Privacy Policy

The controller within the meaning of the GDPR for the processing of personal data in connection with this website and the BBEA application process is:

Freibeuter 2010 e.V., Modersohnstraße 55, 10245 Berlin, Germany.

Dušan Radojević acts as BBEA project lead and operational contact. He is not considered an additional controller merely because he reviews applications and communicates with parents or guardians. Joint controllership within the meaning of Article 26 GDPR exists only where a corresponding arrangement has been concluded.

We process personal data for the following purposes: reviewing applications; responding to parents or guardians; determining whether a trial training can be offered; organizing trial-training dates; communicating decisions and next steps; managing participation if a player joins BBEA; and handling general contact requests.

Where processing is necessary to handle an application or to arrange requested trial training, it is based on Article 6(1)(b) GDPR (steps taken at the request of the data subject before entering into a participation arrangement).

Optional information (e.g. height details) is processed on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future.

General contact requests unrelated to participation are processed on the basis of our legitimate interest in responding to inquiries under Article 6(1)(f) GDPR.

The website provides an online application form. Because the offering is aimed at minors, the form should be completed and submitted by a parent or legal guardian.

On submission, the entered data is transmitted to the Web3Forms service, which delivers the application to BBEA by email (see “Recipients and processors”). Alternatively, you can contact us directly by email.

To protect against automated abuse (spam), the form contains a hidden field (honeypot). No additional personal data about you is collected in this process; no CAPTCHA and no tracking are used.

Through the application form we process the following required information:

• player first name
• player last name
• birth year
• current club
• parent or guardian full name
• parent or guardian email address
• parent or guardian telephone number
• basketball experience
• motivation for joining BBEA

In addition, the following details may be provided voluntarily: player height, father’s height and mother’s height. These fields are clearly marked as optional and are not required to submit the application.

Optional height information may be used to understand the player’s physical development and to support age-appropriate player-development planning. It is expressly not medical, genetic or health data.

The application concerns underage players and should be submitted by a parent or legal guardian. Regarding the player, we process only the information necessary for the application and the organization of a possible trial training. The contact details (email, telephone) relate to the parent or legal guardian.

This website is operated on Netlify. When the website is accessed, the hosting provider processes technical connection data necessary to deliver the website and to ensure its secure, reliable and technically functional operation. This may include: IP address, date and time of access, requested page or file, referrer URL where transmitted, browser and operating-system information, HTTP status, data volume, and security and error information.

The legal basis is our legitimate interest in the secure and functional operation of the website under Article 6(1)(f) GDPR. The specific retention period follows the hosting provider’s configuration.

When you contact us by email, we process the contact details you provide and the content of your message in order to answer your inquiry. The legal basis is Article 6(1)(b) GDPR for participation-related or pre-contractual communication, Article 6(1)(f) GDPR for general inquiries, and Article 6(1)(a) GDPR where the communication is genuinely based on consent.

The application page additionally offers contact via WhatsApp. The link opens the external WhatsApp service; no WhatsApp communication is initiated automatically. Only when you click the link or send a message does WhatsApp process data under its own terms.

When you contact us via WhatsApp, we process your telephone number, the profile information visible to us, the content of your messages and the communication metadata required to respond. According to WhatsApp’s official European privacy information, the service is provided in Europe by WhatsApp Ireland Limited. WhatsApp may process data outside the EEA.

If you do not want to use WhatsApp, you can contact us by email instead.

Access to personal data is granted only to persons and entities that need it to fulfil the stated purposes:

• authorized BBEA personnel
• authorized representatives of Freibeuter 2010 e.V.
• coaches involved in organizing trial training, where necessary
• the hosting provider (Netlify)
• the form service Web3Forms, to deliver the application message
• the email provider through which we receive and answer messages

Personal data is not sold. Data is shared only with the recipients or processors described above, to the extent described.

On submission, the application form transmits the entered data to the Web3Forms service in order to deliver the application by email. The data entered in the form is transmitted. Web3Forms acts as a processor on our behalf. You can find the provider’s privacy information at the link below.

The precise corporate entity, the existence of a data-processing agreement under Article 28 GDPR, and the processing location are being confirmed before production use.

Some of the services used (in particular Web3Forms, WhatsApp and possibly the hosting provider) may process personal data outside the EU or EEA. Where data is transferred to a third country, such transfer relies on appropriate safeguards (e.g. Standard Contractual Clauses) or an adequacy decision, where available. We do not claim that data never leaves Europe.

We retain personal data only as long as necessary for the stated purposes:

• General inquiries: deleted no later than six months after the inquiry has been conclusively handled, unless further storage is necessary.
• Unsuccessful applications: deleted no later than six months after the application and trial-training process has ended.
• Applications that lead to participation: relevant data may be retained for the duration of participation and then deleted, except where statutory retention obligations or legal claims require longer storage.
• Consent documentation: retained for as long as necessary to demonstrate the consent and defend potential legal claims.
• Server logs: according to the hosting provider’s actual retention period.
• Accounting and payment records: retained according to applicable statutory obligations.

This website uses only technically necessary means to deliver the page. It does not currently use analytics, advertising tracking or marketing cookies, and no tracking takes place. Likewise, no non-essential data is stored in your device’s localStorage or sessionStorage. Data is transmitted to Web3Forms only when you submit the application form.

The fonts used are served by the project itself (self-hosted). No connection to external providers such as Google Fonts is made when the website is accessed. No third-party content (e.g. YouTube, Vimeo, Google Maps, Instagram, TikTok) is embedded. All images shown on the website are provided by the project itself.

Photographs or videos showing identifiable players are published only where the necessary permission has been obtained from the player’s parent or legal guardian and, where appropriate considering the player’s age and maturity, from the player.

The legal basis is consent under Article 6(1)(a) GDPR. Consent may be withdrawn for future publication. Withdrawal does not affect the lawfulness of publication before withdrawal.

The fields marked as required in the application form are necessary to review the application, contact the parent or guardian and organize possible trial training. Without the required information, BBEA may be unable to process the application.

Fields marked as optional are voluntary and are not required for submission.

BBEA does not use automated decision-making or profiling within the meaning of Article 22 GDPR. Application decisions are made by people.

Where the legal requirements are met, you have the following rights:

• right of access (Article 15 GDPR)
• right to rectification (Article 16 GDPR)
• right to erasure (Article 17 GDPR)
• right to restriction of processing (Article 18 GDPR)
• right to data portability (Article 20 GDPR), where its requirements are met
• right to object (Article 21 GDPR)
• right to withdraw consent (Article 7(3) GDPR)
• right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Withdrawal of consent is possible only for processing that is based on consent; the lawfulness of processing carried out before withdrawal remains unaffected.

Where we process personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing.

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The competent authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration and disclosure. Data is transmitted over an encrypted HTTPS connection. However, no method of internet transmission or storage can guarantee absolute security.