Datenschutz
Privacy notice
This is a draft privacy notice for a small club website. The board of Touch Hamburg e.V. still needs to review it before anyone relies on it. The German text is the version to check.
Draft version:
Who is responsible
Controller: Touch Hamburg e.V. (the association behind the Hamburg Flamingos). Postal address: [ANSCHRIFT] — see the Impressum. Email: touchhamburg1@gmail.com.
What this website does
The site is static. There is no user account, no shop and no analytics. You can read every page without telling us who you are. The only form is the trial-session sign-up.
Hosting
The site is hosted by [HOSTING PROVIDER]. When you open a page, the host processes the usual server log: IP address, date and time, the address of the page, and browser details. The legal basis is legitimate interest in running a secure website (Art. 6 (1) (f) GDPR). How long the host keeps logs depends on that provider. The club should name the real host here once it is chosen, and link their privacy notice.
Cookies and tracking
We do not use analytics, advertising or other tracking cookies, and the site does not set cookies of its own. That is why there is no cookie banner. If you choose to load the map, Google may set cookies afterwards. Fonts are stored with the website, not loaded from Google Fonts.
Trial-session form
If you send the form on the Join page, we receive: first name, last name, email, phone if you add one, the session you want to try (Wednesday 19:00 or Sunday 11:00), how you heard about us, your message, the language of the page, the time you sent it, and the fact that you agreed to this notice.
We use it only to welcome you at training and to answer questions you asked. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw consent at any time by emailing touchhamburg1@gmail.com. Withdrawal does not affect processing that already happened.
Suggested retention, for the board to confirm: delete a trial enquiry within 12 months if you have not become a member, and sooner if you ask. Membership records then follow the club's own membership rules, which are not created by this website.
The form has a hidden field that people are not meant to fill in. Automated spam that fills it is thrown away and not stored. There is no advertising use of this data, and we do not sell it.
Google Sheets and Apps Script
The form is sent to a Google Apps Script web app, which appends a row to a Google Sheet owned by the club. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, processes that data for us. Google's privacy notice is at policies.google.com/privacy (opens in a new tab). Google may also process data outside the EU under its standard contractual clauses.
In this setup the club is the controller and Google is a processor for the sign-up sheet. The board should keep the sheet on a club Google account, not a private one, and should not share the sheet publicly — it contains personal data.
Map
The training page shows the Hamburger Rugby-Verband e.V. pitch. The map is not loaded with the page. Nothing is sent to Google until you press “Show the map” or open the Google Maps link. After that, Google receives your IP address and can set cookies, under Google's own privacy notice.
Email, social media and the calendar
If you email touchhamburg1@gmail.com, we use the message to answer you. Legal basis: steps before a contract, or legitimate interest in replying (Art. 6 (1) (b) or (f) GDPR).
Links to Instagram, Facebook and the shared touch calendar leave this website. Those services receive data only once you follow the link, under their own rules. We do not embed their feeds.
The membership application is a Word file you download. Nothing is uploaded here. You send the completed form by email yourself.
Your rights
You can ask for access, correction, deletion, restriction, and a copy of your data, and you can object to processing based on legitimate interest. Where processing is by consent, you can withdraw it. You can also complain to a supervisory authority.
The authority for Hamburg is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, datenschutz-hamburg.de (opens in a new tab).
Changes
If this notice changes, the version date on this page changes with it. The sign-up sheet stores the version you agreed to.