Privacy

1. General information

Protecting your personal data is especially important to us. We process your data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This statement explains the nature, scope and purpose of processing when you visit this website.

The processing of data within the score:connect platform and app (registration, tickets, profile, event and communication data) is not covered by this statement — see section 9.

2. Controller

3. Processing when visiting the website (server log files)

When this website is accessed, data is automatically processed in server log files for technical reasons:

• IP address (shortened/anonymized where technically possible)
• date and time of access
• pages and content accessed
• browser, operating system and device type used
• referrer URL (previously visited website)

This data serves technical provision, system security and error analysis.Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operational security).

4. Hosting & data storage

Our architecture deliberately separates delivery of the website (frontend) from processing of customer and event data (backend). Both layers are operated separately:

1) Frontend — delivery of the website (Vercel)

The website itself (HTML, CSS, scripts, images) is delivered via Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Only technically necessary access data is involved (e.g. IP address, time of access, page accessed; see section 3). The frontend never contains or processes customer, event or registration data. For delivery alone, this technical access data may be transferred to the USA.Legal basis: Art. 6(1)(f) GDPR (secure and efficient provision).

2) Backend — customer & event data (EU data center, Frankfurt)

All application-related personal data (e.g. accounts, event and registration data, tickets and in-app communication) is stored and processed exclusively in a data center within the European Union (Frankfurt, Germany).Legal basis: Art. 6(1)(b) or (f) GDPR; processing on behalf of the respective provider (DPA, see section 9).

5. Fonts (Google Fonts)

For consistent presentation we use the “Inter” font, which is loaded when the page is accessed from servers of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; possibly Google LLC, USA). Your IP address is transmitted to Google in the process. No cookies are set by this.Legal basis: Art. 6(1)(f) GDPR (appealing, consistent presentation).

6. Cookies & consent

Optional statistics cookies (Google Analytics 4, see section 7) are set exclusively after your active consent via our cookie banner. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer.Legal basis: Art. 6(1)(a) GDPR (consent); § 165(3) TKG 2021 (Austria).

7. Web analytics (Google Analytics 4 – only with consent)

If you consent via our cookie banner, we use Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Cookies are set and usage data is processed (e.g. pages accessed, time on site, approximate region, device and browser) in order to understand the reach and usage of our website. The IP address is shortened/anonymized. Information may be transferred to Google servers – also in the USA. Processing only takes place after your consent and can be withdrawn at any time via “Cookie settings”.Legal basis: Art. 6(1)(a) GDPR (consent).

8. Contact

If you contact us via the email addresses provided (e.g. for a demo request), we process the data you send (e.g. name, email address, company, phone number and the content of your message) exclusively to handle your enquiry. No contact form or tracking service is used.Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (f) GDPR (communication).

9. score:connect platform & app

score:connect is a multi-tenant event platform (app and web console). Personal data processed within the platform — such as registration, event sign-up, ticket/QR check-in, profile and in-app communication — is generally processed on behalf of the respective provider (tenant). The basis is a data processing agreement (DPA) between the provider and score business GmbH.

• Storage and processing take place exclusively in an EU data center (Frankfurt, Germany); the data does not leave the EU (see section 4).
• Strict tenant separation is enforced at the database level via row-level security (RLS) — a provider sees only its own data.
• In the release scope, no payment data is processed in the app (payment takes place outside the app).

The full privacy information for using the app/platform is provided in the respective sign-in/usage context (manage.score-connect.app).

10. Data transfer to third countries (USA)

Some of the services mentioned above (Vercel, Google Fonts and – with consent – Google Analytics) may process personal data in the USA. The transfer is based on appropriate safeguards, in particular the EU Commission’s Standard Contractual Clauses or — where applicable — a certification of the recipient under the EU-US Data Privacy Framework.

11. Data retention

Personal data is stored only as long as necessary to fulfil the respective purpose or as long as statutory retention periods apply. Server log files are automatically deleted or anonymized after a short time.

12. Your rights

Within the statutory framework, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. An informal message to the following address is sufficient to exercise these rights: office@score-business.com.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the competent supervisory authority — in Austria the Austrian Data Protection Authority (DSB).

13. Currency & changes

This privacy policy is dated July 2026. As the website evolves or due to changed legal requirements, updates may become necessary; the version published here applies in each case.

Back to home