Privacy Policy

Data protection

This website is operated by the German Football Academy. The protection of your personal data is very important to us. In this declaration you will find information about how your personal data is handled when you visit the Deutsche Football Academy website.

1. Responsible body and data protection officer
   The person responsible for processing personal data on this website is:
   German Football Academy, Kirschenallee 20, 14050 Berlin
   Telephone: +49(0) 30 555 78 15404
   
   Email: info@deutschefootballacademy.com
   If you have any questions about data protection, you can contact our data protection officer at any time at https://deutschefootballacademy.com/privacy/.
2. Collecting and using non-personal information when using the website
   If you use this website without otherwise transmitting data to us, we only collect technically necessary data that is automatically transmitted to our server by your browser and is required by technically necessary or functional cookies.
   To the extent that personal data is affected, we process it on the basis of our legitimate interest in providing you with a functioning, secure website (Art. 6 Para. 1 lit. f GDPR). This data will not be combined with other data sources, unless we describe this explicitly elsewhere. We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.
3. Collection and use of personal data
1. Registration
   When you register on DFA, we process your following personal data: place of residence, language of communication, email, password for your login and other information that you voluntarily provide to us, e.g. B. Name, date of birth, and newsletter preferences.
   When you use DFA, we also process the following information that you provide to us in the registered area at DFA or that arises during your use. These are e.g. B. Information about your address, telephone numbers or account or credit card information, information about your memberships at the German Football Academy.
   You can always view the specific data under DFA and change it there.
   We process this data to offer you the DFA area.
   We process your personal data until you have deleted your DFA account and for as long as it is necessary to fulfill our mutual obligations in connection with DFA. In addition, we only store your personal data to assert or defend against legal claims or as long as there are legal obligations to store it.
   For IT security purposes, we also process technical information about your use of DFA, for example IP address and time of registration on DFA.
   We process this information based on our legitimate interest in providing you with a secure website (Art. 6 Para. 1 lit. f GDPR). We delete this information 18 months after the respective registration on DFA.
2. Presentation of content on the website
   In order to be able to display the website and its essential content such as videos, images or social media posts in your internet browser, we use various service providers and technologies. In individual cases it is possible that we process certain personal data for this purpose.
   The legal basis for the processing is Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract). In this context, your personal data will only be processed for as long as is necessary to display the content. In addition, we only store personal data to assert or defend against legal claims or as long as there are legal obligations to store it.
   1. Image/graphics delivery
      If necessary, we process information about your browser, operating system and the URL that you previously visited in order to optimally deliver images and graphics to your device and to ensure the stability of the website. The legal basis for the processing is Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract). Images or graphics could otherwise not be displayed on the website. We only process your personal data for this purpose for as long as is necessary to provide you with the images and graphics. In addition, we only store personal data to assert or defend against legal claims or as long as there are legal obligations to store it.
      
      The lawfulness of the data processing carried out by us before revocation remains unaffected.
      We only process your personal data until the above-mentioned purposes are fulfilled. In addition, we only store personal data to assert or defend against legal claims or as long as there are legal obligations to store it.
      Further information about the processing of your personal data in this context, in particular through social networks, can be found below in Section 5.
   2. Cookies
      Information about the cookies and similar technologies we use on the website can be found below under Section 4 and
   3. Processing time
      We process your personal data for these purposes (i) until you revoke your consent with future effect or (ii) as long as you indicate an interest in our newsletters. In addition, we only store personal data to assert or defend against legal claims or as long as there are legal obligations to store it.
   On our website you can enter personal data using a contact form. If you use the contact form, we process the data that you enter in the input mask (e.g. last name, first name, street, house number, city, postal code, email address, message, time of request and server log data) .
   The legal basis for the processing is Article 6 Paragraph 1 Letter b GDPR (fulfillment of the contract).
   We use the data exclusively to process and answer your request.
   We only process the personal data received from you to contact us until we have finally answered your request. In addition, we only store personal data to assert or defend against legal claims or as long as there are legal obligations to store it.
3. Whistleblower system
   Information on how the DFA processes personal data in connection with the whistleblower system, which can also be accessed via this website, can be found under “Data protection information” on the whistleblower system page.
4. Cookies and similar technologies
1. What are cookies and similar technologies?
   Part of our online services requires us to use so-called cookies or similar technologies such as: B. Use pixels (together: "cookies"). Cookies in this sense are small files or other technologies that store or receive information on your device when you surf the website.
2. Which cookies are used on this website and how do you set them with the cookie consent solution?
   You can find a list of the cookies we use, descriptions of the purposes of the cookies and further information about the respective cookies in our cookie consent solution here. When you first visit our website and then at any time in our cookie consent solution, you can accept or reject individual or all cookies separately by placing a green check mark next to the respective cookie or removing it and then clicking on "Save settings". Your Settings made in the Cookie Consent Solution are stored on your computer or mobile device, so you will need to set them again when you clear your browsing history or use another device or internet browser.
5. Data transfer to processors and transmission to other responsible parties
   We sometimes work with other companies in the data processing described in this data protection declaration. These other companies are either processors or other controllers. In addition to the information about data recipients made available in this data protection declaration or in the cookie consent solution for specific cases, the following applies:
1. Processor
   All personal data that we process on this website is processed by us or by so-called processors. Processors are companies that only process your personal data for us strictly in accordance with our instructions, such as IT service providers (e.g. hosting and maintenance of the website, cookie providers and analysis providers) or advertising agencies. We use contract processors primarily so that we can offer you our services (better). If these processors are based outside the European Economic Area (EEA), Section 6. c also applies. below. We have carefully selected these service providers and concluded order processing contracts with them.
2. Contract execution or service provision
   To the extent that this is necessary to process the contract or provide services to you, we pass on your personal data to our contractual partners, e.g. to a shipping company for the delivery of ordered goods, to Deutsche Football Academy in connection with your membership, to Deutsche Football Academy in connection with purchases in the online shop to cookie providers to provide certain marketing services, or to the payment provider you have selected. These other controllers may use the data received in this way only for the purpose for which we transmitted it. If these other responsible persons are located outside the EEA, Section 6. c also applies. below.
   The transmission of your personal data to these other responsible parties for these purposes takes place to fulfill the contract, Art. 6 Para. 1 lit. b GDPR or due to our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in making our operations efficient.
3. Credit check
   To check your creditworthiness, in justified cases (e.g. direct debit), we exchange address and creditworthiness data with credit service companies or credit agencies in Germany. These companies only receive personal data from us that is necessary to carry out their respective activities (e.g. name, address, date of birth). The transmission is based on our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in avoiding a credit risk of default.
4. Legal obligation or enforcement of legal rights
   Otherwise, we will only transfer your personal data to other responsible parties if and to the extent this is required by law to enforce legal claims or to investigate or prevent suspected or actually illegal circumstances. In these cases, we will inform you separately about the respective transfer if and to the extent this is legally required.
5. Transfer to third countries
   If we transfer your personal data to processors or other controllers in countries outside the European Economic Area (EEA) (for example in the USA), we implement the legally required standards and security mechanisms. We achieve this, for example, through transfers under an adequacy decision in accordance with Art. 45 GDPR or by agreeing on so-called EU standard contracts. Please contact us as described in point 1 to find out more about the specific security mechanisms we use.
6. Secure data transfer
   All personal data that you provide to us during the surfing process in general and in particular during the ordering process is transmitted in encrypted form. We establish a so-called SSL connection with every transaction. SSL (Secure Socket Layer) is a process in which your data is encrypted so that it cannot be read by unauthorized persons when transmitted over the Internet.
   You can recognize the SSL connection because the Internet address has changed from http:// to https://. Additionally, the secure connection is usually indicated by a closed padlock in the status bar of your web browser.
7. Your rights
   You have the following legal rights vis-à-vis DFA regarding your personal data, provided the relevant requirements are met. You can find further information about your rights and the corresponding requirements on the EU Commission website at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de.
1. Right of providing information
   As a data subject, you have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data as well as further information, e.g. the purposes of processing, the recipients and the planned duration of storage or the criteria for determining the duration.
2. Right to correction and completion
   As a data subject, you have the right to immediately request that incorrect personal data be corrected. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
3. Right to deletion (“right to be forgotten”)
   As a data subject, you may have the right to have your personal data deleted. This is e.g. This is the case, for example, if your personal data is no longer necessary for the original purposes, you have revoked your data protection declaration of consent or the personal data has been processed unlawfully.
4. Right to restriction of processing
   As a data subject, you have the right to restrict processing in the cases prescribed by law.
5. Right to data portability
   As a data subject, you have the right, in the cases required by law, to receive the personal data concerning you in a structured, common and machine-readable format.
6. Right to object
   As a data subject, you have the right to object to the processing of certain personal data concerning you at any time for reasons relating to your particular situation.
   In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.
7. Right to revoke your data protection consent
   You can revoke your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of the processing carried out until the revocation.
8. Right to complain to a data protection authority
   You have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you believe that the processing of personal data concerning you violates the GDPR.
8. Changes
   Our privacy policy and the descriptions in our cookie consent solution may change from time to time. This also includes further developments due to changes in our business as well as adjustments due to a changed legal situation and/or due to the implementation of new technologies or services on the website. We will publish corresponding updates to the data protection declaration on this page.