Privacy statement

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy statement applies to the VfB Stuttgart 1893 AG (“VfB”) website, which can be accessed under the domain www.vfb.de and the various subdomains ("our website").

Who is responsible and how can I reach VfB?

Responsible Entity

for the processing of personal data within the meaning of the EU General Data Protection Regulation (DSGVO)

VfB Stuttgart 1893 AG
Mercedes Street 109
70372 Stuttgart
DE

Our communication details are as follows:

VfB Stuttgart 1893 AG, Mercedesstraße 109, 70372 Stuttgart (Bad Cannstatt);
Telephone: +49 (0) 711 / 55 007 0;
Fax: +49 (0) 711 - 55 007 88 111;
E-mail address: service@vfb-stuttgart.de; 

Data Protection Officer

Alexander Freitag
External data protection officer
datenschutz-ag@vfb-stuttgart.de

What is it about?

This privacy statement fulfils the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. through anonymisation, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a Legal Basis and a defined purpose.

Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and if there are statutory retention obligations.

Who receives my data?

We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the Legal Basis in the individual case (e.g. consent or protecting legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 DSGVO, they may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your terminal device when you visit our website and that are stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your terminal device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing procedures. You can find detailed information on the cookies used in the cookie settings or in the Consent Manager of this website.

 

Under the conditions of the statutory provisions of the General Data Protection Regulation ( DSGVO), you have the following rights as a data subject:

Access pursuant to Art. 15 DSGVO about the data stored about you in the form of meaningful information about the details of the processing, as well as a copy of your data;

Rectification pursuant to Art. 16 DSGVO of incorrect or incomplete data stored by us;

Erasure pursuant to Art. 17 DSGVO of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

Restriction of processing pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.

Data portability pursuant to Art. 20 DSGVO, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a DSGVO or on the basis of a contract pursuant to Art. 6 (1) b DSGVO and these have been processed by us with the aid of automated procedures. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.

Right to object to the processing of your personal data pursuant to Art. 21 DSGVO, insofar as this is carried out on the basis of Art. 6 Para. 1 lit. e, f DSGVO and there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the assertion, exercise or defence of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.

Withdrawal pursuant to Art. 7 (3) DSGVO of your granted consent with effect for the future.

Complaint pursuant to Art. 77 of the DSGVO to a supervisory authority if you are of the opinion that the processing of your personal data violates the DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the Legal Basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Index:

1. Website (general)
   Specific processing activities within the context of the website offer
2. Other Online Services
3. VfB-Service-Center
4. Newsletter
5. Online Shop
6. Ticketing
7. Club Memberships
8. VfB Fußballschule (Football School)
9. Events
10. Image, Audio and Video Recordings
11. Video Surveillance
12. Payment/Collection
13. Price Competitions
14. VfB TV
15. VfB Akademie (Academy)
16. Links to Websites of other Providers
    
17. Data processing between subsidiaries
18. Data processing for marketing purposes

I. Provision of the Website

Nature and Scope of Processing

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Website from which access was made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.

Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 DSGVO.

Purpose and Legal Basis

The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. lit. f DSGVO. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) DSGVO. Insofar as the further storage of log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c DSGVO. There is no legal or contractual obligation to provide the data, however, calling up our website is not technically possible without providing the data.

Storage Period

The aforementioned data is stored for the duration of the website display and, for technical reasons, for a maximum of 7 days beyond that

II. Other Online Services

ADITION Adserving & Targeting

Nature and Scope of Processing

We use the ADITION Adserving & Targeting service of ADITION technologies AG, Oststraße 55, 40211 Düsseldorf, Germany, to display specific and relevant advertisements to groups of users with the help of targeting technologies.

Web tracking technologies are used to create pseudonymised user profiles. As a rule, these profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and Legal Basis

We process data with the help of ADITION Adserving & Targeting for the purpose of optimising our advertising campaigns and for marketing purposes on the basis of your consent pursuant to Art. 6 Para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by ADITION technologies AG. Further information can be found in the data protection declaration for ADITION Adserving & Targeting: https://www.adition.com/datenschutz.

Akamai CDN

Nature and Scope of Processing

We use Akamai CDN to properly deliver the content on our website. Akamai CDN is a service provided by Akamai Technologies, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content on our website, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Akamai Technologies, Inc., Cambridge, Massachusetts, US, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Akamai CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Akamai Technologies, Inc. Further information can be found in the privacy policy for Akamai CDN: https://www.akamai.com/de/de/privacy-policies/.

Atlas Solutions

Nature and Scope of Processing

We have integrated Atlas Solutions on our website. Atlas Solutions is a service provided by Atlas Solutions that displays targeted advertising to users. Atlas Solutions uses cookies and other browser technologies to analyse user behaviour and recognise users. Atlas Solutions collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Furthermore, Atlas Solutions delivers targeted advertising based on behavioural profiling and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider. In this case, your data will be passed on to Atlas Solutions.

Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and Legal Basis

We process data with the help of Atlas Solutions for the purpose of optimising our advertising campaigns and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Atlas Solutions. Further information can be found in the Atlas Solutions privacy policy: https://atlassolutions.com/business/good-questions/privacy-and-data.

 

AWIN

Nature and Scope of Processing

We have integrated AWIN on our website. AWIN is an affiliate marketing software of AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany. We use AWIN to measure the success and billing of our affiliate partners.

AWIN sets cookies to be able to allocate visitors via affiliate links of our partners and to trace the origin of orders.

In this context, the following data is usually collected and stored: Identification number of the affiliate partner, identification number of the user, information on the advertising material clicked on, order ID and product ID if applicable.

Your IP address and other identification features such as your user agent are also transmitted to the provider.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in optimising our advertising campaigns, for marketing purposes and for the settlement of commission payments to affiliate partners in accordance with Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by AWIN AG. Further information can be found in the data protection declaration for AWIN: https://www.awin.com/de/rechtliches/privacy-policy.

 

AWS S3

Nature and Scope of Processing

We use AWS S3 to properly deliver the content on our website. AWS S3 is a service of Amazon Web Services, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to deliver content from our website, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Amazon Web Services, Inc., whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of AWS S3.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Amazon Web Services, Inc. Further information can be found in the privacy policy for AWS S3: https://aws.amazon.com/de/privacy/.

 

Bootstrap CDN

Nature and Scope of Processing

We use Bootstrap CDN to properly deliver the content on our website. Bootstrap CDN is a service provided by Bootstrap, which acts as a content delivery network (CDN) on our website.

A CDN helps to deliver content from our website, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to Bootstrap servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of Bootstrap CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Bootstrap. Further information can be found in the privacy policy for Bootstrap CDN: https://www.bootstrapcdn.com/privacy-policy/.

 

Channel Pilot

Nature and Scope of Processing

We have integrated components of Channel Pilot on our website. Channel Pilot is a multichannel tool of Channel Pilot Solutions GmbH, Lilienstraße 5-9, 20095 Hamburg, Germany and offers marketing automation software for marketing services and products, including search engine optimisation, lead management, email marketing and web analytics.

Channel Pilot uses cookies and other browser technologies to analyse user behaviour and recognise users. This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

We process your data with the help of Channel Pilot for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Channel Pilot Solutions GmbH. Further information can be found in the privacy policy for Channel Pilot: https://channelpilot.de/datenschutz.

 

CookieLaw

Nature and Scope of Processing

We have integrated CookieLaw on our website. CookieLaw is a consent solution provided by OneTrust Technology Ltd, 82 St John Street, London, EC1M 4JN, United Kingdom, which can be used to obtain and document consent to store cookies. CookieLaw uses cookies or other web technologies to recognise users and store consent given or revoked.

Purpose and Legal Basis

The service is used on the basis of obtaining the legally required consent to the use of cookies in accordance with Art. 6 para. 1 lit. c. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by OneTrust Technology Ltd. Further information can be found in the CookieLaw privacy policy: https://www.onetrust.de/datenschutzerklaerung/.

 

Doofinder

Search technology "doofinder, powering results".

In order to make your visit to our online shop more attractive and to present you with faster and better search results, we use the "DooFinder" search technology (hereinafter DF). This serves to protect our legitimate interest in an optimised presentation of our offer according to Art. 6 Para. 1 lit. f DSGVO.

The operator of the technology is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain. In order to use the DF search function, the browser you use must connect to DF's servers. This enables DF to know that our online shop has been accessed via your IP address.

 

Easyfeedback

Nature and Scope of Processing

We have integrated components of easyfeedback on our website. easyfeedback is a rating service that allows users to rate our services. If you rate our services, data about the service used may be transmitted to easyfeedback GmbH in order to verify authenticity. easyfeedback enables us to obtain content such as ratings directly from easyfeedback GmbH and to display it on our website. For this purpose, your current IP address is usually transmitted to the service.

Furthermore, easyfeedback stores information by means of cookies in order to find out which online offers have been visited. In this case, your data is passed on to the operator of easyfeedback, easyfeedback GmbH, Ernst-Abbe-Straße 4, 56070 Koblenz, Germany.

Purpose and Legal Basis

The use of easyfeedback is based on Art. 6 para. 1 lit. f. DSGVO, to inform users about the quality of our services. If the user consents to the processing of his data, the Legal Basis for the processing is Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by easyfeedback GmbH. Further information can be found in the data protection declaration for easyfeedback: https://easy-feedback.de/privacy/datenschutzerklaerung/.

 

eBay Image CDN

Nature and Scope of Processing

We use eBay Image CDN to properly deliver the content of our website. eBay Image CDN is a service provided by eBay, Inc. which acts as a Content Delivery Network (CDN) on our website.

A CDN helps to deliver content from our website, especially files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of eBay, Inc., 2145 Hamilton Avenue San Jose, California 95125, United States, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of eBay Image CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by eBay, Inc. Further information can be found in the privacy policy for eBay Image CDN: https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260.

 

Facebook Button

Nature and Scope of Processing

We have integrated Facebook Button on our website. Facebook Button is a service provided by Facebook Ireland Ltd. We use Facebook Button by placing sharing buttons on our website so that website visitors can post and share content on Facebook's social network.

When you access this content, you connect to servers operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, where your IP address is transmitted anonymously. According to the Facebook button, no personal data is processed.

If you register via your social media account, it is possible that data will be collected, processed and stored by this provider.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in a platform-independent provision of content pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The actual storage period of the processed data cannot be influenced by us, but is determined by Facebook Ireland Ltd. Further information can be found in the privacy policy for Facebook Button: https://www.facebook.com/policy.php.

 

Facebook CDN

Nature and Scope of Processing

We use Facebook CDN to properly deliver content on our website. Facebook CDN is a service of Facebook Ireland Ltd. which acts as a Content Delivery Network (CDN) on our website to ensure the functionality of other services of Facebook Ireland Ltd. You will find a separate section in this privacy policy for said services. This section only covers the use of the CDN.

A CDN helps to provide content from our website, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of Facebook CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The actual storage period of the processed data cannot be influenced by us, but is determined by Facebook Ireland Ltd. Further information can be found in the privacy policy for Facebook CDN: https://www.facebook.com/privacy/explanation.

 

Facebook Pixel

Nature and Scope of Processing

We use Facebook Pixel from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called Custom Audiences, i.e. to segment groups of visitors to our online offering, to determine conversion rates and to subsequently optimise these. This happens in particular when you interact with advertisements that we have placed with Facebook Ireland Ltd.

Purpose and Legal Basis

We process your data with the help of Facebook Pixel for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The actual storage period of the processed data cannot be influenced by us, but is determined by Facebook Ireland Ltd. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.

 

Facebook plugin

Nature and Scope of Processing

We have integrated Facebook Plugin components on our website. Facebook Plugin is a service of Facebook Ireland Ltd. and offers us the possibility to aggregate content from the social media platform and display it on our website.

When you access this content, you establish a connection to servers of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed solely for the above purposes and to maintain the security and functionality of Facebook Plugin.

If a user is registered with Facebook Ireland Ltd, Facebook Plugin can associate the content viewed with the profile.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in a platform-independent provision of content pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The actual storage period of the processed data cannot be influenced by us, but is determined by Facebook Ireland Ltd. Further information can be found in the privacy policy for Facebook Plugin: https://www.facebook.com/policy.php.

 

Firebase Crashlytics

Nature and Scope of Processing

We use Firebase Crashlytics by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a bug tracker to detect code errors at an early stage and thus ensure the technical functionality of our online offer. This involves collecting anonymous information about the device on which the error occurred and about the time at which the error was detected. In some cases, user sessions may also be recorded in order to facilitate the correction of the error. Google Ireland Limited does not evaluate this data for advertising purposes.

Purpose and Legal Basis

The use of the bug tracker is based on our legitimate interests, i.e. interest in a secure and error-free provision as well as the optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The exact storage period varies from case to case. Data is deleted as soon as we have corrected the error and no longer require access to error details. Further information on the storage period on the part of Google Ireland Limited can be found in the privacy policy for Firebase Crashlytics: https://policies.google.com/privacy.

 

Google Ads

Nature and Scope of Processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to analyse user behaviour and recognise users.

Google Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Furthermore, Google Ads delivers targeted advertising based on behavioural profiles and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider.

If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features.

In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and Legal Basis

We process your data with the help of Google Ads for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

 

Google Analytics

Nature and Scope of Processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the amount of time visitors spend on the site.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

We process data with the help of Google Analytics for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

 

Google Analytics Remarketing

Nature and Scope of Processing

We have integrated components of DoubleClick by Google on our website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression as well as with clicks or other activities.

Each of these data transfers triggers a cookie request to the browser of the data subject. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. Furthermore, the cookie ID enables DoubleClick to record conversions. Conversions are recorded, for example, when a DoubleClick ad has previously been displayed to a user and the user subsequently makes a purchase on the advertiser's website using the same internet browser.

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable privacy policy of DoubleClick by Google can be found at https://policies.google.com/privacy.

Purpose and Legal Basis

We process your data with the help of the Double-Click cookie for the purpose of optimising and displaying advertising on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your withdrawal at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertisement. Each time you call up one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it will be possible to visit our website without restriction, but not all functions may be fully available.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

 

Google Interactive Media Ads

Nature and Scope of Processing

We have integrated Google Interactive Media Ads on our website. Google Interactive Media Ads is a service provided by Google Ireland Limited that displays targeted advertising to users. Google Interactive Media Ads uses cookies and other browser technologies to analyse user behaviour and recognise users. Google Interactive Media Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Furthermore, Google Interactive Media Ads delivers targeted advertising based on behavioural profiling and geographic location. Your IP address and other identifiers such as your user agent are transmitted to the provider. In this case, your data will be passed on to the operator of Google Interactive Media Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.

Purpose and Legal Basis

We process data with the help of Google Interactive Media Ads for the purpose of optimising our advertising campaigns and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Interactive Media Ads: https://policies.google.com/technologies/ads.

 

Google Maps

Nature and Scope of Processing

We use the map service Google Maps to create directions. Google Maps is a service provided by Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

Purpose and Legal Basis

Google Maps is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO, i.e. our interest in making it easier for you to find locations mentioned on the website.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

 

Google Tag Manager

Nature and Scope of Processing

We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and Legal Basis

Google Tag Manager is used on the basis of our legitimate interests, i.e. interest in optimising our services in accordance with Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://www.google.de/tagmanager/use-policy.html.

 

Google Webfonts

Nature and Scope of Processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted.

Purpose and Legal Basis

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

 

Google reCAPTCHA

Nature and Scope of Processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's browsing time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. for protection when submitting forms in accordance with Art. 6 (1) lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

 

Gstatic

Nature and Scope of Processing

We use Google CDN to properly deliver the content on our website. Google CDN is a service of Google Ireland Limited, which acts as a content delivery network (CDN) on our website.

A CDN helps to deliver content from our website, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google CDN: https://policies.google.com/privacy.

 

Instagram

Nature and Scope of Processing

We have integrated components of Instagram Plugin on our website. Instagram Plugin is a service of Instagram, Inc. and offers us the possibility to aggregate content from the social media platform and display it on our website.

When you access this content, you establish a connection to servers of Instagram, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Instagram Plugin.

If a user is registered with Instagram, Inc., Instagram Plugin can associate the content viewed with the profile.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in a platform-independent provision of content pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Instagram, Inc. Further information can be found in the privacy policy for Instagram Plugin: https://help.instagram.com/519522125107875.

 

Mouseflow Analytics

Nature and Scope of Processing

We have integrated Mouseflow Analytics on our website. Mouseflow Analytics is a service of Mouseflow, Inc. and provides optimisation tools that analyse the behaviour and feedback of users of our website through analysis and feedback tools.

Mouseflow Analytics uses cookies and other browser technologies to analyse user behaviour and recognise users.

This information is used, among other things, to compile reports on website activity and to statistically analyse visitor data. Furthermore, Mouseflow Analytics records clicks, mouse movements and scroll heights in order to create so-called heat maps and session replays.

In this case, your data is passed on to the operator of Mouseflow Analytics, Mouseflow, Inc, 501 Congress Ave Suite, 150 Austin, TX 78701, United States.

Purpose and Legal Basis

We process your data with the help of Mouseflow Analytics for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Mouseflow, Inc. Further information can be found in the privacy policy for Mouseflow Analytics: https://mouseflow.com/privacy/.

 

PayOne

Nature and Scope of Processing

We have integrated PayOne components on our website. PayOne is a service of PAYONE GmbH and offers online payment solutions worldwide. The service enables us to offer the payment methods PayPal, Klarna, direct debit, credit card and purchase on account on our website.

If you choose one of these payment methods, your data required for the payment process will be automatically transmitted to PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main, Germany.

As a rule, the following data is collected in this context: Name, address, company if applicable, e-mail address, telephone and mobile phone number and IP address.

Purpose and Legal Basis

The service is used on the basis of the performance of a contract, i.e. for the processing of payment transactions in accordance with Art. 6 para. 1 lit. B. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by PAYONE GmbH. Further information can be found in the data protection declaration for PAYONE: https://www.payone.com/DE-de/datenschutz.

 

Pinterest CDN

Nature and Scope of Processing

We use Pinterest CDN to properly deliver content on our website. Pinterest CDN is a service of Pinterest Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Pinterest Inc, 651 Brannan Street, San Francisco, CA 94107, United States, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Pinterest CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer according to Art. 6 para. 1 lit. F. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Pinterest Inc. Further information can be found in the data protection declaration for Pinterest CDN: https://policy.pinterest.com/de/privacy-policy.

 

Twitter plugin

Nature and Scope of Processing

We have integrated components of Twitter Plugin on our website. Twitter Plugin is a service of Twitter Inc. and offers us the possibility to aggregate content from the social media platform and display it on our website.

When you access this content, you establish a connection to servers of Twitter Inc., San Francisco, US, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Twitter Plugin.

If a user is registered with Twitter Inc, Twitter Plugin can associate the content viewed with the profile.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in a platform-independent provision of content pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Twitter Inc. Further information can be found in the privacy policy for Twitter Plugin: https://twitter.com/de/privacy.

 

Pushwoosh

Nature and Scope of Processing

We have integrated Pushwoosh on our website. Pushwoosh is a service of Pushwoosh Inc. and offers us the possibility to send push notifications to users without the need to open the website or respective app.

Push notifications are messages that you can turn on or off at any time.

To sign up for push notifications, you must confirm that your browser or device is being prompted to receive the notifications.

Signing up to receive push notifications is documented and stored, among other things as proof. In this context, the following data is usually collected: Login time, browser type, browser version, browser ID and device ID.

Push notifications are also statistically analysed by Pushwoosh to compile reports on the interest of the notifications.

In this case, your data is passed on to the operator of Pushwoosh, Pushwoosh Inc, 1224 M St NW, Suite 101, Washington, DC 20005, United States.

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in optimising our marketing measures and improving our service quality in accordance with Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by Pushwoosh Inc. Further information can be found in the Pushwoosh privacy policy: https://www.pushwoosh.com/privacy-policy/.

 

Push notifications

If push notifications are activated by you for this website through the "Signalize" service, a function of your internet browser or mobile operating system is used to provide the notifications for you. For the sending of messages, only anonymous data is stored, which does not allow any inference to a specific person. This data is only processed to deliver the notifications you have subscribed to and to make notification-related settings. We ask for your consent to store this data. In this case, the Legal Basis for data processing is Art. 6 para. 1 lit. a DSGVO. You can object to receiving notifications at any time via the settings of your browser or mobile device. Information on how to opt out for push notifications can be found here.

In order to make the push notifications meaningful for you in terms of content, we use the preferences collected on the basis of an anonymous user profile by means of cookies and merge your notification ID with the user profile of the website solely for the purpose of personalised messaging. Tracking technology is also used to statistically analyse notifications on our behalf. This enables us to determine whether a notification has been delivered and whether it has been clicked on. The data thus generated is processed and stored on our behalf by etracker GmbH (www.etracker.com) from Hamburg, Germany, which provides the Signalize service, exclusively in Germany and is thus subject to the strict German and European data protection laws and standards. etracker has been independently audited and certified in this respect and is entitled to bear the ePrivacyseal data protection seal of approval.

The processing of data for the purpose of controlling the invitation to the notification service as well as for the statistical analysis of registration or rejection is based on our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in order to make the notification service user-friendly and effective. Since the privacy of our visitors is very important to us, data that may allow a reference to an individual person, such as the IP address, login or device identifiers, are anonymised as early as possible. A direct reference to a person is thus excluded. The data will not be used in any other way, merged with other data or passed on to third parties.

You can object to the aforementioned data processing at any time by clicking on the slider. The objection has no adverse consequences. If no slider is displayed, the data collection is already prevented by other blocking measures.

 

Queue-it

Nature and extent of processing

We use Queue-it to properly provide the content of our website. Queue-it is a service provided by Queue-it ApS, Klausdalsbrovej 601, 2750 Ballerup, Denmark.

Queue-it a virtual queue service to control website and app traffic. The platform allows us to offload users to an online queue in high-demand situations to ensure that our services do not overload.

When you access content, you may connect to Queue-it ApS servers, Klausdalsbrovej 601, 2750 Ballerup, Denmark, where your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain security and functionality.

Purpose and Legal Basis

Queue-it is used on the basis of our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Queue-it ApS. Further information can be found in the privacy policy for Queue-it: https://queue-it.com/privacy-policy/.

 

USU Chatbot

Nature and Scope of Processing

We have integrated components of the customer communication platform USU Chatbot on our website. USU Chatbot is a service of USU Software AG and offers us the possibility to communicate with visitors to our website via chat and to provide targeted assistance with questions. USU Chatbot uses cookies and other browser technologies to evaluate user behaviour and recognise users. Furthermore, USU Chatbot is used to store and transmit data entered in chats by means of cookies, including your IP address. In this case, your data will be passed on to the operator of USU Chatbot, USU Software AG, Spitalhof, 71696 Möglingen, Germany.

Purpose and Legal Basis

The use of USU Chatbot is based on our legitimate interests, i.e. interest in optimising our online offer in accordance with Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The specific storage period of the processed data cannot be influenced by us, but is determined by USU Software AG. Further information can be found in the privacy policy for USU Chatbot: https://www.usu.com/en-us/data-protection-policy/.

 

Vimeo Video

Nature and Scope of Processing

We have integrated Vimeo Video on our website. Vimeo Video is a component of the video platform of Vimeo, LLC, on which users can upload content, share it over the Internet and receive detailed statistics.

Vimeo Video enables us to integrate content from the platform into our website.

Vimeo Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports.

When you access this content, you connect to servers operated by Vimeo, LLC, 555 W 18th St, New York, New York 10011, where your IP address and, where applicable, browser data such as your user agent are transmitted

Purpose and Legal Basis

The service is used on the basis of our legitimate interests, i.e. interest in a platform-independent provision of content pursuant to Art. 6 para. 1 lit. f. DSGVO.

Storage Period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Vimeo, LLC. Further information can be found in the privacy policy for Vimeo Video: https://vimeo.com/privacy

 

III. VfB Service Center

Nature and Scope of Processing

We offer you the opportunity to contact our Service Center in various ways. We use the helpdesk system "Zammad" from the provider "Zammad GmbH, Marienstraße 11 in 10117 Berlin" in order to be able to process enquiries more quickly and efficiently. Depending on the way you submit your support request, different data is collected. You can create a ticket via an online form on our website/online shop, or write an e-mail to the address service@vfb-stuttgart.de. Your message will then be forwarded to Zammad. In addition, we will manually complete your data if necessary:

If you create a new ticket via the form, we will receive all the data you enter directly into the form. If you send us an e-mail to service@vfb-stuttgart.de, we receive the content of your message that you wrote yourself as well as all the information that your e-mail programme sends to us (e.g. information in the header such as your e-mail address, time of sending).

In the helpdesk system Zammad, a user with first name, surname and e-mail address is created in both cases, if it does not already exist. If necessary, the organisation will be added. All messages you send to us are thus automatically assigned to your user.

Purpose and Legal Basis

The processing of your data by using our contact form is carried out for the purpose of communication and processing your enquiry on the basis of your consent pursuant to Art. 6 Para. 1 lit. a DSGVO. Insofar as your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b DSGVO. In order to be able to process enquiries more quickly and efficiently, we use the helpdesk system "Zammad" from the provider "Zammad GmbH, Marienstraße 11 in 10117 Berlin". We have concluded an order processing agreement with "Zammad GmbH" that complies with the requirements of the DSGVO. Zammad uses the data (e-mails with e-mail address) only for the technical processing of the requests and does not pass them on to third parties. In the course of processing service requests, it may be necessary to collect further data.

If a user does not agree to the collection of data by the "Zammad" software, he or she can choose alternative means of communication, for example by telephone at +49 (0) 711 99 33 1893.

Further information on data protection at Zammad: https://zammad.com/de/datenschutz

Storage Period

To ensure that we can always help you as quickly as possible, we keep your enquiries and data for a reasonable period of time, for example, to ensure that we still have all the information available in the event of queries after a long period of time.

A "ticket" comprises the communication between you and us. You send us a request to which we reply. Depending on whether the problem is solved immediately or there are further queries, there may be repeated mail exchanges. If you write us a new message (e.g. with a different subject), a new ticket will be opened. A ticket will be deleted at the latest two years after the last communication.

All your tickets will be assigned to your "user". This will be deleted no later than two years after the last communication. The deletion check and the deletion process are carried out annually.