Privacy

PRIVACY

This website is operated by Hertha BSC GmbH & Co. KGaA, Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin, which is responsible within the meaning of the General Data Protection Regulation and other data protection regulations.

 

The protection of your personal data is very important to us.

 

Collection and use of non-personal data

When you access our website, your browser automatically transfers information. These are e.g. browser type/browser version, operating system used, referrer URL, sites accessed, length of stay, times of the server requests. These data cannot be assigned to specific persons. This data will not be aggregated with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

 

Collection and use of personal data

We collect and process personal data (e.g. name, address, email) only if you have provided it to us upon registration, when ordering products and services or when making inquiries, and only to the extent required to found and structure (in content) or change our legal relationship. Your personal data will not be made available to third parties by us or by persons appointed by us without your consent or a corresponding official order.

If consent has been given, the legal basis for processing the data is Art. 6(1)(a) GDPR. If the registration serves to fulfil a contract with us to which you are a party, the additional legal basis for processing the data is Art. 6(1)(b) GDPR.

The processing of your personal data is necessary to fulfil a contract with us. Contracts can be concluded on our website in the form of purchase contracts for items from our merchandising shop and as mixed-type contracts for the purchase of tickets for our home games (viewing contract). In addition, membership in Hertha BSC e. V. may be mediated through us. In order to fulfil and process the contracts, your personal data (surname, first name, date of birth, professional status, membership of Hertha BSC e.V., reference association) as well as your address data (address, place of residence, postal code, country) and payment data (IBAN, PayPal) are required.

To the extent required e.g. for the grant of any benefits, we compare the personal data submitted by you in concluding a contract (e.g. a purchase of tickets) with the membership lists provided to us by fan clubs and other third parties.

After the contract has been fully processed, your data will be deleted subject to the statutory retention requirements unless you have expressly consented to further use. When you set up a customer account using the "Registration" function, the data you enter will be permanently stored in our database.

As a user, you have the option to terminate the registration at any time. You can also have the data stored about you changed at any time. Inquiries, changes and deletions of registrations and data can be submitted or applied for for the relevant areas at merchandising@herthabsc.de (merchandising), tickets@herthabsc.de (ticket shop) and mitgliederbetreuung@herthabsc.de (membership in Hertha BSC e.V.). If the data is required to fulfil a contract, the personal data required to process the order can be deleted prematurely only if there are no contractual or legal obligations that oppose the deletion.

If you have also given your consent to receiving promotional information when you set up your profile / account, we or service providers commissioned by us will use the data you provided for advertising purposes. The legal basis is Art. 6(1)(a) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This consent is voluntary and you can revoke it at any time with effect for the future.

Use of personal data provided to us by third parties

To the extent that we do not ourselves collect personal data, such data are provided to us in part by third parties (e.g. fan clubs). The respective third parties are responsible for the collection and transfer of such personal data. We use the data provided to us by third parties only for the fulfilment of the purpose for which such data was transferred to us. For example, this may be for the grant of discounts for members of certain fan clubs. The legal basis for processing is based on the purpose for which the personal data were transferred to us. Usually, this will be Art. 6(1)(b) GDPR, since we typically receive the data only in order to perform a contract that was concluded with you.

Having regard to these personal data, you are entitled to the same data subject rights as you would have where the personal data had been collected directly by us. Please contact your fan club directly with any questions concerning the treatment of personal data by that fan club.

Cookies

Some of our services require that we use so-called cookies. Cookies are small amounts of data that your internet browser saves on your computer. Information about your visit to our website can be stored in cookies. Thanks to this data, it is possible, for example, that you will be shown information on the site that is specifically tailored to your interests. In this way, the following data can be transferred: server name, service life of the cookie, browser types and versions.

The legal basis for the processing of personal data using cookies is Art. 6 (1)(f) GDPR. Cookies are used to improve the quality of our website and its contents and to adapt it to the interests of the user. The cookies tell us how the website is used and so we can continuously optimise our offer. We have a legitimate interest in doing this in the context of processing personal data in accordance with Art. 6 (1)(f) GDPR.

In the case of a permanent cookie that is used by our “stay logged in” button, your login information is kept for 30 days on the device with which you last successfully logged in. We therefore recommend that you only use devices that are not publicly accessible. You can reconfigure your browser so that it rejects cookies or asks you to confirm beforehand. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you let your browser notify you when you receive a new cookie or also how you can delete all cookies that have already been received and can block all others. If you reject cookies, however, this can mean that some of our services are not available and therefore some functions cannot be used.

Newsletter service

For the email newsletter we offer, we need an email address from you as well as information (surname, first name, gender, birthday) that allow us to verify that you are the owner of the email address and agree to receive the newsletter. We use the so-called double opt-in procedure for sending the newsletter. We will then send you a newsletter only if you click on a link in our notification email to confirm that we should actually activate the newsletter service. We use the resulting data exclusively for sending the requested information and offers.

We use Mailjet newsletter software for the provision, processing and sending of the newsletter. In order to use the newsletter service, it is therefore necessary to transfer your data to Mailjet GmbH. Mailjet is prohibited from disclosing your data to third parties without authorisation or using it for purposes other than sending newsletters. Mailjet is a French certified provider selected according to legal requirements. More information can be found here.

The legal basis for the processing of the data after the user has registered for the newsletter is Art. 6 (1)(a) GDPR. The collection of the user's email address is necessary in order to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your email address will therefore be stored for as long as you receive our newsletter. The other personal data collected as part of the registration process is usually deleted or blocked as soon as the purpose of storage no longer applies.

You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter, at newsletter@herthabsc.de or via our contact details set out in the imprint .

Product recommendations by email

As a customer of our online offer (merchandising and ticket shop) you will regularly receive product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. We use the email address you provided during the purchase to advertise our own goods and/or services that are similar to those that you have purchased from us based on an order that you have already placed.

The legal basis for processing the data is Art. 6(1)(f) GDPR. We use your data for marketing purposes (flyers, catalogues and all advertising sent by post) if we are convinced that we have attractive offers for you. This is a legitimate interest.

You may object to the use of your address data for product recommendations at any time using the link provided at the end of the product recommendation, by writing to Hertha BSC GmbH & Co. KGaA Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin or by email to info@herthabsc.de or newsletter@herthabsc.de. After receiving your objection, we will immediately stop sending you marketing information and block the data immediately, delete it within a period of six months and will also not forward it on for marketing purposes.

Data transfer when placing an order

We store all data that you have made available to us during your order / registration and, if this is necessary for the performance of the contract, we forward them on to contractual partners as part of the order and registration, e.g. to the forwarding agent or the parcel delivery service that usually delivers our shipments to you. Our contractual partners may use the data transferred in this way only to fulfil the order and may not forward them on to third parties.

The transfer of the data to our contractual partners is necessary for the performance of the contract. The legal basis for processing the data is therefore Art. 6(1)(b) GDPR.

After the contract has been fully performed, your data will be deleted, taking statutory retention requirements into account, unless you have expressly consented to further use. When you set up a customer account using the "Registration" function, the data you enter will be permanently stored in our database.

As a user, you have the option to terminate the registration at any time. You can also have the data stored about you changed at any time. You can change or terminate your registration by sending an email making reference to yourself to merchandising@herthabsc.de or tickets@herthabsc.de with the relevant request. However, the premature deletion of your personal data required for processing the order is only possible if there are no contractual or legal obligations that oppose the deletion.

Web analysis and retargeting technologies

Using the web analysis programs Google Analytics¹ and Google Remarketing², data (such as plug-ins, browsers, length of stay, language used, etc.) are collected for marketing and optimisation purposes and processed and stored to tailor our services as needed. This data may be used to create usage profiles and target group segments under a pseudonym, which can be used for targeted marketing or information campaigns. The data collected with the web analysis will not be used to personally identify the visitor to the website without the separate consent of the data subject and will not be merged with personal data about whom the pseudonym is attributed.

¹ Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called "cookies", namely text files that are stored on your computer and that enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is transferred to a Google server in the USA and shortened there only in exceptional cases. The IP address transferred by your browser by Google Analytics will not be merged with other Google data. Please note that Google Analytics has been expanded on our website to include the code “anonymizeIp” in order to ensure the anonymous collection of IP addresses (so-called IP masking).

Google will use on behalf of Hertha BSC GmbH & Co. KGaA the information obtained through the use of Google Analytics to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. We also use Google Analytics to evaluate data from AdWords and the double-click cookie for statistical purposes.

²Information about surfing behaviour is collected and stored anonymously for marketing purposes (targeting / retargeting) with the help of Google Remarketing. These data are stored on your computer using cookies. Using an algorithm, targeted product recommendations can then be displayed as personalised advertising banners on other websites (so-called publishers). These data will not be used to personally identify the visitor to the website. The collected data is used to improve the offer.

By using Google Analytics and Google Remarketing, we can design our website according to your specific interests and send you offers that are specifically tailored to your interests. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

You can prevent the storage of cookies by setting your browser software accordingly; in this case, however, you will not be able to use all of the functions of the website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link http://tools.google.com/dlpage/gaoptout?hl=de. If you do not want the statistical collection of the data from AdWords and the double-click cookie provided by Google Analytics, you may deactivate this with the advertising preferences manager (http://www.google.com/settings/ads/onweb/?hl=de). You can find more information on terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

Cookies and Google Remarketing

Google Remarketing uses the double-click cookie on websites belonging to the Google advertising network and with certain Google services to support AdWords customers and publishers in placing and managing ads. If you visit a website and display or click on an advertisement placed via websites of the Google advertising network, a double-click cookie may be stored in your browser. The double-click cookie identifier assigned to your browser is the same one that is used when you visit websites on which double-click advertising programs are used. If your browser already has a double-click cookie, no further double-click cookie should be stored. For more information about the use of double-click cookies in connection with the DoubleClick advertising program, please visit https://support.google.com/adsense/answer/2839090?hl=de

The legal basis for the use of cookies in the context of Google Remarketing is Art. 6(1)(f) GDPR. Cookies are used for the purpose of being able to provide you with offers specifically tailored to your interests as part of Google Remarketing. We have a legitimate interest in processing personal data in accordance with Art. 6(1)(f) GDPR.

Google Adwords

We use the online advertising program "Google AdWords" and use Conversion Tracking within Google AdWords. Google Conversion Tracking is an analysis service of Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our site and the cookie has not expired, Google and we may recognise that you have clicked on the ad and been directed to that page. Each Google AdWords customer receives a different cookie. This means that there is no way that cookies can be tracked through the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking, which tells them the total number of users who have clicked on their ad and been redirected to a site with a conversion tracking tag. However, they do not receive information that personally identifies users.

The legal basis for the use of Google AdWords is Art. 6(1)(f) GDPR. The use of the program contributes to being able to provide you with offers tailored to your interests and to finance the website. We have a legitimate interest in this in accordance with Art. 6(1)(f) GDPR.

The cookies used in the context of Google Adwords lose their validity after 30 days.

If you do not wish to participate in the tracking, you can object to this use by preventing the installation of cookies through an appropriate setting in your browser software (deactivation option). You will then not be included in the conversion tracking statistics. You can find further information and the Google privacy policy at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/.

Use of Google reCAPTCHA

In order to protect your orders via an internet form EVENTIM Sports makes use of the reCAPTCHA service belonging to Google Inc. (Google). The request is used to decide whether information was entered by a human or was abusively entered by way of automated machine processing. The request includes the sending to Google of the IP address and other data that may potentially be needed by Google for the reCAPTCHA service. If IP anonymization is activated on this website your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is transferred to a Google server in the USA and shortened there only in exceptional cases. The IP address transferred by your browser by reCAPTCHA will not be merged with other Google data.

Your submission will be transferred to Google and used by it to decide whether the submission was entered by a human or was abusively entered by way of automated machine processing. On behalf of the operator of this website, Google will additionally use this information to evaluate your use of this service. We have a legitimate interest in preventing the abuse of our website by way of the automated processing of data by third parties in accordance with Art. 6(1)(f) GDPR.

Google’s data protection terms govern the use of the data processed by Google reCAPTCHA. You can find further information on the Google privacy policy at https://www.google.com/itl/de/policies/privacy/.

Use of Matomo (formerly “Piwik”)

The websites of the ticket shop make use of the web analysis service Piwik. Piwik makes use of so-called cookies. These are text data that are stored on the computer of the user in order to enable an analysis of the use of the website. For this purpose, the use information generated by the cookie (including the shortened IP address of the user) are transferred to the server operated by CTS EVENTIM Sports GmbH in aggregated and anonymized form an are stored there for use analysis purposes and for website optimisation. These data are connection and movement data that are not related to persons and which are connected to the browsers used, the number of times the website is called up and visits, navigation behaviour and the duration a visitor stays on a website. The information generated by the cookie on the use of the website will be provided to the association, but not to third parties.

The processing of user personal data enables us to compile information on the use of the individual elements of our website. This helps us to continually improve our website and its user friendliness. This founds our legitimate interest in processing the data in accordance with Art. 6(1)(f) GDPR. The anonymization of IP addresses sufficiently protects the interests of users in protecting their personal data.

Data are deleted as soon as these are no longer needed for our recording purposes. You can adjust your browser to prevent the acceptance of cookies. If you do that, however, you may not be able to make use of all of the functions of the ticket shop.

Below you have the opportunity to object at any time via mouse-click to the storage and use of the foregoing information. In that case, a so-called opt-out cookie will be saved in your browser which means that Piwik will collect no information on use. Please note: where cookies are deleted, this means that the opt-out cookie will also be deleted and must be activated again. You can decide here whether a clear web analysis cookie will be stored in your browser in order to enable the operator of the website to collect and analyse various statistical data. If you decide against this, please click on the following link in order to store the Matomo deactivation cookie in your browser. Your visit on this website is presently being recorded by the Matomo web analysis.

Please click here to ensure that your visit is no longer being recorded.

Tracking using online advertisements

Our website normally uses cookies in the context of tracking technologies to ensure frictionless technical provision of services, analysis and the optimisation of our services for advertising purposes.

The description of the tracking processes also contains information on how you can prevent or object to data processing. Please note that the so-called “opt out” (rejection of processing) is usually stored using cookies. If you use our services using an end device or in another browser or if you have deleted the cookies in your browser, you may have to notify us of that objection again.

The tracking procedures set out above process data only in pseudonymous form. No connection is made to a specific, identified natural person, namely any aggregation of the data with information on the bearer of the pseudonym, takes place.

The use of cookies is necessary to ensure tracking for the measurement of the success of advertising campaigns and the provision of advertisement media. Tracking serves to optimise our advertisements and allows marketers and advertisers to likewise optimise their advertisements. Tracking for the purpose of optimising the display of advertising has the purpose of showing users advertisements that are tailored to their interests and in doing so, to increase the success of the advertising and also the proceeds derived from advertising. Specifically, the following cookie data are collected:

SmartAd Adserver for the provision of advertisements (https://club.keepr.de/cookie_policy.html). You can find the option to prevent personalised advertising (opt-out) here: http://www.smartadserver.com/diffx/optout/IABOptout.aspx.

If you decide against interest-based advertising, you may also visit the website http://www.youronlinechoices.com/de/ and click there on “preferences management” and follow the instructions to prevent the use of data for interest-based advertising on the part of the service providers who are listed there (entirely or individually). You will, however, continue to receive advertisements that are not based on your interests.

The use of cookies takes place of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in this since only the use of cookies makes it possible to measure the success of advertising campaigns and to ensure the provision of advertising media.

strong>Use of AWIN

The websites used by Hertha BSC use the Performance Advertising Network of AWIN AG, Eichhornstraße 3, 10785 Berlin. As part of its tracking services, AWIN stores cookies on end devices of users who visit or use websites or other online offers of its customers (e.g. register for a newsletter or place an order in an online store) in order to document transactions (e.g. leads and sales). The sole purpose of these cookies is to correctly assign the success of an advertising medium and the corresponding billing within its network. Personal data is not collected, processed or used by AWIN in this context. A cookie only contains information on when an advertising medium was clicked on by an end device. AWIN tracking cookies contain an individual numerical sequence which cannot be assigned to the individual user and which is used to document an advertiser's partner program, the publisher and the time of the user's action (click or view). AWIN also collects information about the end device from which a transaction is carried out, e.g. the operating system and the calling browser.

The storage of "AWIN cookies" is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in this, as the amount of its affiliate remuneration can only be determined by means of the cookies.

Further information on data processing and deactivation of AWIN can be found here.

Using CrossEngage

We would like to send you a personalised offer based on your current user behaviour to make our offer more interesting for you as a user. The legal basis for this data processing is Art. 6(1)(f) GDPR. In order to be able to design and display this content, a cookie is set when you use our website. We transfer the data collected via the cookie pseudonymously to our service provider CrossEngage GmbH (Bertha-Benz-Straße 5 | 10557 Berlin) for evaluation. We have concluded a data processing contract with CrossEngage for this purpose. If you do not agree to the use of cookies to evaluate your usage behaviour, you can set your browser to refuse cookies at any time.

Facebook Remarketing / Retargeting

Remarketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated into our sites. When you visit our sites, the remarketing tags establish a direct connection between your browser and the Facebook server. This tells Facebook that you have used your IP address to visit our site. This allows Facebook to associate your visit to our sites with your user account. We can use the information obtained in this way to display Facebook Ads that are tailored to your personal interests and that concern our association. As the provider of the sites, we do not obtain knowledge of the content of the transferred data or its use by Facebook. You can find further information on this in the Facebook privacy statement at https://www.facebook.com/about/privacy/.

The forwarding of the foregoing personal information to Facebook enables us to tailor advertising measures specifically to your personal interests and to place them accordingly. This is also our legitimate interest in the processing of the data in accordance with Art. 6(1)(f) GDPR.

If you do not wish to collect data via Custom Audience, you can deactivate Custom Audiences here.

Conversion measurement with the visitor action pixel of Facebook

With your consent, we use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") within our internet presence. This allows us to track users' actions after they have seen or clicked on a Facebook advertisement. This allows us to measure the effectiveness of Facebook Ads for statistical and market research purposes. The data collected in this way is anonymous to us, which means we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we are informing you about according to the knowledge we have. Facebook can link this data to your Facebook account and use it for its own advertising purposes in accordance with Facebook's data usage guidelines https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.

By using the "visitor action pixel", we are able to optimise the effectiveness of advertising measures. This is also our legitimate interest within the meaning of Art. 6(1)(f) GDPR.

This consent may only be given by users who are older than 16 years of age. If you are younger, the consent of a parent or guardian or the consent of a child with their consent is required.

Please click here if you wish to revoke your consent.

Communication via Facebook Messenger

This offer uses as an additional communication medium the Facebook Messenger of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The data and contents of the communication are processed via servers in the USA. Facebook also evaluates the meta data of the communication for advertising purposes, but not the content of the messages.

Further details can be found in the Facebook privacy policy.

Social media plugins

Our website uses so-called social plugins ("plugins") from the social networks Facebook and Google+, the microblogging services Twitter and Instagram. These services are offered by the companies Facebook Inc., Google Inc., Twitter Inc. and Instagram LLC ("providers").

Facebook is operated by Facebook Inc. 1601S. California Ave, Palo Alto, CA 94304, USA (Facebook). An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

Google+ is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). An overview of Google's plugins and their appearance can be found here: https://developers.google.com/+/web/

Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/en_us/company/brand-resources.html

Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). An overview of Instagram buttons and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

If you call up a page of our website that contains such a plugin, your browser will establish a direct connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plugin is transferred directly to your browser by the respective provider and integrated into the page. Through the integration of the plugins, the providers receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not logged in. This information (including your IP address) is transferred by your browser directly to a server of the respective provider in the USA and stored there. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile on Facebook, Google+, Twitter or Instagram. If you interact with the plugins, for example by clicking the "Like", "+1", "Twitter" or "Instagram" button, the corresponding information is also transferred directly to a server of the provider and stored there. The information is also published on the social network, on your Twitter or Instagram account and displayed to your contacts. For the purpose and scope of data collection and the further processing and use of the data by the providers as well as your rights and settings options for the protection of your privacy, please refer to the providers' data protection notices.

Privacy policy of Facebook: http://www.facebook.com/policy.php

Privacy policy of Google: http://www.google.com/intl/de/+/policy/+1button.html

Privacy policy of Twitter: https://twitter.com/privacy

Instagram Privacy Policy https://help.instagram.com/155833707900388/

The forwarding of users' personal data to the foregoing providers of social networks serves to integrate our association into social networks and to facilitate communication between the association and users. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

If you do not want Google, Facebook, Twitter or Instagram to directly assign the data collected via our website to your profile in the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

Privacy policy

We act in accordance with legal regulations in all matters relating to data processing (e.g. collection, processing and transfer). Your data necessary for business transactions will be stored and passed on to service providers commissioned by us to the extent necessary for order processing. Furthermore, address and order data are collected and processed for our own marketing purposes. For third-party marketing purposes, only such data will be forwarded as is legally permitted.

Secure data transfers

All personal data that you send us during the surfing process in general and during the ordering process in particular are transferred in encrypted form and are thus protected against misuse. In particular, we establish a so-called SSL connection for each transaction. SSL (Secure-Socket-Layer) is a procedure in which your data is encoded in such a way that it cannot be read by unauthorised persons during transfers on the internet.

You can recognise the SSL connection by the fact that the internet address has changed from http:// to https://. In addition, the secure connection is usually indicated by a closed padlock in the status line of your web browser.

If your personal data is processed by us, you are entitled to the following rights:

Right to revoke consent provided

You have the right to withdraw your consents under data protection law at any time by sending us an informal message stating your address and/or customer number to the following email address info@herthabsc.de or by post to Hertha BSC GmbH & Co. KGaA, Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin. The revocation of the consent does not affect the legality of the processing that has taken place based on the consent until the revocation.

Right of objection

You can object to the use, processing and transfer of your personal data for marketing purposes, advertising purposes or purposes of market and opinion research at any time by informing us informally at the following email address info@herthabsc.de, stating your address and/or customer number, or by sending a letter by post to Hertha BSC GmbH & Co. KGaA, Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin. We will inform you about this right of objection again each time we address you in advertising.

However, this does not apply to the data required to process your order. After receipt of your objection, we will no longer use, process and transmit the data concerned for any other purpose than for processing your order and will stop sending you advertising material including our catalogues.

Irrespective of the use, processing and transfer of your personal data for marketing purposes, you also have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data for other purposes, which is carried out on the basis of Art. 6(1)(e or f) GDPR. We will no longer process the personal data concerning you when the objection is lodged, unless there are mandatory reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Right of information/right to deletion or rectification

According to the legal requirements you have a right to cost-free information about your stored data as well as (potentially) a right to rectification, blocking or deletion of this data. If further information is desired or the rectification, blocking or deletion of the customer's data is desired, you can send an email to info@herthabsc.de.

If legal regulations do not permit deletion, your data will be blocked instead, so that they are only accessible for the purpose of mandatory legal regulations.

Right to limit processing

You may request the restriction of the processing of the personal data concerning you if you dispute the accuracy of the personal data concerning you for a period of time that allows us to verify the accuracy of the personal data or if the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data or if we no longer need the personal data for the purposes of the processing but you need it to assert, exercise or defend legal claims or if you object to the processing in accordance with Art. 21(1) GDPR and it has not yet been determined whether our justified reasons outweigh your reasons.

If the processing of personal data relating to you has been restricted, such data - apart from being stored - may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.

If the restriction on processing has been restricted, you will be informed by us before the restriction is lifted.

Right to information

If you have asserted the right to rectification, deletion or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, deletion or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data transferability

You have the right to receive the personal data concerning you that you have provided us in a structured, common and machine-readable format. You also have the right to have this data communicated to another controller, without hindrance from us, to whom the personal data has been made available, provided that the processing is based on consent or on a contract in accordance with Art. 6(1)(b) GDPR and that the processing is carried out with the aid of automated processes.

In exercising this right, you also have the right to bring about that the personal data concerning you is transferred directly from one controller to another controller in so far as this is technically feasible. The freedoms and rights of other persons may not be impaired by this.

Right to complain to a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data violates the GDPR.

Changes to the data protection policy

Our data protection policy may change from time to time. This includes further developments due to changes in our business as well as adjustments due to a changed legal situation and/or due to the implementation of new web analysis and/or retargeting technologies. Corresponding updates of the data protection policy will be published by us on this site. In case of significant changes, we will point this out accordingly. If you have any further questions that are not answered by our data protection policy, please send an email to the following address: info@herthabsc.de.

Data protection officer

Data protection is important to us. For this reason, we have engaged a data protection officer in our company who monitors and checks all our processes for their conformity with data protection regulations.

You can contact our data protection officer at: datenschutzbeauftragter@herthabsc.de.

Viewed