Privacy policy

Privacy policy of EHC Regensburg e.V.

1. Controller

EHC Regensburg e.V.
Walhalla-Allee 22
93059 Regensburg
Email: info@ehcregensburg.de
Website: www.ehcregensburg.de

Data protection officer: We have not appointed a data protection officer, as the club is not legally required to do so (Art. 37 GDPR, § 38 BDSG). The contact for all data protection questions is the board, email: info@ehcregensburg.de

Competent supervisory authority: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, phone 0981 180093-0, email poststelle@lda.bayern.de

2. Data protection at a glance

This statement describes the nature, scope and purpose of the processing of personal data by the club. Our website does not load fonts, maps, videos or scripts from third-party servers. Connections to third parties only occur when you click a link to an external service.

Your rights: Access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent and complaint to the supervisory authority. Contact for all rights: info@ehcregensburg.de

3. Data processing on the website

3.1 Hosting and server log files
The website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, with whom a data processing agreement pursuant to Art. 28 GDPR is in place. When the site is accessed, browser type, operating system, referrer URL, host name, time and IP address are processed. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). Retention period: 30 days. The host evaluates the access data on the server side to produce anonymised visitor statistics (IONOS WebAnalytics). No cookies are set and no data is passed on to further third parties.

3.2 Cookies
We set technically necessary cookies on the basis of Art. 6 (1) (f) GDPR and § 25 (2) TDDDG. All other cookies are only set with your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent at any time.

3.3 Contact by email and contact form
If you write to us by email or via the contact form, we process your name, your email address, the selected topic, your message and the time in order to answer your enquiry. Messages from the form are forwarded to the board by email and are not stored on the website. If a message could not be sent, the entries are cached for a maximum of 10 minutes so that you do not have to type them again. To protect against spam we use no cookies and no external services, but a hidden field, a time lock and a maths question. For this purpose your IP address is stored in encrypted (hashed) form for one hour in order to limit the number of messages per sender. The legal basis is Art. 6 (1) (f) GDPR (answering enquiries, protection against misuse), and in the case of a contractual or pre-contractual relationship (e.g. membership) Art. 6 (1) (b) GDPR. The data is deleted as soon as the enquiry has been completed and no retention obligations apply.

4. Data processing in club operations

4.1 Member data
Name, address, contact details, date of birth, bank and fee data, team and eligibility to play. The purpose is the administration of membership and participation in games. Legal basis: Art. 6 (1) (b) GDPR in conjunction with our statutes. Retention period: the data is deleted after the end of membership as soon as it is no longer required. Data relevant for tax purposes, in particular fee payments and accounting records, is kept for up to 10 years (§ 147 AO).

4.2 Player and league data
Recipients: Bavarian Ice Sports Association (BEV), German Ice Hockey Federation (DEB), insurers. Legal basis: Art. 6 (1) (b) GDPR.

4.3 Transfer cards and international licences
Recipients: the International Ice Hockey Federation IIHF, based in Switzerland, and foreign federations where a player transfer requires it. An adequacy decision of the EU Commission exists for Switzerland. Legal basis: Art. 6 (1) (b) GDPR. The costs are borne by the player (see club rules).

4.4 Photos and videos
We only publish portrait and team photos on our website and in social networks with the consent of the persons depicted (Art. 6 (1) (a) GDPR), and for minors with the consent of their parents or guardians. Consent can be withdrawn at any time with effect for the future. For recordings at public games and events, see section 7.

4.5 Health data
We only process health information (for example emergency information or notes relevant for training) if you provide it voluntarily and have given your explicit consent (Art. 9 (2) (a) GDPR). In a medical emergency, data may be passed on to emergency services to protect vital interests (Art. 9 (2) (c) GDPR). Only the persons who need the information for this purpose have access. The data is deleted as soon as the purpose no longer applies, at the latest at the end of membership.

4.6 Publications on the website
On our website we name the board members, coaches and team staff with their functions, as well as game results and schedules. For office holders, the legal basis is Art. 6 (1) (b) GDPR in conjunction with their club function; otherwise it is our legitimate interest in providing information about our games (Art. 6 (1) (f) GDPR). We only publish rosters with names and photos with the consent of the players (Art. 6 (1) (a) GDPR). Objections and withdrawals can be sent to info@ehcregensburg.de at any time.

5. External service providers and links

5.1 Fan shop (fan12)
The fan shop is operated by fan12. Orders and the related data processing are handled exclusively by fan12. From our website you only reach it via a link.

5.2 Club management software netXP
The processor is netXP GmbH & Co. KG. The servers are located in Germany and a contract pursuant to Art. 28 GDPR is in place.

5.3 Donations via betterplace.org
For donations we link to the betterplace.org platform. Data processing for donations takes place there under the platform’s own responsibility.

5.4 Social networks
On our website we link to Instagram, Facebook, TikTok and LinkedIn. No plugins are embedded. Data is only transferred when you click a link and open the respective network. The privacy policies of the providers apply to processing there.

5.5 Sponsors and partners
The logos of our sponsors are stored on our own server. The links lead to the sponsors’ websites, for whose data processing they are responsible.

6. Audience measurement

We use IONOS WebAnalytics for anonymised analysis of usage. The legal basis is Art. 6 (1) (f) GDPR.

7. Data protection at club events

Photos and videos are taken at public games and club events, which we use to report on club life on our website and in social networks. The legal basis is our legitimate interest in presenting the club (Art. 6 (1) (f) GDPR). We only show children and young people with the consent of their parents or guardians. You can object to publication at any time (Art. 21 GDPR); an email to info@ehcregensburg.de is sufficient. We will then remove the recording immediately.

8. Disclosure of data

Recipients are BEV, DEB, IIHF, the tax office and insurers. Data is not passed on to commercial third parties.

9. Data security

SSL/TLS encryption, servers in Germany, regular backups and access restrictions.

10. Retention periods

Member data: until the end of membership, data relevant for tax purposes for up to 10 years (§ 147 AO). Player data: membership plus 3 years. Photos and videos: until withdrawal or objection. Health data: until the purpose no longer applies, at the latest at the end of membership. Contact enquiries: until the enquiry has been completed. Server logs: 30 days.

11. Data subject rights

Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Please send requests to info@ehcregensburg.de; we will reply within one month.

12. Changes to this statement

This privacy policy will be adapted as necessary and published on the website.

13. Contact

EHC Regensburg e.V., board, Walhalla-Allee 22, 93059 Regensburg, info@ehcregensburg.de

Last updated: October 2026