We manage our websites according to the principles regulated below:
We undertake to comply with the legal provisions on data protection and strive to always take into account the principles of data avoidance and data minimization.
1. Name and address of the responsible person
The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:
Matthias Haufer
SCOUTORY Sports
Schlossstrasse 2
97232 Giebelstadt
Phone: +49 177 200 98 72
Mail: info@scoutory.pro
2. Definition of Terms
We have designed our privacy policy according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the relevant definitions can be found here.
3. Legal grounds for the processing of data
a) Processing of personal data according to the GDPR.
We only process your personal data, such as your surname and first name, your e-mail address and IP address, etc., if there is a legal basis for doing so. Here, the following regulations in particular come into consideration according to the General Data Protection Regulation:
- Art. 6 para. 1 p. 1 lit. a GDPR: The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes.
- Art. 6 (1) p. 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request.
- Art. 6 para. 1 sentence 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Art. 6 para. 1 p. 1 lit. d GDPR: Processing is necessary to protect the vital interests of the data subject or another natural person
- Art. 6 (1) p. 1 lit. e GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- Art. 6 (1) p. 1 lit. f GDPR: Processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child
However, we will always point out again at the respective points in this privacy policy on which legal basis the processing of your personal data is based.
b) Processing of information pursuant to Section 25 (1) TTDSG (German Telecommunications and Telemedia Data Protection Act)
We also process information pursuant to Section 25 (1) TTDSG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This can be both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment in this context is any device connected directly or indirectly to the interface of a public telecommunications network for the purpose of sending, processing or receiving messages, § 2 para.2 no.6 TTDSG.
As a rule, we process this information on the basis of your consent, Section 25 (1) TTDSG.
As far as an exception according to § 25 Abs.2 Nr.1 und Nr.2 TTDSG is given, we do not need your consent. Such an exception is given if we exclusively access or store the information in order to transmit a message via a public telecommunication network or if this is absolutely necessary so that we can provide a telemedia service expressly requested by you. You may revoke your consent at any time.
We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
4. Transfer of personal data
The transfer of personal data is also processing in the sense of the previous point 3. However, at this point we would like to inform you again separately about the subject of passing on to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
We therefore only pass on data to third parties if there is a legal basis for the processing. For example, we share personal data with individuals or companies that act as processors for us in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf - i.e., in particular in a relationship of instruction and control with us
In accordance with the requirements of the GDPR, we conclude a contract with each of our order processors to oblige them to comply with data protection regulations and thus provide your data with comprehensive protection.
5. Storage period and deletion
Your personal data will be deleted by us insofar as it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
6. SSL or TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
7. Cookies
We use cookies on our website. Cookies are small data packets that your browser automatically creates and that are stored on your terminal device when you visit our website. These cookies are used to store information in connection with the respective end device used.
When cookies are used, a distinction is made between technically necessary cookies and "other" cookies. Technically necessary cookies are those that are absolutely necessary in order to provide an information society service that you have expressly requested.
a) Technically necessary cookies
In order to make the use of our offer more pleasant for you, we use technically necessary cookies, these may be so-called session cookies (e.g. language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security, or similar. The legal basis for the cookies results from Art. 6 para. 1 p. 1 lit. f) GDPR, our legitimate interest in the error-free operation of the website and the interest in providing you with our services optimized.
b) Further cookies
Other cookies include cookies for statistical purposes, analysis and marketing and retargeting purposes.
We use these cookies for you based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR.
You can revoke your consent for the use of cookies at any time.
We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
To do this, you can either edit your cookie settings on our website any time by clicking on the respective link in the footer, deactivate the use of cookies in your browser settings (whereby this may also restrict the functionality of the online offer) or set an opt-out for the relevant service in individual cases.
We will inform you of the legal basis on which this data is processed for the respective services within the data protection declaration.
8. Cookie banner
To obtain consent for the cookies we use, we use an individual cookie banner. This itself sets a so-called consent cookie to query and process the respective consent status. This consent cookie is technically necessary and is therefore used based on our legitimate interest pursuant to Art. 6 para.1 p.1 lit. f GDPR, § 25 para.1 TTDSG.
9. Collection and storage of personal data as well as their type and purpose of use
a) When visiting the website
When you pull up our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the accessed file
- Website from which the access was made (referrer URL)
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection setup of the website
- Ensuring a comfortable use of our website
- Evaluation of system security and stability
- Error analysis
Data that allow a conclusion to your person, such as the IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, this data is pseudonymized so that it is no longer possible to assign it to you.
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
b) Members area
On our website, you have the opportunity to purchase digital access to our extensive player database and, if necessary, to receive additional support from us in strategic roster planning, player evaluations, player recommendations, etc. The data of the members in the protected area are processed for the purpose of contract fulfillment, in particular for the provision of our services, Art. 6 para. 1 p. 1 lit. b GDPR.
aa) Registration by mail
Within the scope of the acquisition of digital access as well as for the provision of further contractually agreed services - depending on the package selected - only the personal data that is absolutely necessary for the performance of the contract is processed, in accordance with Art. 6 para. 1 p. 1 lit. b GDPR.
bb) Registration via Google account
For registration purposes, we also offer you the option of using the Google Sign-In service. This is done exclusively with your express consent pursuant to Art. 6 para. 1 p. 1 lit. a. GDPR. Google Sign-In is a service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. To log in or register, you will be redirected to the Google page, where you can log in with your user data. This links your Google profile or your Google e-mail address and our service. Through the link, we automatically receive the following data/information from Google Ireland Limited:
First and last name; user ID; email address; profile picture.
The registration by means of the Google account is based on your consent according to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time by withdrawing access rights to our service in your Google account.
For more information on Google Sign-In and privacy settings, please refer to the privacy notices and terms of use of Google Ireland Limited at https://support.google.com/accounts/answer/112802?hl=de&co=GENIE.Platform%3DDesktop
cc) Facebook Sign-In
When registering using your own Facebook account, your public profile as well as your friends list will be transmitted to us, as these are classified as public. In addition, all other data from your profile that you have not explicitly restricted in your account and thus made publicly available (e.g. age, place of residence, relationship status) will also be transmitted to us. You will receive a notice during the registration process using your Facebook account indicating which data we will have access to. In addition, Meta Platforms Ireland Ltd. as the operator of Facebook also receives information about you and your activities on our website. This data can be evaluated for advertising purposes or published on your profile page.
When registering by means of your Facebook account, this data is processed pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR on the basis of your consent. You can revoke your consent at any time.
You can find more information about Meta's settings and data protection processing procedures at https://www.facebook.com/.
dd) Passing on of data when using online payment service providers.
If you decide to pay with one of the online payment service providers offered by us as part of your order process, your contact data will be transmitted to them as part of the order triggered in this way. The legitimacy of the transfer of the data results from Art. 6 para. 1 p. 1 lit. b GDPR, for the implementation of the payment method you have chosen as well as our legitimate interests according to Art. 6 para. 1 p. 1 lit. f GDPR to enable a user-friendly and uncomplicated payment processing.
The personal data transmitted to the online payment service provider are mostly first name, last name, address, telephone number, IP address, e-mail address, or other data required for order processing, as well as data related to the order, such as number of items, item number, invoice amount and taxes in percent, billing information, etc..
This transmission is necessary to process your order with the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.
However, please note: Personal data may also be disclosed by the online payment service provider to service providers, subcontractors or other affiliated companies to the extent necessary to fulfill the contractual obligations arising from your order or to process the personal data on behalf.
Depending on the selected payment method, e.g. invoice, the personal data transmitted to the provider will be transmitted by the provider to credit agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. You can find out which credit agencies are involved here and which data is generally collected, processed, stored and passed on by the respective provider in the respective data protection declarations of the providers:
PayPal
PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
c) Contact form / e-mail contact
We provide a form on our website so that you have the opportunity to contact us at any time. For the use of the contact form, it is necessary to provide a name for a personal form of address and a valid e-mail address to contact us, so that we know from whom the request originates and can also process it.
If you send us inquiries via the contact form, your information from the inquiry form, including the contact data you provide there, as well as your IP address, will be processed pursuant to Art. 6 (1) p. 1 lit. b and f GDPR for the purpose of carrying out pre-contractual measures that take place in response to your inquiry or for the exercise of our legitimate interest, namely to carry out our business activities.
You are also welcome to send us an email instead using the email address provided on our website. In this case, we store and process your e-mail address and the information you provide in the e-mail in accordance with Art. 6 (1) p. 1 lit. b and f GDPR to process your message.
The inquiries as well as the associated data will be deleted no later than 6 months after receipt, unless they are required for a further contractual relationship.
10. Rights of the data subject
You are entitled to the following rights:
a) Information
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about
- the purposes of processing
- the categories of personal data
- the recipients or categories of recipients to whom your data have been or will be disclosed
- the planned storage period or at least the criteria for determining the storage period
- the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right of appeal to a supervisory authority
- the origin of your personal data, if it was not collected by us
- the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details of such.
b) Correction
Pursuant to Art. 16 GDPR, you have a right to prompt correction of incorrect or incomplete personal data stored by us.
c) Deletion
Pursuant to Art. 17 GDPR, you have the right to request that we delete your personal data without delay, unless further processing is necessary for one of the following reasons:
- the personal data are still necessary for the purposes for which they were collected or otherwise processed
- to exercise the right to freedom of expression and information
- for compliance with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing
- for the assertion, exercise or defense of legal claims
d) Restriction of processing
In accordance with Art. 18 GDPR, you may request the restriction of the processing of your personal data for one of the following reasons:
- You dispute the accuracy of your personal data.
- The processing is unlawful and you object to the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
- You object to the processing in accordance with Article 21 (1) GDPR.
e) Information
If you have requested the rectification or erasure of your personal data or a restriction of processing pursuant to Art. 16, Art. 17 or Art. 18 GDPR, we will inform all recipients to whom your personal data have been disclosed, unless this proves impossible or involves a disproportionate effort. You may request that we inform you of these recipients.
f) Transmission
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format.
You also have the right to request that this data be transferred to a third party, provided that the processing was carried out with the help of automated procedures and is based on consent pursuant to Art. 6 (1) sentence 1 lit. a or Art. 9 (2) lit. a or on a contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR.
g) Revocation
In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.
h) Complaint
In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
i) Objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying the particular situation. If you wish to exercise your right of revocation or objection, it is sufficient to send an e-mail to info@scoutory.pro.
j) Automated decision in individual cases including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
i. is necessary for the conclusion or performance of a contract between you and us
ii. is permitted by legislation of the European Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests
iii. is made with your explicit consent.
However, these decisions must not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases mentioned in i) and iii), we take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person from our side, to express your point of view and to contest the decision.
11. Changes to the privacy policy
In case we change the privacy policy, this will be indicated on the website and the registered users will be informed.
Effective: April 1, 2022
