This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online service and its associated websites, functions, and content, as well as external online presences such as our social media profiles (hereinafter collectively referred to as the “online service”). Regarding the terminology used — such as “processing” or “controller” — we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Access to and type of data processed
Each time a user accesses a page on our website and each time a file is retrieved, access data regarding this process is stored in a log file on the server of our provider, STRATO. Each data record consists of:
- the page from which the file was requested, the name of the file,
- the date and time of the request,
- the volume of data transmitted,
- the access status (file transferred, file not found, etc.),
- a description of the type of web browser used,
- client IP address.
If the website offers the option to enter personal or business data (e.g., email addresses, names, postal addresses), the user provides such data on a strictly voluntary basis. In this case, too, your data will be treated confidentially and will not be disclosed to third parties.
Published data
In addition, the following data concerning officials, volunteers, full-time staff, and participants in sports competitions are published on the website and social media channels of the World Bowhunter Championships 2027 (WBHC 2027) and German Field Archery Association (DFBV):
- Inventory data (e.g., names, addresses).
- Contact data (e.g., email, telephone numbers).
- Content data (e.g., text inputs, photographs, videos, result lists).
Categories of data subjects
Visitors and users of the online service (hereinafter, we also collectively refer to the data subjects as “users”).
Individuals working in paid or voluntary capacities within WBHC 2027 (hereinafter, we also collectively refer to the individuals concerned as “staff”).
Athletes participating in the WBHC 2027 (hereinafter, the individuals concerned are collectively referred to as “athletes”).
Purpose of processing
- Provision of the online service, its functions, and content
- Responding to contact inquiries and communicating with users
- Security measures
- Marketing
Terminology used
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., a cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing” means any operation or series of operations relating to personal data, carried out with or without the aid of automated procedures. The term is broad and encompasses virtually every way data is handled.
A “controller” is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Relevant legal bases
In accordance with Art. 13 of the GDPR, we inform you of the legal bases for our data processing activities. Unless the legal basis is specified in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 of the GDPR; the legal basis for processing to fulfill our services, carry out contractual measures, and respond to inquiries is Art. 6(1)(b) of the GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) of the GDPR; and the legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) of the GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) of the GDPR serves as the legal basis.
Cooperation with processors and third parties
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this occurs only on the basis of legal authorization (e.g., if the transmission of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR), if you have given your consent, if a legal obligation requires it, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).
If we commission third parties to process data based on a so-called “data processing agreement,” this is done on the basis of Article 28 of the GDPR.
Transfers to third countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) — or if this occurs in the context of using third-party services or disclosing or transmitting data to third parties — we do so only to fulfill our (pre-)contractual obligations, based on your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process data (or have it processed) in a third country only if the specific requirements of Articles 44 et seq. of the GDPR are met. This means, for example, that processing takes place based on special safeguards, such as an official determination that the level of data protection is equivalent to that of the EU (e.g., for the USA via the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “Standard Contractual Clauses”).
Rights of the data subjects
You have the right to request confirmation as to whether the data in question is being processed and to obtain access to that data, as well as further information and a copy of the data, in accordance with Art. 15 GDPR.
In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of incorrect data concerning you.
In accordance with Article 17 of the GDPR, you have the right to request the immediate deletion of the data concerned or, alternatively, to request a restriction on the processing of the data in accordance with Article 18 of the GDPR.
You have the right to receive the data concerning you that you have provided to us, in accordance with Art. 20 GDPR, and to request its transmission to other controllers.
Furthermore, in accordance with Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Right of withdrawal
You have the right to withdraw consent you have given, in accordance with Art. 7(3) GDPR, with effect for the future.
Right to object
You may object to the future processing of data concerning you at any time in accordance with Article 21 of the GDPR. In particular, you may object to processing for direct marketing purposes.
Our online media report on competitions featuring audio, images, video, and text, and also publish the results lists for these events. Such a results list is an essential component of a sporting competition, as the very nature of athletic rivalry involves measuring oneself against an opponent and ultimately determining who is the better competitor. This determination is made through the publication of the results list. Consequently, the list holds significance for the future as well, since it remains of interest from a sporting perspective to know how individual participants performed in the competitions.
By participating in a competition, the participant consents to the collection and publication of such data, images, and videos. Consequently, these will not be deleted or removed — specifically not from the results lists — at a later date, nor upon the participant’s withdrawal from the DFBV.
Athletes who do not wish for their data to be published in results lists, for competition reports to mention their names, or for images, audio, or video of them on the podium to be published, may therefore not participate in the competition.
Cookies and the right to object to direct marketing
“Cookies” are small files stored on users’ computers. Various types of information can be stored within these cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit to an online service. Cookies that are deleted after a user leaves an online service and closes their browser are referred to as temporary cookies, “session cookies,” or “transient cookies.” Such cookies can store, for example, the contents of an online shop’s shopping cart or a login status. Cookies that remain stored even after the browser is closed are referred to as “permanent” or “persistent” cookies. For instance, a user’s login status can be saved so that it is retained when they revisit the site days later. Such cookies can also store user interests, which are then used for audience measurement or marketing purposes. “Third-party cookies” are cookies provided by parties other than the controller operating the online service (in contrast, cookies originating from the operator itself are known as “first-party cookies”).
We may use temporary and permanent cookies and provide information about this in our privacy policy.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the browser’s system settings. The exclusion of cookies can lead to functional restrictions of this online offer.
You can generally object to the use of cookies employed for online marketing purposes — particularly regarding tracking — via the US website www.aboutads.info or the EU website www.youronlinechoices.com. Furthermore, you can prevent cookies from being stored by disabling them in your browser settings. Please note that, in this case, you may not be able to use all the functions of this online service.
Deletion of data
The data we process is deleted or its processing restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated otherwise in this privacy policy, data stored by us is deleted as soon as it is no longer required for its intended purpose and no statutory retention obligations prevent such deletion. If data is not deleted because it is required for other, legally permissible purposes, its processing is restricted; this means the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or to lists of results.
In accordance with statutory requirements in Germany, records are retained for six years pursuant to Section 257 (1) of the German Commercial Code (HGB) (accounting books, inventories, opening balance sheets, annual financial statements, commercial correspondence, accounting vouchers, etc.) and for ten years pursuant to Section 147 (1) of the Fiscal Code (AO) (books, records, management reports, accounting vouchers, commercial and business correspondence, documents relevant to taxation, etc.).
Our online media report on competitions featuring audio, images, video, and text, and also publish the results lists for these events. Such a results list is an essential component of a sporting competition, as the very nature of athletic rivalry involves measuring oneself against an opponent and ultimately determining who is the better competitor. This determination is made through the publication of the results list. Consequently, the list holds future significance as well, since — from a sporting perspective — it remains of interest to know how individual participants performed in the competition.
By participating in the WBHC 2027, the participant consents to the collection and publication of such data, images, and videos. Consequently, these will not be deleted or removed at a later date, particularly from the results lists.
Business-related processing
In addition, we process
- Contract data (e.g., subject matter of the contract, term, customer category).
- Payment data (e.g., bank details, payment history).
from our customers, prospective customers, and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising, and market research.
Hosting
The hosting services we utilize serve to provide the following: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we employ for the purpose of operating this online service.
In this context, we — or our hosting provider — process inventory data, contact details, content data, contract data, usage data, and meta/communication data belonging to customers, interested parties, and visitors to this online service. This processing is based on our legitimate interests in providing this online service efficiently and securely, in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
Collection of access data and log files
We, or our hosting provider, collect data regarding every access to the server hosting this service (so-called server log files) based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR. Access data includes the name of the accessed webpage, the file, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider.
For security reasons (e.g., to investigate instances of abuse or fraud), log file information is stored for a maximum of 30 days and subsequently deleted. Data requiring further retention for evidentiary purposes is exempt from deletion until the respective incident has been finally resolved.
Provision of contractual services
We process inventory data (e.g., names, addresses, and user contact details) and contract data (e.g., services utilized, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6(1)(b) GDPR. Entries marked as mandatory in online forms are required for the conclusion of the contract.
Data is deleted following the expiration of statutory warranty obligations and comparable requirements; the necessity of retaining the data is reviewed every three years. In cases involving statutory archiving obligations, deletion occurs once those obligations have expired. Information contained in any customer account remains until the account is deleted.
Contacting us
When you contact us (e.g., via contact form, email, telephone, or social media), the user’s information is processed for the purpose of handling and managing the inquiry in accordance with Art. 6(1)(b) GDPR. User information may be stored in a customer relationship management system (“CRM system”) or a comparable inquiry management system.
Comments and posts on social media
When users leave comments or other posts on the DFBV’s social media channels, their IP addresses and accounts are recorded by Facebook, Instagram, YouTube, etc., and stored in accordance with the respective platforms’ policies.
Social media presences
We maintain online presences on social networks and platforms in order to communicate with customers, interested parties, and users active there and to inform them about our services. When accessing these networks and platforms, the terms and conditions and data processing policies of the respective operators apply.
Unless otherwise stated in our privacy policy, we process users’ data when they communicate with us via social networks and platforms — for example, by posting on our online channels or sending us messages.
Integration of third-party services and content
Within our online services, based on our legitimate interests (i.e., the interest in analyzing, optimizing, and economically operating our online services within the meaning of Art. 6(1)(f) GDPR), we utilize content or services provided by third-party providers in order to integrate their content and services — such as images, videos, or fonts (hereinafter collectively referred to as “Content”).
This always presupposes that the third-party providers of such content perceive the users’ IP addresses, as they would otherwise be unable to transmit the content to the users’ browsers. The IP address is therefore necessary for the display of this content. We endeavor to use only such content where the respective providers utilize the IP address solely for the purpose of delivering the content. Furthermore, third-party providers may use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These pixel tags allow for the analysis of information such as visitor traffic on this website. This pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical details regarding the browser and operating system, referring websites, visit duration, and other data concerning the use of our online services; it may also be linked with similar information from other sources.
YouTube
Wir binden die Videos der Plattform “YouTube” des Anbieters Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ein.
OpenStreetMap
We embed maps from the “OpenStreetMap” service provided by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
Links to other websites
Our online service contains links to other websites. We have no control over whether their operators comply with data protection regulations.
As the provider of our own content, we are responsible in accordance with general laws. A distinction must be made between this content of our own and links to content provided by other parties. We assume no responsibility for third-party content made available via links — and specifically marked as such — nor do we adopt such content as our own. Liability for illegal, incorrect, or incomplete content, as well as for damages arising from the use or non-use of such information, rests solely with the provider of the linked website. The editorial team is responsible for third-party references only if it has actual knowledge of them — including knowledge of any potentially unlawful or criminal content — and if it is technically feasible and reasonable to prevent their use.
We hereby expressly distance ourselves from all content on all linked pages on our website.
This statement applies to all links posted on our website or on the DFBV’s social media channels.
All brands mentioned in the text of this website or on the DFBV’s social media channels are registered trademarks of their respective manufacturers.