Privacy Policy, as of 11 November 2019

1. Information on the collection of personal data

(1)   We would like to inform you by the following about the processing of your personal data when you use our website. Personal data are all data which refer to you personally such as your name, address, email address and user conduct.

(2)   The body responsible for the data processing – that is the “Controller” in terms of Art. 4 subs. 7 EU General Data Protection Regulation (GDPR) – is (as is also stated in our “legal notice”):

European College of Sport Science e.V.
Am Sportpark Muengersdorf 6
50933 Cologne
Germany

Phone: +49 221 9626 2771
Fax: +49 221 9626 2779
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Website: www.sport-science.org

(3)   If you contact us by email, we will process the data you transfer to us (if you send us an email these data usually comprise your email address and your first name and last name) to be able to answer your questions. The legal basis for the processing is Art. 6 subs. 1 sentence 1 b) and f) GDPR. We will delete the data we process in this context when the processing is no longer necessary or, if the law provides for retention obligations to be observed, we will restrict the processing of the data. You may issue a separate declaration of consent if you agree to a longer storage of your data for the purpose of contacting you and answering your queries.

(4)   In case we engage third-party service providers to perform or implement any individual features of the services we offer or in case we want to use your data for advertising purposes, we are going to inform you about the details of the relevant processes hereinafter. We are also going to inform you about the applicable criteria governing the duration of the storage.

(5)   In case the service providers or partners we engage are domiciled in a country outside the European Economic Area (EEA), we are going to specifically inform you hereinafter about the consequences of that fact.

2. Your rights

(1)   You are entitled to the following rights relating to our processing of your personal data:

• Right of access/ right to information,
• Right to rectification or erasure,
• Right to restriction of processing,
• Right to object to processing,
• Right to data portability.

In detail:

You may at any time obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where this is the case, you have the right to obtain access to, and specific information about which of, your personal data we have stored. You may for such purpose send an email to the office manager at This email address is being protected from spambots. You need JavaScript enabled to view it. or you may contact us via the contact data stated in the legal notice.

Right to object: In addition, where the legal requirements are fulfilled, you may object to the processing of your data: If and to the extent, for the purposes of processing your data, we rely on any overriding interest justifying the processing, you may object to the processing. This is in particular the case where the processing is not necessary for performing a contract with you; we will inform you about that from time to time in the description of the relevant features. In case you exercise your right to object, we kindly ask you to state the reasons why we should abstain from processing your personal data in the way we do. If your objection is justified, we will consider the situation and cease or adjust the processing of your data or explain to you the compelling legitimate grounds why we have to continue the processing.

If you have consented to the processing of your data, you may withdraw your consent at any time. The withdrawal will only affect the lawfulness of the processing of your personal data for the time after you have given notice of the withdrawal to us.

In addition, you are entitled to rectification, restriction of processing or erasure of your personal data we collect and process. Where the conditions specified in Art. 20 GDPR are fulfilled, you are also entitled to data portability, i.e. you have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller without any hindrance by us.

If you want to exercise your rights under data protection law, please use the contact data stated in our legal notice.

(2)     If you have any further questions, recommendations or complaints regarding our data protection information and the processing of your personal data, you may contact our office manager directly under This email address is being protected from spambots. You need JavaScript enabled to view it..

Moreover, without prejudice to any other administrative or judicial remedy available to you, you have the right to lodge a complaint with a (data protection) supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes German or European data protection law.

(3)     We do not carry out any automated individual decision-making including profiling.

3. Collection of personal data when you visit our website

(1)   If you use our website for mere information purposes, which means that you do not register or otherwise transfer information to us, we will only collect the personal data which your browser transfers to our server. If you want to view our website, we will collect the following data which are necessary for us in technical respect to display our website to you and ensure stability and security (the legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR):

• IP address
• Date and time of the request
• Time zone difference compared to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• State of access / HTTP status code
• Access and error logs
• Data volume transferred from time to time
• Website from which the request is made
• Browser including browser fingerprint
• Operating system and its surface
• Language and version of the browser software.

The data are processed for the purpose of monitoring the serviceability of our website (including, among other things, the number and places of access), for error correction and also for safety reasons. We store the data for a period of 30 days, thereafter they are deleted automatically.

(2)   In addition to the aforesaid data, cookies are stored on your computer when you use our website. Cookies are small text files that are allocated to the browser you use and stored on your hard drive and which provide the body that sets the cookies (namely us) with certain information. Cookies cannot execute programmes or infect your computer with viruses. They help render the presentation of services on the Internet as a whole more-user friendly and more efficient.

(3)   Use of cookies:

       This website uses the following types of cookies the scope and functionality of which is described hereinafter:

• Transient cookies (see 1.)
• Persistent cookies (see 2.)

1. Transient cookies are deleted automatically when you close the browser. They include but are not limited to session cookies which store a so-called session ID that enables different requests from your browser to be allocated to a specific session. This enables us to recognise your computer when you come back to our website. The session cookies are deleted when you log out or close the browser.
2. Persistent cookies are deleted automatically after the expiry of a pre-defined period of time which may vary, depending on the type of cookie used. You can delete the cookies in the security settings of your browser at any time.
3. You can set your browser as you think appropriate and, for instance, refuse acceptance of all cookies or cookies that are used by third parties (so-called third-party cookies). Please be aware that when you deactivate cookies you might be prevented from using all functions and features of this website.
4. No personalised user profiles are created for advertising purposes, e.g. for targeted display of advertisements or for recognition of the user when he or she comes back to the website or for market research purposes.

4. Additional functions, features and services offered on our website

(1)   In addition to the mere informatory use of our website, we offer different services which you can use if you are interested in them. For such purpose, you are usually required to enter further personal data which we use to provide the relevant service, and which are subject to the afore-mentioned principles of data processing.

(2)   To some extent, we engage external service providers for processing your data. We have carefully selected and engaged them and they are bound to our instructions and audited at regular intervals. The service provider we commissioned with the maintenance of our website is: SporTools GmbH, Paul-Niessen Strasse 12, 50858 Cologne, Germany.

(3)   Moreover, we may transfer your personal data to third parties when we offer contract conclusions or similar services together with our partners. You will obtain more detailed information when you enter your personal data, or in the relevant service description.

 5. ECSS user account

 (1)   When you create an ECSS user account (whether for members or non-members) under the menu item “log-in“, the data you enter there will be stored. Required fields are clearly marked, all other information is voluntary. The legal basis for this is Art. 6 subs. 1 sentence 1 b) and f) GDPR. You cannot create a user account without providing the complete and correct basic data because we are in need of these data to identify you. You are not required to provide any voluntary information.

If you use the user account to enter into a contract with us, for instance for participation in an event, you will be required to provide your personal data for the purpose of contract conclusion. Any required information which is necessary for contract conclusion is specifically marked, any further information can be provided voluntarily. We process the data you provide for the purpose of performing the contract with you. The legal basis for this Art. 6 subs.1 sentence 1 b) and f) GDPR.

If you use the user account for filing a written contribution, it is necessary for the purpose of further processing of your contribution that you provide your personal data. Any required information which is necessary for the processing is specifically marked, any further information can be provided voluntarily. We process the data you provide for the purpose of handling, auditing/perusing and, if applicable, for consideration and publication of your contribution. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR or Art. 6 subs. 1 sentence 1 a) GDPR, if we obtain your consent.

(2)   We only collect and process the data which are necessary for the aforesaid purposes. If you do not provide the data (which are marked as required fields), we cannot implement the relevant measure. You need not fill in any fields that are marked optional.

(3)   You may via your account obtain access to (depending on how you use the account), among other things, the

• Account ID
• ECSS status
• Last account modification
• Payment history
• Congress history
• myMembership administration
• Modify/Update myECSS account details
• Print myECSS membership payment receipt
• Unsubscribe from ECSS Newsletters
• Submit my proposal

We process the data required for this purpose.

(4)   As modes for payment we offer Visa, MasterCard and Maestro. Bank transfer and payment against invoice are not possible.

(5)   The personal data are transferred to internal bodies if and to the extent they are required there for proper task performance. In some cases, we engage external service providers for processing personal data. We have carefully selected and engaged them and they are bound to our instructions and audited at regular intervals. We may from time to time transfer personal data to our bank and payment service providers for the purpose of contract performance if and to the extent this is necessary for providing the services you request. We may also transfer personal data to third parties if we provide contract performance, event organisation or similar services together with our partners. We may also from time to time transfer personal data to legal representatives or competent courts and authorities.

(6)   It may be required from time to time to transfer data to third countries (countries outside the European Union or the European Economic Area), e.g. for performing the relevant contractual or other obligation. We will make you aware of any such intended transfer in the relevant offer. In all cases, we comply with the provisions in Art. 44 et seq. GDPR.

6. Google Analytics

(1)  This website uses the web analysis service “Google Analytics“ of Google Inc. (“Google”). Google Analytics uses so-called cookies which are small text files which are stored on your computer such that Google is able to analyse how you use our website. The information generated by the cookies about how you use this website is usually transferred to a server of Google Inc. in the USA and stored there. However, if the IP anonymization is activated on this website, Google will shorten your IP address within EU Member States or in any other country party to the Agreement on the European Economic Area prior to the transfer. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google, acting upon the instruction of the operator of this website, will use the information to analyse how you use the website, to compile reports on the website activities and render to the website operator additional services that are related to the use of the website and the use of the Internet.

(2)   The IP address which is transferred from your browser in the context of the use of Google Analytics will not be combined or merged with other data of Google.

• You can set your browser software to prevent the storage of cookies. However, please be aware that in this case you may be unable to use all functions and features of this website without restrictions. You may also prevent the collection and transfer to Google of the data generated by the cookie regarding your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de&safe=strict

(3)   This website uses Google Analytics with the supplementary feature “_anonymizeIP()“. This makes sure that only shortened IP addresses are processed further, which prevents IP addresses from being allocated to specific persons. So, if and to the extent that the data collected from you might actually be allocated to you personally, such an allocation will then be prevented from the outset, and the personal data will thus be deleted immediately.

(4)   We use Google Analytics to analyse the use of, and regularly improve, our website. We operate the analysis tool ourselves and also analyse the data we obtain therefrom ourselves. The statistics we obtain thereby help us improve the services we offer and render them more interesting for you as a user. As to the exceptional cases where personal data are transferred to the USA, Google agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 subs. 1 sentence 1 f) GDPR.

(6)   Information provided by the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

       Terms of Use:

       https://www.google.com/analytics/terms/de.html,

       Overview of data protection measures:

       https://support.google.com/analytics/answer/6004245?hl=de

       Privacy Policy:

       https://www.google.de/intl/de/policies/privacy.

7. Links to social media

(1)   We currently set links to the following social media pages: Facebook, X, YouTube, LinkedIn, Instagram. You can identify the respective social media provider by the mark in the box above the provider’s initial or by the provider’s logo.

We offer you the opportunity to directly communicate with us via our social media pages by clicking the button. You may also use the links to interact with the social networks and other users such that we can improve the services we offer and render them more interesting for you as a user. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR. If a service provider asks you to consent to the data processing (i.e. if you give your consent by ticking a checkbox or clicking a button), the legal basis for the processing will be Art. 6 subs. 1 sentence 1 a) GDPR.

(2)   When you click the marked button and are referred to our social media page, the data specified in § 3 of this Privacy Policy are transferred to the social media provider. In the case of Facebook, pursuant to the relevant providers in Germany, the IP address is anonymised immediately after collection. Thus, if you make use of the social media services, your personal data are transferred to the relevant social media provider and stored there (in the case of US-American providers they are stored in the USA). Since the social media provider collects data in particular via cookies, we recommend that you delete all cookies in the security settings of your browser before you click the box.

(3)   The social media providers may also collect other data from time to time. For the time being, we can neither influence the collected data or the data processing activities nor are we fully aware of the scope of data collection, the purposes of the processing and the duration of data storage. We do not know about the deletion of the collected data by the social media providers either.

(4)   The social media provider stores the data collected from you as user profiles and uses them for the purposes of advertising, market research and/or customised design of the provider’s website. This analysis serves in particular (also with regard to users who are not logged in) to provide customised advertising and inform other users of the social network about your activities on our social media site. You may object to the preparation of the user profiles; if you want to exercise your right to object, you have to address your objection to the relevant social media provider.

(5)   As far as we know (and for Facebook, Facebook itself confirms) that the data are transferred regardless of whether or not you have an account with the social media provider or are logged in there. When you are logged in to the social media provider, the data we have collected from you are directly allocated to your account with the social media provider. We recommend that you always log out after you have used a social network and especially before you activate the button because thereby you can prevent the allocation of the information to your profile with the social media provider.

(6)   Further information on the purpose and scope of data collection and data processing by the social media provider is available in the privacy policies of these providers at the addresses listed below. They also contain further information on your rights and the possible settings to protect your privacy.

(7)   Addresses of the relevant social media providers and URL and the information they provide on data protection:

1. Facebook Inc., 1601 5 California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php
2. Facebook agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
3. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
4. Linkedln agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework
5. X, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy .
6. X agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
7. Instagram is a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Further information and the applicable privacy policy of Instagram are available under https://help.instagram.com/155833707900388
8. Facebook agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
9. YouTube: Further information on the purpose and scope of data collection and data processing by YouTube is available in the privacy policy. The latter also contains further information on your rights and the possible settings to protect your privacy: https://www.google.de/intl/de/policies/privacy
10. Google processes your personal data also in the USA and agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

8. Further information on our Facebook fan page

(1)   We have our own page on Facebook at https://www.facebook.com/ECSSOfficial/ ; The company is Facebook Inc., 16015 California Ave, Palo Alto, California 94304, USA resp. Facebook Ireland Limited 4, GRAND CANAL SQUARE, GRAND CANAL HARBOUR, D2 Dublin, IRELAND.

(2)   If you visit our fan page, you can read our contributions, react to, or comment on, them, create a user post yourself and send us personal messages with your personal concerns. We use the data which you provide on that occasion and which we may be able to access (e.g. Facebook user name; images; interests, if available; contact data) for no purposes other than communication with customers and potential customers; this use is based on an overriding legitimate interest (Art. 6 subs. 1 sentence 1 f) GDPR). Our interest consists in offering a platform to you where we can provide you with current information and which you can use to communicate your requests to us such that we can deal with your requests as quickly as possible. If the operation of the fan page is terminated, we will delete your data if and to the extent this is possible for us.

(3)   Facebook agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

(4)   We obtain statistical data from “Facebook Insights“ about the visitors on our Facebook pages. We cannot allocate them to a certain individual. The feature helps us to better analyse our pages and adapt them to the requirements and interests of our visitors. For the purposes of this feature, Facebook processes personal data. We thereby obtain in particular the following general summaries (including the relevant dates) regarding the visitors of our Facebook fan page: page activities; page views; page previews; “Likes”; reach; recommendations; interaction with respect to contributions; videos; page subscribers; demographic data collected from the persons who like our page, based on their profile data regarding their age and sex; home country and number of fans there; city and number of fans there; language and number of fans of that language; organic/ paid. We can also see when a certain Facebook user has “liked”, or subscribed to, any of our Facebook pages. We can also allocate comments on our Facebook pages to individual users. We use the personal data to which we may have access for no purposes other than communication with customers and potential customers; this use is based on an overriding legitimate interest on our part (Art. 6 subs. 1 sentence 1 f) GDPR).

(5)   The Facebook pages offer different means to contact us for different purposes. If you use any of them to transfer data to us, we will use these data exclusively for processing your request. The legal basis for this is Art. 6 subs. 1 sentence 1 b) and f) GDPR. Any messages will be deleted after the request has been settled at the latest unless retention of the message is required for other reasons.

(6)   We do not use the fan page for performing any data processing beyond the basic functions and features. Please be aware that Facebook Ireland Limited may use tracking tools and cookies, independently of our use of the fan page. More detailed information on this issue is available in the privacy policies of Facebook referred to above.

(7)   Further information and policies of Facebook regarding data protection and privacy are available at the addresses listed in § 7 (7) above. Information on the possible settings regarding the processing of personal data by Facebook is available, for instance, under the menu item “Settings” in your Facebook profile.

• Facebook Ireland Limited and we are joint controllers. The arrangement in terms of Art. 26 GDPR (joint controllers) between us and Facebook is available at https://www.facebook.com/legal/terms/page_controller_addendum#. Facebook Ireland has primary responsibility according to the GDPR for the processing of Insights data and is obliged to fulfil all duties stipulated by the GDPR regarding the processing of Insights data (including but not limited to the duties under Articles 12 and 13 GDPR – Information duties –; Articles 15 to 22 GDPR – rights of data subjects –; and Articles 32 to 34 – Data security and reporting of data breaches –).
• You may exercise your rights listed in § 2 above (“Your rights“) at any time at no expense to you by sending an appropriate message to our contact data stated above. If you contact us for the processing of Insights data and the duties assumed by Facebook Ireland, we will be obliged to pass all relevant information on to Facebook Ireland without undue delay (“unverzüglich”) but no later than within 7 calendar days, and Facebook will then respond to your request. You may also contact Facebook Ireland Limited 4, GRAND CANAL SQUARE, GRAND CANAL HARBOUR, D2 Dublin, IRELAND, directly for the assertion of your rights. Please be again aware of the following: We have a legitimate interest in operating our Facebook pages to ensure effective marketing via a platform that is used all over the world; pursuant to Art. 21 subs. 1 GDPR, you have the right at any time to object, on grounds relating to your particular situation and with effect for the future, to the processing of your personal data for the aforesaid purpose, see § 2 above.

9. Integration of YouTube videos

(1)   We have embedded YouTube videos in our online presentation in order to improve our service presentation and render it more interesting for you as a user. The videos are stored on https://www.YouTube.com and can be started and played back directly from our website. The legal basis for this is Art. 6 subs. 1 sentence 1 f) GDPR.

(2)   When you visit our website, YouTube will be informed that you have accessed the relevant page of our website. In addition, the data specified in § 3 of this Privacy Policy will be transferred, too. This happens regardless of whether YouTube provides a user account via which you are logged in or a user account does not exist. When you are logged in to Google, your data are directly allocated to your account. If you do not want your data to be allocated to your YouTube profile, you have to log out before you activate the button. YouTube stores your data as user profiles and uses them for advertising and market research purposes and/or to tailor its website to the users’ demands. This data analysis in particular serves to display customised advertisements (also for users who are not logged in) and to inform other users of the social network about your activities on our website. You have the right to object to the preparation of the user profiles; if you want to exercise this right, you have to address your objection to YouTube.

(3)   Further information on the purpose and scope of data collection and data processing by YouTube is available in the privacy policy. The latter also contains further information on the rights to which you are entitled in this context and the possible settings to protect your privacy: https://www.google.de/intl/de/policies/privacy .

Google processes your personal data also in the USA and Google agreed to respect and comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

10. Newsletter

(1)   You can subscribe to our newsletter by giving your consent to the newsletter transmission; we will then send you the newsletter to inform you about our current interesting offers and activities. The offers and activities advertised in the newsletter are specified in the declaration of consent.

(2)   For subscription to our newsletter, we use the so-called double opt-in procedure; this means that, after you have subscribed, we will send you an email to the email address you have entered in the subscription by which we will ask you to confirm that you want us to send you the newsletter. If you do not confirm your subscription, your data will be deleted after one month. In addition, we also store the IP addresses you use from time to time as well as the time of subscription and confirmation. The purpose of this procedure is to retain proof of your subscription and, where required, clarify any potential misuse of your personal data.

(3)   The only required field which you must necessarily fill in to receive the newsletter is your email address. The entry of any other specifically marked data is voluntary. After you have confirmed the subscription, we will store your email address for sending you the newsletter. The legal basis for this is Art. 6 subs. 1 sentence 1 a) and f) GDPR.

(4)   You may at any time revoke your consent to the transmission of the newsletter; for such purpose, you may either send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. or send a message to the contact data stated in the legal notice. You will also find a hyperlink at the end of every email by which you can unsubscribe very comfortably.

(5)   Please be aware that, when we send the newsletter, we only collect (non-personal) data about the delivery of the newsletter and about whether the newsletter was opened and whether the links contained in the newsletter were clicked. We do not create user profiles.

11. Links

In cases where we use external links which are provided somewhere on our website, our Privacy Policy must not be deemed to extend to the services offered under that link. If we provide links, we endeavour to make sure that they, too, satisfy our data protection and security standards. However, we have no influence on other providers’ compliance with the applicable data protection and security regulations. Please have a look at the privacy policies of those other providers to inform yourself about their data protection standards.

12. Changes to our data protection regulations

(1)  We reserve the right to change our security and data protection measures if and to the extent this may be required due to technical change or progress or a change of the services we offer. In this case, we will, to the extent required, also adjust our Privacy Policy and we will inform you about the adjustment in this Privacy Policy.

(2)  Any changes will take effect upon the publication of the revised Privacy Policy. So please take note of the respective current version of our Privacy Policy. You can see the date of the last amendment of this Privacy Policy on the top of the page.

13. SSL or TLS encryption

On our website, we use SSL or TLS encryption for security reasons and to protect the transmission of confidential information such as requests which you send to us as the website operator. You can see that the connection is encrypted by the address line of the browser changing from “http://” to https:// and also by the lock symbol in your browser line.

Whenever the SSL or TLS encryption is activated, third parties are unable to read the data you transfer to us.

14. Security

We use technical and organisational security measures to protect your data which we have stored against manipulation, loss, destruction and against access by unauthorised third parties. Our security measures are improved continuously according to the technological progress.