Notes on data processing

This privacy policy applies to data processing by the SV Werder Bremen GmbH & Co KG aA, Sport-Verein "Werder" v. 1899 e.V., Werder Bremen Fan-Service GmbH and Werder Bremen Payment GmbH (WERDER). We hereby inform you in accordance with Art. 13 and 14 DS-GVO in order to fulfil the information obligations regulated therein when collecting personal data.

1. Name and contact details of the person responsible for processing and of the data protection officer

SV Werder Bremen GmbH & Co KG aA

Franz-Böhmert-Strasse 1c. 28205 Bremen

Phone: 0421 - 43 45 90, Fax: 04 21/49 35 55

E-mail: info@werder.de

The contact information of the data protection officer of the controller is:

Lawyer Bertold Frick,

Privacy Policy-Metropol GmbH

Cotton Exchange, Wachtstraße 17/24, 28195 Bremen, Germany

Phone: (0421) 339 53 50, Fax: (0421) 339 53 55

E-mail: datenschutzbeauftragter@werder.de

2. Collection and storage of personal data as well as type and purpose and their use

In the course of business with you, we may collect the following information:

• Last name, First name,
• Date of birth
• A valid e-mail address,
• Address,
• Telephone number (landline and/or mobile),
• Payment details
• Health data (athletes)
• Relevant employment and payroll data.

This data is collected,

• to identify you as our member or our customer or fan;
• to initiate a contract with you;
• to be able to carry out the service from the contractual relationship with you;
• Execution and handling of employment contracts;
• for the processing of the membership;
• to correspond with you;
• to send the newsletter;
• for invoicing, payment;
• to fulfill your claims or assert any claims against you

According to Art. 6 Para. 1 S. 1 lit. b DSGVO, data processing is necessary for the stated purposes for the appropriate processing of orders or for the mutual fulfillment of obligations under from the respective contract. In addition, data processing may also be required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c DS-GVO.

Data processing may also take place on the basis of your consent pursuant to Art. 6 para. 1 sentence 1 lit. a DS Block Exemption Regulation, Art. 6 para. 1 sentence 2 lit. a. If this is the case, you have the right to revoke your consent at any time, freely and without giving reasons, by sending an e-mail to datenschutzbeauftragter@werder.de. The processing of data by third parties or us may also take place on the basis of Art. 6 Para. 1 S. 1 lit. f DS-GVO in our or in the legitimate interest of the third party. The legitimate interest lies in the evaluation and improvement of our services, increase in profitability and efficiency, data protection through uniform processing and communication with you.

The personal data collected by us for the purposes of membership, an employment relationship or a business relationship will be stored until the expiry of the statutory storage obligation and deleted thereafter unless we are obliged to store the data for a longer period of time pursuant to Article 6 para. 1 sentence 1 lit. c DSGVO, e.g. due to tax and commercial law storage and documentation obligations (from HGB, or AO), or you have consented to storage going beyond this pursuant to Article 6 para. 1 sentence 1 lit. a DSGVO.

3. Disclosure of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below. To the extent required by Art. 6 Para. 1 S. 1 lit. b DSGVO for the execution of contractual relationships with you, your personal data will be passed on to third parties. This includes, in particular, the passing on of your personal data to

• Service providers for sales in online shops (payment systems, shipping, and logistics service providers)
• Service provider for the dispatch of letter mail
• Service provider for the dispatch of newsletters
• Service provider for the organisation of sweepstakes
• Service provider for the sale and dispatch of tickets
• Service provider for the provision of IT services
• Service provider for debt collection
• In the case of employment relationships also health insurance funds, accounting offices, social insurance carriers, and public authorities and courts for the purpose of asserting any claims or enforcing the house rules.
• The data disclosed may be used by the third party exclusively for the stated purposes.

4. Rights Concern

You have the right:

• In accordance with Art. 7 para. 3 DSGVO to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future;
• To request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed with, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the source of your data, if not collected from us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details;
• In accordance with Art. 16 DSGVO, to immediately request the correction of incorrect or incomplete personal data stored by us;
• To demand the deletion of your personal data stored by us in accordance with Art. 17 DSGVO, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• To demand the restriction of the processing of your personal data in accordance with Art. 18 DSGVO if the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data but you need it to assert, exercise or defend legal claims or you have lodged an objection against the processing in accordance with Art. 21 DSGVO;
• In accordance with Art. 20 DSGVO, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible party, and to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our place of business.

5. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO if there are reasons for doing so which arise from your particular situation.

If you wish to exercise your right of objection, simply send an e-mail to datenschutzbeauftragter@werder.de.

6. Accessibility of the state data protection officer

The State Commissioner for the Free Hanseatic City of Bremen within the meaning of § 40 BDSG is:

Dr. Imke Sommer

Arndtstr. 1 , 27570 Bremerhaven

Phone: (0421) 361 20 10, Fax: (0421) 496 18 495

E-mail: office@datenschutz.bremen.de