DATA PROTECTION DECLARATION FOR THE WEBSITE OF THE TICKET SHOP OF THE GERMAN HANDBALL FEDERATION E.V. (DHB)

This data protection information informs you about the processing of your personal data when visiting and using the ticket shop of the Deutscher Handballbund e.V. (hereinafter DHB, ‘we’ or ‘us’) (DHB Ticket Shop) and with regard to our marketing measures on our own websites as well as on third-party websites and in social networks in accordance with the General Data Protection Regulation (hereinafter ‘GDPR’).

1 Scope of application, controller and definitions

• 1.1 Scope of application of this data protection information

  1. this data protection information applies to the visit and use of the DHB websites on which a customer account can be created and tickets can be purchased in our online ticket shops, including online ticket shops that can be accessed via websites of cooperation partners (so-called ‘partner shops’), as well as our marketing measures carried out in this context on our websites, third-party websites and in social networks. You can access, save and print out this data protection information at any time and free of charge on our websites.
  2. this data protection information only concerns the processing of personal data within the meaning of section 1.1.1. other websites are not covered by this data protection information and provide their own specific data protection information.

• 1.2 Controller responsible for the processing of your personal data

  
  

  Unless otherwise stated in this privacy policy, the controller responsible for the processing of your personal data is
  Deutscher Handballbund e.V. (DHB) Strobelalle 56, 44139 Dortmund, Germany , represented by the BGB Executive Board,
  E-mail: info@dhb.de Telephone: +49 231 91191-0
  You can reach the DHB's data protection officer at: datenschutz@dhb.de
  Responsible supervisory authority: The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia. Kavalleriestraße 2-4, 40213 Düsseldorf, telephone 0211 / 384240, poststelle@ldi.nrw.de

• 1.3 Definitions

  This data protection information is based on the following data protection terms, which we have defined to make them easier to understand:

  1. GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).
  2. Recipient is any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing. Depending on the payment method selected when purchasing tickets, recipients of your personal data may include banks or the postal service / shipping service provider through which we send you your ticket by post.
  3. Personal data is any information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can be, for example, name, contact details, user behaviour or bank details.
  4. The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. DHB is the controller for the data processing described in this Privacy Policy.
  5. Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing may include, for example, the collection and use of your order data for ticket sales.

2. data processing when accessing the website

• If you visit our website to find out about our products and services without registering in your customer account, purchasing a ticket in our ticket shop or otherwise actively providing us with information (purely informational use), we process your personal data that is technically necessary for us to provide you with our websites and to ensure stability and security when you visit our websites. For this purpose, we process the following personal data on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest)
  • IP address
  • Browser fingerprints
  • Browser user agents
  • Cookies (see cookie information websites)
• Data processing for analysis purposes
  1. when you visit our websites, we may analyse and document how you use our websites, e.g. number of website visitors, your surfing behaviour on our websites, which events and areas on our website you are interested in, origin of website visitors. We process the following personal data for this purpose:
     - IP address (truncated)
     - Cookies (see cookie information websites)
  2. we process your personal data on the basis of your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) GDPR. If you wish to object to data processing, please click on the following link Cookie settings
  3. we use Google Analytics, a web analytics service provided by Google LLC (‘Google’), to analyse our websites. Google Analytics uses cookies that enable us to analyse the use of our websites. The information generated by the cookie about the use of our websites is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on our websites, the IP address of the website visitor will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of DHB to analyse the use of the websites, to compile reports on website activity and to provide DHB with other services relating to website activity and internet usage. br> The IP address transmitted by the user's browser as part of Google Analytics will not be merged with other Google data. Our websites use Google Analytics with the extension ‘_anonymizelp()’. This means that IP addresses are further processed in abbreviated form; direct personal identification can therefore be ruled out. You can find more information on terms of use and data protection at - https://policies.google.com/privacy?hl=en&gl=de Explanation of the use of third-party data by Google: https://policies.google.com/technologies/partner-sites In connection with the use of Google Analytics, your personal data is transferred to the USA. In the case of the USA, the EU Commission has not decided that there is an adequate level of data protection within the meaning of the GDPR; there is no such adequacy decision (Art. 45 GDPR). However, we transfer your data for the purpose of processing the contract with you on the basis of Art. 49 para. 1 sentence 1 lit. b) and c) GDPR.
• Use of cookies
  1. cookies are stored on your computer when you use our website. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive. Cookies are used to send certain information to the organisation that sets the cookie. These also contain personal data. This enables us to make our websites more user-friendly and effective. Cookies cannot execute programmes or transmit viruses to your computer.
  2. the use of cookies on the websites of our ticket shop is governed by the DHB's Cookie Information Websites (see Cookie Information Websites).
  3. if you give your consent that we may store certain or all cookies on your computer, a corresponding consent ID will be generated and stored. The processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR.

3. Registration and creation of a customer account

1. when you visit our website, you can create a customer account. You can use this to buy tickets, find out about events and leisure activities and be informed about events by your favourite artists via our ticket alert. You can take part in exclusive pre-sales, subscribe to newsletters and enjoy many other benefits relating to your ticket purchase. Registration and use of the customer account requires the provision of personal data. Mandatory fields are marked accordingly in the input mask.
2. the following personal data is requested as part of the registration and creation of a customer account:
   - Salutation (optional)
   - First name and surname
   - e-mail address
   - Company (optional)
   - Street and house no.
   - Postcode and place of residence
   - Country
3. we process your personal data to enable you to create and use your customer account and to verify any changes to personal data in the customer account.
   The processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR (fulfilment of a contract or pre-contractual measures).

4. Ticket purchase in the online ticket shop, at our advance sales outlets and via the ticket hotline.

1. If you purchase a ticket on the DHB Ticketshop website, we process the following personal data in addition to the data provided during registration:
   - Title (optional)
   - First and last name (when ordering as a guest)
   - Street and house number
   - Postcode and place of residence
   - Notes (optional)
   - Payment and billing information
   - Billing address (optional)
   The processing is carried out for the purpose of executing and processing the contract with you on the basis of Art. 6 (1) sentence 1 lit. b) GDPR.
2. When issuing personalised tickets, we may also process special categories of personal data, such as your health data, if you provide such information when purchasing a ticket and consent to the processing of this data. This includes, for example, the information that you are a wheelchair user, have an allergy or food intolerance, or are severely disabled. We process this data in order to offer you special price categories, special access to an event and special seats during the event. The processing of your data is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.
3. In certain cases, you may be asked to provide personal data (contact details) and, if applicable, data of other persons (title, first and last name and company (optional)) with whom you are attending an event as part of your order, so that this data can be passed on to health authorities at a later date for the purpose of personalisation and, if necessary, to trace chains of infection in connection with possible pandemics (‘visitor data collection’). Without providing this data, it is generally not possible to attend the respective event. This data is processed for the purpose of executing and processing the contract with you on the basis of Art. 6 (1) sentence 1 lit. b) GDPR. If you provide the data of a third party when purchasing a ticket, please ensure that the third party has been adequately informed by you about the processing of their data and that you are authorised to provide the data.

5. Information e-mails

If you have purchased a ticket from us (section 2.3), we may send you information e-mails to inform you about changes to the event, such as travel routes, parking and organiser's requirements (e.g. bag size). For this purpose, we process your personal data for the purpose of contract processing on the basis of Art. 6 (1) sentence 1 lit. b) GDPR.

6. Customer service

1. If you have any questions about events, your ticket purchase, your customer account or other DHB products and services, or if you wish to exercise your rights under this data protection information or make a complaint, you can contact us (see contact details in section 1.2).
2. Depending on the subject of your enquiry, we will use your personal data that has been stored in our systems as part of other data processing (e.g. data that you provided when purchasing tickets) to answer your questions. If and to the extent necessary to answer your enquiry, we also collect data from external sources (e.g. requests to the shipping service provider as part of a shipment tracking or an investigation request).
3. Your personal data is processed for the purpose of performing the contract with you on the basis of Article 6(1)(b) GDPR. If you exercise your rights in relation to us, we process your personal data for the purpose of fulfilling a legal obligation on the basis of Article 6(1)(c) GDPR. If you wish to find out more about our products and services or make a complaint, we process personal data on the basis of our legitimate interests in conducting marketing activities and responding to your complaint, on the basis of Article 6(1)(f) of the GDPR.
4. If you provide us with health data as part of your enquiry (e.g. information that you have a severe disability), we will only process this personal data to the extent necessary to answer your enquiry and if you have given us your express consent to do so in accordance with Art. 6 (1) (1) (a) GDPR.

7. Ticket cancellation

1. If necessary, your order will be cancelled. In this case, your personal data will be processed on the basis of Art. 6 (1) sentence 1 b) GDPR.
2. If you did not purchase your ticket from us yourself, but received it as a gift from the buyer, for example, and now send it to us because the event has been cancelled or postponed, we will process the data that you provide to us as a different sender, either informally or using the form on our website. We process your personal data for the purpose of returning your ticket and issuing a refund on the basis of Article 6 (1) sentence 1 point (b) GDPR.
3. If you have provided special personal data within the meaning of Section 2.3. about yourself or a third party when purchasing a ticket, we will process this data for the purpose of reversing the ticket transaction on the basis of your consent within the meaning of Art. 6 (1) sentence 1 lit. a) GDPR.

8. dunning, collection and enforcement and defence of legal claims

1. If you have outstanding debts with us, we will notify you by email, text message, post or telephone and, if necessary, send you a reminder. If you fail to make the payment as a result, a debt collection procedure will be initiated.
2. The collection procedure will be carried out by a collection service provider commissioned by us. Insofar as this is necessary for the collection procedure, the collection service provider will carry out address investigations, access public registers and, if necessary, collect further information about you for the collection procedure.
3. We process your personal data for the purpose of executing and processing the contract with you on the basis of Art. 6 (1) sentence 1 lit. b) GDPR and on the basis of our legitimate interests in preventing the misuse of our services and enforcing our legal claims, including debt collection, on the basis of Art. 6 (1) sentence 1 lit. f) GDPR.
4. In the context of a legal dispute with you, we process your personal data to enforce and/or defend our rights. If and to the extent necessary for the conduct of the legal dispute, we also access data from other sources (e.g. public registers). We process your personal data on the basis of a legal obligation pursuant to Article 6(1)(1)(c) GDPR and on the basis of our legitimate interest in pursuing, enforcing and/or defending our legal interests pursuant to Article 6(1)(1)(f) GDPR.

9. Other processing

Conducting internal audits and compliance with regulations

1. When we implement compliance programmes and measures and to detect and correct misconduct, your data may also be processed accordingly.
2. We process your personal data to fulfil our legal obligations, on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR. In addition, we process your personal data on the basis of our legitimate interests in reviewing processes and efficiency in the group of companies, correcting misconduct and preventing fraud, as well as, if necessary, enforcing and/or defending our rights on the basis of Art. 6 (1) sentence 1 lit. f) GDPR.
3. Creating evaluations We may create evaluations based on your data that we process in accordance with Section 2 of this data protection notice. These serve as a basis for business decisions to improve our products and services and adapt them to the needs of our customers. Based on our legitimate interest in improving our offering, we process your personal data on the basis of Article 6(1)(f) GDPR. The analyses created on this basis no longer contain any personal references, so it is no longer possible to draw any conclusions about you.

10. Storage and deletion of your personal data

1. We store your personal data for as long as and to the extent necessary for the purposes (section 2) for which it is processed.
2. As soon as the data is no longer required for the purposes mentioned in section 2, we will store your personal data for the period during which you can assert claims against us or we can assert claims against you (statutory limitation period of usually three years, starting at the end of the year in which the claim arose; e.g. at the end of the year of the ticket transaction).
3. In addition, we store your personal data for as long as and to the extent that we are legally obliged to do so (for invoice documents up to the end of the statutory retention period of 10 years).

11. Categories of recipients of personal data

1. In addition, your personal data will be transmitted to IT service providers who provide the platforms, databases and tools for our products and services (e.g. our website, ticket sales, sending information e-mails), create analyses of user behaviour on our websites, map marketing campaigns and process your personal data on our behalf as part of the ticket purchase. Your personal data is transmitted for the purpose of executing the contract with you on the basis of Art. 6 para. 1 sentence 1 lit. b) DSGVO, due to our legitimate interest in improving and promoting our products, on the basis of Art. 6 (1) sentence 1 f) GDPR and if you have given us your consent to the processing of your personal data within the meaning of Art. 6 (1) sentence 1 a) GDPR.
2. When you purchase a ticket on our websites, we offer you various payment options. Depending on the selected payment method, we transmit your personal data to banks, payment service providers, financial service providers and credit card companies for the processing of the payment and, if necessary, the refund of the purchase price. We transmit your personal data for the processing of the ticket purchase and, if necessary, the reversal of the transaction on the basis of Art. 6 (1) sentence 1 lit. b) GDPR.
3. If you select ‘PayPal’ as your payment option when purchasing tickets, we will transfer your personal data. The transfer of your personal data is based on your chosen payment method and is necessary for the processing of the payment with you. In this process, your personal data is transferred to the USA. In the case of the USA, the EU Commission has not decided that an adequate level of data protection exists within the meaning of the GDPR; such an adequacy decision (Art. 45 GDPR) does not exist. We transfer your data for the purpose of executing the contract with you on the basis of Art. 6 (1) sentence 1 b) in conjunction with Art. 49 (1) sentence 1 b) and c) GDPR.
4. If we send you your ticket by post, we transfer your personal data to shipping service providers. The transfer is carried out for the purpose of fulfilling the contract with you on the basis of Art. 6 (1) sentence 1 lit. b) GDPR.
5. If you do not meet your payment obligations, we will initiate a debt collection procedure (section 2.7.2). For the purpose of collecting the debt, we transfer your personal data to debt collection service providers who carry out the procedure for us. We process your personal data for the purpose of executing and processing the contract with you on the basis of Art. 6 (1) sentence 1 b) GDPR and on the basis of our legitimate interests in enforcing our legal claims, including debt collection, on the basis of Art. 6 (1) sentence 1 f) GDPR.
6. In the context of legal disputes, we will transfer your data to the competent court and, if you have engaged a lawyer, to that lawyer, in order to conduct the legal dispute. We process your personal data on the basis of a legal obligation in accordance with Article 6 (1) sentence 1 point (c) GDPR and on the basis of our legitimate interest in protecting, enforcing and/or defending our legal interests in accordance with Article 6 (1) sentence 1 point (f) GDPR.
7. We are entitled to transfer your personal data to the Local Organising Committee (LOC) if there is a suspicion that you have violated the LOC's terms and conditions, so that the LOC can take legal action or assert other legal claims against you. Your personal data is processed for the purpose of executing and performing the contract on the basis of Art. 6 (1) sentence 1 b) GDPR and on the basis of the legitimate interests of the respective LOC for the purpose of legal prosecution on the basis of Art. 6 (1) sentence 1 f) GDPR.
8. For some events, guest lists are created and sent to the LOC to check your eligibility to attend the event and to take seating arrangements into account. If you take part in our competitions, we will send the personal data of the winner to the respective organiser of the competition for this purpose. We transmit your personal data for the purpose of executing the contract with you and with our contractual partners on the basis of Art. 6 (1) sentence 1 lit. b) GDPR. If and to the extent necessary for the event, we also transmit health data (e.g. information about allergies at food events) if you provided this information when purchasing a ticket and gave us your consent to transmit the data within the meaning of Art. 6 ( 1 sentence 1 lit. a) GDPR. o 9. Information e-mails and newsletters (section 2.4) are sent by service providers commissioned by us and their use by you may be analysed and documented. For this purpose, we transmit your personal data to the service providers. We process your personal data as follows: After you have purchased an admission ticket (Section 2.3), we transmit your personal data in order to provide you with information about the event for the purpose of executing the contract with you on the basis of Art. 6 (1) sentence 1 lit. b) GDPR.
9. Any transfer of personal data by us to the respective organiser (visitor data collection) for the purpose of tracing chains of infection in connection with Covid-19 is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b) DSGVO. In most federal states, any transmission by the respective organiser to a (health) authority for the purpose of tracing chains of infection in connection with Covid-19 is carried out on the basis of Art. 6 (1) sentence 1 lit. c) GDPR, and in some federal states, if applicable, also on the basis of Art. 6 (1) sentence 1 lit. a) GDPR. Please refer to the data protection information of the respective responsible organiser for further details.
10. Beyond that, we only transfer your personal data if we are legally obliged to do so. The transfer is based on Art. 6 (1) sentence 1 lit. c) GDPR (e.g. to the police authorities in the context of criminal investigations or to the data protection supervisory authorities).

12. Your rights

As a data subject whose personal data is processed, you have the right

1. to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or objection, the existence of a right of appeal, the origin of your data if not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about the details of such data;
2. in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us;
3. in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
4. to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to allow its deletion and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
5. to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller pursuant to Article 20 GDPR and
6. to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business for this purpose.
7. Please direct your enquiry:
   • by email to: datenschutz@dhb.de,
   • by phone: +49 231 91191-0 or
   • in writing to: Deutscher Handballbund e.V. (DHB), Datenschutz, Strobelallee 56, 44139 Dortmund, Germany
8. Without prejudice to your rights under Section 7, you may file a complaint with a data protection supervisory authority if you believe that the processing of your personal data by the DHB violates the GDPR (Art. 77 GDPR).

13. Right of withdrawal for processing based on consent

• If your personal data is processed on the basis of consent in accordance with Art. 6 (1) 1 lit. a GDPR, you have the right to withdraw your consent at any time without stating any reasons. As a result, we will no longer be allowed to continue the data processing based on this consent in the future. However, the withdrawal of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
• If you wish to exercise your right of withdrawal, simply send an e-mail to datenschutz@dhb.de.

14. Right to object

• If your personal data are processed on the basis of legitimate interests in accordance with Article 6 (1) sentence 1 point (f) GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR on grounds relating to your particular situation. If you object to direct marketing, you have a general right to object; no justification is required in these cases.
• If you wish to exercise your right of objection, simply send an e-mail to datenschutz@dhb.de.
• If you assert your rights against us, we will process the personal data collected in this context in order to respond to your request. The processing of your personal data is carried out to fulfil a legal obligation on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR.

15. Miscellaneous

1. The provisions of this data protection information (available free of charge on our websites), including the cookie information of the German Handball Federation (available free of charge on our websites), apply in the version valid at the time of use of our websites.
2. We reserve the right to supplement and amend the content of the data protection information. The updated data protection information applies from the time it is published on our websites.
3. We will inform you about these changes and additions on our websites in good time. You will be given the opportunity to view, print and save the amended data protection information free of charge.

16. Cookie information website

• Scope of application
  This cookie information provides details of the use of cookies on DHB (hereinafter referred to as ‘DHB’, ‘we’ or ‘us’) websites in accordance with section 2.1.5, paragraph 2 of the data protection information.
• General information about cookies
  ‘Cookies’ are small text files that are stored in the browsers of your end devices when you visit our websites. Cookies allow your actions and settings on our websites to be stored and tracked for the duration of the browser session and possibly beyond. In addition, cookies enable your browser to be recognised again. This means, for example, that the contents of your shopping basket can be restored after you have left the website or events last viewed can be displayed.
• Types of cookies used
  • First-party cookies:
    We use ‘first-party cookies’, i.e. cookies that are set by our website servers and can only be accessed by our servers.
  • Third-party cookies
    In addition, our websites also incorporate cookies from third parties (‘third-party cookies’) that are set by servers of other and/or our websites or domains and read by third parties. These cookies can be used to track your browser beyond our website, for example to display EVENTIM ads on the websites of our partner companies.
• Duration of storage of cookies
  • Session cookies
    Some of the cookies used are session cookies, i.e. cookies that are only stored on your computer for the duration of your visit to our website.
  • Permanent cookies (persistent cookies)
    In addition, we also use permanent cookies (‘persistent cookies’) that remain stored on your browser beyond the duration of a session and are automatically deleted after a specified expiration date.
• Purposes of using cookies
  • Essential cookies
    These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
  • Statistical and convenience cookies
    These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages. If you disable these cookies, some of our services may not function properly.
  • Marketing cookies
    These cookies are set through our site by our advertising partners. They may be used to build a profile of your interests and show you relevant adverts on other sites. They do not store personal information, but are based on uniquely identifying your browser and device. If you disable these cookies, you will experience less relevant advertising.
  • Cookie settings by user
    • In principle, our websites can also be visited and used after restricting/deactivating cookies in the browser settings. However, please note that completely deactivating cookies in particular can restrict the functionality of our websites.
    • You can prevent the collection of your data when visiting our websites in the future by clicking on the following link and changing your settings there: Cookie Settings

Status: October 2024