7. Integrated external services (website)
7.1 Matomo
We use the open source web analytics platform on our website Matomo for statistical evaluation of the use of our website. Matomo enables us to collect and evaluate information about the use of our website in order to improve our offer technically and in terms of content.
Matomo is operated by us and hosted on our own infrastructure. Personal data is not transmitted to external third parties as part of web analysis.
When using Matomo, the following data in particular may be processed:
- abbreviated or anonymized IP address,
- Date and time of access,
- pages accessed and dwell time,
- information about the device used and the browser,
- technical information on the use of the website.
The IP address is anonymized before it is stored. The collected data is not merged with other databases or individual users are identified.
The processing is carried out on the basis of our legitimate interest in the analysis and optimisation of our online offer in accordance with Art. 6 (1) (f) GDPR. If consent is required, the processing will only take place after your consent via our consent management system in accordance with Art. 6 (1) (a) GDPR.
More information about Matomo:
https://matomo.org/privacy/
7.2 Google reCAPTCHA
On forms on our website, we use Google reCAPTCHA from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA protects our forms from abusive automated access by bots. To detect this, reCAPTCHA analyzes user behavior and technical browser/device data (including mouse movements, click patterns, dwell time, installed plugins, screen resolution) and transmits them to Google together with the IP address. reCAPTCHA is loaded only after consent.
US data transfer secured via EU-US DPF. Legal basis: Art. 6 para. 1 lit. a GDPR. Privacy Policy: https://policies.google.com/privacy
7.3 sourcebuster.js
On our website, we use the sourcebuster.js script, a tool for tracking traffic sources (e.g. UTM parameters, referrers). The author of the script is Alex Fedoseev. Cookies are set (including sbjs_current, sbjs_first, sbjs_session, sbjs_udata), which are used to store technical information about the origin of your website visit.
Legal basis
The integration takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. Consent can be revoked at any time with effect for the future, e.g. via our consent management tool (cookie settings).
7.4 Google Fonts
For the uniform display of fonts, so-called Google Fonts are integrated into our website, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (within the Google LLC group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When the fonts are loaded, a connection to Google servers can be established and your IP address can be transmitted in the process. The integration takes place, among other things, in connection with embedded YouTube videos.
Legal basis
The integration takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG.
Transfer to third countries
As part of the use of Google Fonts, data may be transmitted to the USA. Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
Further information: https://policies.google.com/privacy
7.5 YouTube (NoCookie Mode)
Videos from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (subsidiary of Google Ireland Ltd.) are embedded on some pages of our website. We only use the extended data protection mode (youtube-nocookie.com). In this mode, YouTube does not store any information about visitors until the video is played. Only when playback is connection data (IP address, timestamp, device and browser information) transmitted to YouTube/Google. If you’re signed in to your Google Account at the time, YouTube can associate the interaction with your account. YouTube videos are only loaded after consent.
US data transfer secured via EU-US DPF. Legal basis: Art. 6 para. 1 lit. a GDPR. Privacy Policy: https://policies.google.com/privacy
7.6 Instagram / Meta
Content from Instagram is integrated into our website. The provider is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Instagram content is only loaded after consent. When loading, your browser connects directly to Meta servers; IP address, browser type, operating system and referrer URL are transmitted. If you are logged in to Instagram, Meta can assign the visit to your account. Even without a login, Meta can create a pseudonymous user profile via social plugins.
US data transfer secured via EU-US DPF. Legal basis: Art. 6 para. 1 lit. a GDPR. Privacy Policy: https://privacycenter.instagram.com/policy/
7.7 Handball.net (Widget)
On our website, we integrate a widget from the German Handball Federation (DHB), Willi-Daume-Haus, Strobelallee 56, 44139 Dortmund, under → SCM YoungsterS juniors. The widget displays match schedules, results and tables. Your browser calls up handball.net’s servers directly; your IP address will be transmitted to handball.net for the transmission of the game data. Handball.net creates anonymized view statistics that are stored for a maximum of three months.
Legal basis
Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing up-to-date match data for our junior teams without having to maintain it manually. The widget does not set a cookie or comparable storage technology, so that there is no obligation to consent according to § 25 para. 1 TDDDG.
Further information: https://www.handball.net/datenschutz
7.8 HBL live ticker (Handball-Bundesliga GmbH / Sportradar Ads)
On subpages of our website (including in the Match Center) we integrate the live ticker of the Handball-Bundesliga, provided by Handball-Bundesliga GmbH, Edmund-Rumpler-Str. 4, 51149 Cologne. The live ticker is based on the “Live Sports Centre” of Sportradar AG, Feldlistrasse 2, CH-9000 St. Gallen, Switzerland, which collects and provides match data as the official data partner of the Handball Bundesliga. As part of this integration, the Sportradar Ads service is also loaded, which serves the programmatic display of advertising. The service is only loaded after consent.
Legal basis
The integration takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG.
Transfer to third countries
Sportradar AG is based in Switzerland. For Switzerland, there is an adequacy decision by the EU Commission, so that data transfers are permissible without additional guarantees.
Further information: https://sportradar.com/privacy-notice/ · https://www.daikin-hbl.de/de/hbl/hbl-gmbh/datenschutz
7.9 Withgoogle Websites
Some subpages of our website contain content from withgoogle.com, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When this content is loaded, personal data such as IP address, browser type and device information may be transmitted to Google’s servers.
Legal basis
The integration takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG.
Transfer to third countries
In the course of using Withgoogle websites, data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
Further information: https://policies.google.com/privacy
7.10 WooCommerce (Shop Features)
For order processes and shopping cart functions in connection with our online shop, we use the plugin WooCommerce, a service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Technically necessary data (including shopping cart contents, session identifiers) are processed in order to enable the shopping process.
Legal basis
Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) for the ordering process itself; Art. 6 para. 1 lit. f GDPR for purely functional shopping cart cookies outside of a specific ordering process.
7.11 Spotify
Functions of the music service Spotify are integrated into this website. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on this website. For an overview of Spotify plugins, see https://developer.spotify.com.
This allows a direct connection between your browser and the Spotify server to be established via the plugin when you visit this website. This gives Spotify the information that you have visited this website with your IP address. If you click on the Spotify button while logged in to your Spotify account, you can link the content of this website to your Spotify profile. This allows Spotify to associate the visit to this website with your user account.
We would like to point out that cookies from Google Analytics are used when using Spotify, so that your usage data can also be passed on to Google when using Spotify. Google Analytics is a tool of the Google Group for the analysis of user behavior based in the USA. Spotify is solely responsible for this integration. As the website operator, we have no influence on this processing.
Legal basis
The storage and analysis of the data is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the appealing acoustic design of his website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
For more information, please see Spotify’s privacy policy: https://www.spotify.com/de/legal/privacy-policy/. If you do not want Spotify to be able to associate your visit to this website with your Spotify user account, please log out of your Spotify user account.
7.12 X (formerly Twitter)
This website integrates functions of service X (formerly Twitter). These functions are offered by the parent company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The data controller of individuals living outside the United States is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
When the social media element is active, a direct connection is established between your device and the X server. X (formerly Twitter) thus receives information about your visit to this website. By using X (formerly Twitter) and the “Re-Tweet” or “Repost” function, the websites you visit are linked to your X (formerly Twitter) account and announced to other users. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by X (formerly Twitter).
Legal basis
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The consent can be revoked at any time.
Transfer to third countries
The data transfer to the USA is based on the standard contractual clauses of the EU Commission (details: https://gdpr.x.com/en/controller-to-controller-transfers.html). The company is also certified under the EU-US Data Privacy Framework (DPF). Further information: https://www.dataprivacyframework.gov/participant/2710.
For more information, please see X’s (formerly Twitter) privacy policy at https://x.com/de/privacy. You can change your privacy settings at X (formerly Twitter) in the account settings under https://twitter.com/account/settings.
