BORUSSIA DÜSSELDORF PRIVACY POLICY

This website is operated by Borussia Düsseldorf e.V. The protection of your personal data is very important to us. In this statement you will find information on how your personal data is handled when you visit the Borussia Düsseldorf website.

The entity responsible for processing personal data on this website is:

Borussia Düsseldorf e.V.
Borussia-Düsseldorf-Str. 1
40629 Düsseldorf
Phone: +49 211 99179-0
Fax: +49 211 99179-19
Email: info(at)borussia-duesseldorf.com

For questions regarding data protection, you can also contact our data protection officer at any time at datenschutz@borussia-duesseldorf.com.

1. GENERAL INFORMATION

1.1. The use of personal data by Borussia Düsseldorf e.V. is governed by legal provisions and by the user's consent to the use of their data.

1.2. Borussia Düsseldorf is a registered club that participates in competitive matches of the West German Table Tennis Association (WTTV) and the German Table Tennis Federation (DTTB) with junior, adult, and disabled sports teams, operates a sports hotel and a table tennis school, organizes Europe's largest junior table tennis tournament, the Kids Open, rents out facilities for playing table tennis (TT on Demand), and provides services on behalf of and for the account of the City of Düsseldorf - BgA Sportamt - for the German Table Tennis Center in Düsseldorf.

1.3. Various services in the field of sports and leisure activities and products (collectively referred to as the "Sports Offer") can be booked, reserved, or purchased through Borussia Düsseldorf e.V. The Sports Offers are provided by Borussia Düsseldorf e.V. through direct sales. The subject of the contract is the use of the services of Borussia Düsseldorf e.V. (the "Service"). The services of Borussia Düsseldorf e.V. are used by users (the "User").

1.4. Borussia Düsseldorf e.V. is aware that the protection and careful handling of the user's personal data are very important. Since data protection is of great importance to Borussia Düsseldorf e.V., Borussia Düsseldorf e.V. strictly adheres to the legal provisions applicable in Germany when using this data.

1.5. The user is advised to visit the General Terms and Conditions (AGB) of Borussia Düsseldorf e.V. concerning the subject of the contract, the user's obligations, liability limitations, and numerous other important information on the Borussia Düsseldorf e.V. website at www.borussia-duesseldorf.com.

2. COLLECTION OF DATA

2.1. Borussia Düsseldorf e.V. collects and stores any information that the user provides under the domain www.borussia-duesseldorf.com and that is transmitted to Borussia Düsseldorf e.V. during an online booking or that the user provides to Borussia Düsseldorf e.V. in any other way, for example, on-site. Borussia Düsseldorf e.V. uses the user's personal data to the extent permitted by law and, in other respects, only with the user's consent. If consent is given electronically as part of an online booking, Borussia Düsseldorf e.V. complies with the legal notification obligations and logs this consent using suitable technical systems.

2.2. Borussia Düsseldorf uses the following personal data of the user: name, email address, phone number, gender, date of birth, residence, booking data, credit card data (type of credit card, card number, cardholder's name, expiration date and security code), information about the guest's stay (guest's arrival/departure date), existing products, TTR rating, club and association affiliation, league.

3. PURPOSE OF DATA PROCESSING

3.1. We process your data within the framework of contract fulfillment for the following purposes:
a. To manage your online bookings.
b. To create confirmations, invoices, and, if applicable, reminders.
c. To create a booking history.
d. For marketing purposes, to the extent permitted by law.
e. For disclosure to our sponsors who have contractually committed to Borussia Düsseldorf e.V. to use the data in accordance with applicable data protection law.
f. To manage, pay for, and ship fan products from our shop.
g. We use information, which may include your personal data, to prevent fraud and other illegal and infringing activities or to resolve legal disputes.
h. To record all financially relevant transactions, taxes, etc.
i. To organize prize draws.
j. For analysis and improvement purposes.

You can object to this data processing. An objection means that we will no longer process your data for the above-mentioned purposes from that point on.

3.2. If you have subscribed to our newsletters, we process your data for sending you our newsletter. You can cancel your newsletter subscription at any time directly via the link in the newsletter emails or by sending an email to info@borussia-duesseldorf.com.

3.3. We store your data for the duration of the contractual relationship. By default, data is deleted 1 year after the last booking due to user inactivity. Data contained in an invoice or necessary for invoice creation will be stored longer due to legal retention periods and deleted after the expiry of the period.

4. DATA SECURITY

4.1. For data security reasons, personal data is stored in a closed system and protected by a password.

4.2. If Borussia Düsseldorf e.V. becomes aware that the user's data has been systematically and seriously misused and that the user is at risk of harm as a result, Borussia Düsseldorf e.V. will inform the user immediately.

4.3. The website of Borussia Düsseldorf e.V. contains links to other services or websites. Borussia Düsseldorf e.V. is not responsible for the privacy policies and/or practices of other websites. If the user follows a link to another website, the user is solely responsible for familiarizing themselves with the privacy policy of that other website. The privacy policy of Borussia Düsseldorf e.V. is limited only to information processed by Borussia Düsseldorf e.V.

4.4. Borussia Düsseldorf e.V. uses other processors for data processing. We disclose your data to the following recipients or categories of recipients:

- Software providers for processing bookings.
- Communication tools for customer communication.
- External hosting providers for data storage.

- Shopify International Ltd. or Shopify Inc. as the operator of our e-commerce platform for the provision and operation of our online shop. In particular, order, customer, contact, payment, shipping, and technical usage data are processed, insofar as this is necessary for processing your order, for providing the shop, and for ensuring security and functionality. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and powerful online shop). Insofar as personal data is transferred to third countries, this is done on the basis of the standard contractual clauses approved by the European Commission or other suitable guarantees in accordance with Art. 44 et seq. GDPR.

5. SECURE DATA TRANSMISSION

All personal data that you transmit to us during general browsing and specifically during the ordering process is transmitted encrypted and is thus protected against misuse. In particular, we establish a so-called SSL connection for each transaction. SSL (Secure Socket Layer) is a procedure by which your data is encrypted in such a way that it cannot be read by unauthorized persons during transmission over the Internet.

You can recognize the SSL connection by the fact that the internet address has changed from http:// to https://. In addition, the secure connection is usually indicated by a closed padlock in the status bar of your web browser.

6. CONTACT FORM

On our website, you can enter personal data via a contact form. If you use the contact form, we collect and store the data you enter into the input mask (e.g. surname, first name, email address). This data is not passed on to third parties. The legal basis for processing in the case of consent is Art. 6 para. 1 lit. a GDPR. If your inquiry serves to prepare a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis. We use the data exclusively to process and answer your inquiry.

7. COOKIES

Some of our services require us to use so-called cookies. Cookies are small amounts of data that your internet browser stores on your computer. Information about your visit to our website can be stored in cookies. Thanks to this data, it is possible, for example, for you to be shown information on the site that is specifically tailored to your interests.

In the case of a permanent cookie, see our "keep me logged in" button, your login information will remain on the device you last successfully logged in with for 30 days. Caution is therefore advised when using publicly accessible computers. Most browsers are set by default to accept cookies, but you can reconfigure your browser to reject cookies or to ask for your confirmation beforehand. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or even how to delete all cookies already received and block them for all others.

However, if you refuse cookies, this may mean that some of our services are not available and therefore some functions cannot be used.

8. GOOGLE ANALYTICS

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland
Ltd./Google LLC

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

8.1. IP anonymization: We have activated the IP anonymization function on this website. This will cause your IP address to be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

8.2. Browser Plugin: You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (incl. your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:  https://tools.google.com/dlpage/gaoptout?hl=de.

8.3. Objection to data collection: You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data on future visits to this website: Deactivate Google Analytics. More information on how Google Analytics handles user data can be found in Google's privacy policy: support.google.com/analytics/answer/6004245.

8.4. Contract data processing: We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

9. DECLARATIONS OF CONSENT TO THE PRIVACY POLICY

By checking the box during an online booking with Borussia Düsseldorf e.V., the user confirms that they have read the privacy policy of Borussia Düsseldorf e.V. For an on-site booking, the user confirms by signing the privacy policy on-site that they have read the privacy policy of Borussia Düsseldorf e.V. The user acknowledges that the personal data listed in point 2.2 will be used for the purposes stated in point 3.1.

10. GOOGLE MAPS

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy findability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

11. LEGAL REMEDIES INSTRUCTION

11.1. You can reach us using the following contact details:

By mail: Borussia Düsseldorf e.V., Borussia-Düsseldorf-Str. 1, 40629 Düsseldorf
By email: info(at)borussia-duesseldorf.com 

11.2. You generally have the rights to information, rectification, erasure, restriction, data portability and objection. Please contact us for this.

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact us directly. If we cannot resolve your case to your satisfaction, you always have the right to contact the data protection authority.

12. PAYMENT SERVICE PROVIDERS

We use external payment service providers to process payments. Depending on the selected payment method, personal data is transmitted to the respective payment service provider. The following data may be processed in particular: Name; billing and shipping address; email address; payment information; order amount; IP address

Processing is carried out for payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

We use the following payment providers: PayPal; Klarna; Giropay; UnionPay; Credit card; Alipay; WeChat Pay; Apple Pay. Further information on data processing can be found in the privacy notices of the respective providers. If a Klarna payment method is selected, Klarna may process personal data and involve credit agencies to check identity and creditworthiness. Further information can be found at: https://www.klarna.com/de/datenschutz/ Payment processing for credit card payments and Apple Pay, Google Pay is carried out via Shopify Payments/Stripe.

13. CHANGES

Our privacy policy may change from time to time. This includes further developments due to changes in our business as well as adjustments due to a changed legal situation and/or due to the implementation of new web analysis and/or retargeting technologies. Corresponding updates to the privacy policy will be published by us on this page. In the event of significant changes, we will indicate this accordingly. If you have any further questions that our privacy policy could not answer, please send an email to the following address: datenschutz(at)borussia-duesseldorf.com.