Privacy Policy
The following information explains how we process personal data when you visit this website. Personal data is any data that can be used to personally identify you.
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
1. AFC Bremen Venom e. V.
Am Forst 1
28779 Bremen
Phone:
[Show phone]
E-mail:
[Show e-mail]
Data protection officer: No data protection officer has been appointed. For data protection requests, please contact the board using the contact options above.
2. Legal bases of processing
- Consent (Art. 6(1)(a) GDPR)
- Contract / pre-contractual measures (Art. 6(1)(b) GDPR)
- Legal obligation (Art. 6(1)(c) GDPR)
- Legitimate interests (Art. 6(1)(f) GDPR), e.g., secure operation of the website
3. Hosting (IONOS)
This website is hosted by IONOS SE. In the context of hosting, IONOS processes personal data on our behalf, in particular IP addresses, metadata and communication data, and access times, in order to provide and protect the website.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, stable and efficient operation). If required, a data processing agreement is in place.
4. Server log files
When you access the website, information is automatically recorded in server log files. This includes in particular: browser type and version, operating system used, referrer URL, time of the server request, and IP address.
Processing is carried out to ensure the security and stability of the website (Art. 6(1)(f) GDPR). The data is not merged with other data sources.
5. Cookies and consent management
We use cookies and similar technologies to the extent that they are technically necessary or you have given your consent. Technically necessary cookies serve, for example, the secure provision of the website.
In addition, external content (e.g., videos, maps, social media content) may only be loaded after your consent, as data (e.g., IP address) may be transmitted to third-party providers.
Note: A consent banner is provided so you can give or withdraw consent at any time. Until consent is given, external content should ideally be blocked or only loaded after approval (two-click solution).
6. Contacting us
If you contact us by e-mail, we process your details, including the transmitted content, solely for the purpose of handling your request.
The legal basis is Art. 6(1)(b) GDPR (e.g., inquiries regarding membership/contracts) or Art. 6(1)(f) GDPR (general communication).
7. Embedded forms (Jotform)
Forms may be embedded via Jotform on this website. If you open or submit an embedded form, data is transmitted to Jotform and processed there. Depending on the integration, connection data (e.g., IP address) may also be processed.
Depending on the integration, the legal basis is your consent (Art. 6(1)(a) GDPR) or, if the form is used for (pre-)contractual measures, Art. 6(1)(b) GDPR.
8. Ticket and supporter shop (SumUp)
We use SumUp for ticket sales and the supporter shop. If you click a relevant link or open a shop, you leave our website or content from SumUp is loaded. Data processing then takes place by SumUp as an independent controller.
9. Merch shop (Mellys kleine Stoffelei)
For merch, we link to the shop “Mellys kleine Stoffelei”. When you click the link, you leave our website. The processing of personal data is carried out by the respective provider as an independent controller.
10. YouTube videos
YouTube videos may be embedded on this website. When playing or loading YouTube content, data may be transferred to Google (YouTube), in particular your IP address and possibly device and usage information.
The legal basis is generally your consent (Art. 6(1)(a) GDPR), unless the integration is purely technically necessary. We recommend a privacy-friendly integration (e.g., two-click solution or the “nocookie” variant) so that content is only loaded after consent.
11. Google Maps
Maps from Google Maps may be embedded on this website. When loading the maps, data is transferred to Google, in particular your IP address. This may also involve processing in third countries.
The legal basis is usually your consent (Art. 6(1)(a) GDPR). If you do not consent, map content should ideally not be loaded.
12. Webfonts (Google Fonts) and icons (Font Awesome)
This website uses webfonts from Google (Google Fonts) and icon libraries (e.g., Font Awesome). With external integration, a connection to the providers’ servers may be established when loading, which may transmit your IP address in particular.
If loaded externally, the legal basis is usually your consent (Art. 6(1)(a) GDPR). Alternatively, fonts/icons can be integrated locally to avoid transferring data to third parties.
13. Social media content (embeds)
Content from social networks may be embedded on the website (e.g., Instagram, Facebook, TikTok). When loading this content, data may be transferred to the respective platform operators (e.g., IP address, device information).
The legal basis is usually your consent (Art. 6(1)(a) GDPR). We recommend loading social media content only after consent (e.g., via the consent banner / two-click solution).
14. Photos and reporting (e.g., team, game days, news)
We publish photos and content related to club activities on this website (e.g., game days, team photos, events). Processing is carried out for public relations and to present our club.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in public relations). In individual cases, consent may be required, especially in sensitive constellations. Data subjects may object for reasons arising from their particular situation (Art. 21 GDPR).
15. Links to partners
Our website contains links to websites of our partners, sponsors and cooperation partners. When you click such a link, you leave our website. The respective provider/operator is solely responsible for processing personal data on the linked pages.
We have no influence on the content and privacy practices of external websites. The privacy policies of the linked providers apply.
16. Recipients of data
Recipients may include, where necessary, technical service providers (e.g., hosting) and providers of embedded content (e.g., Google/YouTube, Google Maps, social media platforms, Jotform, SumUp) if you use their content or give consent.
17. Storage period
We generally process personal data only for as long as necessary for the respective purpose. The data is then deleted unless statutory retention obligations prevent deletion.
18. Your rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to withdraw consent with effect for the future (Art. 7 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
19. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. The competent authority is generally the authority at your habitual residence or the place of the alleged infringement.
Status: February 2026