Privacy Policy under the GDPR
I. Name and Address of the Controller
OFC 1901 Event GmbH
Waldemar-Klein-Platz 1
63071 Offenbach am Main
Germany
Telephone: +49 69 98 1901 0
Fax: +49 69 98 1901 50
Email: info@events-am-bieberer-berg.de
Website: www.events-am-bieberer-berg.de
II. Name and Address of the Data Protection Officer
The Data Protection Officer of the controller is:
Offenbacher Fußball-Club Kickers 1901 GmbH
Waldemar-Klein-Platz 1
63071 Offenbach am Main
Germany
Telephone: +49 69 98 1901 0
Fax: +49 69 98 1901 50
Email: info@ofc.de
Website: www.ofc.de
III. General Information on Data Processing
1. Scope of the Processing of Personal Data
As a general rule, we only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our content and services.
The collection and use of our users’ personal data generally only takes place with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.
2. Legal Basis for the Processing of Personal Data
Where we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary in order to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and where the interests, fundamental rights and freedoms of the data subject do not override those interests, Art. 6(1)(f) GDPR serves as the legal basis for the processing.
3. Data Deletion and Storage Period
The personal data of the data subject will be deleted or blocked as soon as the purpose for which it was stored no longer applies.
Data may be stored beyond this period where this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject.
Data will also be blocked or deleted when a storage period prescribed by the aforementioned provisions expires, unless continued storage of the data is necessary for the conclusion or performance of a contract.
4. Recipients of the Data
We use commissioned service providers acting as data processors to carry out the data processing operations described in this Privacy Policy.
IV. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the device accessing the website.
The following data is collected:
-
Information about the browser type and version used
-
The user’s operating system
-
The user’s internet service provider
-
The user’s IP address
-
Date and time of access
-
Websites from which the user’s system accessed our website
-
Websites accessed by the user’s system via our website
-
Logged-in user
The data is also stored in our system’s log files.
2. Legal Basis for Data Processing
The legal basis for the temporary storage of the data and log files is Art. 6(1)(f) GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address and user information by the system is necessary in order to deliver the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The data is stored in log files in order to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems.
The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in the processing of data pursuant to Art. 6(1)(f) GDPR.
4. Duration of Storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
Where data is collected for the purpose of providing the website, this is the case when the respective session has ended.
Where data is stored in log files, it will be deleted after no more than three months. Storage beyond this period is possible. In this case, the users’ IP addresses will be deleted or anonymised so that the accessing client can no longer be identified.
5. Right to Object and Possibility of Removal
The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Users therefore have no right to object in this respect.
V. Use of Cookies
a) Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user’s computer system.
When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable even after the user has moved to another page.
The following data is stored and transmitted in cookies:
-
Last payment method used in this browser
-
Language settings (SSO)
-
Last delivery method saved in this browser
-
Session ID
-
Consent to or rejection of tracking user behaviour using additional analytics cookies
In addition, we use cookies on our website that allow us to analyse users’ browsing behaviour where the user has expressly consented to this.
The following data may be transmitted in this way:
-
Search terms entered
-
Frequency of page views
-
Use of website functions
-
Products viewed
-
Shopping cart contents
-
Revenue generated upon conclusion of a contract
b) Legal Basis for Data Processing
The legal basis for processing personal data using cookies is Art. 6(1)(f) GDPR.
The legal basis for processing personal data using analytics cookies is Art. 6(1)(a) GDPR.
c) Purpose of Data Processing
The purpose of using technically necessary cookies is to make the use of websites easier for users.
Certain functions of our website cannot be provided without the use of cookies. These functions require the browser to be recognised after the user has moved to another page.
Cookies are required for the following applications:
-
Login
-
User account management
-
Access to previous orders and tickets, including Print@Home downloads
-
Adding items to and editing the shopping cart and completing purchases
-
Pre-population of payment forms
-
Pre-population of search forms
-
Retention of language settings
The user data collected by technically necessary cookies is not used to create user profiles.
Analytics cookies are used to improve the quality of our website and its content. Analytics cookies enable us to understand how the website is used and therefore to continuously optimise our services.
These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6(1)(f) GDPR.
d) Duration of Storage, Right to Object and Possibility of Removal
Cookies are stored on the user’s computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies.
You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically.
If cookies are disabled for our website, some website functions may no longer be fully available.
VI. Registration
1. Description and Scope of Data Processing
Our website allows users to register by providing personal data. The data is entered into an input form, transmitted to us and stored.
As a general rule, this data is not passed on to third parties.
Registration is used, among other things, for the following purposes:
-
Ensuring that each ticket, particularly Print@Home tickets, can only be used once for admission, even where electronic access control cannot be used.
-
Enforcing our house rules and comparing customers against a list of persons who are not permitted to enter.
The following data is collected during the registration process:
-
Title, first name and surname
-
Date of birth
-
Address
-
Email address
-
Customer number, where known
-
Newsletter subscriptions
The following data is also stored at the time of registration:
-
The user’s IP address
-
Date and time of registration
As part of the registration process, the user’s consent to the processing of this data is obtained.
2. Legal Basis for Data Processing
Where the user has given consent, Art. 6(1)(a) GDPR serves as the legal basis for processing the data.
Where registration is required for the performance of a contract to which the user is a party or for the implementation of pre-contractual measures, Art. 6(1)(b) GDPR additionally serves as the legal basis for processing the data.
3. Purpose of Data Processing
User registration is required for the performance of a contract with the user or for carrying out pre-contractual measures in the following cases:
-
Purchase agreements for tickets, goods or services
-
Season ticket or ticket subscriptions
4. Duration of Storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
For data collected during registration for the performance of a contract or the implementation of pre-contractual measures, this is the case when the data is no longer required for the performance of the contract.
Even after the contract has been completed, it may be necessary to continue storing personal data relating to the contractual partner in order to comply with contractual or statutory obligations.
5. Right to Object and Possibility of Removal
As a user, you may cancel your registration at any time. You may also have the data stored about you amended at any time.
-
To request deletion, please contact Offenbacher Fußball-Club Kickers 1901 GmbH, Waldemar-Klein-Platz 1, 63071 Offenbach am Main, Germany, Telephone: +49 69 98 1901 0, Fax: +49 69 98 1901 50, Email: info@ofc.de.
-
To amend your data, please use the “My Account” section or contact us using the details above.
Where the data is required for the performance of a contract or the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as there are no contractual or statutory obligations preventing such deletion.
VII. Contact Form and Email Contact
1. Description and Scope of Data Processing
Our website provides a contact form that can be used to contact us electronically.
If a user makes use of this option, the data entered into the input form is transmitted to us and stored.
This data includes:
-
First name and surname
-
Email address
-
Subject of the enquiry
-
Description of the enquiry
The following data is also stored at the time the message is sent:
-
The user’s IP address
-
Date and time of the enquiry
During the submission process, your consent to the processing of the data is obtained and reference is made to this Privacy Policy.
Alternatively, you may contact us using the email address provided. In this case, the personal data transmitted with the email will be stored.
The data will not be disclosed to third parties in this context. The data will be used exclusively for processing the correspondence.
2. Legal Basis for Data Processing
Where the user has given consent, Art. 6(1)(a) GDPR serves as the legal basis for processing the data.
The legal basis for processing data transmitted in connection with sending an email is Art. 6(1)(f) GDPR.
Where the purpose of the email contact is to conclude a contract, Art. 6(1)(b) GDPR additionally serves as the legal basis for processing.
3. Purpose of Data Processing
The personal data entered into the input form is processed solely for the purpose of handling the enquiry.
Where contact is made by email, this also constitutes the necessary legitimate interest in processing the data.
Any other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of Storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
For personal data entered into the contact form and data transmitted by email, this is the case when the respective correspondence with the user has ended.
The correspondence is considered concluded where the circumstances indicate that the matter in question has been finally resolved.
Any additional personal data collected during the submission process will be deleted no later than seven days after collection.
5. Right to Object and Possibility of Removal
The user may withdraw their consent to the processing of personal data at any time.
Where a user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the correspondence cannot be continued.
All personal data stored in connection with the contact will be deleted in this case.
VIII. E-Commerce
1. Description and Scope of the Processing of Personal Data
When goods, tickets or services are purchased or an attempt is made to purchase them via our website, the following data is collected and processed in connection with the conclusion or attempted conclusion of the contract, in addition to the data required for registration:
-
The user’s IP address
-
Date and time the contract is concluded
-
Requested delivery method
-
Requested goods, tickets or services and all attributes clearly describing the relevant item
-
Any alternative delivery address
-
Any alternative billing address
-
Discount codes and discount schemes used
-
Vouchers used
-
Requested payment method and payment information
-
Payment information is transmitted to payment service providers for the purpose of processing payment
-
Shipping information is transmitted to delivery service providers for the purpose of completing delivery
-
Where our website merely acts as an intermediary for a service provided by a third party, for example the purchase of a ticket for an event, your name and address, delivery and payment method and shopping cart contents will be transmitted to that third party, as that party is responsible for further performance of the contract.
2. Legal Basis for the Processing of Personal Data
The data collected and processed is necessary for the conclusion and performance of the contract. Art. 6(1)(b) GDPR therefore serves as the legal basis for the processing.
3. Purpose of Data Processing
The purpose of collecting the data is to conclude and/or perform a contract.
In order to perform the contract, payment must be processed. It must also be clear what the customer has purchased and how and where the relevant goods or services are to be delivered.
4. Duration of Storage
We store the collected data for at least ten years in order to comply with obligations under tax and commercial law, including Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).
5. Right to Object and Possibility of Removal
Based on the data collected for the performance of the contract, our e-commerce system may decide not to conclude the contract.
You have the right to object in accordance with Article 22 GDPR.
IX. Rights of the Data Subject
Under the GDPR, you have the right to:
-
Access (Article 15)
-
Rectification (Article 16)
-
Erasure (Article 17)
-
Restriction of processing (Article 18)
-
Data portability (Article 20)
-
Object to processing (Article 21)
X. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.
Last updated: June 2026