Privacy Policy/Cookies

Dear site user,
protecting your privacy is important to us! In the following document we would like to inform you about how we handle your data, which is collected when using our internet presence and mobile Werder applications.

A. USAGE DATA

1. Cookies

Cookies are used on our site. Cookies are small text files stored locally in buffers in your internet browser. Cookies make it possible to recognize the internet browser again, so that during future visits to our website content can be made available to you quicker and more purposefully. The cookies are not recording any personal data.

How can I prevent the storage of cookies?

In your browser, you can set that the storage of cookies can only be accepted if you agree. You can delete existing cookies. However, by disabling cookies, the usability of our Internet pages may be restricted. Information on how cookies can be disabled can be found at the following link (http://www.wikihow.com/Disable-Cookies).

2. Google Analytics
(Google - Analytics, Google Universal Analytics and Google Doubleclick)

a) Google - tools for the anonymous analysis of user behavior

We use Google Analytics (including the features of Universal Analytics) and Doubleclick by Google, Google Inc. 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) on our website, to make the use of our pages more comfortable for our customers.

b) How do the tools work?

Google Analytics uses "cookies", which are text files stored on your computer that make the analysis of your use of the mobile website possible. Universal Analytics allows us to analyze activities on our websites across multiple devices (for example, by accessing a website via the computer and accessing it later via a smartphone). This is done by means of a user ID, an individual, non-personalized number sequence, which is assigned anonymously to a user rather than a specific terminal. You assign your user ID when you register on werder.de or register with your existing customer account. Google only receives the user ID and the user data associated with the user ID. It is not possible to assign the usage data to a specific person.

Doubleclick by Google also uses cookies to present advertisements that are relevant to you. An anonymous identification number (ID) is assigned to your browser to check which ads were displayed in your browser and which ads were called. Cookies do not contain any personally identifiable information. The use of DoubleClick cookies allows Google and its affiliate sites to display relevant ads based on prior visits to our site or on other websites on the Internet.

c) What happens with the data?

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google uses this information to evaluate your use of the website to compile reports about website activities and to provide further services associated with website use and internet access to the website operator. The IP address transmitted from your browser as part of Google Analytics is not combined with other data from Google. To increase the protection of your data we use Google Analytics with the enhancement "_anonymizeIp()". In this way IP addresses are always processed further in an abbreviated form so that a direct link to a particular individual can be ruled out.

d) How can I opt out of data collection and processing?

By using our websites, you agree to the collection and processing of data by Google in the manner described above as well as the stated purpose. You may object to the collection and / or processing of your data at any time regarding data collection in the future:

You can prevent the storage of cookies by adjusting your browser software accordingly; however we must point out that you may not be able to use all the functions of the mobile website to their full extent.

You may also prevent the data being collected by Google Analytics and Universal Analytics from being transmitted to Google, and the processing of such data by Google by downloading and installing a browser plug-in that is available under the following link.

To disable the Double-Click cookie, you can download and install the browser plug-in available under the following link under the DoubleClick Deactivation Extension. Alternatively, you can disable DoubleClick cookies on the Digital Advertising Alliance page at the following link.

For more information about how Google uses cookies and how to disable them, please visit the following link or Google Advertising Settings link.

3. Google AdWords - Conversion - Tracking

For the evaluation and optimization of our online advertising we use the conversion tracking within the framework of the online advertising program "Google AdWords". This will help us to see if and how many users get to our pages through Google advertising. If you click on a Google ad, Google will use a conversion cookie on your computer. This has a lifetime of 30 days. If a user reaches one of our sites through one of our Google Ads within these 30 days, then Google is able, and we can also see, through which display this visitor came to us. Personal data that can be used to identify individual visitors are not collected. We only receive a statistical evaluation of the total number of users who clicked on our ads and were directed to our site.

For more information about Google Conversion Tracking, please see the following link.

You can stop the use of conversion cookies to prevent conversion tracking by:

Configure your browser so that it does not accept cookies. However, the use of our website and services may be limited, or disable Google's interest-related ads in Google ad settings: http://www.google.com/settings/ads/onweb/?hl=en

4. Facebook – Pixel

With the given consent, which you have confirmed:

"I confirm the usage of the custom audience pixel."

We will use an additional Conversion -Tracking Tool to evaluate our advertisement activities on Facebook. This Facebook pixel service is made possible by

Facebook Inc.
1601 S. California Ave,
Palo Alto,
CA 94304,
USA.

With this service, we as well as Facebook can keep track of the user's actions after they have clicked on a Facebook advertisement. This way, we can analyze the effectiveness of Facebook advertisements for statistical and marketing research purposes with the aim of optimizing advertisement activities.

The collected data is kept anonymously which means we cannot trace the identity of the user. However, the data will be saved by Facebook, so Facebook can bring a connection between the advertisement and the user profile. Facebook will use this information for their advertisement purposes, according to the Facebook record usage policy (https://www.facebook.com/about/privacy/).

You can allow Facebook as well as their partner organizations the display of advertisements on and off of the Facebook page. A cookie can be installed on your computer for this purpose.

We only implement a Facebook pixel with your personal consent. This consent for implementing the custom audience pixel can only be given by users who are older than 13 years. In case you are younger than 13 years, we kindly request you to ask your legal guardian for their consent.

You can revoke your consent any time. Please click HERE if you want to revoke your consent.

5. AddThis

We use "AddThis" plug – ins on our page, which make it easier to set up your bookmarks. "AddThis" is an offer from AddThis LLC, 8000 Westpark Drive.Suite 625, McLean, VA 22102, USA. It uses cookies (see paragraph 1) to transfer data (such as time of use and browser language) to AddThis to the USA and process it there. For more information on the scope and purpose of collecting and using the data, please visit www.addthis.com/privacy. We do not collect or process the affected data. You can prevent the use of your data at any time by using an "Opt Out Cookie". You can also find information on this under a.m. Address.

6. Log-File

When you access a page of our web service, our web servers log in a log file by default the name of the retrieved file, the date and time of the retrieval, the amount of data transferred, any error messages and possibly the operating system and the browser software of your computer and the Website from where you visit us. The log file data is used by us to ensure system security and protection against misuse (e.g., detection and defense against hacker attacks).

B. YOUR PERSONAL DATA (MASTER DATA)

1. What is "personal data"?

Personal data is information about you that allows conclusions to be drawn about your identity, e.g. your name, address or telephone number. Information that does not allow any conclusions to be drawn about certain or definable persons is not included.

2. Your registration at WERDER

In order to be able to use the services we offer online you have to register first.

a) What data do we record and why?

As part of registration we need certain information from you such as you name, address, date of birth, email address and a user name. The boxes for data that is necessary for registration and must be entered are marked as mandatory boxes in the registration menu. You can give additional data (e.g. your mobile phone number) optionally. We will store the data you give us and this will be used exclusively to provide the services requested by you, e.g. selling tickets, making WerderTV subscriptions available or making purchases from our shop.

b) Bank and credit card details

We require your bank or credit card details in addition for certain offers subject to costs. We will only store your bank details if you pay for services by direct debit. If you select the "credit card" method of payment we need your credit card details in addition. However, we will not record these credit card details. Instead, they will be recorded directly and exclusively by a service provider specialising in the online area commissioned by us. You can shop securely in this way.

c) Can I make purchases in the Fanshop without registering?

It is also possible to make purchases in our Fanshop without registering. The data we record to process the purchase is not stored in the central database (see Figure 3) but is merely recorded and stored in the shop system.

3. Storing your data in a central database

a) Central storage

When you register with us the data recorded is stored in a central database operated by SV Werder Bremen GmbH & Co KG aA. The database is used by all the companies in the WERDER-BREMEN association to provide the relevant service. Currently the Werder-Bremen-association consists of:
Sport - Verein "WERDER" von 1899 e.V.
SV WERDER BREMEN GmbH & Co KG aA
WERDER BREMEN Fan - Service GmbH
WERDER BREMEN Payment GmbH

b) Why is data stored centrally?

We have converted our online systems to a new customer system that is used by all companies in the WERDER-BREMEN association. These companies can access the system via a central database. This system allows us to work more cost- effectively and efficiently making it possible to protect the data better against third parties and avoiding duplicate data records. Our system is more user-friendly for you. So you as the user can gain access to the whole range of WERDER services with one single registration. You set up your profile with a user name and password once and can use it when you want, including in other service areas.

4. Newsletter

We will only send you a newsletter if you have selected this service. If you do not want to receive the newsletter any more in future you can unsubscribe at any time. We will point this out again in every newsletter.

5. Advertising

If you have expressly consented to the use of your data (especially your email address) by the companies of the WERDER-BREMEN association for advertising and marketing purposes, your data can also be forwarded within the WERDER-BREMEN association (on this see above Figure 3 a) and used to provide information about member and advertising campaigns as well as offers from WERDER sponsors. This data will not be forwarded to third parties outside the WERDER-BREMEN association. You can withdraw your consent at any time We will point this out to you separately in every advertising mail.

6. Notes on issuing and topping up the Werder payment card (WERDER CARD)

• No personal data will be recorded when issuing the WERDER CARD. They are issued anonymously.
• No personal data will be recorded either when you top up the card with a cash payment. Merely the information that the amount paid has been topped up as a credit on the card with the given number will be stored on the card's chip.
• If you top up your WERDER CARD at one of our topping up stations by EC debit card or by credit card, the data read from your card will be sent directly to the relevant payment service provider. We will not store any data. If the top up amount is accepted this will be stored in the WERDER CARD chip.
• If you top up the WERDER CARD online under werder.de, the data requested from you will not be stored by us but will be sent directly to the relevant payment service provider.
• If you want to use the service "Auto Top-Up" (automatic top up) on www.werder.de, you have to have an account at werder.de or register there. To do this you have to complete the data boxes requested in the registration menu (see above). We will store your registration data here together with your card number.
• If we store personal data this will never be stored together with sales data. Therefore sales made when purchasing with a WERDER CARD cannot be allocated to a certain person.

7. Security of your data

We take all appropriate technical and organisational measures to guarantee the security of your data. In addition, all web forms you use to transmit sensitive data to us are encrypted, thus providing the best possible protection against unauthorised reading.

8. Forwarding and other advertising offers

In order to enlarge our service range you will find links to other websites on our website. Other providers are responsible for these links. Please see their privacy statements about to what extent our advertising partners record personal data. You will recognise you have been forwarded by a new browser window opening and a new address being shown in the browser window.

9. Social plug-ins from social networks

As part of our Internet presence we may use share buttons of the social networks Facebook, Twitter and Google+ (“networks"). The share buttons are identified by the corresponding share logo and the suffix "SHARE". When you click this, the three logos of the networks appear.

In order to protect your data as best as possible, the share buttons are integrated into our page so that they are activated by clicking on the button with the respective logo of a network. Only when activated by clicking on the logo button is a connection established with the servers of the relevant social network. This means that no data is transmitted by calling and visiting the site.

By activating a button, your browser establishes a direct connection to the server of the respective operator of the network. The content of the share button is transmitted directly to your browser by this operator and is integrated into the website. This gives the network operator the information that you have called the corresponding page of our web presence. If you are logged into the network at this time, the visit to our website can be assigned to your account. If you do not agree to this this, you should log out of the network before clicking on the logo share button.

For details on the purpose and scope of data collection as well as the further processing and use of the data by the networks, but also regarding your rights and settings for the protection of your privacy, please refer to the data protection policy of the operator of the relevant network:

• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA http://www.facebook.com/about/privacy/
• Twitter, Inc., 795 Folsom St., Suite 600 San Francisco, CA 94107, USA - https://twitter.com/privacy?lang=en
• Google Inc., 1600 Amphitheatre Parkway Mountain View, California, 94043, USA -http://www.google.com/intl/en/privacy/privacy-policy.html

10. Involving external service providers

Our main activity is and remains football. Therefore we leave the technical processing and maintenance of our internet service to experts who know more about it. Our external service providers are obliged to comply with data protection provisions.

11. Your data protection rights

In accordance with Section 34 and Section 35 of the German Data Protection Act (abbreviated as the BDSG in German) you as a user (the Act talks about "those affected") have the right to demand information at any time about which data we store about you and what the purposes of this storage are. Furthermore, you can correct incorrect data or have data deleted for which storage is no longer permitted or is no longer necessary. To safeguard your rights please contact our Data Protection Officer (see Figure 12.).

12. Responsible offices within the meaning of § 3 para 7 BDSG

Services
Responsible office
WERDER.DE,
TICKETING,
WERDER.TV,
NEWSLETTER(PROFI, TICKETING),
VIP-PORTAL,
PRESSESERVICE

SV Werder Bremen GmbH & Co KG aA
Franz-Böhmert-Straße 1c
28205 Bremen

FANSHOP and
NEWSLETTER (Fanshop)

Werder Bremen Fan-Service GmbH
Hoerneckestraße 11/13
28217 Bremen

WERDER CARD
Auto-Top-Up

Werder Bremen Payment GmbH
Franz - Böhmert - Str. 1 c
28205 Bremen

13. Data protection supervisor

Controller within the meaning of Section 3 Subs. 7 German Federal Data Protection Act is

SV Werder Bremen GmbH & Co KG aA,

Franz-Böhmert-Straße 1c

28205 Bremen

Responsible for all questions in conjunction with data protection is our data protection representative, Mr. Bertold Frick. Please send an email to datenschutzbeauftragter@werder.de.

V 3.3. Bremen, February 2017