List of active policies
We have an interest in protecting your personal data. Therefore, we comply with the European (esp. GDPR) and national (BDSG) data privacy laws.
This Data Privacy Statement will explain to you (the data subject within the meaning of the GDPR) how we, the Teaching Staff of the ELF, represented by Malte Scholz (the controller and mainly the processor within the meaning of the GDPR), will collect and process your personal data on our webpages and web services, esp on this web service (afrul.es).
Controller within the meaning of the GDPR and other data privacy laws is the:
30161 Hanover, Germany
Contact E-Mail: email@example.com
Information on which data is collected and for which objective
General Information, Scope and Legal Basis
We will process your personal data lawfully, fairly and in a transparent manner. When we process your data, your and any other individual rights must be protected.
We process all personal data only for specified, explicit and legitimate purposes as well as adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. We only keep your personal data for no longer than it is necessary for the purposes.
In general, we only process your data if you have given consent to the processing of your personal for the specified purposes in this policy. For other legitimate legal bases, see Art. 6 GDPR.
To protect your personal data and therefore, for security reasons our web pages and other services may use either an SSL or a TLS encryption. If the SSL or TLS encryption is activated, your personal data which you, we or the game transfer, cannot be read by third parties. You can recognize an encrypted connection for example by checking your web browser's address line which switches from "http://" to "https://". Some browser changes also their appearance or shows a lock sign to provide you the information that the shown web page uses an encryption.
We host all data exclusively on servers which are located in Member States of the European Union. No personal data will be saved outside of the European Union. The server we use is rented at netcup and configured by our own.
How we will use your data and what is the objective?
We will collect and process your personal data:
- to give you access to our online courses for officials;
- to teach you the rules and the Official's mechanics of the European League of Football;
- to test your knowledge and to organize other tests officials has to pass which might be also required to be an official in the ELF;
- to organize online and offline rules clinics;
- to share and discuss information about the current season and played season.
Without restricting the foregoing, the processed data, especially those which are gathered by the tests (f.e. rules tests), may be published in an anonymized way with the purpose to improve the performance of the officials and to improve the ELF.
What data we collect?
We collect several different types of personal data:
- Your full name,
- Your pseudonym (nickname),
- Your email address,
- Your native language and other languages you speak,
- Information about your Time Zone and City,
- You can optional add a picture (this is not required!),
- Contact Details you add on an optional basis,
- Information about your experiences in officiating or in American Football,
- Your function inside the European League of Football or any other Football Association,
- Feedback about your clothing size in order to organize your uniforms and Shirts,
- Your test answers and the results of all your tests (for examination purposes, including the correction of your test and all temporary answers as well as the time and date of your answers),
- Your role inside this platform and tasks,
- Your posted forum entries, questions, replies, answers and solutions,
- Data files your upload,
- Awards which are awarded on this webpage,
- Information about how afrul.es shall notify you about news,
- The IP of your connections to our servers,
- The date and time of your access on our servers, and
- Information when you give consent to an agreement (esp. IP and timestamp).
What is the legal basis of our processing?
The legal basis of our collecting and processing of your personal data is Art. 6 Sec. 1 lit. a GDRP, namely your given consent to the processing of your personal for the specified purposes in this policy.
The legal basis to save your data when you give consent to an agreement within our agreement system is Art. 6 Sec. 1 lit. b and f GDPR, because the processing is necessary for the performance of a contract and for the purpose of the legitimate interest perused by us, the controller.
What is the duration?
We only keep your personal data for no longer than it is necessary for the purposes described above. If we don't need your personal data no longer for the purposes set out by this policy, we will delete it.
Special note on your right of revocation
You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before your withdrawal! Just contact us via the email written above.
CookieWe use the cookie MoodleSession. This Cookie is designed for your login and to save your individual configuartions.
You can delete this Cookie inside your Browser.
Recording of Data on our web pages
To run our web pages we record data, especially within our Server log files. Our web pages run on our own server we rent.
Server Log Files
We (and our web pages and servers they run on) automatically collect, process and store information in Server Log Files to provide you a technically error free experience and to optimize our web pages. Your browser will communicate the following information to us automatically:
- Your IP address,
- The time of the server inquiry,
- The type and version of the used browser,
- The used operating system,
- The hostname of the accessing computer and
- Referrer URL.
The legal basis of our collecting and processing of your personal data in this context is Art. 6 Sec. 1 lit. f GDPR, namely our legitimate interest in the technically error free depiction and optimization of our web pages.
What is the duration?
We only keep your personal data for no longer than it is necessary for the purposes described above. If we don't need your personal data no longer for the purposes set out by this policy, we will delete them.
What are your data protection rights?
Right of access, Art. 15 GDPR
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22 Sec. 1 and Sec. 4 and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right of rectification, Art. 16 GDPR
You have the right to obtain from the us without undue delay the rectification of inaccurate personal data concerning yourself. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right of erasure, Art. 17 GDPR
In accordance to Art. 17 GDPR and under the conditions set out by Art. 17 GDPR you have the right of erasure, in other words a "right to be forgotten".
Right to restriction of processing, Art. 18 GDPR
Under the conditions of Art. 18 you have the right to restriction of processing.
You have the right to obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pursuant to Article 21 Sec. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Notification obligation, Art. 19 GDPR
We communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17 Sec. 1 and Article 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request it.
Right to data portability, Art. 20 GDPR
Under the conditions set out by Art. 20 GDPR you have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us.
Right to object, Art. 21 GDPR
You have the right to object. Therefore, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before your withdrawal! Just contact us via the email written above.
Automated individual decision-making, including profiling, Art. 22 GDPR
Under the specifications and conditions set out by Art. 22 GDPR you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning yourself or similarly significantly affects you.
Right to lodge a complaint with a supervisory authority, Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to yourself infringes this Regulation.