A volleyball lies on a dark, reflective floor.

Privacy policy

Here you can find out which personal data we process when you use our website and what rights you have. Translation for information; the German version is binding.

Last updated: 5 November 2026

Controller

Dürener TV Volleyball GmbH, Wilhelmstraße 27, 52349 Düren, Germany. Phone: +49 2421 51290, email: info@swd-powervolleys.de

Hosting and server log files

Our website is hosted by Vercel Inc., USA. When you visit, Vercel processes technically necessary data such as IP address, time, requested address and browser identifier to deliver and secure the site. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Data may be transferred to the USA. The basis is the adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Vercel is certified; standard contractual clauses also apply (Art. 46(2)(c) GDPR), copy on request. Log data is kept only as long as needed for delivery, security and troubleshooting.

What you enter in our forms also passes through Vercel's servers and is forwarded from there, not stored there. We deliver fonts and map data with our website ourselves, so loading a page sends no data to Google or other providers for them.

Protecting the forms against abuse

So that nobody can use our forms to send masses of messages or confirmation emails to other people, we check every submission. Vercel BotID (Vercel Inc., see hosting) checks technical features of your browser to recognise automated requests; a short script loaded through our own address runs when you submit. We also limit how often a form can be sent from the same IP address or for the same email address. For this we store with Upstash Inc. (database in the EU) only a shortened, irreversible check value of the IP or email address with a counter, for at most 24 hours. The legal basis is our legitimate interest in secure forms and working email delivery (Art. 6(1)(f) GDPR); the check in the browser is strictly necessary for the submission you asked for (Section 25(2) no. 2 TDDDG). Transfers to the USA are covered by standard contractual clauses (Art. 46(2)(c) GDPR).

On your first visit, we ask for your choice. We store it in your browser in the cookie “pv_consent” and in local storage as “pv-consent”. The cookie expires 400 days after your last visit; only your browser or you can delete the local storage. For the length of a session, your browser notes in “pv-consent-refreshed” that the period was extended. This is needed to respect your choice (Section 25(2) TDDDG). The cookie and local storage contain only the selection, version and date. After “Necessary only”, we ask again after six months, and whenever a new service is added. You can change or withdraw your choice at any time under “Cookie settings” in the footer.

Statistics and marketing

On every page view, your browser loads Google Tag Manager from Google Ireland Limited, Dublin. Google technically receives your IP address and browser identifier. Tag Manager sets no cookies and starts no measurement without your consent. The legal basis is our legitimate interest in controlling these services in one place and only after your choice (Art. 6(1)(f) GDPR).

With your consent, we use Google Analytics to understand how the site is used. Google sets cookies for this (“_ga”, “_ga_…”) and processes data such as IP address, pages viewed, device, referrer and approximate location; according to Google, Google Analytics does not store the IP address. We keep event data for 14 months. Data may be transferred to the USA; the basis is the adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). If you withdraw it, we stop measuring and delete the cookies in your browser.

If you also allow Google Ads, Google Analytics may use Google Signals as well. Google can then link visits to people who are signed in to Google and have allowed personalized ads. We only receive aggregated figures from this. We do not currently run ads through Google Ads or Meta Ads and send nothing to Meta; before we change that, we will update this policy and ask you again.

External media: MVP voting by FanQ

The MVP voting may be embedded from FanQ. It only loads once you confirm it in the widget or allow FanQ in the settings. Only then does FanQ receive data such as your IP address, and it may set cookies. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). If a link takes you directly to FanQ, its own notices apply there.

For the newsletter, we only need your email address. We send it with Brevo GmbH, Berlin. After signing up, you get an email with a confirmation link; only then are you signed up. Brevo stores the sign-up as an attribute and the time of sign-up and confirmation, and as proof of your consent also the language, the page you signed up on and the version of the consent text. If you also bought tickets from us, Brevo combines both in one contact. With your consent, we analyze opens and clicks in the newsletter to improve it. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every newsletter or by emailing us; after that, we no longer use your address for the newsletter. We keep your address until you unsubscribe; it may then stay blocked to prove your consent and avoid contacting you again.

Contact form

We send the details from the form (name, email address, topic, message and, for partnerships, your company if you provide it) to ourselves by email through Brevo GmbH, Berlin. We also store each request in our Brevo account so that our team can handle and follow up on it: as a contact with email address and name, and as a case with topic, language, source and status, with your message as a note. For partnerships, we also create the company you provide there. If a contact already exists for your email address, for example from the newsletter or a ticket purchase, we do not change it and only link the request to it.

If your request concerns a contract with you or steps toward one, the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR; our interest is answering requests and handling them in an orderly way. We also use partnership requests to discuss and prepare a sponsorship with you or your company; our interest is winning sponsors (Art. 6(1)(f) GDPR). Your objection is governed by the section “Your right to object”. We will reply to your request. Beyond that, we will not send you advertising emails because of it or add you to the newsletter.

We delete your request when it is no longer needed and no retention duty applies.

Ticket shop and fan shop

For the ticket shop we use the vivenu platform, under a data processing agreement. We process your details from the shop to handle the purchase (Art. 6(1)(b) GDPR). vivenu automatically transfers to our Brevo account: your customer data when it is created or changed, completed purchases and abandoned checkouts. We use this for our communication about tickets and matches. The basis is our legitimate interest in informing you about them (Art. 6(1)(f) GDPR). Your objection is governed by the section “Your right to object”. The data stays with Brevo until you object or we no longer need it and no retention duty applies. Our fan shop runs with our partner WePlay. Data is only processed there once you go there; WePlay's notices apply.

Links to our profiles lead to the providers; data is only collected there. We fetch the Instagram posts on our site through our server and deliver the images ourselves. Displaying them sends nothing from you to Meta.

Recipients and obligation to provide data

Your data is received in particular by: Vercel (hosting, form protection), Upstash (form rate limits), Brevo (email and management of contacts and requests), vivenu (ticket shop), Google (Tag Manager, with your consent also Analytics) and FanQ only with your consent. Further categories are technical service providers for our website, subcontractors of these providers, payment providers for ticket purchases, our email provider and bodies we must legally disclose data to. Providing your details is voluntary. Without an email address we cannot send you a newsletter, without contact details we cannot reply, and without details in the shop we cannot sell you a ticket. We ourselves make no solely automated decisions within the meaning of Art. 22 GDPR.

Your rights

Access to the data stored about you
Rectification, erasure and restriction of processing
Data portability
Withdrawal of consent with effect for the future

To do so, write to info@swd-powervolleys.de. You can also complain to a supervisory authority, in North Rhine-Westphalia the State Commissioner for Data Protection and Freedom of Information (opens in a new tab).

Your right to object

If we process data based on Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. You can object to use for direct marketing at any time without giving reasons. An email to us is enough.