Introduction and terms
Our data protection provisions contain technical terms that are used in the GDPR and the BDSG-new. For your better understanding, we would like to explain these terms in simple terms in advance:
2.1 Personal data
“Personal data” means any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can be, for example, their name or email address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining your own or third-party information to find out who the person is. A person can be identified, for example, by providing their address or bank details, their date of birth or user name, their IP addresses and/or location data. All information that can be used to identify a person in any way is relevant here.
Art. 4 no. 2 GDPR defines “processing” as any operation involving personal data. This applies in particular to the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
Responsible company and data protection officer
3. Responsible company & data protection officer
Company: Eintracht Frankfurt Stadion GmbH
Legal representative: Patrik Meyer (Managing Director)
Address: Im Herzen von Europa 1, 60528 Frankfurt
Telephone: 069 23 80 80 121
4. Processing framework: Website
As part of the website with the URL https://thegrandjam.live, we process the personal data of you listed in detail in sections 5-22.9 below. We only process data that you actively provide on our website (e.g. by filling out forms) or that you automatically provide when using our website.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorized to issue instructions to our contractors. We use external service providers to operate our website for hosting, maintenance, care and further development. If other external service providers are used for individual processing operations listed in sections 5-22.9, they will be named there.
Data transfer to third countries does not take place and is not planned. We will provide information about exceptions to this principle in the processing operations described below.
The PROCESSES in detail
5. Provision of the website and server log files
5.1 Description of the processing
Each time you visit the website, we automatically collect information that your browser transmits to our server. This information is also stored in the so-called log files of our system. This involves the following data
- Your IP address
- the browser software you are using, as well as its version and language
- the operating system you are using
- the website from which you accessed our website (so-called referrer)
- the subpages you have accessed on our website
- the date and time of your visit to our website
- Amount of data transferred
The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to the user’s end device. For this purpose, the user’s IP address must remain stored for the duration of the session. However, your IP address is not recorded in our log files.
Processing is carried out to enable the website to be accessed and to ensure its stability and security. In addition, the processing serves the statistical evaluation and improvement of our online offer.
5.3 Legal basis
Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 5.2.
5.4 Storage period
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
6. Registration and profile
6.1 Description of the processing
Individual functions and offers on our website are only available to you as a registered user. By registering, you conclude a free user agreement with us. By registering, you will receive your own user account on our website. You register by completing the registration form at https://thegrandjam.live and sending it to us electronically. To register, you must enter your e-mail address, a user name of your choice and a password of your choice. By clicking on the “Register” button, you submit the form to us. You will then receive an automatic welcome e-mail. This contains a link to confirm your e-mail address. Your account will only be activated on our website once your e-mail address has been successfully verified by clicking on the confirmation link.
The processing is carried out in order to provide you with the functions of our website for registered users.
6.3 Legal basis
The processing is necessary for the conclusion and fulfillment of the user contract (Art. 6 para. 1 lit. b GDPR). Without providing your personal data as part of the registration process, we cannot provide our contractually owed services.
6.4 Storage period
The data will be automatically deleted by us upon termination of your user contract. You can terminate the contract of use yourself by deleting your account in the account options. As a logged-in user, you can also edit your own details and information at any time.
7. Contact by e-mail
7.1 Description of the processing
You can contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.
The data transmitted with your e-mail will be used exclusively for the purpose of processing and responding to your request.
7.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 7.2.
7.4 Storage period
We will delete the data as soon as it is no longer required for the purpose for which it was collected. This is usually the case when the respective communication with you has ended. Communication ends when it can be inferred from the circumstances that your request has been conclusively clarified. If statutory retention periods prevent deletion, the data will be deleted immediately after expiry of the statutory retention period.
8.1 Description of the processing
8.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 8.2.
8.4 Storage period
Below we have compiled the links that will take you to instructions on how to change the settings in the most common browsers. Further information can be found in the support menu of your browser:
The privacy settings can be adjusted here at any time: change privacy settings.
If cookies are deactivated for our website, individual functions of our website cannot be used or can only be used to a limited extent.
9.1 Description of the processing
We send a newsletter with information and news to all registered jammers at irregular intervals.
The processing takes place in order to offer the newsletter function and to be able to send newsletter e-mails to subscribers.
9.3 Legal basis
The processing of our newsletter is based on registration. Our legitimate interest lies in the purpose stated in section 9.2.
9.4 Storage period and withdrawal of consent
We process your personal data for the duration of your newsletter subscription. You can unsubscribe from our newsletter at any time by withdrawing your consent. A simple declaration is sufficient for this (by e-mail to email@example.com, by post to Dirksstr. 57 in 25980 Sylt). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter email. If you withdraw your consent, we will no longer send you newsletters and your personal data will be removed from our active mailing list. We will add your e-mail address to our so-called black list in order to enforce your revocation. This enables us to ensure that you do not receive any newsletters from us in future and that your email address is not misused by third parties.
9.5 Recipients and transfer to third countries
We use the services of the newsletter provider Mailchimp to manage our newsletter mailing list and to send the emails. This takes place within the framework of order processing.
10. Social networks
10.1 Description of the processing
Our website does not use any social media plugins. The social network logos displayed on our website are merely linked to the corresponding profiles of our company. If you click on one of the logos, you will be redirected to the external website of the respective social network.
11. Google Webfonts
11.1 Description of the processing
Our website uses “Google Web Fonts”, a font replacement service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Web Fonts replaces the standard fonts of your device with fonts from Google’s catalog when displaying our website. If your browser prevents the integration of Google Web Fonts, the text on our website will be displayed in the standard fonts of your device. The Google fonts are loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. This may also transmit your IP address to Google in connection with the address of our website. However, Google Web Fonts does not store any cookies on your end device. According to Google, data processed as part of the Google Web Fonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection at Google Webfonts can be found here.
General information on data protection at Google can be found here.
The processing is carried out in order to display the text on our website in a more legible and aesthetically pleasing way.
11.3 Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 11.2.
11.4 Recipients and transfer to third countries
Through the use of Google Web Fonts, personal data may be transmitted to Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found here.
12. YouTube videos
12.1 Description of the processing
Our website uses services from “YouTube”, a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames so that they can be played directly on our website. The videos are embedded in the “extended data protection mode” offered on YouTube, i.e. no personal data will be transferred from you to Google as long as you do not play the videos. Only when you play a video will data be transferred to Google, over which we have no influence. If you play an embedded video on a subpage of our website, Google will be informed which subpage you have visited and which video you have watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will assign this information to your user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google directly. Further information on data protection at Google can be found here.
The processing takes place in order to be able to show you videos on our website.
12.3 Legal basis
Processing is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the purpose stated in section 12.2.
12.4 Empfänger und Übermittlung in Drittstaaten
By integrating YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found here.
13. Security measures
To protect your personal data from unauthorized access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s end device. You can recognize active SSL or TLS encryption by a small padlock logo that is displayed on the far left in the address bar of the browser.
14. Rights of data subjects
With regard to the data processing described above by our company, you have the following rights as a data subject:
14.1 Information (Art. 15 DSGVO)
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right of access to this personal data and to the further information listed in Art. 15 GDPR under the conditions set out in Art. 15 GDPR.
14.2 Rectification (Art. 16 DSGVO)
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
14.3 Deletion (Art. 17 DSGVO)
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes pursued by us.
14.4 Restriction of data processing (Art. 18 DSGVO)
You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that enables us to verify the accuracy of your data.
14.5 Data portability (Art. 20 DSGVO)
You have the right, under the conditions set out in Art. 20 GDPR, to request the surrender of the data concerning you in a structured, common and machine-readable format.
14.6 Withdrawal of consent (Art. 7 Abs. 3 DSGVO)
You have the right to withdraw your consent at any time if the processing is based on consent. The revocation applies from the time of its assertion. In other words, it is effective for the future. Withdrawal of consent therefore does not retroactively render the processing unlawful.
14.7 Complaint (Art. 77 DSGVO)
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU Member State of your place of residence, your place of work or the place of the alleged infringement.
14.8 Prohibition of automated decision-making/profiling (Art. 22 DSGVO)
Decisions that have legal consequences for you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We hereby inform you that we do not use automated decision-making, including profiling, with regard to your personal data.
14.9 Objection (Art. 21 DSGVO)
If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR. However, this only applies if there are grounds relating to your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defense of legal claims. In any case – regardless of a particular situation – you have the right to object to the processing of your personal data for direct marketing purposes at any time.
Tracking with Matomo gives us some insight in where you come from and what you view on our website. You can opt-out here:
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.