Privacy statement – VDV

Privacy policy - VdV Wirtschaftsdienste GmbH

(“www.spielergewerkschaft.de”)

We, “VdV Wirtschaftsdienste GmbH”, are pleased about your visit to our website. VdV Wirtschaftsdienste GmbH is a wholly owned subsidiary of “VDV Vereinigung der Vertragsfussballspieler e.V” and provides economic services for it, such as this website. The secure and transparent handling of the personal data of our users is a high priority for us and the protection of your personal data is therefore a particularly important concern for us. When you use this website, various personal data are collected. Personal data refers to data with which you can be personally identified. This privacy policy explains, among other things, which data we collect and what we use them for.


I. Name and address of the controller

The controller of data processing within the meaning of the General Data Protection Regulation (GDPR) is:

VdV Wirtschaftsdienste GmbH (hereinafter also referred to as VDV)
Marienburger Ufer 33
47279 Duisburg
legally represented by the managing director Mr. Heinrich Michael Niggemeier
Tel. 0049 203 - 44 95 77
E-mail: ffgsetew@kel.osierrihcaednp

II. Data protection officer of VdV Wirtschaftsdienste GmbH

VdV Wirtschaftsdienste GmbH has appointed a data protection officer. You can reach the data protection officer at the following contact details:

VdV Wirtschaftsdienste GmbH, Data protection officer, Marienburger Ufer 33, 47279 Duisburg, Email: lcesefeufrehaan.haesctteetrdirwbgg@tdaeuptkzrs


III. General information on data processing

VDV is responsible for the data processing that takes place during the use of this website. Employees of VDV are obligated to safeguard data secrecy, and have also been made aware of the special significance of data protection.

You can access, print out or download this privacy policy permanently and at any time at www.spielergewerkschaft.de/de/Datenschutz.html.

  1. Scope of the processing of personal data

    In the event that you simply access our website, personal data are collected only to the extent technically necessary, insofar as this is required to provide the website and does not differ to the information shown in this privacy policy.

    The collection and use of personal data is only carried out regularly if your consent is given, a prior request for consent for reasons of fact is not possible, or the processing of data is permitted by law. Collected data will be erased immediately, insofar as they are no longer required and erasure is not precluded by legal storage requirements.

  2. The legal basis for the processing of personal data

    We process your personal data on the basis of different legal bases. These are shown below:
    • Reason for processing:
      Fulfilment of contract

      Legal basis in the GDPR:
      Article 6 para. 1 b)

      Explanation:
      Processing takes place only to the extent necessary for the performance and fulfilment of the rights and obligations under the contract. Unless expressly stated otherwise, data processing is carried out by VDV only to this extent.
    • Reason for processing:
      Legitimate interest

      Legal basis in the GDPR:
      Article 6 para. 1 f)

      Explanation:
      Processing takes place insofar as VDV has a legitimate interest and no conflicting overriding interests are evident on your part. The specific interest is explained in this privacy policy in the context of the description of the type of processing.
    • Reason for processing:
      Consent

      Legal basis in the GDPR:
      Article 6 para. 1 a)

      Explanation:
      Processing takes place insofar as you have expressly agreed to this, and on the basis of transparent information about the type and scope of the data processing. You can revoke your consent at any time. However, processing carried out up to this point in time will not be affected.
    • Reason for processing:
      Legal obligation

      Legal basis in the GDPR:
      Article 6 para. 1 c)

      Explanation:
      Processing takes place insofar as it is necessary to fulfil German or European legal obligations.

  3. Data erasure and storage period

    We erase your personal data as soon as the legal basis for the processing is eliminated and there are no statutory storage requirements. A retention obligation may be provided for if this is regulated by the European or national legislation, laws or other regulations to which VDV is subject.

IV. Contact by email

If you make use of the possibility of sending us a request by email, we collect the data communicated to us in this way for processing your request (for example, first and last name, email address). According to your enquiry, we shall fulfil your request for making contact or any other requests for information. The legal basis for this depending on the nature of your request is 6 para. 1 b) of the GDPR or Article 6 para. 1 f) of the GDPR. The data resulting in this context are deleted after the storage is no longer required. If statutory storage obligations exist, we shall restrict processing for the duration of the storage obligation. The duration of the retention obligation depends on the purposes, in which context the data were processed.

V. Provision of the website and creation of log files

  1. Description and scope of the data processing

    In order to establish and maintain the connection when accessing the website for informational use only, only such server log files that your browser transmits to us are automatically collected and stored. When simply looking at the website, the following technical data are required to display the page and for reasons of IT security:
    • your IP address,
    • the HTTP status code,
    • the browser type and browser version,
    • referrer URL code (previously visited site),
    • date and time of the server request,
    • the files transferred,
    • the size of the files transferred during the connection.

      In addition, the personal data listed above are stored in the server log files. These data are not combined or stored with other data about you.

      In addition, cookies may be used when visiting the site. Further details can be found in the following information in this privacy policy.

  2. Legal basis for data processing

    The legal basis for the temporary storage of personal data and log files is Article 6 para.1 f) of the GDPR (see III. 2.).

  3. Purpose of data processing

    The temporary storage of data in log files is imperative to ensure the permanent functioning of the IT systems and website technology, as well as to ensure IT security. It is also necessary to display the website correctly and enable its optimisation. This therefore constitutes a legitimate interest within the meaning of Article 6 para. 1 f) of the GDPR. The data collected in this context will not be used for marketing purposes.

  4. Duration of storage

    Saved log files shall be deleted after 30 days at the latest, unless there are statutory storage requirements.

VI. Use of cookies

  1. Description and scope of the data processing

    During the normal visit of the website, meaning the calling up and viewing of the site, no cookies are set by the operator. Cookies are used when logging in and using Google Analytics. A cookie is a small text file containing information transmitted by your browser. If you allow the use of cookies in your browser, this will not endanger your computer. Cookies are used as part of the login and there are ones for web analysis (see VII. 2.).

  2. Legal basis for data processing

    The legal basis for the processing of personal data in the case of the setting of cookies to carry out the login is Article 6 para. 1 b) of the GDPR. The fulfilment of the contract is the provision of the login. The legal basis for the processing of personal data in the case of the use of cookies for web analytics purposes is Article 6 para.1 a) in conjunction with Article 7 of the GDPR (see III. 2.).

  3. Purpose of data processing

    Cookies which are used in connection with the login are used for the purpose of providing the website with full functionality.

    Cookies used for web analytics purposes are used for the purpose of optimising our offers.

  4. Storage duration, objection and elimination possibility

    When you log into the login area, a so called session cookie is set for the duration of the login. If you log out, this session cookie will also be deleted. This also applies if you remain logged in and close all tabs of the browser.

For the duration of the storage of the cookies which are used for web analytics purposes, see below under point VII. 2.

You can prevent the storage of cookies in your browser settings. However, this may cause some features of the site to be unavailable. Cookies which have already been set can also be erased from your browser at any time.

VII. Newsletter

We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after registration we send the user an e-mail to the e-mail address provided, in which we ask for confirmation that the user wishes to receive the newsletter. If the registration is not confirmed within 24 hours, this data is blocked and automatically deleted after one month. In addition, we store the IP addresses transmitted and the times of registration and confirmation. The purpose of this procedure is to be able to prove the registration and, if necessary, to clarify any possible misuse of personal data.

The only mandatory information for sending the newsletter is an e-mail address. The provision of further, separately marked data is voluntary and will only be used to address you personally. After confirmation, we store the e-mail address for the purpose of sending the newsletter. The data entered in the newsletter registration form is processed exclusively on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR). The consent given to the storage of the data, the email address and its use for sending the newsletter can be revoked at any time, for example via the "unsubscribe" link in the newsletter. The cancellation can be declared by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

The data stored by us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the login area) remain unaffected by this. We use this data exclusively for sending the requested information and do not pass it on to third parties.

Rapidmail

This website uses Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. Rapidmail is a service that can be used to organise and analyse the sending of newsletters, among other things. The data entered by you for the purpose of subscribing to the newsletter is stored on Rapidmail's servers in Germany. If you do not wish to be analysed by Rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

Data analysis

For the purpose of analysis, the emails sent with Rapidmail contain a so-called "tracking pixel", which connects to the Rapidmail servers when the email is opened. This allows us to determine whether a newsletter message has been opened. We can also use Rapidmail to determine whether and which links in the newsletter message are clicked on. All links in the email are so-called tracking links that can be used to count clicks. More information on the analysis functions of Rapidmail can be found at the following link: https://de.rapidmail.wiki/kategorien/statistiken/

Legal basis

The data processing is based on the consent of the user (Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Storage period

The data stored by us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from both our servers and the Rapidmail servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this. Further details can be found in Rapidmail's data security information at: https://www.rapidmail.de/datensicherheit.

Conclusion of a contract for commissioned data processing

We have concluded an order processing contract with Rapidmail that takes into account all the requirements of Article 28 of the GDPR.

VIII. Recipients of personal data

In selected cases only, personal data are passed on to external service providers. These were carefully selected by VDV and were commissioned being bound by instructions. The recipients of personal data include technical service providers ensuring the provision and optimisation of the website, as well as service providers offering additional services, such as support. These are regularly contract processors within the meaning of Article 28 of the GDPR, with whom we have concluded a processing contract within the meaning of Article 28 para. 3 of the GDPR.

Your personal data are always stored in the EU and managed in accordance with our privacy policy and the GDPR, unless otherwise stated in this privacy policy. If personal data are transmitted to a company affiliated with VDV or other recipients outside the EU, this is done only on the basis of a permissible legal basis and in compliance with the statutory requirements of the GDPR.

  1. Use of log-ins

    We currently use a login facility on our website in order to allow members access to an exclusive members’ area of the site.

    When visiting the website, no personally identifiable data are collected and passed on in connection with the aforementioned login.

    When you register, the following data will be transmitted to our website:
    • User name
    • Password

    This is required to give you access to the members’ area.

    The legal basis for the processing and transmission of your data is the existence of a contract pursuant to Article 6 para.1 b) of the GDPR (see III. 2.). Your data shall be stored as long as you are registered in the members’ area with access authorisation. In connection with the processing of cookies, reference is made to the information under point VI.

  2. On our website we use Google Analytics, a web analytics service provided by Google Inc.

    Google Analytics uses cookies, which are stored on your computer and facilitate the analysis of your use of our website. The information generated by the cookie on how you use this website is usually transferred to a Google server in the USA and stored there.

    However, your IP address is truncated and thereby anonymised prior to transmission by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and truncated there. IP anonymisation is enabled on our website. On behalf of VDV, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services to VDV related to website usage and internet usage.

    The IP address transmitted by your browser as part of Google Analytics is not associated with other data by Google. The corresponding cookies and data collected on Analytics servers are stored for a period of 14 months and automatically deleted after this period, unless the user ID is newly recorded within the retention period. In this case, the retention period of 14 months is reinitialised (see Google Analytics Help, keyword data retention, https://support.google.com/analytics/answer/7667196?hl=en). You can prevent the use of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that if you do this, you may not be able to access all functions provided on our website. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of these data by Google by downloading the browser plug-in available under the following link and installing: http://tools.google.com/dlpage/gaoptout?hl=en.

IX. Rights of data subjects

If personal data about you are processed by VDV, you are a data subject within the meaning of Article 4 para. 1 of the GDPR. Therefore, you have the following rights with respect to the personal data concerning you:

  • Right to information pursuant to Article 15 of the GDPR
  • Right to rectification or erasure pursuant to Article 16 and Article 17 of the GDPR
  • Right to restriction of processing pursuant to Article 18 of the GDPR
  • Right to object to the processing of your data pursuant to 21 of the GDPR
  • Right to data portability pursuant to Article 20 of the GDPR
  • Right to revoke the data protection consent declaration according to Article 7 para. 3 of the GDPR.

As a visitor to our website, you are not subject to automated decision making within the meaning of Article 22 of the GDPR

If you do not agree with the way we process your data, please contact the controller under I. or its data protection officer under II. Additionally, you have the right to file a complaint with a supervisory authority pursuant to Article 77 of the GDPR.

Our supervisory authority is:

State Commissioner for Data Protection and Freedom of InformationNorth Rhine Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Telephone: 0211/38424-0, Fax: 0211/38424-10, Email: wslsloreedl.inp@tt.de

End of the privacy policy

Version: 15.12.2018

Become a VDV member now!

Because with us, the player counts as a person!

Membership application