SEASON 1
🇩🇪 🇬🇧

Privacy Policy

1. Data Controller

Potsdam Bay Pirates e.V.
Friedrich-Klausing-Str. 8, 14469 Potsdam, Germany
Email: vorstand@potsdambaypirates.de
Tel: +49 163 4364324

2. Server Log Files (Hosting)

When you visit this website, our hosting provider Strato AG (Pascalstraße 10, 10587 Berlin, Germany) automatically stores the following data in server log files: IP address, date and time of access, URL accessed, browser type and operating system. This data is technically necessary and is not merged with other data.

To protect our forms from automated spam submissions, we also store the IP address of your device in an internal block list when you submit our online forms. These entries are automatically deleted after 24 hours at the latest and are used exclusively to prevent abuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

3. Contact Form

If you contact us via the contact form, your details (name, email address, message) will be stored for the purpose of processing your enquiry. Your data will not be passed on to third parties without your consent.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

4. Registration Forms

When you fill out the membership, trial training or school flag football registration form, the data you provide (name, date of birth, address, contact details of guardians) will be used exclusively for club administration and communication. The data is transmitted by email to the board and will not be passed on to third parties.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures).

5. Cancellation Form

When you use the online cancellation form, the data you provide (first and last name, email address, date of birth of the member, selected quarter-end date, optional: reason for cancellation) will be used exclusively to process your cancellation and transmitted by email to the board. Your data will not be passed on to third parties.

Via the online withdrawal form (§ 356a BGB), parents can withdraw the membership contract within 14 days of its conclusion. The data provided (name, email address, date of birth, date of joining) is used exclusively to process and confirm the withdrawal and is deleted once the process is complete.

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of contract / termination of contract).

6. Pirates Flag Camp — Registration, Waiting List and Newsletter

When you fill out the registration form for the Pirates Flag Camp, the following data is collected: child's name, date of birth, age, address, parent/guardian name and contact details (phone, email), flag football experience, t-shirt size, voluntary notes (e.g. allergies), selected contribution (regular/supporter), and photo/video consent. The data is used exclusively for the organization and execution of the camp and is stored in a file on our server. Data is not shared with third parties. Data is deleted after the camp and after the retention period (6 months for accounting purposes) expires. Photo and video consent is voluntary and can be withdrawn at any time without giving reasons by email to vorstand@potsdambaypirates.de.

The camp is currently fully booked. New interested parties can register via the online waiting list. The data collected includes first and last name, age, parent/guardian name and contact details (phone, email), as well as voluntary notes. This data is used exclusively for organizing the camp and for notifying you about available places, is stored in a file on our server, and is deleted after the camp. Data is not shared with third parties.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures / performance of contract).

Newsletter (Camp Info List): When you use the newsletter form on the camp page, your first and last name and your email address are stored in order to inform you about the next Pirates Flag Camp. The data is stored in a file on our server; no mailing service provider is used. You may withdraw your consent at any time, e.g. by email to vorstand@potsdambaypirates.de; your data will then be deleted.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

Photo and Video Publication: Photos and videos are taken at club events (e.g. camps and training sessions). They are published on our website and our social media channels only with the consent of the legal guardians; this consent is collected in the respective registration form. Consent may be withdrawn at any time with effect for the future (by email to vorstand@potsdambaypirates.de); the affected photos and videos will then be removed.

Legal basis: § 22 KUG (German Art Copyright Act); Art. 6 para. 1 lit. a GDPR (consent).

7. Teamwear Orders

When you use the online teamwear order form, the data provided (child's first and last name, age group, parent/guardian name, phone number and email address, ordered items with sizes and jersey numbers, optional: individual customizations) is used exclusively for processing the group order and handling the payment. The data is stored in a file on our server and deleted after the order is completed. Data is not shared with third parties.

Legal basis: Art. 6 para. 1 lit. b GDPR (performance of contract).

8. Cookies

This website does not use tracking cookies. No personal data is stored for advertising purposes.

9. Web Fonts (Google Fonts)

All fonts used on this website (Cinzel, Montserrat, Open Sans, Oswald) are stored locally on our server and served from there. No connection to Google servers is established and no IP addresses are transmitted to Google.

10. Fan Shop (Spreadshirt/Spreadshop)

On our fan shop page we embed an offer by Spreadshirt Group AG & Co. KG, Gießerstraße 27, 04229 Leipzig, Germany ("Spreadshop"), via an iframe. When you visit the fan shop page, a connection to Spreadshirt's servers is automatically established, transmitting your IP address and technical data (e.g. browser type, operating system) to Spreadshirt. This processing is based on our legitimate interest (Art. 6 (1)(f) GDPR) in providing a merchandise offering. Purchases in the fan shop are processed entirely by Spreadshirt; their terms and conditions and privacy policy apply.

11. Membership Application and Payment Processing (SEPA)

When registering as a club member online, we process name, date of birth, address, guardians’ contact details, SEPA bank details (IBAN, account holder) and any consents given (e.g. photo consent). The SEPA data is used exclusively for collecting membership fees by direct debit via the club account at Deutsche Bank AG (brand name FYRST). You will receive a pre-notification before each debit.

Legal basis: Art. 6(1)(b) GDPR (performance of contract) and Art. 6(1)(c) GDPR (accounting obligations).

12. Club Administration (Mein Verein 365 / MV365)

For member administration and fee management we use the software „Mein Verein 365“ (provider: MY JV Verwaltungs GmbH, Germany). Registration data (name, date of birth, address, fee data, SEPA data) is transferred to MV365 and stored there on our behalf under a data processing agreement (Art. 28 GDPR). Retention periods follow German commercial and tax law (usually 10 years for accounting records).

Legal basis: Art. 6(1)(b) and 6(1)(c) GDPR.

13. Spond

For internal communication with members (appointments, groups, broadcasts) we use the app Spond (provider: Spond AS, Norway). Name, email address and, if applicable, phone numbers of members or guardians are processed. Using Spond is voluntary; communication with the club also works via email. A data processing agreement exists with the provider. Norway is part of the EEA; an equivalent level of data protection to EU law applies.

Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.

14. Social Media (Instagram)

The club maintains Instagram accounts (Instagram LLC, Meta Platforms Ireland Ltd., Dublin). When you visit or interact with our profiles, data (in particular your IP address) is processed by Meta. This processing is carried out by the platform itself when visiting our social media presence, not by our servers. We have no influence on the scope of data processing by Meta. The Instagram/Meta privacy policy applies.

Legal basis: Art. 6(1)(f) GDPR (interest in contemporary public relations).

15. Your Rights (GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent supervisory authority: Commissioner for Data Protection and Access to Information Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).

Contact: vorstand@potsdambaypirates.de

Supervisory authority:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany

Stand: Oktober 2026