Privacy Policy.
Privacy Policy
1. Data Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
David Dorn and Frederik Gallois GbR
Adalbertstr. 20
10997 Berlin
Germany
Phone: +49 152 38 52 89 92
Email: datenschutz@ravalfootball.de
2. Your rights as a data subject
You have the right at any time to:
Information about your stored data (Art. 15 GDPR)
Correction of inaccurate data (Art. 16 GDPR)
Deletion of Your Data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data Portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
If you have given your consent, you may withdraw it at any time.
You also have the right to file a complaint with the relevant data protection supervisory authority.
3. Hosting via Squarespace
Our website is hosted by Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA.
Squarespace processes personal data (e.g., IP addresses, server log files) on our behalf.
Data is transferred to the United States under the EU-US Data Privacy Framework (DPF), for which Squarespace is certified.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in the secure operation of the website)
4. Server Log Files
When you visit the website, the following data is automatically processed:
IP address
Date & Time
Browser, operating system
Referrer URL
This data is used to ensure the security and stability of the website.
Retention period: max. 30 days
Legal basis: Art. 6(1)(f) GDPR
5. Cookies & Consent Management (CookieYes)
We use CookieYes to manage your cookie preferences.
Provider:
CookieYes Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, UK
Consents and settings are saved in the process.
Legal basis:
Art. 6(1)(c) GDPR (legal obligation under §25 TTDSG)
6. Google Analytics 4
We use Google Analytics 4 to analyze how our website is used.
Provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data such as:
Page views
Scrolls
clicks
Origin
Device information from
is processed.
The IP address is stored in a truncated form (IP anonymization).
Data is transferred to the United States under the EU-US Data Privacy Framework, for which Google is certified.
Shelf life: 14 months
Legal basis: Article 6(1)(a) of the GDPR (Consent)
7. Google Signals
If you have enabled personalized ads in your Google Account, Google Signals uses cross-device analytics.
We receive only anonymous statistics.
Legal basis: Article 6(1)(a) of the GDPR
8. Google Ads (Conversion Tracking)
We use Google Ads to measure the effectiveness of our advertising campaigns.
A conversion cookie is set when you visit our website via a Google ad.
The data is analyzed anonymously.
Legal basis: Article 6(1)(a) of the GDPR
Data transfer to the U.S.: EU-U.S. Data Privacy Framework
9. Google Maps
We use Google Maps to display locations.
When the map loads, your IP address is sent to Google.
Legal basis: Article 6(1)(a) of the GDPR
Data transfer to the U.S.: EU-U.S. Data Privacy Framework
10. YouTube
YouTube videos are embedded on our website.
When you play a video, a connection is established with Google.
Legal basis: Article 6(1)(a) of the GDPR
Data transfer to the U.S.: EU-U.S. Data Privacy Framework
11. Jotform (Forms & Orders)
We use Jotform for order, registration, and contact forms.
Provider:
Jotform Inc., 111 Pine St., San Francisco, CA 94111, USA
We process the data you provide (e.g., name, email address, size information, personalization requests, order and contact details) via Jotform to the extent necessary to process your inquiry or to fulfill the relevant order, registration, event, or other promotion.
Legal basis for processing:
Art. 6(1)(b) of the GDPR (Contract or pre-contractual measures)
Art. 6(1)(a) of the GDPR (Consent, where required)
Art. 6(1)(f) of the GDPR (legitimate interest in the efficient processing of inquiries and orders)
Retention period:
For event-related activities, the collected data is deleted after the event has concluded, unless there are legal requirements to retain it.
For regular orders placed outside of events, data may be retained for the duration of the business relationship for the purpose of processing repeat orders, handling complaints, addressing warranty claims, and fulfilling the same order again. Statutory retention periods remain unaffected by this.
The use of data for advertising purposes is permitted only with the user's separate consent.
Transfer of data to third countries:
When personal data is transferred to the United States, this is done in accordance with the EU Standard Contractual Clauses and other appropriate safeguards pursuant to Article 46 of the GDPR. For more information, please refer to Jotform’s Privacy Policy:
Event forms:
Privacy Notice: Your information will be used solely for the purpose of personalizing and producing your jersey. Your information will be deleted after the event concludes. For more information, please see our Privacy Policy.
12. Contact Form
Your information will be processed to handle your request.
Retention period: max. 6 months
Legal basis: Art. 6(1)(b) or (f) of the GDPR
Newsletter No. 13
Sign up via double opt-in.
Legal basis: Art. 6(1)(a) GDPR
You may unsubscribe at any time.
14. SSL Encryption
Our website uses HTTPS for secure data transmission.
15. Right to Object
You may object to the processing of your data at any time on grounds relating to your particular situation (Art. 21 GDPR).
16. Updates to this Privacy Policy
We reserve the right to update this Privacy Policy.