Privacy policy
1. Controller
Vincent LamiBadstr. 1
82008 Unterhaching
Germany
info@measuredascent.de
2. Server log files
Our hosting provider automatically collects and stores information that your browser transmits with every request (IP address, date and time, requested URL, referrer, browser and operating system). This data is required to deliver the site, to guarantee its stability and security, and is processed on the basis of our legitimate interest (Art. 6 (1) (f) GDPR). It is not merged with other data sources and is deleted after a short retention period.
Hosting provider: DigitalOcean, LLC, 105 Edgeview Drive, Broomfield, CO 80021, USA
3. Cookies and local storage
We use only technically necessary cookies. We do not use analytics, advertising, profiling or tracking cookies, and we do not embed social media plugins. Because these cookies are strictly necessary to provide the service you requested, no consent is required under § 25 (2) TDDDG; they are processed on the basis of Art. 6 (1) (f) GDPR.
| Name | Purpose | Lifetime |
|---|---|---|
sessionid |
Keeps you signed in. Only set once you log in. | 14 days |
csrftoken |
Protects forms against cross-site request forgery. | 1 year |
django_language |
Remembers the language you selected. | 1 year |
ma_notice_ack (local storage) |
Remembers that you dismissed the privacy notice banner. Stored in your browser only, never sent to us. | Until you clear your browser data |
ma-timer-* (local storage) |
Stores your interval timer settings locally in your browser. | Until you clear your browser data |
Our payment service provider Stripe sets its own cookies, but only on its payment page under its own domain, which you reach after you have actively started a checkout. No Stripe cookie is set while you browse this site. See section 6 for details.
4. User accounts
If you create an account we process your email address, the profile details you enter (such as name, address, preferred language and climbing profile) and the training data you record. This is necessary to perform the contract of use with you (Art. 6 (1) (b) GDPR). Your email address is verified by sending you a confirmation message. Account data is stored until you delete your account.
5. Email
Transactional emails (registration confirmation, password reset) are sent through our email provider. If you contact us by email, we process the data you send in order to answer your enquiry (Art. 6 (1) (b) or (f) GDPR).
6. Orders and payments
If you place an order we process the data required to perform the contract: your name, email address, billing address (and delivery address for physical goods), the items ordered, the order number, the amount and the payment status. Legal basis: Art. 6 (1) (b) GDPR.
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When you start the checkout you are forwarded to a payment page hosted by Stripe. From that moment your IP address, browser data and the payment details you enter are processed by Stripe as an independent controller. Card numbers are entered on Stripe's page only and never reach our servers; we receive from Stripe only the payment status, the last four digits of the card, the payment method type and the billing data you provided. Legal basis: Art. 6 (1) (b) GDPR, and Art. 6 (1) (f) GDPR for fraud prevention.
Stripe may transfer data to its parent company Stripe, Inc. in the USA. Such transfers are safeguarded by the EU standard contractual clauses and, where applicable, by Stripe's certification under the EU-US Data Privacy Framework. Details are set out in Stripe's own privacy policy at stripe.com/de/privacy.
If you take out a subscription, we additionally store its status, term and renewal dates for as long as the subscription runs and afterwards for the statutory retention periods. Invoices and the associated order data are retained for ten years under § 147 AO and § 257 HGB; during that period the data is restricted to that purpose and no longer used otherwise.
7. No third-party content delivery
All fonts, stylesheets and scripts used on the pages of this site are hosted on our own servers. Nothing is loaded from Google Fonts, jsDelivr or any other content delivery network, so opening a page transmits no data about you to third parties. The only exception is the payment page described in section 6, which is operated by Stripe and which you only reach after you have actively started a checkout.
8. Media storage
Images and documents shown on this site are stored with Cloudflare R2 and delivered from Cloudflare's network. Your IP address is transmitted to Cloudflare when such a file is loaded. Legal basis: Art. 6 (1) (f) GDPR.
9. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.
Submit a data protection request
You also have the right to lodge a complaint with a supervisory authority. Competent authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
10. Transport encryption
This site uses HTTPS (TLS) for all connections, so the data you transmit cannot be read by third parties in transit.
Last updated: 2026-09-02