(“www.spielergewerkschaft.de”)

We, “VDV Wirtschaftsdienste GmbH” are pleased that you have visited our website. VDV Wirtschaftsdienste GmbH is a wholly owned subsidiary of “VDV Vereinigung der Vertragsfussballspieler e.V” and provides commercial services for it, such as this website. The secure and transparent handling of the personal data of our users is a high priority for us and the protection of your personal data is therefore a particularly important concern for us. When you use this website, various personal data are collected. Personal data refer to data with which you can be personally identified. This privacy policy explains, among other things, which data we collect and what we use them for.

I. Name and address of the controller
The controller of data processing within the meaning of the General Data Protection Regulation (GDPR) is:

VDV Wirtschaftsdienste GmbH (hereinafter also referred to as VDV)
Am Bugapark 1
45899 Gelsenkirchen
legally represented by the managing director Mr. Heinrich Michael Niggemeier
Tel.: 02 09 - 73 08 26 60
Email: ieflrpeefct@eio.hwdersnsgka

II. Data protection officer of VDV Wirtschaftsdienste GmbH

VDV Wirtschaftsdienste GmbH has appointed a data protection officer. You can reach the data protection officer under the following contact details:

VdV Wirtschaftsdienste GmbH, Data protection officer, Am Bugapark, 45899 Gelsenkirchen; Email: datenschutzbeauftragter@spielergewerkschaft.de

III. General information on data processing

VDV is responsible for the data processing that takes place during the use of this website. Employees of VDV are obligated to safeguard data secrecy, and have also been made aware of the special significance of data protection.

You can access, print out or download this privacy policy permanently and at any time at www.spielergewerkschaft.de/de/Datenschutz.html.

1. Scope to which personal data are processed
   
   In the event that you simply access our website, personal data are collected only to the extent technically required, insofar as this is required to provide the website and does not differ to the information shown in this privacy policy.
   
   The collection and use of personal data is only carried out as a rule if your consent is given, a prior request for consent for reasons of fact is not possible, or the processing of data is permitted by law. Collected data will be deleted immediately, insofar as they are no longer required and erasure is not precluded by legal storage requirements.
2. The legal basis for the processing of personal data
   
   We process your personal data on the basis of different legal bases. These are shown below:
• Reason for processing:
  Contract performance
  
  Legal basis in the GDPR:
  Article 6 para. 1 b)
  
  Explanation:
  Processing takes place only to the extent necessary for the performance and fulfilment of the rights and obligations under the contract. Unless expressly stated otherwise, data processing is carried out by VDV only to this extent.
• Reason for processing:
  Legitimate interest
  
  Legal basis in the GDPR:
  Article 6 para. 1 f)
  
  Explanation:
  Processing takes place insofar as VDV has a legitimate interest and no conflicting overriding interests are evident on your part. The specific interest is explained in this privacy policy in the context of the description of the type of processing.
• Reason for processing:
  Consent
  
  Legal basis in the GDPR:
  Article 6 para. 1 a)
  
  Explanation:
  Processing takes place insofar as you have expressly agreed to this, and on the basis of transparent information about the type and scope of the data processing. You can revoke your consent at any time. However, processing carried out up to this point in time will not be affected.
• Reason for processing:
  Legal obligation
  
  Legal basis in the GDPR:
  Article 6 para. 1 c)
  
  Explanation:
  Processing takes place insofar as it is necessary to fulfil German or European legal obligations.
3. We delete your personal data as soon as the legal basis for the processing is eliminated and there are no statutory storage requirements. A retention obligation may be provided for if this is regulated by the European or national legislation, laws or other regulations to which VDV is subject.

IV. Contact by email

If you make use of the option of sending us a request by email, we collect the data communicated to us in this way to process your request (for example, first and last name, email address). According to your enquiry, we shall fulfil your request to make contact or any other requests for information. The legal basis for this, depending on the nature of your request, is Article 6 para. 1 b) of the GDPR or Article 6 para. 1 f) GDPR. The data resulting in this context are deleted after the storage is no longer required. If statutory storage obligations exist, we shall restrict processing for the duration of the storage obligation. The duration of the retention obligation depends on the purposes, in the context of which the data were processed.

V. Provision of the website and creation of log files

1. Description and scope of the data processing
   
   In order to establish and maintain the connection when using the website for informational purposes only, we automatically collect and store only the server log files that your browser transmits to us. When simply looking at the website, the following technical data are required to display the page and for reasons of IT security:
• Your IP address
• the HTTP status code,
• the browser type and browser version,
• the referrer URL code (the website viewed immediately beforehand),
• the date and time of the server request,
• the files transferred
• and the size of the files transferred during the connection.

The personal data listed above are also stored in the server log files. These data are not combined or stored with other data about you.

In addition, cookies may be used when you visit the site. Further details can be found in the following information in this privacy policy.

1. Legal basis for data processing
   
   The legal basis for the temporary storage of personal data and log files is Article 6 para.1 f) of the GDPR (see III. 2.).
2. Purpose of data processing
   
   The temporary storage of data in log files is essential to ensure the permanent functioning of the IT systems and website technology, as well as to ensure IT security. It is also necessary in order to display the website correctly and enable its optimisation. This therefore constitutes a legitimate interest within the meaning of Article 6 para. 1 f) of the GDPR. The data collected in this context will not be used for marketing purposes.
3. Storage duration
   
   Saved log files shall be deleted after 30 days at the latest, unless there are statutory storage requirements.

VI. Use of cookies | Privacy settings
Upon visiting our website, we will notify you of the use of cookies on this website for analysis purposes and direct you to this privacy policy. The settings for cookie use can be viewed and processed here at any time.

A cookie is a small text file containing information transmitted by your browser. Enabling the use of cookies in your browser poses no risk to your computer. The following cookies are used in the website:

1. Technically required cookies | Privacy settings
   
   a. Description and scope of the data processing
   
   Setting: A technically necessary cookie is always set when the website is accessed in order to save the selected privacy settings.
   
   Information on the set cookie:
   
   Name: cc_spielergewerkschaft
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: 30 day
   
   B: Legal basis for data processing
   
   The legal basis for the processing of personal data in the case of the setting of cookies to store the privacy settings is Article 6 para. 1 b) GDPR. The fulfilment of the contract involves saving the selected privacy settings.
   
   c. urpose of data processing
   
   This cookie is used in order to store the selected privacy setting.
   
   d. Duration of storage, option to object and request removal
   
   This cookie is stored for 30 days.
   
   You can prevent the storage of cookies in your browser settings. However, this may cause some features of the site to be unavailable. Cookies that have already been stored can also be deleted from your browser at any time.
   
   
2. Technically required cookies | Login and form pages
   
   a. Description and scope of the data processing
   
   When visiting the subpages “Camp login”, “Newsletter registration” and “Online membership application”, technically required cookies are set for the use of forms and to protect against robots.
   
   Information on the cookie that has been set:
   
   Name: csrf-token-ident-spielergewerkschaftde
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: until end of session
   
   Name: avdbrtfrc_login
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: 10 minutes
   
   Name: sess-spielergewerkschaftde
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: until end of session
   
   b. Legal basis for data processing
   
   The legal basis for the processing of personal data in the case of the setting of cookies to carry out the login is Article 6 para. 1 of the GDPR. The fulfilment of the contract is the provision of the login.
   
   c. Purpose of data processing
   
   Cookies that are used in connection with the login are used for the purpose of providing the full functionality of the website.
   
   Duration of storage, option to object and request removal
   
   When you log into the login area, a so-called session cookie is set for the duration of the login. If you log out, this session cookie will also be deleted. This also applies if you remain logged in and close all tabs of the browser.
   
   You can prevent the storage of cookies in your browser settings. However, this may cause some features of the site to be unavailable. Cookies that have already been stored can also be deleted from your browser at any time.
   
   
3. Optional: Web analysis cookies
   
   a. Description and scope of the data processing
   
   Analysis cookies from Google Analytics are used when you visit the website if you have previously given your consent to the use of analysis services.
   
   Name: _ga
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: 2 years
   
   Name: _ga_84EVKEG26Z
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: 2 years
   
   Name: _gat_gtag_UA_126578197_1
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: 1 minute
   
   Name: _gid
   Cookie subgroup: www.spielergewerkschaft.de
   Cookies used: 1st party
   Storage period: 24 hours
   
   b. Legal basis for data processing
   
   The legal basis for the processing of personal data in the case of the use of cookies for web analytics purposes is Article 6 para. 1 a) in conjunction with Article 7 GDPR (see III. 2.).
   
   c. Purpose of data processing
   
   Cookies set for web analytics purposes are used for the purpose of optimising our product.
   
   d. Duration of storage, option to object and request removal
   
   For the duration of the storage of the cookies which are set for web analytics purposes, see below under point VIII. 2.
   
   You can reject the use of cookies for web analysis purposes in the privacy settings. You also have the option of preventing the storage of cookies in your browser settings. However, this may cause some features of the site to be unavailable. Cookies that have already been stored can also be deleted from your browser at any time.

VII. Newsletter

We use the so-called double opt-in procedure for subscription to our newsletter. This means that we will send users an email to the email address provided during registration. This email will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, then these data will be blocked and automatically deleted after one month. In addition, we will store your IP address and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify possible misuse of your personal data.

The only information required to receive the newsletter is an email address. The provision of further, separately marked data is voluntary and is only used to be able to address you personally. After your confirmation, we will save your email address for the purpose of sending you the newsletter. The processing of the data entered when signing up for our newsletter is carried out exclusively on the basis of user consent (Art. 6 para. 1 a) GDPR). You may revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, for example by clicking the “unsubscribe” link in the newsletter. You can declare you are revoking your consent by clicking on the link provided in every newsletter email or by sending a message to the contact data specified in the legal notice. The legality of data processed before we receive your request is not affected by the revocation.

The data provided to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data we have stored for other purposes (e.g. email addresses for the log in) are not affected. We only use these data to send the requested information and do not pass them on to third parties.

Rapidmail

This website uses the services of Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. Rapidmail is a service that can be used, among other things, to organise and analyse the sending of newsletters. The data that are entered in order to subscribe to the newsletter are stored on the Rapidmail servers in Germany. You must unsubscribe from the newsletter if you do not wish to be included in the analysis by Rapidmail. We provide a link for this purpose in every newsletter message.

Data analysis

For the purpose of analysis, the emails are sent with Rapidmail contain a so-called “tracking pixel” that connects to the Rapidmail servers when the email is opened. This allows determination of whether a newsletter message has been opened. We can also use Rapidmail to determine whether and which links were opened within the newsletter message. All the links in the email are so-called tracking links that allow clicks to be counted. You can find further information on the analysis functions of Rapidmail under the following link: https://de.rapidmail.wiki/kategorien/statistiken/

Legal basis

The data processing takes place on the basis of user consent (Art. 6 para. 1 a) GDPR. This consent can be revoked at any time. The legality of data processed before we receive your request is not affected by the revocation.

Storage duration

The data provided when registering for the newsletter will be used until such time as you cancel your subscription to the newsletter, when said data will be deleted from our servers as well as the servers of Rapidmail. Data we have stored for other purposes (e.g. email addresses for the member area) are not affected. Further information can be found in the Rapidmail data security notes, at: https://www.rapidmail.de/datensicherheit.

Conclusion of a contract for data processing

We have concluded a data processing agreement with Rapidmail that takes into account all the requirements of Article 28 of the GDPR.

VIII. Recipients of personal data

In selected cases only, personal data are passed on to external service providers. These were carefully selected by VDV and were commissioned subject to instructions. The recipients of personal data include technical service providers ensuring the provision and optimisation of the website and service providers offering additional services, such as support. These are normally contract processors within the meaning of Article 28 of the GDPR, with whom we have concluded a processing contract within the meaning of Article 28 para. 3 of the GDPR.

Your personal data are always stored in the EU and managed in accordance with our privacy policy and the GDPR, unless otherwise stated in this privacy policy. If personal data are transmitted to a company affiliated with VDV or other recipients outside the EU, this is done only pursuant to a permissible legal basis and in compliance with the statutory requirements of the GDPR.

1. Use of logins
   
   We currently use a login facility on our website in order to allow members access to an exclusive members’ area of the site.
   When visiting the website, no personally identifiable data are collected and passed on in connection with the aforementioned login.
   
   When you register, the following data will be transmitted to our website:
• User name
• Password

This is required to give you access to the members’ area.

The legal basis for the processing and transmission of your data is the existence of a contract pursuant to Article 6 para.1 b) of the GDPR (see III. 2.). Your data shall be stored as long as you are registered in the members’ area with access authorisation. In connection with the processing of cookies, reference is made to the information under point VI.

1. On our website we use Google Analytics, a web analytics service by Google Inc.
   
   Google Analytics uses cookies, which are stored on your computer and facilitate the analysis of your use of our website. The information generated by the cookie on how you use this website is usually transferred to a Google server in the USA and stored there.
   
   However, your IP address is truncated and thereby anonymised prior to transmission by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. IP anonymisation is enabled on our website. On behalf of VDV, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services to VDV related to website usage and internet usage.
   
   The IP address provided by your browser in connection with Google Analytics will not be combined with other data from Google. The corresponding cookies and data collected on Analytics servers are stored for a period of 14 months and automatically deleted after this period, unless the user ID is newly recorded within the storage period. In this case, the storage period of 14 months is reinitialised (see Google Analytics Help, keyword data retention, https://support.google.com/analytics/answer/7667196?hl=en). You can prevent the use of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that if you do this, you may not be able to access all features provided on our website. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of these data by Google by downloading the browser plug-in available under the following link and installing it: http://tools.google.com/dlpage/gaoptout?hl=en.

IX. Rights of data subjects

If personal data about you are processed by VDV, you are a data subject within the meaning of Article 4 para. 1 of the GDPR. Therefore, you have the following rights with respect to the personal data concerning you:

• Right to information pursuant to Article 15 of the GDPR
• Right to rectification or erasure pursuant to Article 16 and Article 17 of the GDPR
• Right to restriction of processing pursuant to Article 18 of the GDPR
• Right to object to the processing of your data pursuant to Article 21 of the GDPR
• Right to data portability pursuant to Article 20 of the GDPR
• Right to revoke the data protection consent declaration according to Article 7 para. 3 of the GDPR

As a visitor to our website, you are not subject to automated decision making within the meaning of Article 22 of the GDPR..

If you do not agree with the way we process your data, please contact the controller under I. or the associated data protection officer under II. Pursuant to Article 77 GDPR, you are furthermore entitled lo lodge a complaint with a supervisory authority.

Our responsible supervisory authority is:

State Commissioner for Data Protection and Freedom of Information North Rhine Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Telephone: 0211/38424-0, Fax: 0211/38424-10, Email: poststelle@ldi.nrw.de

End of the privacy policy

Last updated: 01.09.2024