Privacy policy

The term ‘personal data’ is understood to be all information that can be assigned to your person. This includes, for example; name, address, telephone number, e-mail address. Information which does not allow any conclusion to be drawn about your actual identity or which cannot be associated with your real identity is not included in the definition. If, for example, you order a product or use another service offered on our website, we will ask you for certain personal data.

The responsible party for the processing of your personal data according to Article 4 of the Personal Data Act (DS-GVO) for this website is:

HSV Fußball AG
Sylvesterallee 7
22525 Hamburg 
service@hsv.de

If you have any questions, complaints or wish to enforce your rights according to the basic data protection regulation, the Federal Data Protection Act or our data protection declaration and the processing of your personal data, you can contact our data protection officer, who can be contacted via the following channels:

HSV Fußball AG
Datenschutzbeauftragter 
Sylvesterallee 7
22525 Hamburg
Tel.: +4940 4155 1887
E-Mail: datenschutzbeauftragter@hsv.de

Please address requests for information exclusively to Datenschutzauskunft@hsv.de or by post to HSV Fußball AG, keyword data protection information, Sylvesterallee 7, 22525 Hamburg, so that we can process them in due time.

All personal data collected by HSV Fußball AG will be used in accordance with the applicable data protection regulations for the purpose of contract or order processing and for processing your enquiries and bookings. We would also like to use your e-mail address to inform you in future about similar offers from us that might be of interest to you in the future. Personal data of applicants will only be processed within the scope of the application procedure. We process the personal data you provide us with in the course of a competition exclusively for the purpose of organizing the respective competition and to determine and contact the winners. You will also find detailed information in our conditions of participation for each competition. If you provide us with personal data in the context of press accreditation, the purpose of the processing is to create an accreditation card.

If we intend to process your personal data for a purpose other than that for which the personal data was collected, we will provide you with information about this purpose and any other relevant information in accordance with Art. 13 Para. 2 DS-GVO prior to such further processing.

If you order or book one of the following products or services in our online HSV World, the legal basis for the processing of your personal data pursuant to Art. 6 Para. 1 S. 1 lit. b) DS-GVO is the respective contract concluded between you and HSV Fußball AG:

• Fan merchandise in the online fan shop
• Tickets and hospitality packages
• Stadium and museum tours 
• Events
• Travel to our home or away games
• Offers from the HSV football school and the HSV Kids-Club
• Offers of the HSV-Funpark
• Official Fan Club (OFC)
• Merchandising Fair
• HSV Travel

If you create a user profile in our HSV-World, it is free of charge. Nevertheless, an agreement is made between you and HSV Fußball AG. This agreement is the basis for data processing in accordance with Art. 6 Para. 1 S. 1 lit. b) DS-GVO.

For our (existing) advertising (see also below), feedback requests and press accreditation, the legal basis in each case is the legitimate interest of HSV Fußball AG, in accordance with Art. 6 para. 1 sentence 1 lit. f) DS-GVO. Our legitimate interests in this respect consist of advertising interests and organisational interests within the framework of matchday handling. The processing of data on our websites for the purposes of analysis and personalisation is based on your consent (Art. 6 Para. 1 S. 1 lit. a) DS-GVO). The legal basis for the use of necessary cookies is Art. 6 para. 1 sentence 1 lit. b) DS-GVO. Further information on cookies can be found below.

If you address an application to HSV Fußball AG, § 26 Para. 1 in conjunction with para. 8 p. 2 BDSG is the legal basis. Should you give us your consent to keep your application for a longer period of time, Art. 6 para. 1 lit. a DS-GVO serves as the legal basis. 
If you take part in a HSV Fußball AG competition, we process your personal data on the legal basis of a competition agreement, in accordance with Art. 6 Para. 1 S. 1 lit. b) DS-GVO.

The Volksparkstadion is video-monitored inside and at the entrances. There is also video surveillance at the main reception, the Alexander Otto Academy and at individual points outside  the stadium (monitored areas are marked with signs). The video recordings are processed exclusively for the purpose of safeguarding trespassing rights, protecting property and investigating criminal offences. The legal basis is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest in this lies in the preservation of evidence and prevention with regard to the aforementioned purposes. For the operation and maintenance of the video surveillance system we are supported by an external service provider. The video recordings are only passed on to third parties if this is necessary within the framework of a possible legal or criminal prosecution. In this case, the recipients are, in accordange with the law, the relevant law enforcement authorities. The video recordings within the Volksparkstadion and at the entrances will be deleted after 30 days due to frequent delays in reports from injured parties and inquiries from the police and law enforcement authorities; for all other recordings a deletion period of 72 hours applies.

We have marked all required data with an asterisk (*). This data must be collected by us in order to implement the obligations from the respective contract with you accordingly. If we do not receive this data, we may not be able to fulfil your order properly.

Yes. When you access HSV Fußball AG websites, your browser automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Web page from which the access takes place (referrer URL),
• The browser you use and, if applicable, the operating system of your computer and the name of your access provider.

The above-mentioned data will be processed by us for the following purposes:

• To ensure a smooth connection of the website,
• Guarantee a comfortable use of our website,
• Evaluation of system security and stability and
• For other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 letter f) DS-GVO. Our legitimate interest follows from the above-mentioned purposes for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
Furthermore, we use cookies and analysis services when you visit our website. You will find more detailed explanations below.

As a customer of our online services, we would like to send you information about similar offers by e-mail. The legal basis for this is our legitimate interest in direct advertising in accordance with Art. 6 Para. 1 S. 1 lit. f DS-GVO. If you do not want this, you have the possibility to object at any time. Please use the following e-mail address to let us know that you would no longer like to be contacted: widerruf@hsv.de. You will not incur more than the transmission costs according to the basic rates.

If we call in external service providers within the scope of data processing, we have also ensured in this respect that these have been selected in accordance with the statutory provisions and are also obliged to comply with the statutory data protection regulations. Beyond this, your data will not be passed on to third parties.

No. Your personal data will not be used for those kind of processes.

The data is only stored as long as you are registered with us with a user profile. If data is processed as part of an order, registration or purchase process with us, the data is stored in accordance with the statutory storage and retention obligations and then deleted. With regard to advertising (inventory) customer contact, your data will be stored at most until you object to its use. We delete applicant data three months after completion of the application process. Data that we collect in the course of a competition will be deleted after the competition has been completed. Data that we collect for press accreditation will be deleted when they are no longer required for the relevant competition.

On a legal basis, you have various rights as a so-called data subject through whom personal data is collected:

Right of access

In accordance with Art. 15 DS-GVO, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it has not been collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of such data.

Please address requests for information exclusively to Datenschutzauskunft@hsv.de or by post to HSV Fußball AG, keyword data protection information, Sylvesterallee 7, 22525 Hamburg, so that we can process them in due time.

Right of rectification

In accordance with Art. 16 DS-GVO, you can immediately request the correction of incorrect data or the completion of your personal data stored with us.

Right to deletion

In accordance with Art. 17 DS-GVO, you have the right to demand the deletion of your personal data stored with us, unless processing is necessary to fulfil a legal obligation, to exercise the right to freedom of expression and information, for reasons of public interest or to assert, exercise or defend legal claims.

Right to restrict processing

Under Art. 18 DS-GVO, you can demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or if you have lodged an objection to the processing under Art. 21 DS-GVO.

Right to data transferability

In accordance with Art. 20 DS-GVO, you may also receive your personal data that you have provided us with in a structured, common and machine-readable format or request that it be transferred to another responsible party.

Right of withdrawal

According to article 7 paragraph 3 DS-GVO you can revoke a consent that you once gave to us at any time. Please use the following e-mail address: widerruf@hsv.de. As a result of you revoking this right, we are not allowed to continue the data processing that was based on this consent after that point.

Right of objection

If the processing of your personal data takes place on the legal basis of our legitimate interests, you have the right to object to the processing. In this case, we ask you to inform us of the reasons for which you wish to object to the processing. You can also object to the processing of your data for the purpose of contacting existing customers without giving reasons. Please also refer to the information in section 8.

Right to complain to a supervisory authority

According to Art. 77 DS-GVO you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our headquarters in Hamburg.

Cookies are small text files that store Internet settings. The first time you visit a website, they are downloaded by your internet browser. Almost every website uses cookies. If you repeatedly visit a website using the same device and the same browser, the cookies remember your preferences, tell us how you use the site and adjust the content displayed according to your personal interests and needs. Depending on their function and purpose, cookies can be divided into three categories: necessary cookies, analytics cookies and personalization cookies. Necessary cookies are required to operate our websites and are used regardless of your privacy settings. Analytics cookies help us to obtain information on how users come to our site and how they move around. In addition, we process data for the purpose of personalisation in order to be able to adapt content to suit the interests of our users. The first time you visit our site and in the privacy settings you can decide whether you want to consent to the processing for analysis and/or personalization purposes. You can also revoke your consent here.

In the event of your agreement, this website uses Google Analytics, a web analytics service provided by Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland is responsible for users in the EU/EEA and Switzerland. Google Analytics uses cookies to help the website analyse how users like you use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, your IP address will be truncated by Google within member states of the European Union or in other states that have signed up to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. 

The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. On behalf of the operator of this website, Google will use the information to evaluate the use of the website, compile reports on it and to provide further services to the website operator in connection with the use of the website and the internet.

We can also use the cookie from Google Search Console to perform search analyses, which provide us with information on how often our website appears in Google search results. This enables us to monitor and manage our websites in the search index. The data sent by us to Google and linked to cookies or user IDs (e.g. user ID) are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. Further information on the terms of use of Google Analytics and on data protection at Google can be found at www.google.com/analytics/terms/de.html or policies.google.com.

Google Ads Conversion Tracking

If you agree, this website uses the Google Ads service. Google Ads is an online advertising program from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

This means that we serve Google Ads advertisements and use Google Remarketing and Conversion Tracking as part of that process. The ads are displayed on web pages in the Google advertising network following search queries. We also use ad remarketing lists for search ads. This enables us to adapt search ad campaigns for users who have already visited our website. The services allow us to combine our ads with specific search terms or to serve ads to previous visitors, such as advertising services that visitors have viewed on our site. This allows us to show users of our site interest-based ads on other sites within the Google advertising network (as "Google ads" within Google search or on other sites).
For interest-based offers, an analysis of online user behaviour is necessary. Google uses cookies to perform this analysis. When clicking on an advertisement or visiting our website, Google sets a cookie on the user's computer. These cookies have a duration of 90 days. The information collected by means of the respective cookie is used to be able to address the visitor in a targeted manner in a subsequent search query. Further information on the cookie technology used can also be found in Google's notes on website statistics and in the privacy policy. With the help of this technology, Google and we as customers receive information about when a user has clicked on an advertisement and been redirected to our websites. The information obtained in this way is used exclusively for statistical evaluation for ad optimisation. We do not receive any information with which visitors can be personally identified. Your IP address is transmitted to Google. However, since we use Google's IP masking on this website in the context of Google Analytics, your IP address is anonymised. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page of our website marked with a conversion tag. These statistics allow us to see which search terms have led to a particularly high number of clicks on our ads and which ads lead to the user contacting us via the contact form. Further information on data protection within the framework of Google Ads can be found at: https://policies.google.com/technologies/ads?hl=de

You also have the option of selecting the types of Google ads or disabling interest-based ads on Google through the ads settings. Alternatively, you can disable the use of cookies by third parties by visiting the Network Advertising Initiative's opt-out help page. However, we and Google will continue to receive statistical information about how many people visited this site and when. If you do not want to be included in these statistics either, you can prevent this by using additional programs for your browser (e.g. the Privacy Badger add-on).

Our presence on Facebook helps us create a better, more active communication with our fans and interested parties. We will inform you via Facebook on all topics concerning HSV.
The data processing on our Facebook online presence is based on an agreement between jointly responsible parties in accordance with Art. 26 DSGVO, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum.

When you visit our Facebook pages, your data may be automatically collected and stored for market research and advertising purposes.
Various categories of statistical data can be viewed via the Facebook page statistics (so-called "page insights"). These statistics are provided by Facebook. For a selectable period of time as well as for the categories fans, subscribers, persons reached and interacting persons, various data related to our Facebook group are provided to us by Facebook. You can find more information about the data types collected here.

From this data, so-called user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. For these purposes, cookies are usually used on your end device. The visitor behaviour and interests of the users are stored in these cookies. This serves in accordance with Art. 6 para. 1 lit. f. DSGVO, which aims to safeguard our predominantly legitimate interests in an optimised presentation of all topics and offers relating to HSV and effective communication with our fans and visitors. If you are asked by the social media platform operator to give your consent (permission) to data processing, e.g. with the help of a checkbox, then the legal basis for data processing is Art. 6 para. 1 lit. of the DSGVO.

For detailed information on the processing and use of data by the providers on their sites, as well as a contact option and your rights and settings options for the protection of your privacy, in particular opt-out options, please refer to the data protection information linked below. Should you nevertheless require assistance in this regard, please contact us.
Facebook: https://www.facebook.com/about/privacy/

Possibility of appeal (opt-out):
Facebook: https://www.facebook.com/settings?tab=ads

Further information on the secure use of social networks can be found on the website of the Federal Office for Information Security at https://www.bsi-fuer-buerger.de/BSIFB/DE/DigitaleGesellschaft/SozialeNetze/sozialeNetze_node.html.

Within the framework of the Football School, sound, image and video recordings are made regularly. The recordings are made in the course of fulfilling the contract between the Football School and the participants and are made available exclusively to the participants of the football school (e.g. via the online gallery SmugMug and Flickr) for exclusively private usage. The legal basis for data processing is the contract concluded between HSV and you in accordance with Art. 6 Para. 1 S. 1 lit. b) DS-GVO. Any publication of the recordings beyond this for the purposes of public relations work and to advertise future events shall take place exclusively on the basis of your express consent pursuant to Art. 6 para. 1 letter a) DS-GVO in selected online and print media (on the website www.hsv.de) and/or on the HSV's social media channels (Facebook, Twitter, YouTube). The recordings will be passed on only to the extent necessary in connection with the production and publication of the recordings, in particular in print and online media. In this case, the recipients are HSV employees, external service providers, partners, sponsors and web hosts. The recordings shall be deleted after the purpose has been achieved, unless further storage is required by statutory storage and retention obligations or the assertion, exercise or defense of legal claims. Recordings that are processed on the basis of your consent shall be stored for an indefinite period of time for a specific purpose, subject to revocation of your consent. The consent to process the recordings can be revoked in writing at any time. The legality of the data processing that has taken place on the basis of the consent until the revocation is not affected by this. As soon as you revoke your consent, we will delete the data, provided that statutory storage and retention obligations or the assertion, exercise or defence of legal claims do not require further storage.

Due to the rapid development of the Internet and possible adjustments to our processes, it may be necessary for us to revise and update this privacy policy from time to time. This version is dated August 2020.