Privacy policy

AFLE Betriebs GmbH
Drehbahn 7, 20354 Hamburg, Germany
Represented by: managing director Moritz Heisler
Email: community@aflepro.com

Data protection officer: BSP. Compliance & Solutions GmbH, Iris Duch, Vorsetzen 35, 20459 Hamburg, Germany

When you register we collect:

• About you: first name, last name, date of birth, email address
• For team assignment: team code, whether you are starting a team or joining one, optionally a team name
• For match planning: your self-assessed experience level
• For catering: dietary preference and voluntary details of allergies and intolerances
• For emergencies: name and phone number of a contact person
• For the stadium visit: whether you are coming on Sunday, the name of the person you bring, and how many extra tickets you need
• For under-18s in addition: name and email address of the named supervisor, including where they are added after registration
• Technical: the time of registration, the site language you used, and a shortened indication of where the request came from, to protect against automated mass registrations

Details of allergies and intolerances are health data within the meaning of Art. 9 GDPR. They are voluntary and are collected solely on the basis of your explicit consent, so that the catering on site fits.

• Organising and running the event: team composition, schedule, check-in, catering, ticket allocation. Legal basis: Art. 6(1)(b) GDPR (performance of the participation relationship).
• Confirmation and information emails about your registration, supervision and the schedule, in the language you chose when registering. Legal basis: Art. 6(1)(b) GDPR.
• Confirmation by the supervisor for under-18s. The named person receives an email and confirms their role via a personal link. Legal basis: Art. 6(1)(b) and (f) GDPR (duty of supervision and participant safety).
• Details of allergies and intolerances. Legal basis: Art. 9(2)(a) GDPR (explicit consent).
• Passing data to the stadium for entry, sideline access and, where applicable, the tour: first and last names of participants and companions. Legal basis: Art. 6(1)(b) GDPR.
• Protecting the form against abuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a working form).

Photo, film and sound recordings of the event are not part of this form. Consent to those is obtained separately on paper and can be withdrawn at any time.

• The people at the AFLE responsible for organising the event, along with the coaches and helpers involved, each only to the extent required.
• Supervisors receive the information about which child they were named for.
• The stadium operator: name list for entry on Sunday.
• Resend as processor for sending email.
• MongoDB Atlas as processor for storage.
• Vercel as processor for operating the website.

Data is not passed to sponsors and is not used for advertising purposes.

Anyone who knows the team code can open the team page. Only the first name and the initial of the last name of registered people are visible there, along with the number of places taken. Contact details, dates of birth and all other information are not shown.

We delete registration data at the latest three months after the end of the event, unless statutory retention periods say otherwise. Details of allergies are deleted immediately after the event. The technical records protecting against mass registrations are removed automatically after one hour.

This site sets no cookies for analytics or advertising, and embeds no third-party analytics services. Your language choice is in the address (/en/…) rather than in a cookie.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21 GDPR).

You can withdraw consent you have given at any time with effect for the future. The lawfulness of processing carried out until then is unaffected. An informal email to community@aflepro.com is enough.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular the one responsible for us: the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, HmbBfDI).

Providing the data marked as required is necessary in order to take part. Without it we cannot register you. Voluntary in particular are the details of allergies, the team name and the number of extra tickets you need.