Data Protection Information for Stadium Visitors

We would like to keep you informed in detail and with transparency about the processing of data.

The following information should give you an overview of the processing of your personal data by us and your rights under the data protection law.

Who is responsible for processing my data and who can I contact?

Responsible:

1. FC Union Berlin e. V.
An der Wuhlheide 263, 12555 Berlin
Tel.: 030 65 66 88 100
E-Mail: verein@fc-union-berlin.de

You can reach our data protection officer here:

datarea GmbH
Meißner Straße 103, 01445 Radebeul
Tel.: +49 351 2722 0880
E-Mail: info@datarea.de

Which data and sources are we using?

We are only processing personal information that we receive from supporters and visitors when they register for the ticket ballot in our system.

For this registration, we will collect the following information:

·         Personal: Name, First name, Date of Birth

·         Address

·         Contact: E-Mail, Telephone

When tickets are purchased, the seat selection data is also processed (section, row, seat).

What is the reason for processing your information (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU Data Protection Basic Regulation (DS-GVO) and the Federal Data Protection Act (BDSG)

a) to fulfil contractual obligations (Art. 6 para. 1 lit. b) DS-GVO)

We process the data from the registration to sell the tickets, for invoicing purposes and to deliver them to the buyer.

b) Due to legal obligations (Art. 6 para. 1 lit. c) DS-GVO)

c) within the scope of weighing up interests (Art. 6 para. 1 lit. f) DS-GVO)

As far as necessary, we process your data beyond the actual fulfillment of the contract and the legal regulations to protect legitimate interests of us or third parties. For example, to consult and exchange data with authorities, to assert legal claims and defend in legal disputes, to prevent or solve criminal offences. However, this does not apply to your health data.

Translated with www.DeepL.com/Translator (free version)

Who will get my data?

Within 1. FC Union Berlin, those institutions that require your personal information to meet their contractual obligations will be given access to it.

Is data transferred to a third country or an international organisation?

Categorically, no personal information is transferred to countries outside the European Union.

How long will be data be kept?

The data collected for ticket sales will be stored as long as it is necessary to comply with commercial and tax law retention obligations. Those result, for example, from Commercial Code (HGB), Fiscal Code (AO). The retention periods specified there is usually two to ten years.

The data we collect for contact tracking is usually stored for four weeks.

What are my data protection rights?

Every data subject has the right of access under Article 15 DS-GVO, the right of rectification under Article 16 DS-GVO, the right of deletion under Article 17 DS-GVO, the right to restrict processing under Article 18 DS-GVO, the right of objection under Article 21 DS-GVO and the right of data transferability under Article 20 DS-GVO. In the case of the right of information and the right of deletion, the restrictions under Articles 34 and 35 BDSG apply. In addition, there is a right of appeal to the competent data protection supervisory authority (Article 77 DS-GVO in conjunction with Article 19 BDSG).

Supervising Authority:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219, 10969 Berlin

You can revoke your consent to process personal data at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

You can assert your rights as a data subject either by mail or by e-mail to the above-mentioned contact data.

Am I obligated to provide data?

To enable your visit to the stadium, you must provide us with personal information that is necessary for the acceptance and purchase of ticket and for the fulfillment of the respective contractual obligations. Without this data, we will generally not be able to allow you to visit the stadium.

To what extent is decision making automated?

As a matter of principle, we do not use a fully automated decision-making process in accordance with Article 22 DS-GVO to establish and conduct business relationships.

Is profiling taking place?

Profiling, with the aim of evaluating certain personal aspects does not take place through us.