1. Controller
Black Forest ULTRA Bike UG (haftungsbeschränkt)
Oberrieder Straße 3
79199 Kirchzarten
Germany
E-mail: hello@ultra-trailrun.de
2. Collection and storage of personal data
a) Server log files
When you visit our website, data is automatically recorded in server log files:
- Browser type and version
- Operating system
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
b) Contact forms
If you contact us via one of our forms (contact, become a volunteer, feedback, partner enquiry), the personal data you provide (e.g. name, e-mail, phone number, message) will be stored. The forms are processed by our hosting provider and automatically checked for spam.
- Purpose: processing your enquiry, communication about the event
- Legal basis: Art. 6(1)(b) GDPR
The data is not passed on without consent.
c) Registration for the Trail Run
Registration for the Trail Run is handled by Datasport. Datasport's privacy notice, shown to you during registration, applies. Purpose: processing your registration, timing, results lists. Legal basis: Art. 6(1)(b) GDPR.
d) Newsletter
For the newsletter we use Brevo (Sendinblue GmbH, Berlin). We only send it after your consent via the double opt-in procedure. Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every newsletter.
e) Trail Runner game and prize draw
If you enter your score in the game “BFUTR Trail Runner”, we store your name, e-mail address, score, race and time on the servers of our host Netlify. The name appears with the score on the public leaderboard; the e-mail address does not. Purpose: leaderboard and running the prize draw, notifying the winners. Legal basis: Art. 6(1)(a) GDPR (consent), which you can withdraw at any time by e-mail to hello@ultra-trailrun.de. We delete the data no later than three months after the end of the respective prize draw. The game stores your personal record only locally in your browser (Local Storage).
f) Cookies
Our website does not use cookies.
g) Analytics tools
We do not use any web analytics or tracking tools.
h) Third-party providers / plugins
We do not embed any third-party content. Fonts, images and videos are hosted on our own server. We only link to Instagram, YouTube, Strava, komoot, Sportograf, Datasport and the BFUTR Shop. Data is only transmitted when you click one of these links.
3. Disclosure to third parties
Data is only shared with service providers needed for the event or the website:
- Hosting and forms: Netlify, Inc., San Francisco, USA (spam checks on forms via Akismet, Automattic Inc., USA)
- Newsletter: Brevo (Sendinblue GmbH, Berlin)
- E-mail: Microsoft 365 (Microsoft Ireland Operations Ltd.)
- Registration and timing: Datasport
For transfers to the USA we rely on the EU-US Data Privacy Framework or on standard contractual clauses.
4. Storage period
Personal data is deleted as soon as the purpose no longer applies or statutory retention periods expire.
5. Rights of data subjects
You have the right to:
- Access to stored data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- objection (Art. 21 GDPR)
Your right to lodge a complaint with the competent supervisory authority remains unaffected.
6. Safety
The website uses SSL/TLS encryption. Hosting is provided by a service provider under a data processing agreement (Art. 28 GDPR).
As of: October 2026
