DATA PROTECTION INFORMATION on the accreditation procedure for media representatives

according to Art. 13, 14 and 21 of the General Data Protection Regulation (GDPR)

In the following, we, Bayer 04 Leverkusen Fußball GmbH (hereafter referred to as ‘Bayer 04’ or ‘we’), inform you as employees and authorised representatives of accreditable media and service providers in the areas of print, photo and audio 

• about the processing of your personal data that you provide to us as part of the accreditation process,
• about the processing of personal data that we may collect from you during the accreditation process,
• how we handle and protect your data,
• to whom we make the data available and
• how you can exercise your rights.

We use the LimeSurvey tool from the service provider LimeSurvey GmbH, Papenreye 63, 22453 Hamburg, which we have integrated into our website, to carry out the accreditation. You can find more information on LimeSurvey in section 4, ‘Transfer of data, use of service providers’.

Please note that if an employee or authorised representative of media and service providers eligible for accreditation does not submit the accreditation application themselves but via a central contact person, this central contact person must ensure that this data protection information is forwarded. 

1. Responsible body and contact details of the data protection officer

The responsible body for your personal data in the application process is:

Bayer 04 Leverkusen Fußball GmbH
Bismarckstr. 122 - 124
51373 Leverkusen
Telephone: +49 (0) 214/5000 1904
Fax: +49 (0) 214/8660-512
http://www.bayer04.de/en-us

How to contact the data protection officer:
Bayer 04 Leverkusen Fußball GmbH
Datenschutz
Bismarckstr. 122 - 124
51373 Leverkusen

Email: datenschutz@bayer04.de

2. Data origin and data categories

As part of the accreditation process, we collect and process your personal data insofar as this is necessary for the decision on accreditation with us.

Employees and authorised representatives of accreditable media and service providers only have to provide the data that is required for the decision on the granting of accreditation and its exercise, or that B04 is legally obliged to collect. Without the provision of this data, we will generally not be able to consider and review the accreditation application.

The following categories of data are collected and processed for accreditation:

• Core data (full name, date of birth) 
• Contact details (e,g. email)
• Employment status and company
• Reason for accreditation/authorisation
• Documents if required, e.g. press pass

In addition, further data may be collected through the use of the LimeSurvey tool integrated on our websites.
When the LimeSurvey tool is called up, information is automatically transmitted to our systems by the browser used on the end device. This information is stored temporarily. The following information is collected and stored until it is automatically deleted:

• Date and time of access
• Name and URL of the request
• Amount of data transferred

Our website also processes other data during your visit (e.g. your IP address) that is not directly related to accreditation. The general data protection information on the processing of your data when using our website can be found here.

3. Legal basis and purposes of data processing

Data processing is carried out in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes:

For the purposes of the accreditation procedure, Art. 6 para. 1 b) GDPR

Your data will be processed for the purposes of carrying out the accreditation procedure and for deciding on the granting of accreditation and its use.

In line with the balancing of interests, Art. 6 para. 1 f) GDPR

Where necessary, we process your data beyond the actual purposes of the accreditation procedure to protect our legitimate interests or the legitimate interests of third parties, e.g.:

• Recordings of employees and authorised representatives of accreditable media and service providers at the events: Bayer 04 and the respective responsible association (UEFA, DFL e.V., DFL GmbH and/or DFB) or third parties commissioned or otherwise authorised by them (e.g. radio, press) may independently of each other create image and sound recordings for public reporting and advertising of the respective event and the respective competition, which depict the employee and representative of media and service providers eligible for accreditation in this capacity. The legitimate interest of Bayer 04 or third parties commissioned or otherwise authorised by Bayer 04 (e.g. radio, press) lies in the interest of showing and exploiting the event concerned in the media. These video and audio recordings can be processed, used and publicly reproduced by Bayer 04 and the respective responsible association and the respective affiliated companies according to § 15 AktG (German Stock Corporation Act) as well as by third parties authorised by them (e.g. radio, press) within the scope of the same legitimate interest.
• Assertion and exercise of legal claims and defence in legal disputes
• Ensuring IT security and IT operations, in particular:
• Ensuring a smooth connection to the website
• Ensuring user-friendly use of our website
• Evaluation of system security and stability and
• for other administrative purposes.

Performance of tasks in the public interest, Art. 6 para. 1 e) GDPR, defence against threats to state or public security, Section 24 para. 1 no. 1 BDSG

Where necessary, we process your data for the purposes of security checks and transfer data to the competent security authorities in the event of a specific risk situation, if this:

• is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us (Art. 6 (1) (e) GDPR); or
• is necessary for the defence against threats to state or public security (Section 24 (1) No. 1 BDSG).

Legal requirements, Art. 6 para. 1 c) GDPR

In addition, Bayer 04 is subject to various legal obligations, i.e. legal requirements that may make it necessary to process your data. The purposes of processing include, for example, the fulfilment of control and reporting obligations under tax law.

Consent, Art. 6 para. 1 a) GDPR

If you have given us your consent to process data for specific purposes, we will process the data based on this consent. Any consent given can be revoked at any time. The revocation only takes effect for the future. Processing that took place before the revocation is not affected.

4. Transfer of data, use of service providers

We collect and use your data in accordance with legal requirements and only for our own purposes. Your data will not be passed on to so-called third parties unless there is a legal obligation to do so, you have consented to the transfer or the transfer is necessary for the fulfilment of a contract between you and us.

Use of service providers

Certain third parties may receive your personal data in order to process it on behalf of Bayer 04 for the respective processing purpose.

LimeSurvey

To carry out the accreditation process, we use the LimeSurvey software from the service provider LimeSurvey GmbH, Papenreye 63, 22453 Hamburg, which we have integrated into our website. The service provider is contractually obliged in accordance with Art. 28 GDPR to take appropriate technical and organisational security measures to protect personal data and to process personal data only in accordance with the instructions of Bayer 04.

5. Location of data processing

Your data is processed on servers in Germany. In exceptional cases, information that you provide to us may be stored on servers within the European Union (EU). No transfer to a third country is intended.

6. Storage duration

We only store your personal data for as long as this is necessary for the decision and implementation of the accreditation (usually 6 months) or as long as we are obliged to do so by legal requirements.

In the event that you have consented to your personal data being stored for a longer period of time, we will store it in accordance with your declaration of consent.

7. Your rights

According to the GDPR, you are entitled to data subject rights, in particular the right to information regarding the personal data stored about you (Art. 15 GDPR), correction of incorrect data (Art. 16 GDPR), deletion of data (under the conditions of Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability according to Art. 20 GDPR; you also have the right to object to the processing, insofar as this is done to protect legitimate interests (Art. 21 GDPR). In addition, you have the right to lodge a complaint with the relevant data protection supervisory authority (Art. 77 GDPR).

Right of revocation

If your data is processed on the basis of your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time with effect for the future.

Please note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements.

Right of objection

If your personal data is processed in accordance with Art. 6 para. 1 f) GDPR to safeguard legitimate interests or in accordance with Art. 6 para. 1 e) GDPR to perform tasks in the public interest, you have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR and to demand that we stop processing it. The right to object exists only to the extent provided for by law. Your objection may be opposed by legitimate interests that make further processing necessary.

You are welcome to address your rights to the contact details given in point 1.

Automated decision-making in individual cases including profiling

We also ensure your rights in accordance with Art. 22 GDPR. In the accreditation process, you or your data are not subject to decisions based solely on automated processing - including profiling.

8. Changes to the privacy policy

Advances in technology, legal requirements or changes to processes may also have an impact on this privacy policy, among other things. We therefore reserve the right to amend this privacy policy at any time with effect for the future. The current version of the privacy policy can be found on this website. Please visit this subpage of the website regularly to keep up to date with the applicable provisions.​

Last updated: 07/08/2024