Data Protection Policy of Abseitz Stuttgart e.V.

The EU General Data Protection Regulation (GDPR) requires that members be provided with transparent information about how their data is processed by the association. The processing of personal data is essential for fulfilling the association's statutory tasks and achieving its objectives in accordance with its purpose. Against this background, the executive board of Abseitz Stuttgart e.V., Weißenburgstraße 28 A, D-70180 Stuttgart, issues the following data protection regulations in accordance with Section 7 (3) of the association's statutes:

1. Member data

The association processes any data of its members that is necessary for establishing, maintaining and billing membership in the association. This includes, in particular, the member's name, address, date of birth, contact details (telephone number, email address) and bank details. Additional information may also be collected that is necessary for the organisation of training sessions, competitions and other association activities (e.g. department or team affiliation, league or competition results). Each member is assigned a membership number. Due to the purpose of the association, membership in the association may allow conclusions to be drawn about the existence of special categories of personal data of the members (in this case, in particular, sexual orientation). The association processes such sensitive data exclusively within the scope of its lawful association activities and with appropriate safeguards in accordance with Art. 9 (2) lit. d GDPR. By joining, members expressly declare their willingness to act as part of this association and its public activities and to voluntarily disclose the data concerning them to this extent.
Personal member data is a prerequisite for membership and forms the basis of the association's work. It is stored in the association's own IT system and protected from access by third parties by appropriate technical and organisational measures. Other data or information about members or third parties, in particular those persons who contact the association on their own initiative, will only be processed by the association if it serves to promote the association's purpose and there are no indications that the data subject's interests worthy of protection preclude processing.

2. Membership in umbrella associations

As a member of the Württembergischer Landessportbund (WLSB) and the relevant umbrella sports associations, the club transmits data about its members to these organisations – and, if necessary, to other member clubs – in particular in the context of supra-regional events, competitions or contests. This may include, for example, member data such as the names of participating persons, their club membership, functions (e.g. player, captain, etc.) or contact details. Such transfers only take place to the extent that they are necessary for the implementation of the respective event or for the fulfilment of obligations arising from membership in the associations.

3. Public Relations

In order to fulfil its statutory tasks and objectives, the association informs the press and other media about events, competition results and special events in the life of the association by means of texts and images. Such information is also published on the association's website and in association media (e.g. in the newsletter or on social networks) in order to inform the public about the association's activities.
No separate consent from members is required for the collection, transmission and publication of such personal data of members in the context of public relations work, provided that the member concerned does not object in individual cases and there are no overriding interests of the data subject that are worthy of protection. This includes, in particular, the naming of members (name, affiliation to the association/team) and the depiction of members in photos or videos in the context of reporting on tournaments, competitions, award ceremonies and similar sporting activities of the association. This also applies to the participation of third parties if they participate in a permissible manner in public events of the association or report on such events publicly without authorisation, as the association and its members themselves make data public within the meaning of Art. 9 (1) GDPR.

4. Internal data transfer and member data

Within the association, Abseitz Stuttgart e.V. promotes a sense of community and provides information about special events in the life of the association. The executive board may therefore announce important results and occasions – such as successes in competitions, honours for members or anniversaries – within the association (e.g. at general meetings or in internal communications). For this purpose, personal data of the members concerned (name, event and success achieved) may also be processed and published in internal club publications without prior separate consent, provided that the member concerned does not expressly object to this for the future in justified individual cases and there are no overriding interests worthy of protection.
Membership directories or lists containing membership data shall not be disclosed by the association to third parties. Within the association, only members of the executive committee and officials expressly authorised by the executive committee shall have access to membership data, insofar as this is necessary for the performance of their duties. No ordinary member of the association shall have the right to request personal data of other members (beyond the information specified in § 8 of the Articles of Association). In exceptional cases, the executive committee may, upon written request, disclose selected contact information of one member to another member – but only if the requesting member can demonstrate that the information is necessary for the exercise of statutory rights or legitimate interests within the association and provided that the member concerned has not objected to the disclosure.

5. Members' rights (rights of data subjects)

Every member of the association has the right to obtain information about the data stored about them (Art. 15 GDPR). They also have the right to have inaccurate data corrected (Art. 16 GDPR), to have personal data deleted (Art. 17 GDPR) and to restrict processing (Art. 18 GDPR) within the framework of the respective legal provisions. Furthermore, every member has the right to withdraw their consent to data processing at any time with effect for the future (Art. 7(3) GDPR); in such a case, the association will cease the processing in question, provided that the processing was based exclusively on this consent. Insofar as the association bases processing on a balancing of interests (legitimate interest) – as described in particular in sections 3 and 4 of this data protection regulation – the member may object to the processing of their personal data at any time for reasons arising from their particular situation (Art. 21 GDPR). The executive board will examine such an objection and either cease the processing in question or explain to the member the compelling legitimate grounds that justify the continuation of the processing.
Should a member object to the processing of data that is absolutely necessary for membership or participation in the association's activities, the association cautions that further unrestricted participation by the member in the association's activities may then no longer be possible under certain circumstances and may also lead to expulsion.

Contact point: To assert the above rights, members may contact the association's executive board or data protection officer at any time (by email at: datenschutz@abseitz.de). The contact details are published in the association information and on the website. Upon request, members will also be provided with a written or electronic copy of this data protection policy and the association's legal data protection information.

Lodging a complaint: At any time, members and any person involved in the association's activity has the right to lodge a complaint with the appropriate supervisory authority for data protection (the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg). This can be done by emailing poststelle@lfdi.bwl.de or by post to: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart.