This website is operated by Hertha BSC GmbH & Co. KGaA, Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin, which is responsible within the meaning of the General Data Protection Regulation and other data protection regulations.
The protection of your personal data is very important to us.
Collection and use of non-personal data
When you access our website, your browser automatically transmits information. These are e.g. Browser type / browser version, operating system used, referrer URL, pages accessed, length of stay, times of the server requests. These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.
Collection and use of personal data
We only collect and process personal data (e.g. name, address, e-mail) if you have provided it to us during registration, when ordering products and services or when making inquiries, and only insofar as this is for the Justification and content or change of the legal relationship is required. Your personal data will not be made available to third parties by us or by persons appointed by us without your consent or a corresponding official order.
If consent has been given, the legal basis for processing the data is Art. 6(1)(a) GDPR. If the registration serves to fulfill a contract with us to which you are a party, the additional legal basis for processing the data is Art. 6(1)(b) GDPR.
The processing of your personal data is necessary to fulfill a contract with us. Contracts can be concluded on our website in the form of purchase contracts for items from our merchandising shop and as mixed-type contracts for the purchase of tickets for our home games (viewing contract). In addition, membership in Hertha BSC e. V. mediated through us. In order to fulfill and process the contracts, your personal (surname, first name, date of birth, professional status, membership of Hertha BSC e.V., reference association) as well as your address data (address, place of residence, zip code, country) and payment data (IBAN, PayPal required.
After the contract has been fully processed, your data will be deleted, considering the statutory retention requirements, unless you have expressly consented to further use. When you set up a customer account using the "Registration" function, the data you enter will be permanently stored in our database.
As a user, you have the option to terminate the registration at any time. You can also have the data stored about you changed at any time. Inquiries, changes and deletions of registrations and data can be made for the relevant areas at email@example.com (merchandising), firstname.lastname@example.org (ticket shop) and email@example.com (membership in Hertha BSC e.V.) be made or requested. If the data is required to fulfill a contract, the personal data required to process the order can only be deleted prematurely if there are no contractual or legal obligations to prevent the deletion.
If you have also given your consent to receiving promotional information when you set up your profile / account, we or service companies commissioned by us will use the data you provided for advertising purposes. The legal basis is Art. 6(1)(a) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This consent is voluntary and you can revoke it at any time with effect for the future.
Some of our services require that we use so-called cookies. Cookies are small amounts of data that your internet browser saves on your computer. Information about your visit to our website can be stored in cookies. Thanks to this data, it is possible, for example, that you can see information that is specifically tailored to your interests on the page. In this way, the following data can be transmitted: server name, service life of the cookie, browser types and versions.
The legal basis for the processing of personal data using cookies is Art. 6 (1)(f) GDPR. Cookies are used to improve the quality of our website and its content and to adapt it to the interests of the user. The cookies tell us how the website is used and so we can continuously optimize our offer. We have a legitimate interest in processing personal data in accordance with Art. 6 (1)(f) GDPR.
In the case of a permanent cookie that is used by our “stay logged in” button, your login information persists for 30 days on the device with which you last successfully logged in. We therefore recommend that you only use devices that are not publicly accessible. You can reconfigure your browser so that it rejects cookies or asks you to confirm beforehand. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you let your browser notify you when you receive a new cookie or how you can delete all cookies that have already been received and for can block all others. If you reject cookies, however, this can mean that some of our services are not available and therefore some functions cannot be used.
For the e-mail newsletter we offer, we need an e-mail address from you as well as information (surname, first name, gender, birthday) that allow us to verify that you are the owner of the e-mail address and agree to receive the newsletter. We use the so-called double opt-in procedure for sending the newsletter. We will then only send you a newsletter if you click on a link in our notification e-mail to confirm that we should activate the newsletter service. We use the resulting data exclusively for sending the requested information and offers.
We use the Mailjet newsletter software for the provision, processing and dispatch of the newsletter. In order to use the newsletter service, it is therefore necessary to transmit your data to Mailjet GmbH. Mailjet is prohibited from disclosing your data to third parties without authorization or using it for purposes other than sending newsletters. Mailjet is a French, certified provider selected according to legal requirements. More information can be found here.
The legal basis for the processing of the data after the user has registered for the newsletter is Art. 6 (1)(a) GDPR. The collection of the user's email address is necessary in order to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your e-mail address will therefore be stored for as long as you receive our newsletter. The other personal data collected as part of the registration process is usually deleted or blocked as soon as the purpose of storage no longer applies.
You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter, at firstname.lastname@example.org or via our contact details given in the imprint .
Product recommendations by email
As a customer of our online offer (merchandising and ticket shop) you will regularly receive product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. We use the email address you provided during the purchase to advertise our own goods and / or services that are similar to those that you have purchased from us based on an order that you have already placed.
The legal basis for processing the data is Art. 6(1)(f) GDPR. We use your data for marketing purposes (flyers, catalogs and all advertising sent by post) if we are convinced that we have attractive offers ready for you. This is a legitimate interest.
You can use your address data for product recommendations at any time using the link provided at the end of the product recommendation, by writing to Hertha BSC GmbH & Co. KGaA Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin or by email to email@example.com or object to firstname.lastname@example.org. After receiving your objection, we will immediately stop sending you marketing information and block the data immediately, delete it with a period of six months and not forward it for marketing purposes either.
Data transfer when placing an order
We store all data that you have made available to us during your order / registration and, if this is necessary for the execution of the contract, pass it on to contractual partners as part of the order and registration, e.g. to the forwarding agent or the parcel delivery company who usually delivers our shipments to you. Our contractual partners may only use the data transmitted in this way to fulfill the order and may not pass them on to third parties.
The transmission of the data to our contractual partners is necessary for the execution of the contract. The legal basis for processing the data is therefore Art. 6(1)(b) GDPR.
After the contract has been fully processed, your data will be deleted, considering the statutory retention requirements, unless you have expressly consented to further use. When you set up a customer account using the "Registration" function, the data you enter will be permanently stored in our database.
As a user, you have the option to terminate the registration at any time. You can also have the data stored about you changed at any time. You can change or terminate your registration with reference to yourself by sending an email to email@example.com or firstname.lastname@example.org with the relevant request. However, premature deletion of your personal data required for processing the order is only possible if there are no contractual or legal obligations to prevent the deletion
Web analysis and retargeting technologies
We use Hotjar to better understand the needs of our users and to continuously optimize the customer experience on this website. With the help of Hotjar's technology, we get a better understanding of the experiences of our users (e.g. how much time users spend on which pages, which links they click, what they like and what not, etc.) and that helps us to offer our user feedback align. Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their end devices (in particular the IP address of the device (is only recorded and stored in anonymised form), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), preferred language to display our website). Hotjar saves this information in a pseudonymised user profile. The information is neither used by Hotjar nor by us to identify individual users, nor is it combined with other data about individual users. The legal basis is Art. 6(1)(p.1)(f) GDPR.
You can find more information here: https://www.hotjar.com/legal/policies/privacy
You can object to the storage of a user profile and information about your visit to our website by Hotjar as well as the setting of Hotjar tracking cookies on other websites via this link: https://www.hotjar.com/legal/compliance/opt-out
Using the web analysis programs Google Analytics¹ and Google Remarketing², data (such as plug-ins, browser, length of stay, language used, etc.) are collected for marketing and optimization purposes and processed and stored to tailor our services to requirements. This data can be used to create usage profiles and target group segments under a pseudonym, which can be used for targeted marketing or information campaigns. The data collected with the web analysis will not be used to personally identify the visitor to the website without the separate consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.
¹ Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that Google Analytics has been expanded to include the code “anonymizeIp” on our website in order to ensure an anonymous collection of IP addresses (so-called IP masking).
² On behalf of Hertha BSC GmbH & Co. KGaA, Google will use the information obtained through the use of Google Analytics to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage to provide. We also use Google Analytics to evaluate data from AdWords and the double-click cookie for statistical purposes.
With the help of Google Remarketing, information about surfing behavior is collected and stored anonymously for marketing purposes (targeting / retargeting). These data are stored on your computer using cookies. Using an algorithm, targeted product recommendations can then be displayed as personalized advertising banners on other websites (so-called publishers). This data is not used to personally identify the visitor to the website. The collected data is used to improve the offer.
By using Google Analytics and Google Remarketing, we can design our website according to your specific interests and send you offers that are specifically tailored to your interests. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Cookies and Google Remarketing
Google Remarketing uses the DoubleClick cookie on websites of the Google advertising network and with certain Google services to support AdWords customers and publishers in placing and managing ads. If you visit a website and display or click on an advertisement placed via websites of the Google advertising network, a DoubleClick cookie may be stored in your browser. The DoubleClick cookie identifier assigned to your browser is the same one that is used when you visit websites on which DoubleClick advertising programs are used. If your browser already has a DoubleClick cookie, no further DoubleClick cookie should be stored. For more information about the use of DoubleClick cookies in connection with the DoubleClick advertising program, please visit https://support.google.com/adsense/answer/2839090?hl=de
We use the online advertising program "Google AdWords" and within Google AdWords the conversion tracking. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our site and the cookie has not expired, Google and we may recognize that you have clicked on the ad and been directed to that page. Each Google AdWords customer receives a different cookie. This means that there is no way that cookies can be tracked through the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking, which tells them the total number of users who have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.
The legal basis for the use of Google AdWords is Art. 6(1)(f) GDPR. The use of the program contributes to being able to provide you with offers tailored to your interests and to finance the website. We have a legitimate interest in this in the sense of Art. 6(1)(f) GDPR.
The cookies used in the context of Google Adwords lose their validity after 30 days.
Use of AWIN
This website uses the Performance Advertising Network of AWIN AG, Eichhornstraße 3, 10785 Berlin. As part of its tracking services, AWIN stores cookies on end devices of users who visit or use websites or other online offers of its customers (e.g. register for a newsletter or place an order in an online store) in order to document transactions (e.g. leads and sales). The sole purpose of these cookies is to correctly assign the success of an advertising medium and the corresponding billing within its network. Personal data is not collected, processed or used by AWIN in this context. A cookie only contains information on when an advertising medium was clicked on by an end device. AWIN tracking cookies contain an individual numerical sequence which cannot be assigned to the individual user and which is used to document an advertiser's partner program, the publisher, the time of the user's action (click or view). AWIN also collects information about the terminal device from which a transaction is carried out, e.g. the operating system and the calling browser.
The storage of "AWIN cookies" is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in this, as the amount of his affiliate remuneration can only be determined by means of the cookies.
Further information on data processing and deactivation of AWIN can be found here.
Facebook Remarketing / Retargeting
Remarketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. When you visit our pages, the remarketing tags establish a direct connection between your browser and the Facebook server. This tells Facebook that you have used your IP address to visit our site. This allows Facebook to associate your visit to our pages with your user account. We can use the information obtained in this way to display Facebook Ads that are tailored to your personal interests and that concern our association. As the provider of the pages, we do not obtain knowledge of the content of the transmitted data or its use by Facebook. You can find further information on this in the Facebook privacy statement at https://www.facebook.com/about/privacy/.
The forwarding of the aforementioned personal information to Facebook enables us to tailor advertising measures specifically to your personal interests and to place them accordingly. This is also our legitimate interest in the processing of the data in accordance with Art. 6(1)(f) GDPR.
If you do not wish to collect data via Custom Audience, you can deactivate Custom Audiences here.
Conversion measurement with the visitor action pixel of Facebook
With your consent, we use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") within our Internet presence. This allows us to track users' actions after they have seen or clicked on a Facebook advertisement. This allows us to measure the effectiveness of Facebook Ads for statistical and market research purposes. The data collected in this way is anonymous to us, which means we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which we will inform you about according to our state of knowledge. Facebook can link this data to your Facebook account and use it for its own advertising purposes, in accordance with Facebook's data usage guidelines https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie may also be stored on your computer for these purposes.
By using the "visitor action pixel", we are able to optimize the effectiveness of advertising measures. This is also our legitimate interest within the meaning of Art. 6(1)(f) GDPR.
This consent may only be given by users who are older than 16 years of age. If you are younger, the consent of a parent or guardian or the consent of a child with their consent is required.
Please click here if you wish to revoke your consent.
Communication via Facebook Messenger
This offer uses as an additional communication medium the Facebook Messenger of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The data and contents of the communication are processed via servers in the USA. Facebook also evaluates the meta data of the communication for advertising purposes, but not the content of the messages.
Social media plugins
Our website uses so-called social plugins ("plugins") from the social networks Facebook and Google+, the microblogging services Twitter and Instagram. These services are offered by the companies Facebook Inc., Google Inc., Twitter Inc. and Instagram LLC ("providers").
Facebook is operated by Facebook Inc. 1601S. California Ave, Palo Alto, CA 94304, USA
(Facebook). An overview of the Facebook plugins and their appearance can be found here:
Google+ is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). An overview of Google's plugins and their appearance can be found here:
Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/en_us/company/brand-resources.html
Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). An overview of Instagram buttons and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
If you call up a page of our website that contains such a plugin, your browser will establish a direct connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. Through the integration of the plugins, the providers receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider in the USA and stored there. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile on Facebook, Google+, Twitter or Instagram. If you interact with the plugins, for example by clicking the "Like", "+1", "Twitter" or "Instagram" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network, on your Twitter or Instagram account and displayed to your contacts. For the purpose and scope of data collection and the further processing and use of the data by the providers as well as your rights and settings options for the protection of your privacy, please refer to the providers' data protection notices.
The forwarding of users' personal data to the aforementioned providers of social networks serves to integrate our association into the social networks and to facilitate communication between the association and users. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
If you do not want Google, Facebook, Twitter or Instagram to directly assign the data collected via our website to your profile in the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).
In all procedures of data processing (e.g. collection, processing and transmission) we proceed according to the legal regulations. Your data necessary for business transactions will be stored and passed on to service providers commissioned by us to the extent necessary for order processing. Furthermore, address and order data are collected and processed for our own marketing purposes. For third-party marketing purposes, only such data will be passed on as is legally permitted.
Secure data transmission
All personal data that you send us during the surfing process in general and during the ordering process in particular are transmitted in encrypted form and are thus protected against misuse. In particular, we establish a so-called SSL connection for each transaction. SSL (Secure-Socket- Layer) is a procedure in which your data is encoded in such a way that it cannot be read by unauthorized persons during transmission on the Internet.
You can recognize the SSL connection by the fact that the Internet address has changed from http:// to https://. In addition, the secure connection is usually indicated by a closed padlock in the status line of your web browser.
If your personal data is processed by us, you are entitled to the following rights:
Right to revoke given consent
You have the right to withdraw your consent under data protection law at any time by sending us an informal message stating your address and/or customer number to the following e-mail address email@example.com and by post to Hertha BSC GmbH & Co. KGaA, Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin. The revocation of the consent does not affect the legality of the processing that has taken place based on the consent until the revocation.
Right of objection
You can object to the use, processing and transmission of your personal data for marketing purposes, advertising purposes or purposes of market and opinion research at any time by informing us informally at the following e-mail address firstname.lastname@example.org, stating your address and/or customer number, or by sending a letter by post to Hertha BSC GmbH & Co. KGaA, Hanns-Braun-Straße, Friesenhaus 2, 14053 Berlin. We will inform you about this right of objection again each time we address you in advertising.
However, this does not apply to the data required to process your order. After receipt of your objection, we will no longer use, process and transmit the data concerned for any other purpose than for processing your order and will stop sending you advertising material including our catalogs.
Irrespective of the use, processing and transmission of your personal data for marketing purposes, you also have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data for other purposes, which is carried out on the basis of Art. 6(1)(e & f) GDPR. We will no longer process the personal data concerning you when the objection is lodged, unless there are compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
Right of information/right to deletion or correction
According to the legal requirements you have a right to free information about your stored data as well as a right to correction, blocking or deletion of this data. If further information is desired or the correction, blocking or deletion of the customer's data is desired, you can send an e-mail to email@example.com.
If legal regulations do not permit deletion, your data will be blocked instead, so that they are only accessible for the purpose of mandatory legal regulations.
Right to limit processing
You may request the restriction of the processing of the personal data concerning you if you dispute the accuracy of the personal data concerning you for a period of time that allows us to verify the accuracy of the personal data or if the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data or if we no longer need the personal data for the purposes of the processing but you need it to assert, exercise or defend legal claims or if you object to the processing in accordance with Art. 21(1) GDPR and it has not yet been determined whether our justified reasons outweigh your reasons.
If the processing of personal data relating to you has been restricted, such data - apart from being stored - may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
If the restriction on processing has been restricted, you will be informed by us before the restriction is lifted.
Right to information
If you have asserted the right to rectification, deletion or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, deletion or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data transferability
You have the right to receive the personal data concerning you that you have provided us in a structured, common and machine-readable format. You also have the right to have this data communicated to another person in charge, without hindrance from us, to whom the personal data has been made available, provided that the processing is based on consent or on a contract in accordance with Art. 6(1)(b) GDPR and that the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transmitted directly from one person in charge to another person in so far as this is technically feasible. The freedoms and rights of other persons may not be impaired by this.
Right to complain to a supervisory authority
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data violates the GDPR.
Changes to the Data Protection Declaration
Data protection officer
Data protection is important to us. For this reason, we have engaged a data protection officer in our company who monitors and checks all our processes for their conformity with data protection regulations.
You can contact our data protection officer at: firstname.lastname@example.org.