Privacy policy
This is a translation provided for convenience. The legally binding version is the German one; in case of discrepancies, the German privacy policy prevails.
This policy applies to the processing of personal data when visiting this website. For processing within the KoHub application, the respective club is the controller; a separate privacy policy applies to that.
1. Controller
10365 Berlin
Germany
2. Server log files
When this website is accessed, the hosting provider named in section 4 automatically stores data in server log files. The following is recorded:
- IP address of the accessing device
- Date and time of access
- Resource requested
- Technical metadata such as volume of data transferred, status code, referrer and browser identifier
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the technically error-free operation and the security of the website. The retention period follows the hosting provider's specifications and, according to its information, amounts to a few months; the data is deleted thereafter. The controller does not access these log files.
3. Contact via the form, by email and by telephone
If you contact us by email or telephone, the information you provide is processed in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR. The data is deleted once the enquiry has been conclusively dealt with and no statutory retention obligations prevent deletion.
The contact form on the home page collects the following details:
- Name of the club
- Name of the person enquiring
- Email address
- Number of members
- Telephone number, where provided voluntarily
- Free-text message, where provided
Club, name, email address and number of members are mandatory; without them the enquiry cannot be handled. Providing a telephone number is voluntary and serves solely for a call back where one is wanted. The time of submission is also processed in order to detect automated entries; this is necessary to prevent misuse.
The legal basis is Art. 6(1)(b) GDPR, as the enquiry is aimed at entering into a contractual relationship. The details are used solely to handle the enquiry. They are not passed on to third parties and are not used for advertising or for a newsletter. The data is deleted once the enquiry has been conclusively dealt with and no statutory retention obligations prevent deletion.
The form embeds no third-party services. In particular, no captcha service is used; automated entries are detected without any transmission to third parties.
4. Hosting
This website is operated via Firebase Hosting, a service provided by Google. Google processes the resulting data on behalf of the controller; a data processing agreement under Art. 28 GDPR has been concluded for that processing.
Gordon House, Barrow Street
Dublin 4, Ireland
For transfers to the United States, Google relies on the EU-US Data Privacy Framework and, in addition, on the European Commission's standard contractual clauses. Firebase Hosting stores IP addresses for a few months in order to detect abuse and to evaluate usage. An overview of the sub-processors engaged by Google is available at firebase.google.com/terms/subprocessors.
5. No cookies, no traffic measurement, no third-party services
This website sets no cookies and uses no comparable storage techniques. No reach or usage measurement takes place. Fonts, images and scripts are delivered entirely via the hosting named in section 4; content from further third-party providers is not loaded. Consent is therefore not required.
6. Rights of data subjects
Under Art. 15 to 21 GDPR, data subjects have the following rights:
- Access to the data processed under Art. 15 GDPR
- Rectification of inaccurate data under Art. 16 GDPR
- Erasure under Art. 17 GDPR
- Restriction of processing under Art. 18 GDPR
- Data portability under Art. 20 GDPR
- Objection to processing under Art. 21 GDPR
To exercise these rights, a message to the contact details above is sufficient.
7. Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular with the authority of your habitual residence, place of work or the place of the alleged infringement.
Alt-Moabit 59–61
10555 Berlin
8. Version of this policy
Last updated:
Back to the home page