Privacy Policy

Transparency and responsible data protection are important to us. Learn how Aurora e-Sports handles and protects your personal information.

1. Controller

The controller responsible for processing personal data on this website is:

Aurora e-Sports e.V. – Verein zur Förderung des digitalen Sports
Zuckmayergasse 5/2/8
3151 St. Georgen am Steinfelde
Austria

ZVR number: 1829877753

Represented by:
Benjamin Helferstorfer, Chairman and Founder
Florian Weiss-Rohan, Chairman and Founder

Both chairmen are individually authorized to represent the association.

Email: office@aurora-esport.com
Telephone: +43 660 8236901

2. General information

We process personal data only where this is necessary to operate our website, respond to enquiries, protect our systems, fulfil legal obligations or provide functions requested by visitors.

Personal data means any information relating to an identified or identifiable natural person. The applicable legal framework includes the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and the Austrian Telecommunications Act 2021.

3. Website hosting and server log files

This website is hosted by easyname GmbH, Fernkorngasse 10/3/501, 1100 Vienna, Austria.

When the website is accessed, the hosting provider may process technical information including:

IP address
date and time of access
requested page or file
referrer URL
browser type and version
operating system
access status and transferred data volume

This processing is necessary to provide the website securely, detect technical errors and prevent misuse or attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

Where access logs are activated, easyname states that IP addresses are anonymized after 24 hours and deleted completely after no more than three months.

Further information is available in the privacy information provided by easyname.

4. Contact form and email enquiries

Our website provides a contact form using Forminator. When you submit the form, we process the information you provide, including:

your name
your email address
the selected reason for contact
your message
your privacy confirmation
the date and time of submission
technical metadata that may include your IP address

The information is used exclusively to process and respond to your enquiry. Form submissions are stored in the protected WordPress administration area and are additionally transmitted to us by email using our configured SMTP mail service.

Where your enquiry concerns membership, cooperation, sponsorship or another potential contractual relationship, processing is based on Article 6(1)(b) GDPR. For general enquiries, processing is based on our legitimate interest in responding to communications under Article 6(1)(f) GDPR. Where consent is expressly requested, Article 6(1)(a) GDPR also applies.

Form submissions are deleted no later than 12 months after the enquiry has been conclusively resolved, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer storage.

5. Website statistics with Burst Statistics

We use Burst Statistics to understand how our website is used and to improve its content, performance and usability.

Burst Statistics is configured in cookieless mode. No analytics cookie is placed, and visitors are not recognized across different days or sessions. Statistical information is evaluated locally within our WordPress installation. The configuration is intended to avoid creating persistent visitor profiles.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the privacy-friendly analysis and improvement of our website. Technical server data may still be processed independently as described in the section on hosting and server logs.

6. Consent management with Complianz

We use Complianz to manage cookie consent and to block optional external services until the required consent has been given.

Complianz stores your consent selection in a technically necessary cookie so that the website can remember your decision. This processing is necessary to comply with legal consent and documentation obligations and is based on Article 6(1)(c) GDPR and Article 6(1)(f) GDPR.

You can change or withdraw your selection at any time through the cookie settings available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Detailed information about cookies and their storage periods is available in our Cookie Policy.

7. Twitch content and StreamWeasels

We use StreamWeasels to display Twitch streams and live-status information on our website.

Twitch content is an external service. It is blocked until you provide the relevant consent through our cookie banner. If you consent and Twitch content is loaded, Twitch may receive information including:

your IP address
browser and device information
the page you visited
the date and time of access
information about your interaction with the embedded content
cookie or account information if you are logged in to Twitch

The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings.

The provider is Twitch Interactive, Inc., a company of the Amazon group. Data may be processed outside the European Economic Area, particularly in the United States. Further details about Twitch’s processing and international data transfers are available in the Twitch Privacy Notice.

8. Local fonts

Fonts used on this website are stored locally through OMGF. When displaying these fonts, no connection to Google Fonts servers is required. This prevents your IP address from being transmitted to Google solely for loading the website fonts.

9. Security and protection against misuse

We use technical security measures and security plugins to protect the website against unauthorized access, malicious requests, login attacks and other misuse.

For this purpose, technical information such as IP addresses, request data, timestamps and attempted login information may be processed temporarily. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting our website, users and stored information.

Security information is deleted when it is no longer required for threat detection or investigation, unless an identified incident or legal obligation requires longer retention.

10. Backups

We create technical backups to protect the website against data loss and to restore it after technical or security incidents. Backups may contain copies of website data, including stored contact-form submissions.

Backups are protected against unauthorized access and are retained only for the applicable backup cycle. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in data security and business continuity.

11. External links, social networks, Shopify and affiliate links

Our website contains links to external services, including social networks, streaming platforms, our Shopify merchandise store, sponsors and partners.

A connection to these external services is generally established only when you actively click a link. The respective provider is responsible for the subsequent processing of your data.

Some sponsor or partner links and discount codes may be affiliate links. Aurora e-Sports may receive a commission or another benefit when such links or codes are used, without additional cost to you. Affiliate links do not by themselves permit us to access personal purchase information unless the respective provider expressly supplies aggregated or contractually agreed reporting data.

Please review the privacy information of the respective external provider before using its services.

12. Recipients of personal data

Personal data is accessible only to authorized persons within Aurora e-Sports and to service providers where access is necessary to provide, secure or maintain the website.

Potential recipients include:

our hosting and email provider
technical website service providers acting on our instructions
external platforms that you actively access
Twitch, where you consent to loading embedded Twitch content
authorities or courts where disclosure is legally required

Where a service provider processes personal data on our behalf, we use an appropriate data-processing agreement where required by Article 28 GDPR.

We do not sell personal data.

13. International data transfers

Some external providers may process personal data outside the European Economic Area. This may particularly apply when you consent to embedded Twitch content or actively follow links to international platforms.

Where required, such transfers must be based on an adequacy decision, appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism under Articles 44–49 GDPR. Details are available in the privacy notices of the respective providers.

14. Storage periods

We retain personal data only for as long as necessary for the relevant purpose.

In particular:

contact-form submissions: up to 12 months after completion of the enquiry
server logs: according to the hosting provider’s applicable logging settings and retention periods
consent information: for the period necessary to remember and document your selection
security logs: only as long as necessary for security purposes
backups: according to the applicable backup cycle
statutory records: for the period required by law

Data may be retained for longer where necessary to establish, exercise or defend legal claims.

15. Your rights

Subject to the applicable legal requirements, you have the right to:

obtain information about your personal data
request correction of inaccurate data
request deletion of your data
request restriction of processing
receive data you provided in a portable format
object to processing based on legitimate interests
withdraw consent at any time with future effect
lodge a complaint with a supervisory authority

Requests may be sent to office@aurora-esport.com. We may request appropriate proof of identity where necessary to protect your information.

16. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation.

If personal data were processed for direct marketing purposes, you would have the right to object at any time without providing reasons.

17. Austrian Data Protection Authority

If you believe that the processing of your personal data infringes applicable data-protection law, you may lodge a complaint with:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

18. Automated decision-making

We do not use personal data collected through this website for automated decision-making or profiling that produces legal effects or similarly significantly affects you.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services or legal obligations change. The version published on this website is the current version.

Last updated: 3 September 2026