Privacy Statement and Cookie Policy

As a controller within the context of the European General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act [“BDSG”, Bundesdatenschutzgesetz], Bundesliga International GmbH, Eschersheimer Landstrasse 14, D-60322 Frankfurt am Main (the “Bundesliga International”) collects, processes and uses personal data which has been captured from visits to the website www.bundesliga-international.com (the “Website”) in compliance with the applicable data privacy provisions in the Federal Republic of Germany, in particular the GDPR and the BDSG. This Privacy Statement and Cookie Policy (hereinafter together: the “Statement“) sets out which visitor (“User”) data is captured on the Website and how this information is processed.

1. Personal Data

Personal data are all information which relate to an identified or identifiable natural person. A natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes, for example, the name, personalized email addresses, the residential address, the telephone number or the date of birth.

2. Data collection, processing and use when accessing the Website

Each time a User accesses the Website, the User’s Internet browser, for technical reasons, automatically supplies the following data to Bundesliga International’s web server:

IP address of the end device
date and time of access
name and URL of accessed page
transferred data volume
access status (data file transmitted, data file not found, etc.)
recognition data of the used browser and operating system of the User’s end device
name of the User’s Internet service provider
website from which the access was made

The collection, processing and use of these data occur for the purposes of enabling the use of the Website (connection set-up), system security and technical administration of the network infrastructure. A comparison with other data sets or a transmission to third parties, even in excerpts, does not take place.

The legal basis for processing is Art. 6 para. 1 f) GDPR. The legitimate interest of Bundesliga International results from the fact that Bundesliga International wants to provide a secure and functioning Website.

With regard to data collection, processing, and use for the purpose of optimizing the Website through web analytics, additional reference is made to Section 3 of this Statement.

3. Data collection, processing and use in the context of web analytics

3.1 Google Analytics

On the Website, Bundesliga International uses Google Analytics, a web analytics service provided by Google LLC (USA) (“Google“). Google Analytics uses cookies. Cookies are text files which are stored on a User’s end device and make it possible to analyze the use of the Website by its Users.

The information about the use of the Website by a User produced by the cookie is normally transmitted to a server of Google in the USA and stored there.

However, Bundesliga International has expanded Google Analytics with the code “gat._anonymizeIp();“ in order to assure anonymized collection of IP addresses (so-called IP masking). This means that the IP addresses of Users are shortened within the Member States of the European Union or in other States which are a party to the Convention on the European Economic Area before the transmission to the USA. So, the full IP address is transmitted to a server of Google in the USA and shortened there only in exceptional situations. Google is a registered member of the EU-US Privacy Shield.

Upon request of Bundesliga International, Google will use this information in order to analyze the use of the Website by the Users for the purpose of compiling reports about the Website activity to provide additional services to Bundesliga International which are related to the use of the Website and Internet use. Google does not combine the IP address of a User’s browser with other data under Google Analytics.

The User can prevent the storage of cookies with a corresponding setting on the User’s browser software. Furthermore, the User can prevent Google from collecting the data generated by the cookie and relating to his/her use of the Website (including the User’s IP address) by downloading and installing the browser plugin available via the following link. The User can also refuse the use of Google Analytics by clicking on the following link. An opt-out cookie which prevents the future collection of his/her data when visiting the Website will be placed: Disable Google Analytics. However, Bundesliga International hereby informs the User that in this case it is possible that the User cannot completely use all functions of the Website.

Further information about the terms and conditions of use and data protection are available in the Google Analytics Terms of Service and Google Analytics Overview.

The legal basis for processing is Art. 6 para. 1 f) GDPR, whereby the legitmate interest for Bundesliga International results from the fact that, in the first place, Bundesliga International has an interest in evaluating the Website data for purposes of its optimization. Secondly, a data subject can reasonably foresee that data might possibly be processed for this purpose at the time the personal data is collected and in light of the circumstances under which this occurs (especially the above-mentioned measures).

3.2 Other Cookies

Other cookies are not set.

4. Google Maps

On the Website, Bundesliga International uses Google Maps, a service provided by Google LLC, Inc. (USA) (“Google“) for the presentation of interactive maps.

Information about the use of the Website (including the IP address of the User) are usually already transmitted to servers of Google in the USA when visiting a content of the Website which includes Google Maps without the prior consent of the User. Bundesliga International uses Google Maps using the so-called 2-click solution, i.e. the User‘s browser only establishes a connection with the server of Google and a data transfer will only take place upon the activication of the respective content by the User.

Google is a registered member of the EU-US Privacy Shield. Futher information can be found in Google‘s data privacy information.

The legal basis for processing are Art. 6 para. 1 a) GDPR and Art. 6 para. 1 f) GDPR, whereby the legimate interest of Bundesliga International results from the fact that Bundesliga International has an interest to offer helpful information on the Website.

5. Sharing of content

Bundesliga International provides Users of the Website with the opportunity to share the Website’s content. The legal basis for the following processings is Art. 6 para. 1 a) GDPR.

5.1 Use of platforms Twitter and LinkedIn

Users can share the Website’s content on services provided by Twitter and LinkedIn.

The use of these plugins will normally result in the transfer of data to Twitter or LinkedIn with each content visited, without the User’s explicit permission. Along with the web address of the content visited, an identifier will also be transmitted which enables a direct connection to be made between the User and his/her profile on the respective platform.

Die Anbieter dieser Plattformen geben keine konkrete Auskunft darüber, welche Daten außerdem übermittelt werden. Die Anbieter der Plattformen entwickeln diese zudem ständig weiter und informieren über die damit einhergehende Datennutzung. Die derzeit gültigen Datenschutzbestimmungen der Anbieter sind hier zu finden: Twitter und LinkedIn.

The platform operators do not pass on any specific details pertaining to what other data is transmitted. The platform operators are moreover constantly developing their services and make available information as to how the accompanying data is used. The currently valid data protection regulations of the platform providers can be found here: Twitter and LinkedIn.

In order to prevent any unwanted transmission of Users’ data to Twitter and LinkedIn and to give Users a choice as to whether they wish to use such services, Bundesliga Inernational only offers social sharing links. This ensures no data will be transferred to third parties without the permission of the User. Only when the User activates the services, therefore consenting to connect with Twitter and LinkedIn, the connection with their services will be established and the social sharing links be provided.

5.2 E-Mail forwarding

The User can also share content of the Website via email by clicking on the email logo button or recommend this content. The email addresses of the recipients entered in by the User will not be used, processed or stored by Bundesliga International.

6. Limited purpose for processing and using personal data

All processing or use of personal data of the User occurs only for the purposes mentioned in this Statement and to the extent necessary to achieve the respective purpose.

Personal data are not published by Bundesliga International or disclosed to unauthorized third parties.

Transmissions of personal data to government agencies and public authorities occur only in accordance with mandatory national provisions in the law or if the disclosure is necessary in the case of attacks on the network infrastructure in order to pursue rights and for purposes of criminal prosecution.

The legal basis for this processing is Art. 6 para. 1 c) GDPR in conjunction with § 24 para. 1 no. 1 b) German Data Protection Act [Bundesdatenschutzgesetz, “BDSG”].

7. Storage and deletion of personal data

All stored personal data and pseudonymized usage data are deleted immediately and permanently as soon as the data are no longer needed for the purposes for which they were collected or the User demands this unless Bundesliga International is required or entitled by law to do preserve the data. If Bundesliga International is required on the basis of provisions in the law to preserve the data, the stored personal data and pseudonymized usage data will be permanently deleted upon expiration of the time periods for preserving data required by law.

8. Security

Bundesliga International uses technical and organizational security measures in order to protect the personal data of the Users against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security measures are continuously adapted in accordance with technological developments.

9. Links to other websites

The Website may contain links to other websites. This Statement applies solely to the Website. Bundesliga International has no influence over, and does not control whether other providers comply with applicable data privacy provisions.

10. Rights of the User

The User has several rights under the GDPR. In particular, the User has

a right to information with regard to the stored personal data of the User (Art. 15 GDPR);
a right to have incorrect data corrected (Art. 16 GDPR);
a right to erasure under the prerequisites described in Art. 17 GDPR;
a right to restriction of the processing (Art. 18 GDPR);
a right for data transferability (Art. 20 GDPR); and
a right to object against the processing, if such processing safeguards Our legitimate interests (Art. 21 GDPR).

Der Nutzer kann seine Rechte durch eine E-Mail an info@bundesliga-international.com oder über die eingangs aufgeführte Adresse per Brief geltend machen. Der Datenschutzbeauftragte der Bundesliga International ist unter datenschutz@dfl.de erreichbar; unter dieser E-Mail-Adresse werden lediglich datenschutzbezogene Anfragen beantwortet.

The User can assert his/her rights by sending an email to info@bundesliga-international.com or a letter to the abovementioned address. The data protection officer of Bundesliga International can be contacted at dataprivacy@dfl.de. Please note that only data privacy-related messages will be answered at this email address.

Furthermore, the User can submit a complaint about the data processing to the responsible supervisory authority. The Hessian Commissioner for Data Protection and Freedom of Information [Hessischer Beauftragter für Datenschutz und Informationsfreiheit] is responsible for Bundesliga International and the User can submit a complaint via the following link.

11. Where can the User find the relevant legal texts?

Die DSGVO kann der Nutzer unter folgendem Link abrufen, das BDSG und sonstige relevante deutsche Gesetzestexte wiederum unter folgendem Link.

The GDPR can be found under the following link, the BDSG and other relevant German legal texts under the following link.

12. Applicability, validity and timeliness of the Statement

The provisions in this Statement on collection, processing and use of the User’s data apply for the User when using the Website. This Statement is current valid and is dated as of 15 July 2019. Bundesliga International reserves the right to amend this Statement at any time as needed with effect for the future, especially for the purposes of adaption to a further development of the Website or the implementation of new technologies.