Privacy policy

I. General information

The careful and legally compliant handling of your data is close to our heart. Below we explain the details:

1. responsible body

The controller of the data processing on this website, which alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, contact details), is the
Association for Catering, Accommodation and Leisure (IVBF)
At the sports forum 10
04105 Leipzig

E-mail: info@ivbf.de
Tel: 0341 98980863

2. revocation of your consent to data processing

Certain types of data processing are only possible with your express consent. The revocation of an already given consent is possible with effect for the future (ex nunc) at any time and can be done informally by e-mail.

3. right to information, transfer, blocking, deletion

Upon request, we will provide you with a copy of the Art. 15 DSGVO information about whether and which personal data of yours is processed by us and for what purposes. In addition, you have the right of rectification under the respective legal conditions in accordance with §§ 3 and 4 of the German Data Protection Act (AktG). Art. 16 DSGVO, the right to deletion according to. Art. 17 DSGVO, the right to restrict processing pursuant to. Art. 18 DSGVO as well as the right to data portability according to. Article 20 of the GDPR. They have further pursuant to Art. 21 DSGVO the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 e,f f DSGVO is carried out. This also applies to profiling based on these provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If personal data is processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. To exercise the aforementioned rights, please contact the IVBF by e-mail to info@ivbf.de or by mail to IVBF, Am Sportforum 10, 04105 Leipzig. The exercise of your above rights is free of charge for you.

4. complaint to the competent supervisory authority

In addition to the possibility of asserting any other administrative or judicial remedy, you have the right to appeal to the courts in accordance with the German Civil Code. Article 77 DSGVO in the event of a data protection breach, the right to complain to the competent supervisory authority. The supervisory authority responsible for us is the Saxon Data Protection Commissioner Dr. Juliane Hundert, Devrientstraße 5, 01067 Dresden. Postal address: P.O. Box 11 01 32, 01330 Dresden. Phone: 03 51/85 471 101, fax: 03 51/85 471 109, e-mail: saechsdsb@slt.sachsen.de, homepage: https: //www.saechsdsb.de

II. Use of your data

1. use of the portal and the tools made available exclusively for members

If you want to use the tools in the members area, it is necessary that you create an account. In doing so, the personal data you provide will be stored revocably for the purpose of concluding the membership. The mandatory information required for the conclusion of the membership is marked separately, unmarked information is voluntary. We process your data to complete the membership. Furthermore, we can pass on your payment data to our bank. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR. You can delete all other data, including your member account, at any time in the customer account.

2. use of our portal

If you want to use our tools created exclusively for members, you have to register by providing your e-mail address, a password of your choice and your freely selectable user name. There is no obligation to use a clear name, pseudonymous use is possible. We use a double opt-in procedure for registration, i.e. your registration is only completed once you have confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose.
If you use our portal, we will store your data required for the conclusion of the membership, including information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the time of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected member area. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.
For all logged in members your username and – if you have uploaded one – photo are visible, regardless of whether you have shared them. As far as you have created contributions in the area accessible for all members, these are visible for all registered members of the portal.

3. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us, our website uses an SSL or SSL protocol. TLS encryption. You can recognize these by the fact that the address line of the browser changes from http:// to “https://” and by the lock symbol in the browser line. Once encryption is activated, third parties can no longer read the content you send us.

4. server log files

Information is automatically stored by our server in server log files, which are automatically transmitted to us by your browser. These are: URL, host name of the accessing computer, IP address, visited page on our domain, date and time of the server request, browser type and browser version, operating system used. This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.

5. data transmission to third parties

We only pass on your personal data to third parties if this is necessary in the context of membership and use of our services. Third parties can be payment service providers or external platform operators. A further transmission of the data does not take place or only if you have expressly agreed to it. The basis for the data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.

6. registration on our website

To use certain features, you can register on our website. The transmitted data is used exclusively for the purpose of using the respective service or offer. The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. For the revocation an informal message by e-mail is sufficient. The legality of the data processing already carried out remains unaffected by the revocation. We store the data collected during registration for the period that you are registered on our website. Your data will be deleted should you cancel your registration.

In case of important changes, for example due to technical reasons, we will inform you by e-mail. The e-mail will be sent to the address specified during registration.

7. contact form

Data transmitted via contact form will be stored, including your contact data, in order to be able to process your inquiry or to be available for follow-up questions. This data will not be passed on without your consent. The processing of the data entered in the contact form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. For the revocation an informal message by e-mail is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to store it, or there is no longer any need to store the data. Mandatory legal provisions – in particular retention periods – remain unaffected.

8. storage period of contributions and comments

Posts and comments as well as related data, such as IP addresses, are stored. The content remains on our website until it has been completely deleted or had to be deleted for legal reasons. The storage of posts and comments is based on your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. For the revocation an informal message by e-mail is sufficient. The legality of data processing operations that have already taken place remains unaffected by the revocation.

9. newsletter

This website uses sendinblue for sending newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. Sendinblue is a service that can be used to organize and analyze newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on sendinblue’s servers in Germany. Our newsletters sent with sendinblue allow us to analyze the behavior of newsletter recipients. Here, among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis by sendinblue, please visit: https://de.sendinblue.com/funktionen/e-mail-marketing/

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing from the newsletter by clicking on the unsubscribe link included in every email. The legality of the data processing operations already carried out remains unaffected by the revocation. If you do not want sendinblue to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding unsubscribe link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of sendinblue after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this. For more details, please refer to the sendinblue privacy policy at: https://de.sendinblue.com/legal/privacypolicy/

Clause – members upload vimeo/youtube videos (we don’t use that but maybe members who upload e.g. pictures at the bulletin board)

10. vimeo

For the integration and display of video content, our website uses plugins from Vimeo. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When a page with an integrated Vimeo plugin is called up, a connection to the Vimeo servers is established. Vimeo thereby learns which of our pages you have accessed. Vimeo learns your IP address, even if you are not logged into the video portal or do not have an account there. The information collected by Vimeo is transmitted to servers of the video portal in the USA. Vimeo can assign your surfing behavior directly to your personal profile. You have the option to prevent this by logging out beforehand. Details on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy.

11. YouTube

For integration and display of video content, our website uses plugins from YouTube. The provider of the video portal is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When a page with an integrated YouTube plugin is called up, a connection to the YouTube servers is established. YouTube thereby learns which of our pages you have accessed. YouTube can assign your surfing behavior directly to your personal profile if you are logged into your YouTube account. By logging out beforehand, you have the option to prevent this. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Details on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

12. cookies

Our website uses cookies. These are small text files that your web browser stores on your terminal device. Cookies help us to make our offer more user-friendly, effective and secure. Some cookies are “session cookies.” Such cookies are deleted by themselves after the end of your browser session. On the other hand, other cookies remain on your terminal device until you delete them yourself. Such cookies help us to recognize you when you return to our website. With a modern web browser, you can monitor, restrict or disable the setting of cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. Disabling cookies may result in limited functionality of our website. The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g. shopping cart), is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this privacy policy.

13. google analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analytics service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses “cookies.” These are small text files that your web browser stores on your terminal device and enable an analysis of website usage. Information generated by means of cookies about your use of our website is transmitted to a Google server and stored there. The server is usually located in the USA. The setting of Google Analytics cookies is based on Art. 6 (1) lit. f DSGVO. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

14. IP anonymization

We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google truncates your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area before transferring it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.

15. browser plugin

The setting of cookies by your web browser can be prevented. However, some functions of our website may be restricted as a result. Likewise, you can prevent the collection of data regarding your website usage, including your IP address, along with subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

16. objection to the data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to our website: Disable Google Analytics. Details on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

17. order processing

In order to fully comply with the legal data protection requirements, we have concluded an order processing agreement with Google.
Demographic characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. An assignment of the data to a specific person is not possible. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the item “Objection to data collection”.

18. paypal (plus)

Our website enables payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal itself is responsible for all payment transactions processed via PayPal. For more information, please visit: https://www.paypal.com/de/webapps/mpp/ua/privacy- full?msclkid=0d36ad90d06311ec9da1bb542bf17bf3 When you pay with PayPal, we transmit the payment data you enter to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). A revocation of your already given consent is possible at any time with effect for the future (ex nunc).

19. social media

We currently use the following social media plug-ins: Facebook and Instagram. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the mark on the box above its initial letter or logo. We open the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box. We have no control over the data collected and data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information about the deletion of the collected data by the plug-in provider. The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f GDPR.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider. For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the privacy statements of these providers, which are provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.
Addresses of the respective plug-in providers and URL with their privacy notices:
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php; additional information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications, and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

20. google AdSense

Our website uses Google AdSense. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google AdSense is used to integrate advertisements and sets cookies. Cookies are small text files that your web browser stores on your terminal device in order to analyze the use of the website. Google AdSense also uses web beacons. Web beacons are invisible graphics that allow us to analyze visitor traffic on our wesite. Information generated by cookies and web beacons is transferred to Google servers and stored there. The server is located in the USA. Google may pass this information on to contractual partners. However, Google will not merge your IP address with other data stored by you. The storage of AdSense cookies is based on Art. 6 (1) lit. f DSGVO. We, as the website operator, have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising. With a modern web browser, you can monitor, restrict and disable the setting of cookies. Disabling cookies may result in limited functionality of our website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

21. Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. AdWords is an online advertising program in the context of which we work with so-called conversion tracking. If you click on an ad placed by Google, a cookie is automatically set for conversion tracking. Cookies are small text files that are stored in or by the browser on your hardware, so you have control over their use by selecting the appropriate settings in your Internet browser.
You can find out how to manage (including disabling) cookies on the main browsers by following the links below:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Google AdWords cookies lose their validity after 30 days. They are not used to personally identify users. Cookies contain an individual string of characters that allows a browser to be uniquely identified when a web page is called up again.

The legal basis for the storage of “conversion cookies” is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in analyzing user behavior in order to optimize our offer and our advertising. For details on Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: https://www.google.de/policies/privacy/.

22. google web fonts

Our website uses web fonts from Google. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using these web fonts, it is possible to present you with the presentation of our website that we desire, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This is your IP address and which of our pages you have visited. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f DSGVO. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website. The company Google is certified for the us-European data protection agreement “Privacy Shield”. This data protection agreement is intended to ensure compliance with the level of data protection applicable in the EU. Details about Google Web Fonts can be found at: https://www.google.com/fonts#AboutPlace:about and further information in Google’s privacy policy: https://policies.google.com/privacy/partners?hl=de

III. Your questions about data protection

If you still have questions about this privacy statement or your rights, please contact: info@ivbf.de