Privacy Policy

Controller under the GDPR for this website and the app:

Alexander Schütte
Marktstr. 5
48485 Neuenkirchen
Deutschland

Email: info@handball365.de

The app is operated for handball clubs. Club content such as squads, fixtures, and sponsors is provided by the respective club.

This policy applies to:

• the Handball365 website at https://handball365.de
• the Handball365 app (iOS/Android) for handball clubs

This website has no user accounts, no sponsor administration, and no push notifications. Sections 4 to 6 describe processing in the app.

The binding language is German: Datenschutzerklärung.

The website and app are hosted on Hetzner Cloud / Webgo. Club, match, and sponsor data are stored with Supabase (EU). Connection data (for example IP address, time, and pages requested) may be processed in server logs where this is technically required.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a secure and stable service).

• Visits to this website: connection and log data required to deliver the pages. We do not set analytics or advertising cookies.
• Offer request: club name, contact first and last name, email address, and an optional phone number when you submit the form. We use this only to prepare the offer and contact you. Legal basis: Art. 6 (1) (b) GDPR.
• Public sports data: fixtures, results, tables, squads, and team information the club publishes in the app.
• Sponsor details: name, logo, contact details, and validity periods stored by the club.
• Sponsor-admin login: email address, password hash, club identifier, and a session cookie for selected club users. There is no public login for every visitor.
• App (optional): location permission, if granted, to open directions to venues. The location is not stored permanently on our servers.
• Following teams (optional): if you follow a team, we store an anonymous device id on the device and on the server, the platform (iOS/Android/web), the selected team ids, and team display names where needed. No user account and no real-name login is required.
• Push notifications (optional, app): see section 5.

In the Handball365 app you can optionally receive a reminder about two hours before kick-off for matches of teams you follow. As a rule, at most one reminder is sent per device and match. These are club match reminders, not advertising.

For this we process in particular:

• the notification permission granted by the operating system
• an Expo push token (Expo Push Service) bound to your device
• the anonymous device id and your follow selection
• technical records that a reminder for a match has already been sent

Without follows and without notification permission we do not store a push token and do not send reminders. Delivery runs through Expo and the platform services (Apple Push Notification service or Google Firebase Cloud Messaging). Those providers may process data required for delivery; their own privacy policies apply.

Legal basis: Art. 6 (1) (a) GDPR (consent), where you allow notifications and follow teams. You can withdraw consent at any time by turning off notification permission, unfollowing teams, and/or deleting the app data. Withdrawal does not affect processing that was lawful before the withdrawal.

This marketing website does not set analytics or advertising cookies. Hosting logs that are technically required remain unaffected.

Sponsor administration in the app uses a technically necessary signed session cookie (portal_session). It is used only for sign-in and contains no advertising identifiers.

“Follow team” uses local storage for the anonymous device id and the list of followed teams. The app may also use WebView or app storage (for example cache) and system notification settings in order to show the app and optionally deliver reminders.

Legal basis: Art. 6 (1) (f) GDPR and Section 25 (2) TDDDG (strictly necessary), and Art. 6 (1) (a) GDPR where you allow notifications.

Links or embedded content may open third-party services (for example sponsor websites, maps and navigation apps, or PDF viewers). Those providers are responsible for their own processing.

Optional push reminders use Expo and the push services of Apple or Google (see section 5). Sports data may come from or link to partner sources such as handball.net; those providers’ notices apply as well.

Server logs are usually kept only briefly for operations and security. Login sessions end when the cookie expires or you sign out. Password-reset tokens are time-limited and invalid after use. Sports and sponsor data stay stored while the club needs them, or until the club deletes them. Followed teams, device and push data, and records of sent reminders stay stored until you clear follows, delete the app data, or ask us to delete them.

You have in particular the following rights against the controller:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent (Art. 7 (3) GDPR), for example for push notifications

You may also lodge a complaint with a data protection supervisory authority.

The app is aimed at club members and people interested in the club. Squad data may include youth players where the club publishes them for match operations. Parents or guardians can contact the address above.

We update this policy when the service, the technology, or the law changes. The current German text is at /datenschutz. Provider details: Impressum.