PRIVACY POLICY FOR THE GAZPROM-FOOTBALL.COM WEBSITE

PRIVACY NOTICE FOR THE WEBSITE GAZPROM- FOOTBALL.COM 

Data protection and data security have a high priority in our company, as we take the protection of your personal data very seriously. Due to this, we have taken technical and organizational measures to ensure that the requirements of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) are met.

In particular, compliance with data protection requirements when using our website gazprom-football.com (hereinafter: "website") is a key concern for us. When you visit and use our website, your personal data will be processed by us as the data controller. When you visit our website, personal data about you will be processed by us as the data controller and stored for the time necessary to fulfil the purposes set out and to comply with legal obligations. In the following, we will inform you about what data is involved, how it is processed and what rights you have in this regard.

Personal data (hereinafter also referred to as "data" or "information") is, according to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), any information relating to an identified or identifiable natural person.

1. Name and contact details of the data controller and the company data protection officer 

This privacy notice applies to data processing on our website (gazprom-football.com) by the controller

GAZPROM Germania GmbH      
Markgrafenstraße 2310117         
Berlin
Germany
(hereinafter GAZPROM Football)

Mail info@gazprom-football.com


GAZPROM Football's data protection officer can be contacted at the above address, in the name of the data protection officer, or at dataprivacy@gazprom-germania.de.  

You can contact our data protection officer directly at any time if you have questions about data protection law or your data subject rights.

 

2. Processing of personal data and purposes of processing
a) When visiting the website 

You can access our website without having to disclose any information about your identity. However, in the course of any access to our website, it is unavoidable that certain personal data is stored on our provider's server in order to enable the website to establish a connection. This includes information such as:

  • Your client IP address,
  • the name and URL of the retrieved file,
  • the website from which the access is made,
  • the name and description of the Internet browser you are using,
  • the date and time of the respective access,
  • the amount of data transferred.

The information is stored in a so-called log file on the server of our website and automatically deleted there after 4 weeks.

The processing of the IP address is carried out for technical and administrative purposes of the connection setup and the connection stability, in order to guarantee the security and functionality of our website and to be able to pursue possible illegal attacks on it if necessary.

The legal basis for the processing of the IP address and the other information from the log file is Art. 6 para. 1 s. 1 lit. f GDPR. Our legitimate interest follows from the aforementioned security interest and the necessity of a trouble-free and user-friendly provision of our website. From the processing of the IP address and other information in the log file, we can not draw any direct conclusions about your identity.

Only authorised personnel involved in server maintenance are entitled to access the data. Since no personal allocation takes place, the data records are only kept in anonymous form for statistical evaluation by deleting the last character block of the IP address.

For special services and benefits, certain personal data, such as e-mail address, first name, surname, telephone number or address are requested. In particular, personal data may be requested when using special services or when participating in competitions. These entries are made exclusively on a voluntary basis. This data is also treated confidentially and not passed on to third parties.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this in sections 4 and 5 of this data protection information.

Excluded from the provisions of the preceding paragraph are online offers of our cooperation partners integrated on the website and marked as such. These online offers are subject to separate technical and legal conditions. Please note the corresponding notices of our cooperation partners.

By order of competent state authorities, we or our cooperation partners may be obliged in individual cases to hand over personal data if this is necessary for the prevention of danger, criminal prosecution or for other legally regulated reasons.

Apart from that, no collection, processing or use of your personal data takes place, unless otherwise stated in the following information (cf. for example web analysis or social networks in sections 4, 5 and 6 of this data protection information).

b) Raffles 

If you enter one of our competitions on the website, we will use your details (name, address, email address) to establish that you have entered the competition, to notify you of any prize and to send any prize to you (e.g. tickets).

The processing of data in the context of a competition is carried out at your request and is necessary according to Art. 6 para. 1 s. 1 lit. b GDPR for the aforementioned purposes for your participation in and the implementation of competitions.

In the event that you receive a prize as part of entering a competition, we will use your name and place of residence to announce you as the winner of the competition on our company's own communication channels. Currently, this concerns the following communication channels:

• https://www.gazprom-football.com/en,
• https://www.facebook.com/gazpromfootball,  
• https://www.twitter.com/gazpromfootball,
• https://www.instagram.com/gazpromfootball,  
• https://www.tiktok.com/@gazpromfootball,
• https://t.me/gazpromfootball  

The processing of the data for publication is based on our legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f GDPR to use competitions for marketing purposes and your corresponding obligation under the conditions of participation (Art. 6 para. 1 s. 1 lit. b GDPR).

The data will be stored and processed until the end of the competition.

We conduct our competitions using the services of SPORTFIVE Germany Consulting GmbH, Lindleystraße 12, 60314 Frankfurt a.M., Germany, and brandung GmbH & Co. KG, Leuschnerdamm 13, 10999 Berlin, Germany. The participant data will therefore be processed on our behalf by SPORTFIVE Germany Consulting GmbH and brandung GmbH & Co KG.

SPORTFIVE Germany Consulting GmbH and brandung GmbH & Co. KG use this information to process competitions on our behalf. For this purpose, we have concluded an order processing agreement with SPORTFIVE Germany Consulting GmbH and brandung GmbH & Co KG. Through this contract, SPORTFIVE Germany Consulting GmbH and brandung GmbH & Co. KG assure that they process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject.

SPORTFIVE Germany Consulting GmbH and brandung GmbH & Co. KG assure that personal data is comprehensively protected against unauthorized access. SPORTFIVE Germany Consulting GmbH and brandung GmbH & Co. KG themselves do not use the data to write to competition participants themselves or to pass the data on to third parties.

 

3. information disclosure 

Except in the aforementioned cases of processing on behalf of third parties (competitions), we will only disclose your personal data to third parties in the following cases:

a) Web hosting 

For the provision of this website we use the services of Online Now! GmbH - Agentur für digitale Kommunikation, Kastanienallee 26, 14052 Berlin, Germany (hereinafter: "Online Now!"). Online Now! takes care of the storage of this website on servers (hosting) on our behalf. The commissioning of a web hosting service is necessary for the provision of a website and is carried out in accordance with Art. 6 (1) sentence 1 lit. f GDPR on the basis of our legitimate economic interest in making our offer available on this website.

In connection with hosting, Online Now! processes personal data on our behalf that arises from the following actions of the user:

•  When visiting the site in connection with cookies used, log files and web
    analytics services.

We have entered into an order processing contract with Online Now! for the use of hosting services. Through this contract, Online Now! ensures that they process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject.

For more information about Online Now! privacy practices, please see their privacy policy at www.online-now.de.  

b) Disclosure by the way 

Apart from that, we will only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR;
  • this is necessary for the fulfilment of a contract with you according to Art. 6 para. 1 s. 1 lit. b GDPR,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR or
  • in the other cases of the following paragraphs, if described there.
    The data disclosed may be used by the third party exclusively for the purposes stated.

c) Third country transmission 

A transfer of personal data to a third country or an international organization only takes place if we inform you about it and the prerequisite of Art. 44 ff. GDPR are given.

A "third country" is a country outside the European Economic Area (EEA) in which the GDPR is not directly applicable. A third country is considered "insecure" if the EU Commission has not issued an adequacy decision for that country pursuant to Art. 45(1) GDPR confirming that adequate protection for personal data exists in the country.

The USA is a so-called unsafe third country. This means that the US does not offer a level of data protection comparable to that in the EU.

When transferring personal data to the US, there is a particular risk that US authorities may gain access to personal data on the basis of the surveillance programmes PRISM and UPSTREAM based on Section 702 of FISA (Foreign Intelligence Surveillance Act), as well as on the basis of Executive Order 12333 or Presidential Police Directive 28. EU citizens have no effective means of redress against these accesses in the US or the EU.

In this data protection information, we inform you when and how we transfer personal data to the USA or other unsecure third countries. We only transfer your personal data when

  • sufficient guarantees are provided by the recipient in accordance with Article 46(1) of the GDPR for the protection of the personal data,
  • you have expressly consented to the transfer, after which we have informed you of the risks, in accordance with Art. 49 (1) a) GDPR,
  • the transfer is necessary for the performance of contractual obligations between you and us (Art. 49 para. 1 b) GDPR) or
  • another exception from Art. 49 GDPR applies.

Guarantees according to Art. 46 GDPR can be so-called standard contractual clauses. In these standard contractual clauses, the recipient assures to protect the data sufficiently and thus to ensure a level of protection comparable to the GDPR.

 

4. Cookies and tracking pixels 

We use so-called cookies or similar functions such as tracking pixels on our website in order to make our website technically available and to statistically record the use of our website and evaluate it for the purpose of optimisation (see section 5).

The legal basis for processing personal data using cookies and pixel tags depends on the category of cookies and pixel tags used. The use of cookies, which are technically necessary to maintain the functions of the website, are used by us to protect our legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f GDPR; our legitimate interest is to offer a smoothly functioning website.

All other cookies that are not technically necessary to maintain the functions of the website are only used by us with your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. You can give this consent via our Consent Management Tool or withdraw it at any time with effect for the future. You can access the consent management tool at any time via the link at the end of the website.

Further revocation options can be found in the following information about the tools we use.

a) Cookies 

Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain viruses, Trojans or other malware.

In the cookie, information is stored that arises in each case in connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognise that you have already been to our website when you visit it again.

b) Pixel 

We use pixel tags (also called tracking pixels) as part of our online offer. Pixels are small 1×1 pixel GIF files that are embedded via the HTML code of our page. The pixel tag itself does not store or change any information on your end device, so pixels do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

The pixels send your IP address, the referrer URL of the visited website, the time at which the pixel was viewed, the browser used, and previously set cookie information to a web server. This enables us to carry out reach measurements and other statistical evaluations, which serve to optimise our offer.

c) Consent Management with Usercentrics 

We use the consent management service Usercentrics of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany on our website. In this context, the date and time of the visit, browser information, consent information, device information and the IP address of the requesting device are processed. The legal basis is our legitimate interest according to Art. 6 para. 1 s. 1. lit. f GDPR. Obtaining and managing legally required consents is to be considered a legitimate interest in the sense of the aforementioned provision, as the interference with the rights of users as a result of the use of anonymised IP addresses and the involvement of a service provider based in Germany is very low. Usercentrics stores consents and revocations on our behalf and on our instructions. The storage is based on Art. 6 para. 1 s. 1 lit. f GDPR. Being able to comply with the accountability obligation pursuant to Art. 5 (2) GDPR is a legitimate interest. You can find more information about data protection at Usercentrics here.

d) Google Tag Manager

Our website uses the Google Tag Manager of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). We use Google Tag Manager to manage the tools about which we provide information in this privacy policy. Details regarding these tools are listed separately in this information.

The Tag Manager itself (which implements the tags) triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

You can find more information about Google Tag Manager here.

 

5. Web analysis, tracking and targeting 

The analysis, tracking and targeting measures listed below and used by us are carried out if you have given us your consent for this in accordance with Art. 6 Para. 1 lS. 1 lit. a GDPR.

With the tracking measures used, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. By means of the targeting measures used, we want to ensure that you are only shown advertising on your end devices that is oriented to your actual or presumed interests.

The respective data processing purposes and data categories can be found in the corresponding tracking and targeting tools.

You can withdraw or adjust your consent at any time with effect for the future.

a) eTracker 

On the basis of your consent, Art. 6 para. 1 s. 1 lit. a GDPR, we use services of etracker GmbH from Hamburg on our website to analyse usage data. Cookies are used to enable a statistical analysis of the use of this website by its visitors and the display of usage-related content or advertising. etracker cookies do not contain any information that enables the identification of a user. The data generated by etracker is processed and stored by etracker on behalf of the provider of this website exclusively in Germany and is therefore subject to the strict German and European data protection laws and standards. etracker has been independently audited, certified and awarded the data protection seal of approval in this regard.

Since the privacy of our visitors is particularly important to us, etracker anonymizes the IP address as soon as possible and converts login or device IDs into a unique key that is not assigned to a person. etracker does not use the data in any other way, combine it with other data or pass it on to third parties. Your data is deleted as soon as it is no longer required for the purpose of processing.

You can withdraw your consent for the future at any time via the consent management tool. You can access the consent management tool via the link at the bottom of the website.

For more information on data protection at etracker, please refer to their privacy policy.

b) Twitter Conversion Tracking 

This website based on your consent, Art. 6 para. 1 s. 1 lit. a GDPR uses the online advertising program Twitter "Conversion Tracking" and the associated tracking pixel technology of the provider Twitter Inc. This allows us to track your user behavior when you have viewed or interacted with ads on Twitter. This gives us a better overview of how successful our campaigns are on Twitter and allows us to optimise them on an ongoing basis.

The tracking pixel is loaded on your end device when you respond to an ad placed by us via Twitter, for example because you click on a link to our site. In this context, a pixel ID is created and stored in a cookie so that we can analyse your user behaviour until the tracking pixel expires. Your data will be deleted as soon as it is no longer required for the purpose of processing.

The tracking pixel is not used for personal identification.

In connection with the use of Twitter Conversion Tracking, the information collected is also processed on servers of Twitter Inc. in the USA. The USA are so-called unsafe third countries (see also section 3. c of this privacy policy).

You can withdraw your consent for the future at any time via the consent management tool. You can access the consent management tool via the link at the bottom of the website.

For more information about Twitter's privacy practices, visit their Help Center.

c) Facebook Pixel with Facebook Custom Audiences

We use the Facebook pixel of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: Facebook) on our website on the basis of your consent, Art. 6 para. 1 s. 1 lit. a GDPR. The Facebook pixel is a JavaScript code that makes it possible to track the activities of visitors to websites on which the pixel is used. The Facebook pixel collects and stores, among other things, IP address, browser information, source and target page, referrer data. In addition, the pixel detects which activities have been carried out on the website, such as click behaviour.

You can find more information about Facebook privacy here.

aa) Facebook Pixel for measurement solutions and analytics services

With the help of the Facebook Pixel, we can use measurement solutions and analytics services to see how you respond to our ads on Facebook, such as when you click on a link in the ad that leads to our website. This gives us a better overview of how successful our campaigns are on Facebook and allows us to optimize them on an ongoing basis. With the help of the pixel, it is also possible to recognize you as a visitor to our website in order to target you for the display of advertisements. Accordingly, we use the Facebook pixel to display the ads we play on Facebook only to Facebook users who are likely to be interested in our offers, either because they have visited our website before or because they have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited).

The tracking pixel is loaded on your end device when you visit our website or respond to an ad we have placed on Facebook, for example by clicking on a link to our page. In this context, a pixel ID is created and stored in a cookie, so that we receive evaluations of your user behavior. The pixel is not used for personal identification.

We have concluded a processing agreement on behalf of Facebook. In it, Facebook assures to process the data in accordance with the GDPR and to protect the data subject's rights.

In connection with the use of the Facebook Pixel, the information collected is also processed on servers of Facebook Inc. in the USA. The USA are so-called unsafe third countries (see also point 3. c of this data protection declaration)....

As a user of Facebook, you have the option to object to the collection by the Facebook Pixel in the settings for Facebook ads after logging into your account.

For more information about Facebook's privacy practices, please see their privacy policy.

bb) Facebook Custom Audience pixel

We use Facebook Custom Audience of the social network Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a company of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, hereinafter "Facebook") on the basis of your consent, Art. 6 para. 1 s. 1 lit. a GDPR. This is a marketing service provided by Facebook. This allows us to display individually tailored and interest-based advertising on Facebook to certain groups of pseudonymised visitors to our website who also use Facebook.

A Facebook Custom Audience pixel tag is integrated on our website, which stores personal data about the use of this website. This includes your IP address, the browser used and the source and target pages. This information is transferred to Facebook servers, which may also be located in the USA. The USA are so-called unsafe third countries (see also section 3. c of this data protection declaration).

Facebook automatically checks whether you have saved a Facebook cookie. The Facebook cookie is used to automatically determine whether you belong to the target group that is relevant for us. If you belong to the target group, you will be shown corresponding ads from us on Facebook. During this process, you will not be personally identified by us or by Facebook through the matching of data, because the extended matching function is deactivated and we do not transmit any email addresses to Facebook.

We are joint controllers with Facebook Ireland with respect to the use of the Facebook Custom Audience Pixel pursuant to Art. 26 of the GDPR. We have entered into a joint responsibility agreement to determine the respective responsibilities for fulfilling the obligations under the GDPR. According to this agreement, we are responsible for informing users of our website, while Facebook is responsible for fulfilling requests regarding data subjects' rights under Art. 15 to 21 of the GDPR. However, within the framework of joint responsibility, you can in principle assert your data subject rights against each of the joint controllers.

Facebook bases the processing of the data on the consent of Facebook users pursuant to Art. 6 (1) (a) of the Regulation and the legitimate interests of Facebook pursuant to Art. 6 (1) (f) of the Regulation to ensure accurate and reliable reporting and accurate performance statistics for Facebook advertisers. You can find more information about this in Facebook's privacy information, or here. You can contact Facebook's data protection officer here.

As a user of Facebook, you have the option to object to the collection by the Facebook Pixel in the settings for Facebook ads after logging into your account.

For more information about Facebook's privacy practices, please see Facebook's privacy policy.

d) Google Marketing Platform

We use the Google Marketing Platform, a web analysis and advertising service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google") on our website on the basis of your consent, Art. 6 para. 1 s. 1 lit. a GDPR.

In this context, pseudonymous usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

may be transmitted to a Google server in the USA and processed there. The USA are so-called unsafe third countries (see also section 3. c of this privacy policy). Google relies on standard contractual clauses approved by the EU Commission for the transfer as a guarantee of a level of data protection comparable to the EU. We only transfer data to Google on the basis of your consent.

We have concluded order processing agreements with Google for the use of Google Analytics. Through this contract, Google assures that they process the data in accordance with the GDPR and ensure the protection of the rights of the data subject.

The information may be transferred to third parties if this is required by law or if third parties process this data on behalf of Google. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking). Your data will be deleted as soon as they are no longer required for the purpose of processing.

You can withdraw your consent for the future at any time via the consent management tool. You can access the consent management tool via the link at the bottom of the website.

Further information on data protection in connection with the Google Marketing Platform can be found here.

f. DoubleClick Digital Marketing 

DoubleClick Digital Marketing collects and analyzes information in order to optimize advertising. The technologies used enable us to target you with individually interest- based advertising. For example, we record which of our contents you were interested in. Based on this information, we can also show you offers on third-party sites that are specifically geared to your interests, as determined by your previous user behaviour. The collection and analysis of your user behaviour is exclusively pseudonymous and does not allow us to identify you.

You can also set up DoubleClick Digital Marketing to display interest-based advertising through Google Ads Settings Manager.

 

6. Social Media Stream 

We integrate external social media content from the social networks Facebook, Twitter and Instagram on our website in order to make our company better known. The integration of this content by us takes place in the way, providedin case that you have given us your consent according to Art. 6 para. 1 s. 1 lit. a GDPR.

Without granting your consent, no direct contact is established from the user'syour browser to the social media provider's servers. Once consent has been granted by you and you click on the corresponding social media content, the user isyou are redirected to the respective provider's website. We have no influence on the processing of personal data on third-party websites.

a) Social Wall 

We use a so-called social wall on our website from the service provider Walls.iO GmbH, Andreasgasse 6, 1070 Vienna, Austria. There we integrate social media posts in order to be able to offer you targeted information.

By giving your consent, your IP address will be transmitted to Walls.io GmbH and stored on their server. Further personal data is not processed via the integration of the social wall.

The processing of the IP address in the context of the integration of the social wall takes place for the purpose of direct marketing, to address our target groups and thus to increase visits to our website. The legal basis for the processing of the IP address is your consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR. We cannot draw any direct conclusions about your identity from the processing of the IP address.

We have concluded an order processing contract with Walls.io GmbH. Through this contract, Walls.io GmbH ensures that it processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the data subject. Your data will be deleted as soon as they are no longer required for the purpose of processing.

You can withdraw your consent for the future at any time via the consent management tool. You can access the consent management tool via the link at the bottom of the website.

b) Facebook and Instagram content 

On our website, we integrate external social media content from the social networks Facebook and Instagram which are offered by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, Europe (hereinafter: "Facebook").

If you give your consent according to Art. 6 para. 1 s. 1 lit a GDPR, the external content on our website will be displayed to you and a connection to the servers of Facebook will be established. If you click on the corresponding content, you will be redirected to a Facebook website.

By calling up the embedded content, Facebook receives the information that your browser has called up the corresponding content, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. The USA are so-called unsafe third countries (see also section 3. c of this privacy policy).

If you are logged in to Facebook and interact with the content on the Facebook website, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research and demand-oriented design of the Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

If you are logged in to Instagram and interact with the content on Instagram, Instagram can directly associate your visit to our website with your Instagram account.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

We have entered into a shared responsibility agreement with Facebook Shared responsibility includes the collection of this data and the transfer to Facebook. In the shared responsibility agreement, we have defined with Facebook the respective responsibilities for fulfilling the obligations under the GDPR with respect to joint processing. Under the agreement, we are required to make you aware of Facebook's data policy, which can be found here. Facebook processes your data based on your consent given to Facebook. You can exercise your rights as a data subject via the settings in the profile area. You can exercise the right to object here and enforce your right to erasure here.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, can be found in Facebook's privacy policy

For more information, please also see Instagram's privacy policy.

You can withdraw your consent for the future at any time via the consent management tool. You can access the consent management tool via the link at the bottom of the website.

 

7. YouTube

We implement components (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA (hereinafter: "YouTube"), a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"), on our platform. The implementation is based on Art. 6 (1) sentence 1 lit. f GDPR and our legitimate interests to make our website interesting for you.

Here we use the so-called embetty solution, with the help of which we can ensure that your IP address is only transmitted to YouTube when you actively click on a video. If you do not do this, no data is sent to YouTube during your visit to our website. When you click on a video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser. In particular, it is transmitted to Google which of our websites you have visited as well as device-specific information including the IP address.

If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

If you have given your consent pursuant to Art. 6 para. 1 s. 1 lit. a GDPR, we also use YouTube cookies on our website. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You can object to the creation of these user profiles vis-à-vis YouTube.

You can withdraw your consent for the future at any time via the consent management tool. You can access the consent management tool via the link at the bottom of the website.

For more information on data protection in connection with YouTube, please refer to Google's privacy policy.

Google transmits the information to Google servers in the USA. The transmitted data are only pseudonyms, an inference to your name is not possible. The USA are so- called unsafe third countries (see also section 3. c of this privacy policy).

Your data will be deleted as soon as they are no longer required for the purpose of processing.

 

8. Exercise of data subjects' rights 

You have the right:

  • to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future;
  • in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details;
  • in accordance with Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored by us;
  • in accordance with Art. 17 GDPR to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller; and
  • complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

 

9. INFORMATION ABOUT YOUR RIGHT TO OBJECT ACCORDING TO ART. 21 GDPR 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision of Article 4 No. 4 GDPR. 

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

If your objection is directed against the processing of data for the purpose of direct marketing, we will immediately stop the processing. In this case, the specification of a special situation is not necessary. This also applies to profiling, insofar as it is connected with such direct advertising. 

If you wish to exercise your right of objection, simply send an e-mail to dataprivacy@gazprom-germania.de

 

10. Data security 

All data transmitted by you personally will be encrypted using the generally accepted and secure standard TLS (Transport Layer Security). TLS is a secure and proven standard that is also used, for example, in online banking. You can recognise a secure TLS connection by the s appended to the http (i.e. ..) in the address bar of your browser or by the lock symbol in the lower area of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

11. Linking to other websites 

As the provider of our website, we are responsible for the collection, storage and use of personal data in connection with the use of our own online offering. However, we have no influence on whether the website operators linked to us adhere to the relevant data protection regulations. The respective website operators are responsible for the collection, storage and use of personal data on linked websites. Please inform yourself about the handling of your personal data by these providers on the linked websites.

 

12. Actuality and change of this privacy policy 

This privacy policy is currently valid and has the status October 2021.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.

It can be accessed, saved and printed out by you at any time on our website at https://www.gazprom-football.com/de/datenschutz.htm.