have consented
our equipment supplier, for orders placed through the kit sizing form
our accountant and tax adviser, for invoicing and bookkeeping
our legal advisers, insurers and public authorities, where this is necessary or required by law

Where a provider processes data on our behalf, we have a data processing agreement with them under Article 28 GDPR. We do not sell personal data.

9. TRANSFERS OUTSIDE THE EU

Some of our providers are based in the United States or process data there, in particular Webflow and Google.

Where this happens, the transfer is covered either by an adequacy decision of the European Commission under Article 45 GDPR — for certified US providers, the EU–U.S. Data Privacy Framework — or by the Standard Contractual Clauses adopted by the Commission under Article 46 GDPR.

You can ask us for a copy of the safeguards that apply.

10. YOUR RIGHTS

You have the right to:

ask what data we hold about you and get a copy of it (Article 15)
have inaccurate data corrected or incomplete data completed (Article 16)
have your data deleted (Article 17)
have processing restricted (Article 18)
receive the data you gave us in a machine-readable format and have it sent to another organisation (Article 20)
object to processing based on our legitimate interests, on grounds relating to your situation. You can object to direct marketing at any time without giving a reason (Article 21)
withdraw any consent you have given, at any time and with effect for the future. This does not affect anything done before you withdrew it (Article 7(3))

Write to sport@nordichockeyacademy.com. We will reply within one month. If a request is complicated we may take up to two months longer, and we will tell you if that happens. We may ask you to confirm who you are before we act.

11. COMPLAINTS

If you think we are handling your data unlawfully, you can complain to the Austrian data protection authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
www.dsb.gv.at

You can also complain to the authority in the country where you live.

12. DO YOU HAVE TO GIVE US YOUR DATA

No law requires you to. But we need certain information to reply to you, to assess an application, or to agree a place at the academy. If you do not provide it, we may not be able to deal with your enquiry.

Agreeing to cookies and to the publication of a photograph is voluntary. Declining has no effect on an application.

13. AUTOMATED DECISIONS

We do not make decisions about you by automated means, and we do not profile you. Decisions about applications are made by our staff.

14. SECURITY

We use appropriate technical and organisational measures under Article 32 GDPR, including encrypted transmission, access controls and confidentiality obligations for our staff and partners. Only people who need access to data for their work have it.

No transmission over the internet is completely secure, and we cannot guarantee absolute security.

15. CHANGES

We may update this policy if our activities or the law change. The current version is always on this page.