Privacy Policy

1. Controller

MERIDIAN Athletic Club GmbH, Landwehrstraße 47, 80336 München, represented by Anselm Rothbauer.

Telephone: +49 89 5502 4180

Email: kontakt@meridian-athletic.de

We have not appointed a data protection officer as we are not required to do so under Art. 37 GDPR; enquiries about data protection are handled by the managing director at the address above.

2. Hosting and server log files

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, on servers in the European Union (Frankfurt am Main). A data processing agreement under Art. 28 GDPR and the EU standard contractual clauses are in place. When a page is called up, the hosting provider records the requesting IP address in shortened form, the date and time, the page requested, the referring page, the browser and operating system used, and the amount of data transferred. This is done on the basis of Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the site. Log data is deleted after seven days at the latest and is not merged with other data.

3. Cookies and local storage

This site sets no advertising or analytics cookies. It stores two things in your browser's local storage: the language you last read the site in, and whether you have agreed to the map on the Club page being loaded. Both are set on the basis of § 25 (2) TDDDG (strictly necessary and consent respectively) and can be removed at any time by clearing site data in your browser.

4. Consent-gated map

The map on the Club page is not loaded until you press the button that loads it. Only then is a static image requested from OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, and only then does your IP address become known to that provider. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you may withdraw at any time with effect for the future by clearing site data. If you do not press the button, no request is made to OpenStreetMap.

5. Forms on this site

The membership application, the callback request and the corporate enquiry each transmit the data you type into them to the club office by email. Providing a name and a means of reply is necessary for us to answer; everything else is voluntary. The legal basis is Art. 6 (1) (b) GDPR for enquiries relating to a prospective membership and Art. 6 (1) (f) GDPR otherwise, our legitimate interest being to answer people who write to us. Application data is kept on the roll list until you ask for it to be deleted, or for two years from the last contact, whichever comes first. Callback and corporate enquiries are deleted six months after the matter is closed. No form on this site subscribes you to anything.

6. No analytics, no advertising, no social plugins

This site contains no analytics software, no tracking pixels, no advertising network and no social media plugins. Nothing you do here is measured, profiled, or passed to a third party for marketing purposes. There is no automated decision-making within the meaning of Art. 22 GDPR.

7. Recipients of your data

Data is passed only to our hosting provider (see 2.), to our email provider, and to the tax and legal advisers who are required to see it once a membership exists. All processors are bound by agreements under Art. 28 GDPR. Data is not sold, exchanged or otherwise passed on.

8. Your rights

You have the right to information about the data we hold on you (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw that consent at any time with effect for the future (Art. 7 (3)). Write to the address above and we will answer within one month.

You also have the right to complain to a supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach.

9. Security

This site is delivered exclusively over TLS-encrypted connections (HTTPS). Form contents are encrypted in transit. We use appropriate technical and organisational measures to protect data against accidental or deliberate manipulation, loss, destruction and unauthorised access.

10. Changes

We update this policy when the site or the law changes. This version is dated 1 September 2026.