GTCs, Terms and Conditions of Participation & Privacy Policy 

I. Terms and Conditions of Participation

The following terms and conditions and liability waivers apply to participation in the Rooted Secrets (RS) cycling challenge. It is explicitly stated that RS does not constitute an organized group tour or a bicycle race. Instead, it is primarily a distance challenge (test of endurance) in which a cyclist demonstrates their ability to cover a predetermined distance using only their own power and without external assistance. The route and checkpoints are provided by the private event hosts.

Terms and Conditions of Participation / General Terms and Conditions

Rooted Secrets (RS) – Terms and Conditions of Participation / General Terms and Conditions

1. Event Hosts 

Thomas Kress & Michael Kress
Lüttgen-Salbker Weg 27
39122 Magdeburg
Email: rootedsecrets@outlook.com

This event is organized privately by individuals and not by a commercial entity, company, or official organization.

2. Terms and Conditions of Participation / Subject Matter of the Contract 

2.1 Subject Matter of the Agreement 

Rooted secrets is a puristic, self-supported long-distance cycling challenge for those seeking a true challenge. Here, it is not the seconds that count, but the experience, endurance, and connection with the route. Participants must cover the distance using only their own power and without any external assistance.

The framework of the challenge is established by the organization, but the execution is entirely in your hands:

• Start & Finish: We define the timeframe and location for both the start and the finish.

• Unmanned Checkpoints (CPs): You will pass designated checkpoints along the route. Since no staff will be on-site, you are responsible for navigating to these points and documenting your passage yourself (e.g., via a local stamp, a photo, or digital proof).

• Full Autonomy: Navigation, nutrition, and mechanical repairs are 100% your responsibility. There is no broom wagon and no on-course support provided.

Rooted secrets is about pushing your personal limits, not about a place on the podium.

• Not a Race: There is no official timing and there are no leaderboards. The focus is solely on the achievement of completing the distance under your own power.

• At Your Own Risk: Participation is expressly at your own risk and peril. You will be riding on public roads and are solely responsible for your own safety and compliance with all traffic regulations.

A cost contribution is collected solely to cover the actual organizational expenses of the event (e.g. GPS tracking, website costs, materials). No profit is generated. 

2.2 General Terms of Participation 

By participating in Rooted Secrets, participants accept these General Terms and Conditions. All participants are required to familiarize themselves with the content of these Terms and Conditions and to comply with them.

Registration becomes binding upon submission of the registration form and payment of the participation fee. Prior to the start of the event, participants are required to sign a declaration of consent confirming their acceptance of these General Terms and Conditions. The Terms and Conditions will be provided to all participants in advance via email.  Refunds are granted according to the following cancellation policy: 

• Cancellation 60 or more days before the event: full refund of the participation fee. 

• Cancellation 30–59 days before the event: 50% refund of the participation fee. 

• Cancellation less than 30 days before the event: no refund. 

Cancellations must be submitted in writing (e.g., by email to rootedsecrets@outlook.com). No refunds will be granted in the event of non-participation, withdrawal during the event, or for reasons beyond the control of the private event hosts (e.g., weather conditions, force majeure, personal circumstances). .

2.3 Traffic Regulations

Participants are required to comply with all statutory road traffic regulations (StVO), in particular to respect official signage and to use designated cycle paths where available. Any failure to comply with these regulations will result in disqualification from the long-distance cycling challenge.

2.4 Roadworthiness of the Bicycle 

Participants are obliged to equip their bicycles in accordance with the statutory Road Traffic Licensing Regulations (StVZO) (where applicable) and to ensure the vehicle's roadworthiness. Specific attention is drawn to the regulations regarding lighting for racing bikes.

2.5 Mandatory Helmet Use 

The wearing of a helmet is mandatory.

2.6 Fitness Requirements 

Participants undertake to personally assess their physical fitness for participation in the event. In case of any doubt, a physician should be consulted.

2.7 Minimum Age 

Participants must be at least 18 years of age.

3. Liability 

3.1 Acknowledgment 

By completing the binding online registration (i.e., by submitting their personal data and payment), participants confirm that they have read, understood, and expressly accepted these General Terms and Conditions of Participation. Additionally, participants are required to sign a declaration of consent at the event check-in, which will be retained by the organizers as proof of acceptance. 

3.2 Assumption of Risk 

Participation in the long-distance cycling challenge is entirely at the participant's own risk. Participants are fully aware of the inherent dangers associated with cycling activities. Participants acknowledge that striving for high levels of athletic performance involves significant risks. Participants accept that the activity may pose a threat to their life and physical safety. This includes hazards for everyone participating in the long-distance cycling challenge, specifically resulting from environmental conditions, technical equipment, atmospheric influences, potential hazards of public roads, as well as natural and man-made obstacles. 

Participants undertake to comply at all times with all applicable laws and regulations, in particular traffic laws. 

3.3 Nature of the Event (“Unsupported”) 

This event is an "unsupported" cycling challenge. This means in particular that:

• no course marshaling or route security is provided;

• no medical support is provided by the private event hosts; 

• no food, water, or technical assistance is supplied along the route;

• no road closures or traffic control measures are in place;

• the event takes place on public roads.

Participants are fully and solely responsible for their own navigation, equipment, safety, supply, and emergency management at all times.

3.4 Limitation of Liability

Riding and entering the route, as well as the start, intermediate, and finish points, takes place with the exclusion of any liability on the part of:

1. Rooted Secrets, its employees, staff, members, and/or volunteers;

2. All other individuals or institutions involved in the organization of the long-distance cycling challenge;

3. The legal representatives and vicarious agents of all individuals and institutions mentioned in points 1 and 2.

This exclusion of liability applies to the fullest extent permitted by law. 

3.5 Intent and Negligence 

This liability waiver does not apply to damages resulting from injury to life, body, or health caused by an intentional or negligent breach of duty, nor to other damages caused by an intentional or grossly negligent breach of duty. Mandatory statutory liability under German law remains unaffected.

3.6 Insurance

The private event hosts do not provide any accident, health, or liability insurance for participants. Participants are solely responsible for ensuring that they have adequate insurance coverage prior to the event. 

3.7 Duty to Inform 

Participants undertake to inform any accompanying persons about this liability waiver.

3.8 Health 

Participants must be healthy, in good physical condition, and thus capable of participating in Rooted Secrets. Participants are solely responsible for ensuring their own fitness. The private event hosts assume no liability for any health risks to the participants. By starting the long-distance cycling challenge, participants bindingly declare that there are no known health concerns regarding their participation.

Participants further undertake to assess their physical condition realistically and to withdraw from the event if necessary.

3.9 Impossibility of Performance 

In cases of initial impossibility of performance, the organizer shall only be liable if they were aware of the impediment to performance or if their lack of knowledge was due to gross negligence, provided that no fundamental contractual obligation (cardinal duty) is affected.

3.10 Equipment and Clothing 

The private event hosts assume no liability for the loss of participants' equipment or clothing. Participants are therefore responsible for taking appropriate care of their belongings or ensuring they have adequate insurance coverage.

Participants are further responsible for ensuring that their equipment is in a safe and roadworthy condition. 

3.11 Data Storage and Publication 

Participants agree that the data provided in their registration may be processed and stored electronically by Rooted Secrets and/or its service providers for the purpose of organizing and conducting the event.

Participants further consent to the publication of their name in the participant and results list (confirming completion of the long-distance challenge), including on the internet.

Note: Consent to the use of photographs or video footage featuring the participant's likeness is obtained separately during the registration process and is not a mandatory condition of participation. Consent may be withdrawn at any time with effect for the future by notifying the organizers in writing.

4. Applicable Law / Severability Clause 

The laws of the Federal Republic of Germany shall apply to all legal relationships between the private event hosts and the participants. Should individual provisions of these General Terms and Conditions be or become invalid or void, the validity of the remaining provisions shall remain unaffected. The invalid provision shall be replaced by a valid provision that most closely reflects the economic purpose of the invalid provision. 

5. GPS Tracker

5.1 Provision 

Rooted Secrets provides each participant with a GPS tracker. The device is used for live tracking during the event and will be handed over to the participant at the start of the event. 

5.2 Responsibility 

Upon handover of the device, the participant assumes full responsibility for the GPS tracker. Loss, damage, or theft are the sole responsibility of the participant from the moment of handover until the device is returned to the organizers. 

5.3 Return

The GPS tracker must be returned to the organizers within one week after completion or withdrawal from the event. If the tracker is not returned within two weeks after the end of the event, a replacement fee of €150 will be charged.

5.4 Replacement Costs

• Loss or total damage of the tracker: €150

• Partial damage: reimbursement of actual repair costs, as evidenced by the organizer 

5.5 GPS Data & Privacy 

The location data collected via the GPS tracker is used exclusively for live tracking during the event and for documentation of the completed route. GPS tracking is provided by Follow My Challenge S.A.R.L. (RCS Périgueux 951 119 601, France). Location data is transmitted to and processed by Follow My Challenge's platform. For information on how Follow My Challenge stores and processes your data, please refer to their privacy policy at: https://followmychallenge.com/privacy-policy/

The legal basis for processing GPS location data is Art. 6 (1) lit. b GDPR (contract performance).

II. Privacy Policy at a Glance 

1. General Information 

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the Legal Notice (Imprint) of this website.

How do we collect your data? Your data is collected in two ways: (1) data you actively provide to us, e.g., via a contact form or event registration; (2) data collected automatically by our IT systems when you visit the website, such as technical data (browser type, operating system, time of access).

What do we use your data for? Data is used to ensure the error-free provision of the website, to process event registrations and inquiries, and where applicable to analyze user behavior on the website.

What rights do you have regarding your data? You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, restriction, or deletion of this data. You may revoke any consent previously given at any time. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

2. Hosting

External Hosting - Google Sites 

This website is hosted via Google Sites, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The personal data collected on this website is stored on Google's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, and other data generated via the website.

Google Sites is used for the purpose of fulfilling contracts with our participants (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering (Art. 6 (1) lit. f GDPR). Data may be transferred to servers in the United States. Such transfers are carried out on the basis of the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) lit. c GDPR. Further information: https://policies.google.com/privacy

3. General Notes and Mandatory Information

Data Protection 

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

We would like to point out that data transmission over the internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Notice Regarding the Controller 

The controller responsible for data processing on this website is:

Thomas Kress & Michael Kress 

E-Mail: rootedsecrets [at] outlook.com

The "controller" is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. 

Competent Supervisory Authority 

The competent data protection supervisory authority is:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt Leiterstraße 9, 39104 Magdeburg https://datenschutz.sachsen-anhalt.de 

Revocation of Your Consent to Data Processing 

Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected. 

Right to object to data collection in specific cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority 

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies. 

Right to Data Portability 

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible. 

SSL or TLS Encryption 

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser bar. 

Information, Erasure, and Rectification 

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to the rectification or erasure of this data. You can contact us at any time for this purpose. 

Right to Restriction of Processing 

You have the right to request the restriction of the processing of your personal data in the following cases:

• If you contest the accuracy of your personal data stored by us, for the duration of the verification process.

• If the processing of your personal data was/is unlawful, and you request restriction instead of erasure.

• If we no longer need your personal data, but you require it for the exercise, defense, or establishment of legal claims.

• If you have lodged an objection pursuant to Art. 21 (1) GDPR and it has not yet been determined whose interests prevail.

4. Data Collection on This Website

Registration Data

When you register for the event, we collect personal data such as your name, email address, and other information necessary for event organization. This data is processed on the basis of Art. 6 (1) lit. b GDPR (contract performance). Registration data will be retained for the duration required by statutory retention obligations and deleted thereafter. 

Contact Form 

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent. The processing of this data is based on Art. 6 (1) lit. b GDPR, or Art. 6 (1) lit. f GDPR (legitimate interest). The data will remain with us until you request deletion, revoke your consent, or the purpose of storage no longer applies. 

Inquiry by E-mail, Telephone, or Fax 

If you contact us by email, your inquiry, including all resulting personal data (name, inquiry content), will be stored and processed for the purpose of handling your request. We do not share this data without your consent. The legal basis is Art. 6 (1) lit. b or f GDPR. Data will be deleted once the purpose of storage no longer applies. 

5. Plugins and Tools 

YouTube with Enhanced Data Protection 

This website may embed videos from YouTube. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced data protection mode.

YouTube videos are only loaded after you actively click to play them. Only at that point does a connection to YouTube's servers occur. YouTube may then store cookies or use comparable technologies (e.g., device fingerprinting) on your device. If you are logged into your YouTube account, YouTube may associate your surfing behavior with your personal profile. You can prevent this by logging out of your YouTube account before playing the video.

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in presenting content attractively), or Art. 6 (1) lit. a GDPR where consent has been requested. Further information: https://policies.google.com/privacy?hl=en

6. Disclaimer

1. Liability for Content 

As a service provider, we are responsible for our own content on these pages in accordance with general laws pursuant to Section 7 (1) TMG. However, pursuant to Sections 8 to 10 TMG, we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Upon becoming aware of legal violations, we will remove this content immediately. 

2. Liability for Links 

This website contains links to external third-party websites over whose content we have no influence. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking. Upon becoming aware of legal violations, we will immediately remove such links. 

3. Copyright 

The content and works created by the service providers on these pages are subject to German copyright law. Reproduction, editing, distribution, and any kind of utilization outside the limits of copyright law require the prior written consent of the respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use. Should you become aware of a copyright infringement, please inform us accordingly. Upon becoming aware of legal violations, we will remove such content immediately.