Privacy Policy

We would like to inform you below about the processing of personal data in the context of using our online shop “FC Viktoria Berlin | Shop” (“website”).

1. DATA PROTECTION PERSON

FC Viktoria 1889 Berlin Frauen-Fußball GmbH (hereinafter referred to as “we”)

Krahmerstrasse 15, Berlin

If you have any questions about data protection, you can contact us at the following email address: Datenschutz@fcviktoria.com .

2. SECURITY AND INTEGRITY OF DATA

Protecting the personal data and information you give us or that we receive about you is a priority for us. We take appropriate security measures to protect your data from loss, misuse and unauthorized access, alteration, disclosure or destruction. To do this, we take organizational and technical measures to ensure the confidentiality, integrity, availability and reliability of systems and services that process personal data.

3. SECURING YOUR DATA: SSL ENCRYPTION

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.

4. COLLECTION OF GENERAL INFORMATION WHEN VISITING OUR WEBSITE

When you access our website, information of a general nature is automatically recorded. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.

They are processed in particular for the following purposes: ensuring a problem-free connection to the website, ensuring smooth use of our website, evaluating system security and stability, and for other administrative purposes. We do not use your data to draw conclusions about you personally. We may statistically evaluate information of this type in order to optimize our website and the technology behind it.

The legal basis for this is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest is to improve the stability and functionality of our website.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

5. CONTACT US BY EMAIL

If you would like to contact us, you are welcome to do so by email. Your data will be transmitted via an encrypted connection. So that we know who sent the request and can answer it, we must process the data provided in the request (e.g. name, email address). We use your information solely to process your request and send you an answer.

The legal basis for this is Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. After your request has been processed, the processed data will be deleted in accordance with data protection regulations.

6. WHAT DATA IS PROCESSED WHEN ORDERING TICKETS?

If you order tickets from us, we process the personal data you provide when ordering the ticket.

This data is used for the purpose of contract or order processing and to process your inquiries and bookings. The legal basis is Art. 6 Para. 1 Clause 1 Letter b) GDPR. If you have ordered tickets from us, we would also like to use your email address to send you similar, suitable offers (Art. 6 Para. 1 Clause 1 Letter f) GDPR in conjunction with Section 7 Para. 3 UWG). Our legitimate interest lies in providing you with promotional information about our offers. If you do not wish to receive these emails, you can object by sending a short message to datenschutz@fcviktoria.com .

If data processing takes place as part of an order or purchase process, the data will be stored in accordance with the statutory storage and retention obligations and then deleted. With regard to advertising to (existing) customers, your data will be stored until you object to its use. In the event of an objection, we will keep the respective email address in a block list in order to be able to take the objection expressed into account permanently (the legal basis is Art. 6 Para. 1 Clause 1 Letter c) GDPR).

7. SOCIAL MEDIA POSTS FROM FANS

On our website and in our blog, we include social media posts from fans (for example from Instagram and Twitter) in which we or our social media channel are linked.

The legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest is to be able to share posts from fans on our website with other fans.

We only process your social media posts if no people are clearly identifiable in the posts. If you are pictured in the post, we will only process the data with your prior consent. To do this, we will contact you and ask whether we can publish the post on our website.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses so-called “cookies”. Cookies are small text files. Cookies do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them. In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to use certain services of the third-party company. Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. displaying videos). Other cookies are used to evaluate user behavior or display advertising. Cookies that are required to carry out electronic communications (necessary cookies) or to provide certain functions you require (functional cookies, such as language settings) or to optimize the website (e.g. cookies to measure web audience) are stored on the basis of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR (legitimate interest), unless another legal basis is specified. We have a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of our services. If consent to store cookies has been requested, the cookies in question will be stored exclusively on the basis of this consent (Art. 6 Paragraph 1 Clause 1 Letter a of GDPR or Section 25 Paragraph 1 TTDSG); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted. If cookies are used by third-party companies or for analysis purposes, we will inform you separately about this in this data protection declaration and, if necessary, ask for your consent.

In addition to the corresponding settings in your browser, you have the option of preventing cookies from being set using the cookie banner. However, we would like to point out that this may limit the use of our website.

We use the following technologies on our website:

8.1 Use of meta pixels

We use meta pixel technology on our website, operated by Meta Platforms Ireland Limited (“Meta”). The meta pixel enables Meta to determine visitors to our website as a target group for the display of advertisements (so-called “meta ads”). Accordingly, we use the meta pixel to only display the meta ads we place to those users on Meta and within the services of partners cooperating with Meta who have also shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics that can be seen from the websites visited) that we transmit to Meta (so-called “custom audiences”). We also use the meta pixel to ensure that our meta ads correspond to the potential interests of users and can also track the effectiveness of the meta advertisements for statistical and market research purposes.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with the Meta data usage policy. We as the website operator cannot influence this use of the data. The use of Meta pixels is based on your consent, which can be revoked at any time, in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR or Section 25 Paragraph 1 TTDSG. You can find further information on protecting your privacy in Meta’s data protection information Meta data policy – ​​How Meta collects and uses user data | Privacy Center (facebook.com) . You can also deactivate the “Custom Audiences” function in the advertising settings area. You must be logged in to Meta to do this. If you do not have a Meta account, you can opt out of Meta's usage-based advertising here (European Interactive Digital Advertising Alliance website): http://www.youronlinechoices.com/de/praferenzmanagement/ .

We are jointly responsible with Meta for the collection or receipt during transmission (but not the further processing) of data that Meta collects using the Meta Pixel or receives during transmission for the following purposes:

● Display of advertising information that corresponds to the presumed interests of website users;

● Delivery of commercial and transaction-related messages (e.g. addressing users via meta-messenger);

● Improve ad delivery and personalize features and content (e.g. improve the recognition of which content or advertising information is likely to correspond to users' interests).

We have concluded an agreement with Meta ( https://de-de.facebook.com/legal/terms/page_controller_addendum ) in which the various responsibilities are regulated.

If Meta provides us with measurements, analyses and reports (which are aggregated, i.e. do not contain any information on individual users and are anonymous to us), then this processing does not take place within the framework of joint responsibility, but on the basis of a data processing agreement ( https://www.facebook.com/legal/terms/dataprocessing ).

Please note that the data processed by Meta may be sent to a server in the USA and stored there. If the data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.

The transfer of personal data by Meta, especially to third countries, is outside our area of ​​responsibility and we have no influence on this.

8.2. Use of Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For the purpose of needs-based design and ongoing optimization of our website, we use Google Analytics with your consent. In this context, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) and time of the server request, is transferred to a Google server in the USA and stored there. The information is used to evaluate website usage, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data held by Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).

 

Google Analytics cookies are stored and this analysis tool is used on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG, which can be revoked at any time. You can also prevent cookies from being stored by setting your browser software accordingly; however, we would like to point out that if you do this you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Download page for the browser add-on to deactivate Google Analytics. You can find more information about how Google Analytics handles user data in Google’s privacy policy: Privacy Policy – ​​Google Analytics Help .

In the event of data transfer to the USA, the data transfer is based on the existence of standard contractual clauses.

The transfer of personal data by Google, especially to third countries, is outside our area of ​​responsibility and we have no influence on this.

9. EMBEDDED VIDEOS

In order to make the content on our website more descriptive and to make it available in a reasonable loading time, we embed videos from the platforms Vimeo and YouTube.

9.1 YouTube

The provider of the social media platform YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA - a company of the Google Group. As soon as you access a page with embedded videos, your IP address is sent to YouTube/Google and cookies are installed on your device, provided that you have consented to this in accordance with Art. 6 Para. 1 Clause 1 Letter a of GDPR or Section 25 Para. 1 TTDSG. The following data is also transferred to YouTube/Google in this context, although we have no influence on this:

IP address, date and time, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request comes, browser used as well as operating system and its interface, language and version of the browser software, device used (PC, smartphone, etc.) and location (if Google Maps is activated).

When you play the videos, YouTube/Google also receives the information that you have accessed the corresponding subpage of our website. If you are logged in to YouTube or Google, this data is assigned directly to your user account. If you do not want this, you must log out before playing the video. In addition, YouTube/Google also stores data if you do not have a Google user account, in particular: IP address, search queries, browser and operating system version.

YouTube/Google stores the aforementioned data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its own website. You have a right of objection to this, which must be exercised vis-à-vis YouTube.

For more information, please see Google’s privacy policy at https://policies.google.com/technologies/product-privacy?hl=de .

Please note that the information collected by the cookies is usually sent to a server in the USA and stored there. If the data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.

The transfer of personal data by YouTube/Google, especially to third countries, is outside our area of ​​responsibility and we have no influence on this.

9.2 YouTube

The provider of Vimeo is Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. For technical reasons, the integration of Vimeo videos results in the Vimeo servers being accessed. As soon as you access a page with embedded videos, your IP address, technical information about your device (e.g. browser type, operating system, basic device information) and the website you are visiting are sent to Vimeo and cookies are installed on your device, provided that you have consented to this in accordance with Art. 6 Para. 1 lit. a GDPR or Section 25 Para. 1 TTDSG.

Vimeo is responsible for the processing of data from your browser or device associated with the playback of a video. Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy .

Please note that the data processed by Vimeo is sent to a server in the USA and stored there. If the data is transferred to the USA, the data transfer is based on the existence of standard contractual clauses.

The transfer of personal data by Vimeo, especially to third countries, is outside our area of ​​responsibility and we have no influence on this.

10. MUSIC AND PODCASTS

We use hosting and analysis services from service providers to offer our audio content for listening or downloading and to obtain statistical information on the access to the audio content. For technical reasons, data is already transmitted to the respective provider. Such data includes in particular usage data (e.g. websites visited, interest in content, access times) and meta/communication data (e.g. device information, IP addresses).

The legal basis is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest is to be able to display audio content on our website.

We use the following service providers listed here (for further information, please see the respective service provider’s privacy policy):

Please note that the data processed by service providers may be sent to a server in third countries and stored there. In the event of data being transferred to third countries, the data transfer is based on the existence of standard contractual clauses.

The transfer of personal data by service providers, especially to third countries, is outside our area of ​​responsibility and we have no influence on this.

11. MEDIA PHOTOGRAPHY OF SPECTATORS AT HOME GAMES OF THE REGIONAL LEAGUE TEAM
THE WOMEN OF FC VIKTORIA BERLIN

Media recordings (photos, videos, audio) are regularly made during home games of the FC Viktoria Berlin women's regional league team, which are played at the Lichterfelde Stadium, Ostpreußendamm 3-17, 12207 Berlin. The media recordings are used exclusively for public relations purposes for external representation and appropriate reporting. The legal basis for data processing is our legitimate interest in accordance with Art. 6 Paragraph 1 Clause 1 Letter f) of GDPR. The media recordings are broadcast live on Sport1 for the purposes of public relations and appropriate reporting and published online (on the homepage and/or in social media such as Instagram, Twitter, YouTube, etc.) as well as in print/online media and other publications of FC Viktoria Berlin. The media recordings are only passed on if this is necessary in connection with the creation and publication of the media recordings, in particular in print and online media. In this case, the recipients are employees, external service providers, partners, sponsors and web hosts of FC Viktoria Berlin. In this respect, too, we have ensured that they are selected and monitored in compliance with statutory provisions and are also obliged to comply with data protection and statutory provisions. Furthermore, your data will not be passed on unless you have expressly consented to this beforehand. The legal basis for data processing in this case is your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR. This consent can be revoked at any time and without giving reasons to us (using the contact details above). Media recordings made by us for public relations work for the purpose of external representation and appropriate reporting will be deleted as soon as you exercise your right of objection, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or statutory storage and retention obligations or the assertion, exercise or defense of legal claims require further storage. Media recordings that are processed on the basis of your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR will be deleted as soon as you revoke your consent, unless statutory storage and retention obligations or the assertion, exercise or defense of legal claims require further storage. Consent to the processing of media recordings can be revoked at any time for the future by notifying us in writing (using the contact details above). This does not affect the legality of the data processing carried out on the basis of the consent until the revocation.

12. DELETION OF DATA

Unless otherwise stated in this privacy policy, we generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend warranty and, if applicable, guarantee claims. In the case of statutory retention periods, which usually last between 6 and 10 years, deletion is only considered after the respective retention period has expired.

13. DATA TRANSFER

Personal data will not be transferred to third parties for purposes other than those listed in this privacy policy.

We will only share your personal information with third parties if:

  • You have given your express consent, which can be revoked at any time, in accordance with Art. 6 (1) sentence 1 lit. a GDPR,

  • the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR to assert, exercise or defend legal claims or there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

  • in the event that there is a legal obligation to disclose data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and

  • this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.

  • We may use service providers to assist us with IT and other administrative activities (e.g. service providers offering IT hosting or maintenance). These service providers have access to your personal data to the extent necessary to provide the services. Access is limited to the purpose of providing the service. Beyond this, no data is passed on to third parties.

14. DATA TRANSFER TO THIRD COUNTRIES

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or if the processing takes place in the context of the use of third-party services or the disclosure or transmission of data to other persons, bodies or companies, this will only be done in accordance with the legal requirements.

Subject to express consent or contractually or legally required transmission, we only process the data in third countries with a recognized level of data protection, if there is a contractual obligation through so-called standard protection clauses of the EU Commission or if there are certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).

Note on data transfer to the USA:

Our website includes tools from companies based in the USA. If you consent to the use of these tools, your personal data may be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to release personal data to security authorities without you as the data subject being able to take legal action against this. We have no influence on these processing activities.

15. RIGHTS OF THE DATA SUBJECT

You have the right:

  • pursuant to Art. 15 GDPR, to request information about your personal data processed by us.

  • to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;

  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

  • to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

  • pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;

  • pursuant to Art. 21 GDPR, to object to the processing of your personal data, provided that these are processed on the basis of our legitimate interest in accordance with Art. 6 Paragraph 1 Clause 1 Letter f GDPR, and provided that there are reasons for the objection that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

To exercise your rights as a data subject, you can contact us by email.

You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state in which you live or the authority responsible for us as the controller (Home: Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de) ) .

16. CHANGES TO OUR PRIVACY POLICY

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services.