Thank you for visiting the website of the Graveletto Social Ride Club. This Privacy Policy explains which personal data we process in connection with our website (graveletto.cc) and our social rides, and why. It is based on the European General Data Protection Regulation (GDPR) and the applicable data protection laws in Luxembourg.
1. Who is responsible
Responsible for data processing (data controller) on behalf of the Graveletto Social Ride Club, a free, non-commercial community:
Jean-Claude Nurenberg
Email: hello@graveletto.cc
2. Hosting and server log files
Our website is hosted by EuroDNS S.A., Luxembourg. When you visit our website, the server automatically records information that your browser sends, in so-called server log files:
- Browser type and version
- Operating system
- Referrer URL (the page you came from)
- Hostname of the accessing computer
- Time of the request
- IP address
These data are not combined with other data. The legal basis is Art. 6 (1) (f) GDPR: we have a legitimate interest in a secure and error-free website. The log files are kept by our hosting provider for a limited period for security purposes and then deleted automatically.
3. Cookies and tracking
We do not use any analytics, tracking or advertising cookies. WordPress only sets technically necessary cookies for logged-in website administrators. Our website does not load fonts, scripts or other content from external services.
4. Instagram photos on our homepage
Our website automatically retrieves the latest posts from our own Instagram account (@graveletto.cc) and stores copies of the photos on our own server. When you visit our website, no connection is made to Instagram and no data about you is sent to Meta. Only if you click on a photo will you be taken to Instagram, where Instagram’s privacy policy applies.
5. Photos and videos at our rides
Sharing experiences is an important part of our community. We therefore take photos and videos at our rides and publish them on our website and on our social media channels (for example Instagram). The legal basis is our legitimate interest in documenting our rides and presenting the club to the public (Art. 6 (1) (f) GDPR). We only publish photos of riders under 18 with the consent of a parent or guardian.
Your right to object: if you do not want to be photographed, or do not want photos of you to be published, please tell us before the ride starts. If you would like a photo in which you are recognisable to be removed, email us at hello@graveletto.cc and we will remove it as soon as possible. Photos are otherwise kept for as long as they document the history of our rides.
6. Contacting us
If you contact us by email, we store your details (for example your name, email address and message) to answer your request and any follow-up questions. We do not share these data without your consent. The legal basis is our legitimate interest in answering requests sent to us (Art. 6 (1) (f) GDPR). We delete your messages once your request has been dealt with, unless there is a legal reason to keep them.
7. Links to other services
Our website links to external platforms so you can find our routes and community. These are plain links: no data is sent to these services until you click on them. Once you leave our website, the privacy policies of the respective providers apply:
- Strava: Strava, Inc. (privacy policy)
- Komoot: komoot GmbH (privacy policy)
- Instagram: Meta Platforms Ireland Limited (privacy policy)
8. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you (Art. 15 GDPR)
- Rectification of incorrect or incomplete data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on our legitimate interest (Art. 21 GDPR)
To use these rights, simply email us at hello@graveletto.cc.
You also have the right to lodge a complaint with the Luxembourg data protection authority: Commission Nationale pour la Protection des Données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.
9. Changes to this Privacy Policy
We may update this Privacy Policy when the law changes or when we add new features to our website. The current version always applies.
Last updated: October 2026