Privacy Policy

External links

Information regarding external links

This website contains links to external third-party websites over whose content we have no influence. Therefore, we cannot accept any liability for this external content. The content of external sites linked to here does not reflect the opinion of the website operator, but serves only to provide information and illustrate connections. The respective provider or operator of the linked sites is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking. No illegal content was found at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any violations of the law, we will remove such links immediately.

Social media presence:

This privacy policy applies to the following social media presence

• https://www.instagram.com/soccerbeat.official/
• https://www.tiktok.com/@soccerbeat.official
• https://www.facebook.com/profile.php?id=61555374912435

 

Data processing by social networks

We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.

Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media sites triggers numerous data processing operations that are relevant to data protection. Specifically:

If you are logged into your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection is carried out, for example, via cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of social media portals can create user profiles that store your preferences and interests. In this way, interest-based advertising can be displayed to you both within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.

Legal basis

Our social media presence is intended to ensure the most comprehensive presence possible on the internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Responsible party and assertion of rights

When you visit one of our social media sites (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., against Facebook). Please note that despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period

The data collected directly by us via our social media presence will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions—in particular retention periods—remain unaffected.

We have no influence on the storage period of your data stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g., in their privacy policy, see below).

Your rights

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. Furthermore, you can request the correction, blocking, deletion, and, under certain circumstances, the restriction of the processing of your personal data.

 

Social networks in detail

Instagram

We have a profile on Instagram. This service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum,

https://privacycenter.instagram.com/policy/ and

https://de-de.facebook.com/help/566994660333381.

Details on how they handle your personal data can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link:

https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt0000000GnywAAC&status=Active

TikTok

We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in TikTok's privacy policy:

https://www.tiktok.com/legal/privacy-policy?lang=de.

Data transfers to non-secure third countries are based on the EU Commission's standard contractual clauses. Details can be found here: https://www.tiktok.com/legal/privacy-policy?lang=de.

Handling of applicant data:

This privacy policy explains the nature, scope, and purpose of the collection and use of personal data by SOCCERBEAT GmbH in the course of the application process in accordance with Articles 13 and 14 of the GDPR. The legal basis for data protection can be found in the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-neu) and the Telemedia Act (TMG).

Further information can be found in the general privacy policy mentioned above.

 

HANDLING OF PERSONAL DATA

The data subject has consented to the processing of personal data concerning him or her for one or more specific purposes; processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract; processing is necessary for compliance with a legal obligation to which the controller is subject; processing is necessary to safeguard the legitimate interests of the controller or a third party, if this is necessary for the decision on the establishment of an employment relationship or, after the establishment of an employment relationship, for its implementation or termination, or for the exercise or fulfillment of rights and obligations arising from a law.

WHAT ARE YOUR RIGHTS?

You have the right to obtain information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data, provided that the deletion does not violate any legal requirements, such as retention periods. If you have given your consent to data processing, you can revoke this consent at any time for the future.

Previous processing remains lawful. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

PURPOSE AND LEGAL BASIS

The storage of your data as part of the application process and the associated processing of the data serves to fill a vacancy in our company.

APPLYING FOR A JOB ADVERTISEMENT

You are applying for a job advertised on the homepage or professional portals. Your application data will then only be used for the application process for this specific position and processed in accordance with Art. 6 (1) lit. b GDPR and § 26 BDSG. If your application is not successful, your data will be deleted within a maximum of 6 months after the end of the application process.

SPONTANEOUS APPLICATION

You have the option of sending an unsolicited application to our company without reference to a specific job advertisement. These applications are also reviewed by our company and go through the application process. Your application data will then only be used for the application process and processed in accordance with Art. 6 (1) lit. b GDPR and § 26 BDSG. If your application is not successful, your data will be deleted within a maximum of 6 months after the end of the application process.

APPLICANT POOL

You have the option of having your application data stored in our applicant pool for 12 months. This allows us to compare your data with other job vacancies and consider you for a vacant position if necessary.

Your data will only be stored with your express consent. If you decide to be included in the applicant pool, your data will be processed in the manner described here on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. You have the right to revoke your consent to the storage of your data at any time. Revoking your declaration of consent will not have any negative consequences. After revoking your consent, your data will no longer be used in the application process and will be deleted from our applicant pool.

WHAT DATA IS PROCESSED?

We store and process all data that you provide to us during the application process. This includes both the data from your application documents and the information you provide to us in a telephone or face-to-face interview.

The processing affects, among other things, your contact details such as your surname, first name, address, telephone number, and email address. It also affects all data relating to your professional and educational qualifications and degrees.

This may also affect special categories of personal data in accordance with Art. 9 GDPR, which may include data on health, religious or ideological beliefs, party or trade union membership.

In addition, application photos submitted may contain personal data that falls under the special categories of personal data, e.g., information about racial and ethnic origin or health status. However, this special data is only processed for the purpose of using your application documents to fill vacant positions.

If your application is successful and leads to an employment relationship, only the parts of the applicant data that are necessary for the fulfillment of the employment contract will continue to be stored. This includes, for example, your name, address, bank details, etc.

DATA TRANSFER

SOCCERBEAT GmbH may transfer data in order to fulfill legal obligations pursuant to Art. 6 (1) (c) GDPR—e.g., to authorities, the police, or similar entities. Data may also be transferred on the basis of legitimate interest pursuant to Art. 6 (1) (f) GDPR, e.g., to lawyers, tax advisors, or similar entities.

TRANSFER OF YOUR PERSONAL DATA – ART. 44 FF. GDPR

You are not obliged to provide us with your data. This is done voluntarily. However, the transfer of your data is necessary in order to be considered for a vacant position.

TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY – ART. 44 FF. GDPR

Personal data is generally not transferred to a third country. Should this nevertheless be the case, the data transfer is regulated by an adequacy decision, consent, binding corporate rules, or concluded EU standard data protection clauses.

RIGHT TO INFORMATION, CORRECTION, AND DELETION – ART. 15, 16, 17 GDPR

Within the framework of the applicable legal provisions, you have the right to receive information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of data processing. Furthermore, you have the right to correct or delete this data, provided that there are no legal requirements preventing deletion.

REGULAR DEADLINES FOR DELETING PERSONAL DATA

If processing is based on your consent, we will process your data until you revoke your consent or the application process is complete. Personal data will be deleted after the statutory and contractual retention periods have expired. If personal data is not subject to any retention periods, it will be deleted as soon as the aforementioned purposes no longer apply. If your application is unsuccessful, your data will be deleted no later than 6 months after the end of the application process. If your application is successful and leads to an employment relationship, only the parts of the applicant data that are necessary for the fulfillment of the employment contract will continue to be stored and are subject to the statutory retention periods.

RIGHT TO RESTRICTION OF PROCESSING – ART. 18 GDPR

You have the right to request the restriction of the processing of your personal data. The right to restriction of processing applies in the following cases:

If you doubt the accuracy of your personal data stored by us. We usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

If the processing of your personal data is unlawful, you can request the restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data may – apart from its storage – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

WITHDRAWAL OF YOUR CONSENT – ART. 7 GDPR

You have the right to withdraw your consent in whole or in part at any time for the future. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. However, in the event of revocation, your application can no longer be considered or cannot be considered in full.

OBJECTION TO PROCESSING – ART. 21 GDPR

You have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. e and lit. f GDPR. The personal data will then no longer be processed unless there are compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject. However, in the event of an objection, your application can no longer be considered.

RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY – ART. 77 GDPR

You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates legal provisions.

Ticket purchase

Ticket purchase

In principle, you can purchase tickets anonymously by cash payment during our opening hours.

If you claim discounts, you may be required to present certificates or ID cards as proof of eligibility. These will be used by us solely to verify eligibility when issuing tickets. The tickets issued contain a barcode for admission control, which does not contain any personal data. If you purchase tickets as a member of a travel or school group, we only collect personal data from the respective ticket purchasers as part of the ordering and payment process.

Online ticketing

We also offer you the option of ordering tickets online, which will be sent to you by email immediately after payment. This is done via the service Booqi.me BV, Velmolenweg 54a 5404 LD, Uden, Netherlands.

The payment details are transmitted directly and exclusively to your chosen payment service provider (PayPal; Giropay; credit card payment). We have access to your first and last name, email address, and payment method via the payment provider solely for the purpose of accounting for the payment transactions. Your email address is required to process the order, as this is where the ticket will be sent electronically. To prevent and prosecute fraud against you, we will store this email address for six months after your account has been debited and the ticket has been used for admission.

We will only combine the card identification and email address for this purpose and will only use this data in cases of suspected fraud for clarification and, if necessary, legal prosecution of our interests.

 

First Cash Solutions GmbH

1. Description and scope of data processing

If a user selects a payment service provider during the ordering process, their data will be automatically transmitted to the payment service provider First Cash Solutions GmbH. By selecting the payment options offered by the controller, the user consents to the transfer of personal data necessary for payment processing.

The provider is First Cash Solutions GmbH, Okenstr. 7, 77652 Offenburg. Data required for payment processing is transmitted. This includes, for example, first name, last name, address, email address, IP address, telephone number, mobile phone number, and order details. The provider's privacy policy is available at https://www.firstcashsolution.de/service/datenschutz.html.

 

1. Legal basis for data processing

If the use of the payment service provider serves to fulfill a contract to which the user is a party, the legal basis for the processing of the data is Art. 6 (1) lit. b GDPR.

The legal basis for the processing of the data is also Art. 6 (1) lit. a GDPR if the user has given their consent.

2. Purpose of data processing

The transfer is carried out for payment processing, to prevent misuse, and for identity and credit checks.

3. Duration of storage

Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations. We have no influence on the storage of data by the provider. You can contact the provider using the contact details above.

4. Right to object and right to erasure

The user has the right to revoke their consent at any time by contacting the controller or the provider. It is not possible to revoke consent for data that is absolutely necessary for payment processing.

 

Contract processing

Description of processing

Customers can conclude various contracts with SOCCERBEAT GmbH for the use of the location and, if applicable, for additional services. This includes contracts for tickets, vouchers, and events. You can conclude these contracts in the SOCCERBEAT halls or via our online shop. The conclusion and fulfillment of the contracts is associated with the processing of personal data. We only process data that you actively provide. Within the framework of the various contracts for the use of the location and, if applicable, for additional services, we process the following personal data from you: title, first and last name, your email address, your address, and date of birth.

Purposes

Data processing is carried out for the proper fulfillment and execution of the respective contract. In addition, we require the data for your identification as a contractual partner, for correspondence with you, for billing our services, for handling any liability claims that may arise, and for asserting any claims against you. The processing of your date of birth serves to verify your age for liability and insurance reasons.

Legal basis

Data processing is necessary for the conclusion and execution of the contract in accordance with Art. 6 (1) (b) GDPR. Without the data specified in section 19.1, we are unable to process your application and fulfill our obligations under the contract.

Storage period

We will delete the data as soon as it is no longer required for the purpose for which it was collected. The personal data collected and processed by us in the course of contract processing will be stored until the expiry of the statutory retention period and then deleted.

This does not apply if we are obliged to store the data for a longer period in accordance with Article 6(1)(c) GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code (HGB), Criminal Code (StGB) or Fiscal Code (AO)); you have consented to further storage in accordance with Article 6(1)(a) GDPR, or further storage is necessary for us in accordance with Article 17(3)(e) GDPR for the establishment, exercise, or defense of legal claims. In this case, we will store the necessary data until the expiry of the relevant statutory limitation periods.

Recipients and transfer to third countries

Insofar as this is necessary for the execution of contracts with you in accordance with Art. 6 (1) (b) GDPR, your personal data will be passed on to third parties. In the case of purchases via our online shop, this includes, in particular, the transfer of data to external payment service providers.

 

Data processing

Data processing SOCCERBEAT facility

We process your personal data in connection with your use of our SOCCERBEAT facilities. We only process data that you actively provide when registering. Your data will only be processed by us and will not be sold, lent, or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we, as the client, are authorized to issue instructions to our contractors.

Data is not transferred to third countries and there are no plans to do so.

DATA PROCESSING SOCCERBEAT FACILITY

Processing framework: SOCCERBEAT facility

When you use our facility, we process the personal data listed below. We only process data that you actively provide when registering. Your data will be processed exclusively by us and will not be sold, lent, or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we, as the client, are authorized to issue instructions to our contractors. Data is not transferred to third countries, nor are there any plans to do so.

Camera surveillance

Description of processing

We carry out video surveillance indoors during business hours. The cameras used record events temporarily. The recordings are stored on our servers (hosted by IONOS). You may be recognizable in the recordings.

Purpose

Camera surveillance is used in this case to exercise our domiciliary rights, to prevent criminal offenses, and to preserve evidence in the event of criminal offenses, such as vandalism.

This is to safeguard and protect the rights and interests of SoccerBeat customers. Monitoring also acts as a deterrent and therefore serves both to prevent and investigate criminal offenses.

Legal basis

Processing is necessary to safeguard the legitimate interests of the controller (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 22.2.

Storage period

We store the recordings from the video cameras for a period of 48 hours, after which they are automatically deleted. This period of time is necessary in order to be able to view the recordings when necessary. If criminal offenses have been detected (e.g., damage to property through vandalism), we may continue to store the recordings for the purpose of securing evidence and for the assertion, exercise, or defense of legal claims, even beyond the statutory limitation periods.

Recipients

If we suspect that a crime has been committed, we use the video recordings to preserve evidence. In this case, the recordings made in this context will be passed on to the public prosecutor's office and/or the police.

“Februar Challenge” competition (February 1, 2026 - February 28, 2026) – Terms and conditions

 

1 Organizer

(1) The organizer of the competition is SOCCERBEAT GmbH, represented by its managing directors Volker Dingwerth, Torben Steffen, and Timm Ulrich.

(2) This competition is not affiliated with Instagram/TikTok or any other social media provider on which this competition may be announced.

2 Competition

(1) The organizer is holding a competition. For this purpose, it has provided one or more prizes and will award these to the winner(s) in accordance with the following conditions.

(2) Participation is linked to admission to SOCCERBEAT (MyZeil 2nd floor, Zeil 106, 60313 Frankfurt/Main).

3 Participation

(1) Participants take part in the competition by fulfilling the conditions of participation. Participants must take part in the “Februar Challenge.” Participation requires the purchase of a valid ticket for SOCCERBEAT. For the challenge, participants must play the “Reaktionswand” activity zone within SOCCERBEAT. The score achieved must be posted under the competition post on Instagram or TikTok. In addition, the competition post must be liked and the soccerbeat.official channel must be followed on Instagram or TikTok.

There may also be additional conditions, which can be found in the competition announcement (such as completing certain tasks).

(2) Participation requires access to SOCCERBEAT and therefore a valid ticket.

(3) Only a specific natural person may participate; legal entities may not participate. Multiple entries, for example under a pseudonym or using additional accounts or email addresses, are not permitted and will result in exclusion from the competition.

(4) The conditions for participation must be met during the duration of the competition and communicated to the organizer via the method provided. Participation by any means other than that provided for participation is excluded and will not be considered. Applications submitted before or after the competition period will not be considered.

(5) Participation is only possible for persons aged 14 and above. Natural persons residing in Germany who have an Instagram or TikTok account are eligible to participate.

4 Duration of the competition

(1) The competition runs from February 1, 2026, 12:00 p.m., to February 28, 2026, 11:59 p.m.

(2) During this period, participants can fulfill the participation requirements on Instagram/TikTok.

(3) The organizer is entitled to terminate the competition prematurely if actual or legal circumstances change during the duration of the competition that make it difficult to continue.

(4) The organizer is entitled to cancel the competition entirely if there is an important reason for doing so after the competition has been announced, such as spam-like mass abuse.

5 Exclusion from the competition

(1) Employees, staff, and organs of the organizer, as well as their relatives, are excluded from participation. This applies equally to all persons who were involved in the conception and implementation of the competition.

(2) The organizer is entitled to exclude participants from the competition if the participant

(a) violates the conditions of participation,

(b) attempts to manipulate the competition,

(c) provides false or misleading information in connection with their participation,

(d) does not respond to the announcement of their prize via the communication channel provided at the event within 7 days,

(e) revokes their consent to the storage and use of their personal data for the competition.

(3) If one of the circumstances in paragraph 2 a – d only becomes known after the prize has been awarded, the organizer is entitled to contest the award of the prize to a participant who met or meets the requirements of paragraph 2 a – d and to withhold the prize from this participant or reclaim it from them, as well as to claim damages. The awarding of the prize will then be repeated, excluding the participant in question.

6 Prizes

(1) The winner will receive the “Deluxe Gift Box” from Astor Film Lounge at MyZeil, containing the following items: 2 x movie tickets, 2 x drink vouchers, 1 x finger food plate voucher, 1 x popcorn voucher.

(2) The winner will be determined at random by means of a prize draw from among all duly registered participants who are eligible to participate and who have fulfilled the conditions of participation and, where applicable, the conditions for winning. To confirm their eligibility, the selected winner must present a valid ticket from the prize period (February 1, 2026 - February 28, 2026).

If this is not possible, another participant will be selected. The distribution of the prize (date and time of handover) must be agreed in advance with SOCCERBEAT GmbH.

(3) If costs are incurred in delivering the prize to the place of handover, these shall be borne by the organizer, unless they are based on special conditions imposed by the winner (e.g., travel expenses incurred by the participant).

(4) All other costs arising from the prize, in particular the proper taxation, if necessary, and travel expenses, shall be borne by the winner.

(5) If the winner does not respond to the announcement of the prize by the organizer via the communication channel specified for participation within 7 days, the participant will be excluded from the competition and a new draw will take place in accordance with paragraph 2.

(6) If the handover of the prize to the participant becomes objectively or subjectively impossible for reasons for which the organizer is not responsible, the organizer is entitled to determine another prize of equal value to be handed over to the winner.

(7) The claim to the prize cannot be transferred or assigned. No other prize is possible, and a cash payment of the prize is excluded.

7 Consent to the use of name

(1) Each participant agrees that, in the event of winning, they will be named in the medium used by the organizer for the competition.

This applies in particular to the website and all social media appearances of the organizer.

8 Liability

(1) Upon premature termination of the competition in accordance with § 4 or delivery of the prize, the organizer shall be released from all obligations arising from the competition.

(2) In any case, the organizer's liability is limited to the value of the prize, unless the damage was caused by gross negligence or intent on the part of the organizer, or the damage consists of injury to life, limb, or health.

9 Data protection

(1) The organizer will use the participant's data exclusively for the purpose of conducting the competition. The organizer will not pass on the data to third parties without the participant's consent.

(2) Participants can read the organizer's privacy policy for participation in the competition.

(3) Participants have the right to revoke their consent to the storage and use of their personal data at any time by contacting the address given in the legal notice. In this case, however, they will be excluded from the competition.

(4) For the contest participation agreement, contract data is collected in accordance with Art. 6 (1) lit. b GDPR (e.g., name and email address, address if applicable, facts concerning the fulfillment of the conditions of participation, and all other data transmitted electronically or for storage), insofar as it is necessary for the establishment, content design or changes to participation in the competition are necessary.

(5) The contract data will only be passed on to third parties if this is necessary for the fulfillment of the contract (in accordance with Art. 6 (1) (b) GDPR), if this corresponds to the overriding interest in effective performance (in accordance with Art. 6 (1) (f) GDPR) or if consent (in accordance with Art. 6 (1) (a) GDPR) or other legal permission has been obtained. The data will not be transferred to a country outside the EU unless the EU Commission has determined that data protection comparable to that in the EU exists, consent has been obtained, or standard contractual clauses have been agreed with the third-party provider.

6) Data subjects may request information about their stored personal data at any time free of charge. They may request the correction of inaccurate data (including by means of supplementation) as well as a restriction on its processing or even the deletion of their data at any time. This applies in particular if the purpose of processing has ceased to exist, if the necessary consent has been revoked and there is no other legal basis, or if the data processing is unlawful. The personal data will then be corrected, blocked, or deleted immediately within the legal framework. You have the right to revoke your consent to the processing of your personal data at any time. This can be done by sending an informal message, e.g., by email. The revocation does not affect the legality of the data processing carried out up to that point. The transfer of the contract data in machine-readable form may be requested. If there is concern that the data processing may violate the law, a complaint may be filed with the competent supervisory authority.

(7) As a matter of principle, the data will only be stored for as long as is necessary for the purpose of the respective data processing. Further storage may be considered, in particular, if this is still necessary for legal prosecution or for legitimate interests, or if there is a legal obligation to retain the data (e.g., tax retention periods, limitation periods).

10 Complaints, legal recourse

(1) Complaints regarding the conduct of the competition must be sent to the address given in the legal notice. The deadline for complaints is two weeks after the end of the competition. Complaints received after this deadline will not be considered.

(2) German law applies to this competition.