Privacy Policy

Perfect Match GmbH – Hölderlinplatz 5 – 70193 Stuttgart

Berlin Tennis Open accreditation system

We, Perfect Match GmbH (hereafter "we" or "Perfect Match GmbH"), appreciate your visit to our accreditation system for the Berlin Tennis Open (hereafter “website”) and your interest in our company and products. Your privacy is important to us. We are committed to protecting your personal data and handling it in confidence. We process your personal data in accordance with the provisions of data protection law and in particular the EU General Data Protection Regulation (hereinafter "GDPR"). In this Privacy Policy, we provide you with information about the processing of your personal data and your rights as a data subject as regards the use of our website.

Where we include the links of external social media websites in this privacy policy, the conditions below only apply insofar as the data processing operations within the scope of such social media websites actually lie within our area of responsibility and no more specific and therefore higher priority information on data protection in the context of such social media websites are made available.

1. Controller and data protection officer for data processing; contact

The data processing controller within the meaning of the data protection legislation is:

Perfect Match GmbH
Hölderlinplatz 5
70193 Stuttgart
Phone: (+49) 0711–9988560
E-Mail: info@perfectmatch.de

If you have any questions or comments concerning data protection, please get in touch.

You can contact our data protection officer as follows:

Reinhard Büschel
Berater für Datenschutz und IT-Sicherheit

Am Bergheimer Hof 49
D-70499 Stuttgart
Phone: +49 711 958024-32
E-Mail: reinhard.bueschel@rbsales.de
Website: https://www.bu-cs.de

2. Object of data protection

The object of data protection is the protection of personal data. This is all the information that relates to an identified or identifiable natural person (known in the legislation as the data subject). This covers, for example, information such as name, postal address, e-mail address and telephone number, as well as essential information that originates during the use of our website, such as the beginning and end of use, the scope of use, and your IP address.

3. Access permissions on device

The "Accreditation as press representative" and "Accreditation as a representative of another group" support the uploading of images and videos from your device. You will therefore be asked to grant permission to access your device's camera or image library.

You do not have to grant this permission. However, functions which use them will be unavailable if you do not.

The permission will remain enabled until you deactivate the appropriate setting on your device and/or internet browser.

4. Hosting

We are hosting the content of our website via Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as “Webflow”). When you visit our website, Webflow records various logfiles, including your IP address.

Webflow is a tool for the creation and hosting of websites. Webflow stores cookies or other recognition technologies that are required for the depiction of the site, for the provision of certain website functions and to guarantee its security (necessary cookies).

For details, please consult the data privacy policy of Webflow: https://webflow.com/legal/eu-privacy-policy.

We use Webflow on the basis of Art.6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is depicted as reliable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

The transfer of data to the United States is based on the standard contract clauses of the EU Commission. For details, please go to: https://webflow.com/legal/eu-privacy-policy.

5. Individual services and functionalities

You can voluntarily enter personal data during use of our website. When you use the services and features named below, we record, process, and use personal data as outlined here.

5.1 Accreditation as a press representative

This function enables you to have yourself accredited as a press representative for the Berlin Tennis Open. For this purpose, it is necessary for you to first enter the following personal data in the input screen on our website. Based on these details, we create an ID card for you, which you can pick up from our Accreditation office. We will inform you as soon as your ID card is ready to be collected.

(a) Required data

During accreditation as a press representative, you will be asked for the to provide the following required data, which is marked with "'*":

• Photograph of yourself
• Title
• First name
• Surname
• Nationality
• Type of medium (e.g. print, online, TV),
• Medium
• E-mail address
• Business postal address
• Mobile phone number
• Indication whether or not you are a member of the International Tennis Writers Association
• Indication whether or not a work space in the press center is needed

In addition, the consent to this privacy policy, the consent to the creation, processing and publication of photographs/video recordings, the consent to the accreditation guidelines, as well as the consent to the notice on the presentation of a photo ID are defined as mandatory fields.

Accreditation as a press representative is not possible unless you provide this required data.

(b) Voluntary data

In the context of your accreditation as a press representative, you also have the option of providing further data voluntarily:

• Your Press Card number.

We process the collected data on the basis of Article 6 (1) (a), (b) and (f) GDPR to accredit you as a press representative for the Berlin Tennis Open.

5.2 Accreditation as a representative of another group

This function enables you to have yourself accredited as a representative of a further group (e.g. player or service provider) for the Berlin Tennis Open. For this purpose, it is necessary for you to first log into our website using the login data you have previously received from us and then enter the following personal data in the input screen on our website. Based on these details, we create an ID card for you, which you can pick up from our Accreditation office. We will inform you as soon as your ID is ready to be collected.

(a) Required data

During accreditation as a representative of another group, you will be asked for the to provide the following required data, which is marked with "'*":

• Photograph,
• First name,
• Surname,
• E-Mail
• Password,
• Indication of the days during which you will be present at the Berlin Tennis Open and require accreditation

In addition, the consent to this privacy policy, the consent to the creation, processing and publication of photographs/video recordings, the consent to the accreditation guidelines, the consent and confirmation of reading the information on occupational health and safety, as well as the consent to the notice on the presentation of a photo ID are defined as mandatory fields.

Without provision of this required data, accreditation as a representative of another group is not possible.

(b) Voluntary data

In the context of your accreditation as a representative of another group, you also have the option of providing further data voluntarily.:

• Your special requests,
• Your request to the creation of an extended administrator account to perform the accreditation in the name of your employees.

Please note that this information is not required for accreditation as a representative of another group; you alone decide whether or not you wish to provide us with this data.

When requesting the creation of an extended administrator account, you must further agree to having read and accepting the supplier declaration for employee consent.

For the purpose of reusing the profile data in the following year, we store the personal data beyond the tournament year and delete it only after 18 months without a performed login on our website.

We process the collected data on the basis of Article 6 (1) (a), (b) and (f) GDPR to accredit you as a representative of another group for the Berlin Tennis Open.

6. E-mail dispatch for accreditation confirmation

To receive a confirmation e-mail of the accreditation, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis.

7. Plug-ins and Tools

hCaptcha

We use “hCaptcha” (hereinafter referred to as “hCaptcha“) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter referred to as “IMI”).

hCaptcha is being used to determine whether the entry of data into this website (e.g., into a contact form) is being processed by a person or an automated program. For this purpose, hCaptcha analyzes the behavior patterns of website visitors on the basis of several characteristics.

This analysis begins automatically as soon as the website visitor enters a website with the activated hCaptcha feature. For the analysis, hCaptcha uses a wide range of information (e.g., the IP address, time spent on the website or mouse actions taken by the user). The data recorded during this analysis is forwarded to IMI. If hCaptcha is used in the “invisible mode,” the analyses are completely conducted in the background. Website visitors are not alerted to the performance of an analysis.

The storage and analysis of the data occurs on the basis of Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in protecting the operator’s web presentations against abusive automatic spying and SPAM. In the event that respective consent has been obtained, the data will be processed exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, if the consent comprises the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined in the TTDSG (German Telecommunications Act). Such consent may be revoked at any time.

The processing of data is based on Standard Contract Clauses, included in the Data Processing Supplement to the General Terms and Conditions of IMI or in the data processing agreements.

For further information on hCaptcha, please consult the Data Protection Policy and Terms of Use under the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.

Google Firebase

We use Firebase on this website. The provider is Google Inc. Gordon House, Barrow Street Dublin 4, Ireland (hereinafter Firebase). Firebase offers various services. The services we use are limited to Firebase Storage and Database.

Firebase enables us to store your form entries as well as uploaded files, e.g. images, and to initiate accreditation for the Berlin Tennis Open on the basis of these. The personal data collected in this way can subsequently be evaluated by administrators and enables us to carry out authorized access control.

In the data protection information of Firebase you will find further information on the protection of your privacy: https://firebase.google.com/support/privacy?hl=de.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. https://policies.google.com/privacy/frameworks.

The use of Firebase is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the most efficient authorization control possible. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device as defined by the TTDSG. The consent can be revoked at any time.
The data provided by you for the purpose of accreditation for the Berlin Tennis Open will be deleted in the case of accreditation as a press representative after the expiry of the purpose-related need for storage. In the case of accreditation as a representative of another group, data will be deleted after 18 months without a login having been carried out on our website. Data that has been stored by us for other purposes remains unaffected by this.

8. Pursuit of legitimate interests

We process your personal data in pursuit of our legitimate interests. In addition to the interests stated in the description of individual services and functions in Items 3 and 5, data is also processed within the scope of our website because of the following interests:

1. development of products, services and support offerings and other measures to control business operations and processes;
2. The improvement of product quality, the rectification of faults and malfunctions, also using customer feedback analysis
3. processing of warranty and goodwill claims, handling of non-contractual questions and concerns submitted by interested persons and customers;
4. risk management and coordination of recall campaigns;
5. ensuring compliance with the law, prevention of and protection against violations of the law (particularly
   criminal offenses), exercise and defense of legal claims;
6. The assurance of availability, operation and security of
   technical systems and technical data management.

The basis for processing in each case is Article 6(1)(f) of the GDPR.

9. Consent

If you consent to particular data processing operations, your data will only be used for the purposes specified in the specific declaration of consent. The basis for processing in this case is Article 6(1)(a) of the GDPR. If you do not grant consent, we will be unable to comply with the request covered by the consent. You can withdraw your consent at any time; this will not affect the lawfulness of processing based on consent before its withdrawal.

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

10. Recipients of personal data

Internal recipients: Within Perfect Match GmbH, the only people who have access are those who need it for the relevant named purposes.

External recipients: We only forward your personal data to external recipients outside Perfect Match GmbH only if this is necessary to administer or process your inquiry, if another legal authorization or obligation exists, or if we have obtained your consent to do so.

Possible external recipients are:

a) Organizer

Berlin Tennis Open Veranstaltungs-GmbH, as the organizer of the Berlin Tennis Open, also receives access to your personal data within the scope of accreditation and on the basis of this consent.

b) Processors

Companies of the Perfect Match GmbH or external service providers used by us to provide services, e.g. in respect of technical infrastructure or maintenance of the Perfect Match GmbH offering, or the provision of content. We select these processors carefully and review them regularly to ensure that your privacy is protected. Service providers may use the data only for the purposes we have specified.

c) Public bodies

Public authorities and institutions, such as public prosecution authorities, courts or tax authorities, to which we are required to transmit personal data by law. The data is transferred on the basis of Article 6 (1) (c) GDPR.

11. Data processing in third countries

Information on data transfer to the USA and other non-EU countries

Among other things, we use tools of companies domiciled in the United States or other, from a data protection perspective, non- secure non-EU countries. If these tools are active, your personal data may potentially be transferred to these non-EU countries and may be processed there. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible, only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

12. Automated decision-making and profiling

We do not use automated decision-making in accordance with Article 22 of the GDPR in the preparation, establishment and performance of business relationships. Profiles are created only in pursuit of our legitimate interests in the processing purposes described in this document.

13. Duration of storage, erasure

Unless specific instructions on storage duration or the deletion of data are contained in the description of individual services and features, the following applies:

We will store your personal data only for as long as necessary for the envisaged purposes or – if you have given your consent – until such time as you withdraw that consent. If you object to processing of your personal data, we will erase that data unless further processing is permitted under the relevant statutory provisions. We will also erase your personal data if we are required to do so on other statutory grounds.

Pursuant to these general principles, we will generally erase your personal data without delay

• if the legal basis for processing ceases to apply, insofar as no other legitimate basis (e.g. retention periods under commercial and tax law) has effect. In the latter case, we will erase your data once the other legitimate basis ceases to apply.
• if they are no longer required for the purposes sought by us of preparation for and performance of a contract or legitimate interests and no other legitimate basis for processing (e.g. retention periods under commercial and tax law) has effect. In the latter case, we will erase your data once the other legitimate basis ceases to apply.
• if the purpose for which the data are collected ceases to apply and no other legitimate basis (e.g. retention periods under commercial and tax law) has effect. In the latter case, we will erase your data once the other legitimate basis ceases to apply.

14. Data subject rights

As a data subject, you have numerous rights available to you. Specifically, these are:

Right of access: You have the right to access data we store concerning you.

Right to rectification and erasure: You have the right to require us to rectify inaccurate data and – if the statutory requirements are met – to erase your data.

Restriction of processing: If the statutory conditions are met, you have the right to require us to restrict processing of your data.

Data portability: If you have provided data to us on the basis of a contract or consent and if the statutory conditions are met, you can receive the data provided by you in a structured, commonly used, machine-readable format, or require us to transmit them to another controller.

Objection to processing of data processed on the basis of a legitimate interest: You have the right to object, on grounds relating your particular situation, at any time to processing of personal data by us which is based on a legitimate interest. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling, legitimate grounds for the processing which override your rights.

Objection to cookies and similar technologies: Furthermore, you can object to the use of cookies and similar technologies at any time. Please refer to our Cookie Policy for further details.

Withdrawal of consent: If you have consented to processing of your data, you can withdraw that consent at any time with future effect. This will not affect the lawfulness of processing of your data carried out before withdrawal.

Right to lodge a complaint with the supervisory authority: If you believe that processing of your data contravenes applicable law, you can also lodge a complaint with the competent supervisory authority. To do this, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

Right to demand processing restrictions: You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

• In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
• If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
• If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
• If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

Contact us: If you have any questions concerning the processing of your personal data, your data subject rights and any consent you have given, you can also get in touch with us free of charge. To exercise all your aforementioned rights, please contact us via info@perfectmatch.de by post at the address stated in Item 1 above. When you do so, please ensure that we are able to identify you uniquely.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR): In the event that data are processed on the basis of art. 6(1)(e) or (f) gdpr, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this data protection declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to art. 21(1) gdpr).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) DSGVO).

15. Links to third-party websites and offerings

Websites and services of other providers that are linked to our website are and have been designed and made available by third parties. We have no influence over the form, content and function of such third-party services. We expressly dissociate ourselves from all content presented on any and all third-party offerings we link to. Please be aware that third-party sites linked to our website may install their own cookies on your device or collect personal data. We have no influence over this. For information in this regard, please contact the providers of the linked third-party offerings directly.

16. Status

The latest version of this Privacy Policy applies. Status 24.05.2023