Privacy Policy
Privacy Policy, as of 16 March 2026
Table of Contents:
- General information
- Responsible body for data processing
- Processing of your data
- Visits to our websites (server log files)
- Enquiries via contact forms on our website and e-mail/messenger, telephone enquiries
- Comment function
- Processing of supplier data and data from other service providers
- Direct advertising
- Applicant data
- Disclosure of your data to third parties
- Processing of data for the assertion of legal claims, defence against risks and for the fulfilment of retention obligations
4. Storage and deletion periods for personal data
5. Personal rights for data processing
6. Right to object
7. Right to withdraw consent
8. Complaints about data protection violations to the supervisory authorities
9. Obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing
10. Legal or contractual regulations for the provision of your personal data as well as information about the necessity for the conclusion of the contract as well as about your obligation to provide the personal data and possible consequences of non-provision
11. Automated decisions in individual cases, including profiling
12. Data security
13. Use of cookies and similar technologies on our website
14. Questions/comments
15. Social media pages
1. General information
This privacy policy applies to this website and to our following social media pages:
- Facebook: https://www.facebook.com/ECSSOfficial
- Instagram: https://www.instagram.com/e_c_s_s/ and https://www.instagram.com/eurjsportsci_/
- YouTube (ECSS): https://www.youtube.com/@ECSSTV
- LinkedIn: https://www.linkedin.com/company/european-college-of-sport-science-ecss-/ und https://www.linkedin.com/company/ejss/
- X/Twitter: https://x.com/E_C_S_S and https://x.com/EurJSportSci
- Bluesky: https://bsky.app/profile/ecssofficial.bsky.social and https://bsky.app/profile/eurojsportscience.bsky.social
We take the protection of your personal data very seriously. Data is ‘processed’ by us in accordance with the applicable statutory data protection regulations, in particular the European General Data Protection Regulation (hereinafter referred to as GDPR; in German: Datenschutz-Grundverordnung (DSGVO)) and the country-specific data protection regulations.
‘Personal data’ means any information relating to an identified or identifiable natural person; an identifiable natural person is anyone who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Below we inform you about the processing of your data, in particular about the type, scope and purposes of the collection and use of personal data as well as the corresponding legal basis of the individual processing operations. In addition, as part of our privacy policy, we explain what rights you are entitled to with regard to data processing.
2. Responsible body for data processing
You can reach the body responsible for data processing using the contact details below:
European College of Sport Science e.V.
Am Sportpark Müngersdorf 6
50933 Cologne, Germany
Email: office@sport-science.org
Phone: +49 221 9626 2771
The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Type, scope, purposes and legal basis of the processing of your data
We only process personal data if this is permitted by law, in particular to process enquiries, to fulfil contracts, if there is a legitimate interest or if you consent to the processing of your personal data.
Below we inform you about the type, scope, purposes and legal basis of the processing of your personal data:
a) Visiting our website (server log files)
When you visit our website, the server stores data in so-called server log files, which your internet browser automatically transmits to the server, in particular
- Visited website
- Date & Time at the point of access
- Amount of data sent in bytes
- Source/reference from which you accessed the website
- Browser used
- Operating system used
- IP address used (anonymised if necessary)
The data collected is only used for statistical analyses and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of illegal use.
This data is processed in order to enable the use of the Internet pages you have accessed, for statistical purposes, to improve our Internet offering and for security against unlawful cyber-attacks and to exercise, assert or defend against legal claims. Your IP address will only be stored for as long as is necessary to defend against possible cyber-attacks and to provide law enforcement authorities with the information necessary for prosecution.
The aforementioned data is processed separately from all personal data that you provide to us when you visit our website and/or use a service and is not merged under any circumstances.
This data processing described above has its legal basis in Article 6(1)(b) GDPR for the implementation of necessary pre-contractual measures, which are carried out at your request in order to enable you to use the Internet pages you have called up.
Insofar as the above data is processed for security against unlawful cyber-attacks or to exercise, assert or defend against legal claims, this is done on the legal basis of Article 6(1)(f) of the GDPR. Our legitimate interest in this data processing lies in analysing the data to improve our website, to exercise, assert or defend against legal claims and to protect our systems from unlawful cyberattacks.
Reference is made to the right to object in accordance with section 7 of this data protection information.
b) Enquiries via contact forms on our website and e-mail/messenger, telephone enquiries
If you send us enquiries via the contact form on our website and/or enquiries by e-mail/messenger or telephone, your details, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions until the purpose no longer applies. We will not pass on this data without your consent or legal authorisation.
This data processing described above has its legal basis in Article 6(1)(b) GDPR for the implementation of necessary pre-contractual measures, which are carried out at your request. If your contact is not aimed at concluding a contract, the legal basis for the processing of your personal data is our legitimate interest in responding to your other concerns in accordance with Article 6(1)(f) GDPR.
c) Comment function
If we offer you the opportunity to comment on content on our site, information about the time the comment was created and the commentator’s name you have chosen will be saved and published on the website in addition to your comment. Your IP address will also be logged and stored. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by posting a comment. We need your e-mail address in order to contact you if a third party should object to your published content as unlawful. However, we also reserve the right to delete comments if they are objected to by third parties as unlawful.
The legal basis for the storage of your data is Art. 6 para. 1 lit. b) and f) GDPR. Our legitimate interest lies in the possibility of enabling you to use our website interactively.
d) Processing of supplier data and data of other service providers
Insofar as we process the data of suppliers and other contractual partners (hereinafter uniformly referred to as ‘contractual partners’), the following applies:
The data processed in each case, the type, scope, purpose and necessity of their processing are determined by the underlying contractual relationship or the pre-contractual relationship. We process or may process the following categories of data:
- Master data (e.g., names and addresses)
- Contact data (e.g. e-mail addresses and telephone numbers)
- Contract data (e.g., services used, contract content, contractual communication, names of contact persons)
- Payment data (e.g., bank details, payment history)
The processing of data from suppliers and other service providers is carried out on the basis of Art. 6 para. 1 lit. b GDPR in order to fulfil contractual or pre-contractual obligations towards our contractual partners and to provide any services owed. Insofar as we process the data for the purpose of administration, the organisation of our operations, financial accounting and compliance with legal obligations (e.g. archiving), the basis for processing is Art. 6 para. 1 lit. c and lit. f GDPR. After weighing up the interests involved, data may also be processed beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties (Art. 6 para. 1 lit. f GDPR).
e) Direct advertising
Your name and address may also be processed indefinitely for our own postal advertising purposes on the legal basis of Article 6(1)(f) GDPR, whereby our legitimate interest lies in direct postal advertising for our own services and our economic interests.
Reference is made to the right to object in accordance with section 7 of this data protection information.
f) Applicant data
We only process applicant data for the purpose and within the scope of the application process in accordance with the legal requirements. Applicant data is processed to fulfil our (pre-)contractual obligations as part of the application process within the meaning of Art. 6 para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if the data processing becomes necessary for us, e.g. in the context of legal proceedings (in Germany, § 26 BDSG also applies).
The application procedure requires applicants to provide us with their application data. The necessary applicant data can be found in the job descriptions. In principle, this includes personal details, postal and contact addresses and the documents relating to the application, such as cover letter, CV and references. Applicants can also voluntarily provide us with additional information.
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, they are also processed in accordance with Art. 9 para. 2 lit. b GDPR (e.g. health data, such as severely disabled status or ethnic origin). Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. a GDPR (e.g. health data if this is necessary for the exercise of the profession).
If applicants send us their applications by e-mail, please note that e-mails are generally not sent in encrypted form and applicants must ensure encryption themselves. We can therefore accept no responsibility for the transmission path of the application between the sender and receipt on our server. Instead of applying by e-mail, applicants have the more secure option of sending us their application by post.
The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is unsuccessful, the applicant’s data will be deleted. Applicants’ data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.
Subject to a justified cancellation by the applicant, the deletion will take place after a period of six months so that we can answer any follow-up questions about the application and fulfil our obligations to provide evidence under the Equal Treatment Act (in German: Gleichbehandlungsgesetz). Invoices for any reimbursement of travelling expenses will be archived in accordance with tax regulations.
g) Disclosure of your data to third parties
Your data may be passed on to service providers who support us for the fulfilment of the contract or for the implementation of necessary pre-contractual measures, which are carried out at your request, on the legal basis of Article 6 (1) (b) GDPR, which we have, of course, carefully selected. These may be technical service providers or service providers supporting us in payment processing or accounting.
Otherwise, your personal data will only be passed on to other third parties if we are legally obliged to do so on the legal basis of Article 6(1)(c) GDPR and, if applicable, on the basis of our legitimate interests on the legal basis of Article 6(1)(f) GDPR. If your personal data is passed on the legal basis of Article 6(1)(f) GDPR, we will inform you in detail in this privacy policy about this transfer of your personal data to these third parties and about our legitimate interests in each case. Reference is made to your right to object in accordance with section 7 of this privacy policy.
h) Processing of data to assert legal claims, avert danger and fulfil retention obligations
We also process your data in order to exercise, assert or defend against any legal claims arising from a contractual relationship or from pre-contractual measures and, if necessary, to enable law enforcement authorities to prosecute misuse of our services. This data processing is carried out on the legal basis of our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest in this data processing is therefore to be able to exercise, assert or defend against any legal claims arising from the contractual relationship and, if necessary, to enable law enforcement authorities to prosecute.
Reference is made to the right to object in accordance with section 7 of this data protection information.
In addition, we also process your personal data for the purpose of fulfilling our statutory retention obligations. The legal basis for the fulfilment of our statutory retention obligations is standardised in Article 6(1)(c) GDPR.
4. Storage and deletion periods for personal data
If the processing purpose for your required personal data no longer applies, your personal data processed by us will be routinely deleted, unless you have consented to the permanent storage of your personal data.
If individual data must be retained after the processing purposes have ceased to apply due to statutory retention periods (e.g. tax and commercial law retention regulations), the data will be blocked instead of deleted. The data to be retained may then be processed exclusively for the aforementioned purposes on the legal basis of Article 6(1)(c) GDPR.
When processing personal data on the basis of our legitimate interests in accordance with Article 6(1)(f) GDPR, the data will be stored until the data subject exercises their right to object (Article 21(1) GDPR), whereby we may be able to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing serves the establishment, exercise or defence of legal claims.
5. Personal rights for data processing
You have the rights described below at any time:
- Right to confirmation and to information about the personal data processed by us in accordance with Article 15 GDPR
- Right to rectification of your personal data in accordance with Article 16 GDPR
- Right to erasure of your personal data (‘right to be forgotten’) in accordance with Article 17 GDPR
- Right to restriction of processing of your personal data in accordance with Article 18 GDPR
- Right to data portability of your personal data in accordance with Article 20 GDPR
- In accordance with Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Please send us your request to the contact details provided in section 2 of this privacy policy.
6. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR.
In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. In this case, we will no longer use your personal data for direct marketing purposes.
7. Right to withdraw consent
You can revoke any data protection consent expressly granted to us at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
8. Complaints about data protection violations to the supervisory authorities
If you believe that your data protection rights have been violated, you can contact the supervisory authority in your federal state or the federal state in which our company is based. If a complaint concerns a company based in another federal state, the supervisory authority will forward the complaint to the competent supervisory authority there.
The supervisory authority for our registered office is as follows:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Address: Kavalleriestraße 2-4, 40213 Düsseldorf
Telephone: 0211 38424 – 0
Fax: 0211 38424 – 10
E-mail: poststelle@ldi.nrw.de
Internet: http://www.ldi.nrw.de
9. Obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing
We will inform all recipients to whom personal data has been disclosed of any rectification or erasure of personal data or restriction of processing in accordance with Article 16, Article 17(1) and Article 18 GDPR, unless this proves impossible or involves disproportionate effort. We will also inform you about these recipients if you request this.
10. Legal or contractual regulations for the provision of your personal data as well as information about the necessity for the conclusion of the contract as well as about your obligation to provide the personal data and possible consequences of non-provision
As described above, we collect and process your personal data in particular for the fulfilment of a contract with you or for the implementation of pre-contractual measures that take place at your request. In some cases, the provision of personal data when concluding contracts (e.g. for invoices) is required by law due to tax and/or commercial law regulations, otherwise it is a contractual or pre-contractual obligation. If you do not provide us with any personal data, this means that we will not be able to conclude a contract with you and/or answer your enquiries.
Insofar as we process your personal data on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of a legitimate interest can be found in the above information at the respective points. If you do not provide us with personal data for these purposes, you may not be able to use our website and services or may not be able to use them to their full extent.
Reference is made to the right to object in accordance with section 7 of this data protection information.
11. Automated decisions in individual cases, including profiling
We do not use automated decision-making, including profiling in accordance with Article 22(1) and (4) of the GDPR.
12. Data security
We use technical and organisational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.
13. Use of cookies and similar technologies on our website
Without your consent, we only use cookies or similar technologies (which are referred to as ‘web storage’, ‘web beacons’ or ‘local software’, for example) on our website that are technically necessary for the operation of our website on the legal basis of Art. 6 para. 1 lit. b GDPR.
If we use cookies or similar technologies on our website that are not technically necessary for the operation of our website, we will obtain your consent for the use of these technologies via our consent banner. You can then find detailed information about the use of these cookies or similar technologies in our consent banner.
If we refer to data protection information from third-party providers as part of the information in our privacy policy or our consent tool, which may only be available in English or another foreign language, you can easily translate the foreign language texts into German (or another language), for example using your browser or a plug-in or using the following services free of charge:
- Deepl: https://www.deepl.com/de/translator
- Prompt Translator: https://www.online-translator.com/
- Google Translator: https://translate.google.de/
- iOS und Android App: Deepl
- iOS-App: „iDict“
- Android-App: „Promt-Online-Translators“
Risk notice:
If we use technically unnecessary cookies or similar technologies from third-party providers on our website, possibly also from the USA or other third countries (in particular for marketing and analysis purposes), these may use cookies or similar technologies, process your unabridged IP address or other personal data. The use of these technologies is dependent on your express consent via our consent tool. Please note the following in this regard:
If you consent to the use of technically unnecessary cookies or similar technologies, your personal data may be processed by third-party providers in the USA or other third countries.
In particular, there is a risk that your data may be processed by US or other third country authorities for control and monitoring purposes without you being informed about this data processing and without you having the possibility of a legal remedy against this data processing by the third country authorities.
If you do not consent to the use of these technically unnecessary cookies or similar technologies via our consent tool, your data will not be transmitted or processed.
There are other translation programmes that you can find in app stores and/or search engines that you can use to translate foreign-language texts into German (or another language).
14. Questions/comments
If you have any questions or comments about this privacy policy or about data protection in general, please contact us using the contact details provided in section 2 of this privacy policy.
15. Social media
Below, we inform you about the data processing of our social media pages:
Below we inform you about the processing of your personal data on our Facebook page, in particular about the type, scope and purposes of the collection and use of your personal data when you visit our Facebook page and the corresponding legal bases of the individual processing operations.
a) Joint responsibility for the processing of ‘Insights data’ with Facebook:
We have concluded an agreement with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter also referred to as Meta or Facebook) on the joint agreement under data protection law (so-called ‘Page Controller Addendum’). In this agreement, Meta recognises the joint responsibility with regard to the so-called data processing through ‘Page Insights data’ on our Facebook page. ‘Page Insights Data’ is data collected and summarised by Meta, which can be used to obtain information about how people interact with our Facebook page. Meta has assumed primary responsibility for the processing of Insights data and will fulfil all obligations under the GDPR with regard to the processing of Insights data (including the information obligations under Articles 12 and 13 GDPR, the protection of data subjects’ rights under Articles 15 to 22 GDPR and data security measures and data breach notifications under Articles 32 to 34 GDPR).
Meta can be contacted using the contact details provided on the Facebook website. Facebook’s legal notice, including Facebook’s contact details, can be found at the following link – https://www.facebook.com/terms?ref=pf
b) Processing of personal data by us:
Our Facebook page is used for advertising and communication with interested parties and customers. If you send us enquiries via the contact options offered on our Facebook page, your details will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass this data on to third parties without your consent or legal authorisation. Provided there are no statutory retention obligations to the contrary, your data will be deleted after your enquiry has been processed.
In connection with the operation of this Facebook page, we also have access to the Facebook ‘Insights’ functions specified in section c). These functions allow us to obtain anonymised statistical data as well as anonymised demographic and geographical evaluations of the users of our Facebook page for the purpose of improving our Facebook page. This information is collected by Meta and made available to us in a completely anonymised form. We have no access to the underlying personal data material. Further information on the Insights functions can be found on the help pages and in Facebook’s privacy policy, for example, at the following link – https://www.facebook.com/privacy/explanation
This data processing described above has its legal basis in Art. 6 para. 1 lit. f) GDPR. Advertising and analysis purposes and responding to your enquiries represent our legitimate interest. Insofar as the processing of your data is necessary to take steps at your request before entering into a contract, the legal basis for data processing is Article 6(1)(b) GDPR.
The provision of your data is neither contractually nor legally required. If you do not provide us with any personal data, this may mean that we are unable to respond to your enquiry.
c) Processing of personal data by Facebook:
If you are logged in to Facebook with your personal user data when you visit our Facebook page, your user ID number and, if applicable, other personal data (e.g. your IP address) will be transmitted to Meta when you visit our Facebook page. Meta assigns this transmitted data to your user account for the provision of the ‘Insights’ functions as well as for personalised advertising measures and possibly also for other business purposes.
If you visit our Facebook page and are not a member of Facebook or are not logged in to Facebook with your personal user data at the same time, Meta will still process personal data and may use it for the purposes described above.
Meta also uses cookies and possibly other comparable analysis and tracking technologies when you visit our Facebook pages. Detailed information on the use of cookies by Meta can be found in Meta’s cookie policy at the following link – https://www.facebook.com/policies/cookies/
Meta may also process your data outside the European Union in a third country, e.g. through Meta Inc. based in the USA.
For more information about the processing of your personal data by Meta, please refer to Meta’s privacy policy at the following link –https://www.facebook.com/privacy/explanation
We have no influence whatsoever on the data processing and transfer of your personal data by Meta or on the use of cookies and other storage technologies by Meta. For this reason, Meta has also assumed primary responsibility for these data processing operations on our Facebook page as part of the ‘Page Controller Addendum’ described above under section 15. a) and the fulfilment of the essential data protection obligations under the GDPR (see section 15. a).
d) Your rights as a data subject regarding data processed by us:
You have the rights described in sections 5, 6, 7 and 8 of this privacy policy at any time.
Please send us your request to the contact details provided in section 2 of this privacy policy.
e) Your rights as a data subject regarding data processed by Meta:
As described in section 15. a), Meta has assumed primary responsibility for its own data processing on our Facebook page via the ‘Page Controller Addendum’ agreement concluded with us. Meta has also undertaken to fulfil the exercise of data subjects’ rights in this regard (Art. 15 – 22 GDPR).
If you wish to assert rights based on data processing by Meta, please contact Meta. As the provider of the platform, Meta alone has direct access to the necessary information and can also take any necessary measures and exercise your rights, e.g. provide information.
Of course, you can also contact us at any time if you require assistance in exercising your rights vis-à-vis Meta.
