Privacy

Privacy information of SPM Sportplatz Media GmbH

We – SPM Sportplatz Media GmbH (“SPM” or “we”) – would like to inform you about how we process your personal data in accordance with the General Data Protection Regulation (“GDPR”).Our privacy information is modular in structure. It consists of general information applying to any processing of personal data and processing situations (1.) and supplementary information whose content applies only to the processing situation specified in each case (2. et seq.). To find the sections relevant to you, please refer to the following structure:

  1. General information
  2. Supplementary information for the website www.spm.sport
  3. Supplementary information for communication with us
  4. Supplementary information for other contractual partners
  5. Supplementary information for applicants

1. General information

1.1. Controller under data protection law
The controller within the meaning of the GDPR and other national data protection laws of the Member States as well as other data protection provisions is:

SPM Sportplatz Media GmbH
Schleidenstraße 3 22083
Hamburg
info@sportplatz-media.com
+49 (0)40 537 98 63 20

1.2. Data Protection Officer
Our Data Protection Officer is:
ARTANA Digital GmbH
Prof. Dr. Christian Rauda
Alstertwiete 3
20099 Hamburg
Germany
datenschutzbeauftragter@sportplatz-media.com

1.3. Legal bases for the processing of personal data
We process your personal data on the basis of one of the following legal grounds:

1.3.1. Consent of the data subject
Where we obtain the consent of the data subject for a specific purpose, Art. 6(1) sentence 1 lit. a GDPR is the legal basis.

1.3.2. Performance of contractual obligations
Where processing is necessary for the performance of a contract to which the data subject is party, Art. 6(1) sentence 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.

1.3.3. Legal requirements and obligations
Where processing is necessary for compliance with a legal obligation to which we are subject, Art. 6(1) sentence 1 lit. c GDPR is the legal basis.

1.3.4. Protection of legitimate interests
Where processing is necessary for the purposes of our legitimate interests or those of a third party and the interests, fundamental rights and freedoms of the data subject do not override those interests, Art. 6(1) sentence 1 lit. f GDPR is the legal basis.

1.4. Storage period and deletion of personal data
Personal data will be deleted or blocked as soon as there is no longer a purpose that provides a legal basis for the processing.

1.5. Recipients of personal data
Internally, personal data is processed only by those departments that require it for the fulfilment of their processing purposes. This also applies to the processors, service providers and agents engaged by us. All departments and persons working with personal data are obliged to maintain data confidentiality and have been instructed to handle such data with appropriate care.Personal data is disclosed to third parties only where this is in accordance with data protection law. In particular, persons and entities used to conduct our business operations (e.g. providers of IT and technology services, as well as banks and tax advisers) and public authorities may receive your personal data where this is necessary.

1.6. Data processing in third countries
Some of our services require personal data to be processed by our processors in countries outside the EU/EEA (“third countries”). Where personal data is processed and the country does not provide a level of data protection equivalent to the European standard confirmed by an adequacy decision of the European Commission pursuant to Art. 45(3) GDPR, we have concluded EU Standard Contractual Clauses with the relevant processors in order to provide appropriate safeguards within the meaning of Art. 46 GDPR. A copy of the EU Standard Contractual Clauses is available here:EU Standard Contractual Clauses

1.7. Rights of data subjects
Where processing in a third country takes place, we indicate this below.If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us as controller:

1.7.1. Right of access
Pursuant to Art. 15 GDPR, you have the right to request information about the personal data we process. In particular, you may request information about:

  • the purposes of the processing;
  • the categories of data;
  • the categories of recipients to whom your data has been or will be disclosed, as well as information on whether personal data is transferred to a third country or to an international organisation (in this context, you may request information about the appropriate safeguards pursuant to Art. 46 GDPR);
  • the envisaged storage period;
  • the existence of a right to rectification, erasure, restriction of processing or objection;
  • the existence of a right to lodge a complaint and the source of your data where it was not collected from us; and
  • the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for the data subject.

    1.7.2. Right to rectification
    Pursuant to Art. 16 GDPR, you have the right to rectification and/or completion of your personal data where it is inaccurate or incomplete. We must carry out the rectification without undue delay.

    1.7.3. Right to restriction of processing
    Pursuant to Art. 18 GDPR, you have the right to request restriction of the processing of your data where you contest the accuracy of the data or the processing is unlawful.Where processing has been restricted, we will inform you before the restriction is lifted.

    1.7.4. Right to erasure
    Pursuant to Art. 17 GDPR, you have the right to erasure of your personal data unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

    1.7.5. Right to notification
    If you have exercised your right to rectification, erasure or restriction of processing against us, we are obliged to communicate the rectification or erasure of personal data or restriction of processing to all recipients to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.

    1.7.6. Right to data portability
    Pursuant to Art. 20 GDPR, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

    1.7.7. Right to object
    Pursuant to Art. 21 GDPR, you have the right to object to processing where the processing is based on Art. 6(1) sentence 1 lit. e or lit. f GDPR. Unless the objection concerns direct marketing, we ask you, when exercising such an objection, to explain the reasons why we should not process your data as we have done. In this case, we will examine the circumstances and either discontinue or adjust the processing or demonstrate to you our compelling legitimate grounds on the basis of which we will continue the processing.

    1.7.8. Right to withdraw consent under data protection law
    Pursuant to Art. 7(3) GDPR, you have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

    1.7.9. Right to lodge a complaint with a supervisory authority
    Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

    2. Supplementary information for the website www.spm.sport
    We are responsible for our website and its subpages (“website”). Personal data is processed when you use our website. Below we provide detailed information about the processing activities that take place.

    2.1. Provision of the website and creation of log files
    When you access our website, we automatically collect data and information from the user’s end device (so-called log files).

    2.1.1. Processors
    To provide our website, we use the processor Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. We have concluded a data processing agreement with this provider, which processes personal data exclusively on our behalf.In addition, in order to provide our website quickly, securely and at scale via a so-called “Content Delivery Network”, we use the processor HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA. We have concluded a data processing agreement with this provider, which processes personal data exclusively on our behalf. The processor may process personal data in a third country.We have therefore concluded EU Standard Contractual Clauses with the processor in order to provide appropriate safeguards within the meaning of Art. 46 GDPR.

    2.1.2. Information processed & duration of processing
    The following information is processed:
  • information about the browser type and version used
  • the operating system of the end device
  • the user’s Internet service provider
  • the IP address of the end device
  • date and time of access
  • referrer URL

The log files are deleted no later than within 7 days.

2.1.3. Purpose of processing & legal basis
The data is required to display the website on the user’s end device, to ensure its functionality and to analyse any disruptions. The data also serves to optimise the website and ensure the security of our information technology systems.The legal basis is Art. 6(1) sentence 1 lit. f GDPR. The collection of log files is strictly necessary for the operation of the website. Consequently, users have no right to object to this processing.

2.2. Use of strictly necessary cookies
We use cookies on our website. Cookies are text files that are stored in or by the Internet browser on the user’s end device when visiting a website.

2.2.1. Information processed & duration of processing
Each cookie contains a characteristic string that enables the browser to be uniquely identified the next time the website is accessed and thus identifies the respective user end device.The necessary cookies are deleted after the following period:

  • duration of the session

2.2.2. Purpose & legal basis
Some functions of our website cannot be provided without the use of cookies. These technically necessary cookies are not used to determine the identity of the user or to create user profiles.The legal basis for storing strictly necessary cookies is Section 25(2) no. 2 TDDDG.The legal basis for processing the personal data generated in this context is Art. 6(1) sentence 1 lit. f GDPR.The use of these cookies is strictly necessary for the operation of the website. Consequently, users have no right to object to this processing.

2.3. Online presences on social media
We maintain online presences within social networks and platforms in order to communicate with customers, prospective customers and users active there and to inform them about our services.We have placed a link to Facebook, which is operated by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).The same applies to the website of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).No further exchange of data with Facebook and/or LinkedIn takes place on our website in this respect.When accessing the respective networks and platforms, the terms and conditions and data processing policies of the respective operators apply. Unless otherwise stated in this Privacy Policy, we process users’ data when they communicate with us within social networks and platforms, e.g. by writing posts on our online presences or sending us messages.

3. Supplementary information for communication with us
The following information applies to any communication with us.

3.1. Telephone
You can contact us by telephone.

3.1.1. Processor
As a general rule, only we process the personal data referred to above. However, we also partly use the processor Placetel, BroadSoft Germany GmbH, Lothringer Straße 56, 50677 Cologne, Germany, to receive calls when we are not directly available. This is intended to ensure that callers have the opportunity to contact us by telephone at any time.

3.1.2. Information processed & duration of processing
 In addition to your telephone number, we process the personal data that you provide to us during the call.The data will be deleted – provided there is no other reason for processing – as soon as your request has been resolved.

3.1.3. Purpose of processing & legal basis
The personal data is processed by us exclusively for the purpose of handling the enquiry and in the event of follow-up questions.If the communication is aimed at entering into a contract, the legal basis for the processing is Art. 6(1) sentence 1 lit. b GDPR.In all other cases, Art. 6(1) sentence 1 lit. f GDPR is the legal basis. Your interests do not override our interest in responding to your enquiry; moreover, because you contact us, a response is also in your interest and you are aware that we must process your personal data in order to answer your enquiry.

3.2. Email and contact form
You can contact us directly by email or via a contact form on our website. We would like to point out that third parties may have opportunities to gain access to email communications. If it is important to you that the information you provide is not exposed to the risk of unlawful access by third parties, we therefore recommend using another method of communication.However, if you contact us by email, we assume that further communication via this channel is also in your interest.

3.2.1. Processor
For the provision of email communication, we use the processor united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany, with whom we have concluded a data processing agreement. Using a processor is necessary in order to ensure communication that is as secure and trouble-free as possible.

3.2.2. Information processed & duration of processing
In addition to your email address, we process the personal data that you provide to us within the email communication.The data will be deleted – provided there is no other reason for processing – as soon as your request has been resolved.

3.2.3. Purpose of processing & legal basis
The personal data is processed by us exclusively for the purpose of handling the enquiry and in the event of follow-up questions.If the communication is aimed at entering into a contract, the legal basis for the processing is Art. 6(1) sentence 1 lit. b GDPR.In all other cases, Art. 6(1) sentence 1 lit. f GDPR is the legal basis. Your interests do not override our interest in responding to your enquiry; moreover, because you contact us, a response is also in your interest and you are aware that we must process your personal data in order to answer your enquiry.

3.3. Video calls
We also occasionally use video calls for communication.

3.3.1. Processor
For video calls, we use the service of Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA, as our processor. We have concluded a data processing agreement with the processor. The processor may process personal data in a third country in order to ensure smooth video calls. We have therefore concluded EU Standard Contractual Clauses with the processor in order to provide appropriate safeguards within the meaning of Art. 46 GDPR.

3.3.2. Information processed & duration of processing
The following communication data is processed during video calls:

  • personal master data (if you provide it voluntarily)
  • content of the online meeting (if you appear in a personally identifiable way through spoken and/or written contributions)
  • authentication data
  • log files and protocol data
  • metadata (e.g. IP address, time of participation, etc.)
  • profile data (e.g. your username, if you provide it voluntarily)

The personal data will be deleted as soon as your request has been resolved and provided there is no other reason for processing.

3.3.3. Purpose of processing & legal basis
The personal data is processed by us exclusively for the purpose of handling the enquiry and in the event of follow-up questions.If the communication is aimed at entering into a contract, the legal basis for the processing is Art. 6(1) sentence 1 lit. b GDPR.In all other cases, Art. 6(1) sentence 1 lit. f GDPR is the legal basis. Your interests do not override our interest in responding to your enquiry; moreover, because you contact us, a response is also in your interest and you are aware that we must process your personal data in order to answer your enquiry.

4. Supplementary information for other contractual partners
The following supplementary information applies to you if we are in a contractual relationship with one another.

4.1. Information processed & duration of processing
Which of your data is processed in each individual case depends on the tasks within the contractual relationship. We use personal information exclusively for the purpose for which it was provided to us. This includes, for example, personal details (name, address and other contact details, date and place of birth). It may also include order data (e.g. payment order), data resulting from the performance of our contractual obligations (e.g. turnover data in payment transactions), information about your financial situation (e.g. creditworthiness data), advertising and sales data, as well as other data comparable to the categories mentioned above.

4.2. Purpose of processing & legal basis
The personal data will be deleted as soon as the contractual relationship with you has ended and provided there is no other reason for processing.The processing is predominantly carried out for the purpose of establishing and performing the contractual relationship; the legal basis is Art. 6(1) sentence 1 lit. b GDPR.In addition, we partly process your data on the basis of our legitimate interests, namely for contact and communication management, profitability controls, contract and project management, and to ensure the operation of information and telecommunications systems. The legal basis is Art. 6(1) sentence 1 lit. f GDPR.Furthermore, as a company we are subject to various legal obligations that must be complied with on the basis of applicable laws and regulations. The legal basis for processing to comply with legal requirements and obligations is Art. 6(1) sentence 1 lit. c GDPR. These include, among other things, tax-law retention obligations.

5. Supplementary information for applicants
The following supplementary information applies to you if you apply for a position with us.

5.1. Information processed & duration of processing
We process the personal data that we receive from you through your application. We do not use any AI (artificial intelligence) within our application process.The personal data will be deleted after six months if no employment relationship is established. If an employment relationship is established, the data will continue to be processed for this purpose.

5.2. Purpose of processing & legal basis
We collect and process applicants’ personal data for the purpose of carrying out the application process.The legal basis for the processing of personal data is Section 26 BDSG in conjunction with Art. 6(1) sentence 1 lit. b GDPR. If we conclude an employment contract with you, the transmitted data will continue to be processed for the purpose of managing the employment relationship; in this case the legal basis remains, in particular, Section 26 BDSG in conjunction with Art. 6(1) sentence 1 lit. b GDPR.If no employment contract is concluded, the application documents will be deleted unless other legitimate interests of the controller prevent deletion. Another legitimate interest in this sense is, for example, an obligation to provide evidence in proceedings under the German General Equal Treatment Act (AGG).