KASI Hockey Website Privacy Notice
Last updated: 07. September 2026
KASI Hockey takes the protection of your personal data seriously. This Privacy Notice explains how personal data is collected, used and protected when you visit our website, contact us or make a donation through our website.
This Privacy Notice applies to kasihockey.org and related KASI Hockey website pages.
A separate KASI Hockey Privacy Notice for Volunteer Applications applies if you submit an application to become a KASI Hockey Volunteer.
1. Who is responsible for your data?
The controller responsible for processing personal data in connection with this website is:
Alster Hockey Hilft e.V.
KASI Hockey
Heimhuder Str. 84
20148 Hamburg
Germany
Email: [email protected]
KASI Hockey is the project name under which our activities currently operate.
If the legal entity responsible for KASI Hockey changes in the future, this Privacy Notice will be updated accordingly.
What data may be processed when you visit our website?
When you access our website, technical information may automatically be processed in order to provide, secure and operate the website.
This may include:
• IP Address
• Date and Time of Access
• Requested Page or Resource
• Browser Type and Version
• Operating System
• Device Information
• Referring Website
• Technical Request and Response Information
• Security and Traffic Information
These data are processed primarily to:
• Deliver the Website
• Maintain Website Security
• Protect Against Abuse and Attacks
• Ensure Technical Stability and Performance
• Diagnose Technical Problems
The legal basis for this processing is generally our legitimate interest in providing a secure, reliable and functional website under Article 6(1)(f) GDPR.
3. Cloudflare
We use services provided by Cloudflare for the operation and protection of our website.
Cloudflare provides services including:
• Domain Name System (DNS)
• Content Delivery Network (CDN)
• Website Performance Optimisation
• Traffic Routing
• Security Services
• Protection Against Malicious Traffic and Cyberattacks
Because internet traffic may pass through Cloudflare's infrastructure, Cloudflare may process technical information such as IP addresses, traffic routing information, system configuration information and other information associated with requests to and from our website. Cloudflare itself confirms that such information may be processed when end users access websites using its services.
We use Cloudflare on the basis of our legitimate interest in maintaining the security, availability and performance of our website under Article 6(1)(f) GDPR.
Cloudflare provides contractual data protection arrangements for customers, including a Data Processing Addendum covering processing and international data transfers.
4. Framer
Our website is created and hosted using Framer.
Framer provides the technical infrastructure required to display and operate our website.
In this context, Framer may process technical information necessary to provide the website.
Where Framer processes personal data on our behalf, KASI Hockey remains the controller and Framer acts as a processor in accordance with applicable data protection arrangements.
The legal basis for using Framer for the technical provision of our website is our legitimate interest in operating a functional and reliable website under Article 6(1)(f) GDPR.
5. Framer Analytics
We may use Framer Analytics to understand general website usage and performance.
According to Framer, its built-in analytics system does not use cookies or persistent identifiers and is designed so that website visitors are not personally identified through the analytics service. Framer states that its built-in analytics therefore does not itself require cookie consent.
Framer Analytics may help us understand information such as:
• Website Visits
• Page Views
• General Website Usage
• Website Performance
We use this information to understand how our website is used and to improve our content and website experience.
Where the processing does not involve consent-requiring tracking, the legal basis is our legitimate interest in understanding and improving our website under Article 6(1)(f) GDPR.
6. Google Analytics
We use or may use Google Analytics 4, a web analytics service provided by Google, to understand how visitors use our website.
Google Analytics may process information such as:
• Pages Visited
• Time and Duration of Visits
• Approximate Geographic Information
• Device and Browser Information
• Referring Sources
• Interactions With Website Content
• Technical Identifiers and Cookies, Where Permitted
Google Analytics uses cookies and similar technologies to measure interactions with websites. Google also makes clear that website operators are responsible for obtaining the required user consent before analytics cookies are used.
Consent
Google Analytics will only be activated where the required consent has been provided through our consent management system.
The legal basis is therefore Article 6(1)(a) GDPR.
You can refuse analytics cookies without losing access to the main functionality of our website.
You can also change or withdraw your consent at any time through our cookie or privacy settings.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Google Consent Mode
We may use Google's Consent Mode to communicate your consent choices to Google services.
Google distinguishes between different consent categories, including analytics storage, advertising storage, advertising user data and advertising personalisation.
Where possible, we configure our analytics tools so that your consent choices are respected before non-essential tracking begins.
7. Cookies and consent management
Our website may use cookies or similar technologies.
Some technologies are technically necessary to operate or secure the website. Others, particularly analytics or advertising technologies, may require your consent.
Our consent management system is intended to allow you to:
• Accept Optional Technologies
• Reject Optional Technologies
• Select Individual Categories
• Change Your Preferences Later
Framer recommends that websites using third-party tracking technologies such as Google
Analytics use a consent banner with accept and reject options, automatic blocking before consent, granular settings and information about cookies.
Non-essential technologies will only be activated where the legally required consent has been obtained.
8. Possible future use of Google Ads and advertising technologies
We do not currently use Google Ads or remarketing for advertising purposes.
We may decide to use additional Google advertising functionality in the future, for example:
• Google Ads Conversion Measurement
• Campaign Performance Measurement
• Remarketing
• Advertising Audience Measurement
• Personalised Advertising
If such features are introduced, they will only be activated where the legally required consent has been obtained.
Our cookie settings and this Privacy Notice will be updated accordingly.
Google's Consent Mode provides separate consent controls for advertising storage, advertising-related user data and personalised advertising.
We will not treat consent to analytics as automatic consent to personalised advertising.
9. Contacting KASI Hockey by email
You can contact us by email, including through:
If you contact us, we process the personal data you voluntarily provide.
This may include:
• Your Name
• Your Email Address
• The Content of Your Messag
• Information Included in Attachments
• Any Other Information You Choose to Provide
We use this information to respond to and manage your enquiry.
Depending on the nature of your request, processing may be based on:
• Article 6(1)(b) GDPR, where your enquiry relates to a potential contractual relationship, or
• Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries and communicating with people interested in KASI Hockey.
We retain correspondence only for as long as necessary to handle the enquiry and any subsequent relationship, unless legal obligations or the establishment, exercise or defence of legal claims require longer retention.
10. Donations through PayPal
We use PayPal to facilitate donations to KASI Hockey.
Our website may contain an embedded PayPal donation button provided by PayPal.
PayPal states that its donation functionality can be integrated directly into websites and may allow donors to complete a donation without leaving the website experience.
When the PayPal donation functionality is loaded or used, data may be transmitted to PayPal.
Depending on the way the PayPal service is technically implemented and used, PayPal may process information such as:
• IP Address
• Device and Browser Information
• PayPal Account Information
• Name
• Email Address
• Payment Information
• Donation Amount
• Transaction Information
• Fraud Prevention and Security Information
PayPal processes payment information in accordance with its own privacy policies and legal responsibilities.
KASI Hockey does not receive your complete payment credentials, such as your PayPal password or complete payment card information.
After a donation has been completed, information visible to us in our PayPal organisation account may include:
• Donor Name
• PayPal Email Address
• Donation Amount
• Date of Donation
• Transaction Information
We use this information to administer donations, maintain financial records and fulfil our legal and accounting obligations.
Depending on the processing activity, the legal basis may be Article 6(1)(b), Article 6(1)(c) or Article 6(1)(f) GDPR.
Where the embedded PayPal functionality uses non-essential cookies or similar tracking technologies, those technologies will only be activated in accordance with the applicable consent requirements.
11. Donation receipts
If you require a donation receipt or donation certificate, please contact:
We may then request additional information necessary to issue the receipt, such as your:
• Full Name
• Postal Address
• Donation Information
We process this information for the purpose of providing the requested donation documentation and fulfilling applicable legal and tax requirements.
The legal basis is generally Article 6(1)(c) GDPR where processing is required to comply with legal obligations, and where applicable Article 6(1)(b) GDPR in relation to your request.
Donation and accounting records may be retained for the statutory retention periods applicable under German law.
12. External links, social media and application forms
Our website may contain links to external websites and services, including social media platforms such as Instagram and our volunteer application form hosted through Google Forms.
We currently use social media services primarily as external links rather than embedding social media feeds directly into the website.
Our Apply buttons may direct you to a separate Google Form used for the KASI Hockey Volunteer Application process.
If you follow an external link, including a link to Google Forms, you leave the KASI Hockey website and the privacy practices of the respective provider also apply.
For volunteer applications, the processing of application data is governed by our separate KASI Hockey Privacy Notice for Volunteer Applications, which is provided as part of the application process.
External providers may process information such as:
• IP Address
• Device and Browser Information
• Account Information Where You Are Logged In
• Technical Usage Information
KASI Hockey does not control how external providers process personal data for their own independent purposes
13. Service providers and recipients
We use selected external service providers to operate our website and related services.
Depending on the relevant processing activity, recipients or service providers may include:
• Cloudflare
• Framer
• Google
• PayPal
• IT and Technical Service Providers
• Professional Advisers Where Necessary
• Public Authorities Where Required by Law
We only disclose personal data where this is necessary for the relevant purpose or where we are legally required or permitted to do so.
Where a provider processes personal data on our behalf, we seek to ensure that appropriate contractual data protection arrangements are in place.
14. International data transfers
Some of the service providers we use operate internationally and may process personal data outside the European Economic Area.
This may particularly apply to providers or affiliated companies of:
• Cloudflare
• Google
• PayPal
• Other International Technology Providers
Where personal data is transferred outside the European Economic Area, we seek to ensure that an appropriate transfer mechanism is in place.
Depending on the recipient and destination, this may include:
• An Adequacy Decision of the European Commission
• The EU-U.S. Data Privacy Framework Where Applicable
• European Commission Standard Contractual Clauses
• Additional Technical and Organisational Safeguards Where Necessary
You may contact us if you would like further information about safeguards relating to a particular international transfer.
15. How long do we keep personal data?
We do not retain personal data for longer than necessary for the purpose for which it was collected.
The exact retention period depends on the type of data and the purpose of processing.
In particular:
• Website and Security Data Are Retained Only for as Long as Required for Technical Operation, Security and Abuse Prevention
• Analytics Data Are Retained According to the Settings Applied Within the Relevant Analytics Service
• Email Correspondence Is Retained for as Long as Necessary to Process the Enquiry and Any Related Follow-Up
• Donation and Financial Records May Be Retained for Applicable Statutory Accounting and Tax Retention Periods
• Data Required for Existing Legal Claims May Be Retained Until the Relevant Claim Has Been Resolved or the Applicable Limitation Period Has Expired
Data may be deleted earlier where it is no longer necessary and no legal obligation or overriding legitimate reason requires continued retention.
16. Security
We take appropriate technical and organisational measures to protect personal data against:
• Unauthorised Access
• Loss
• Misuse
• Alteration
• Accidental Disclosure
• Destruction
Our website infrastructure uses services intended to improve security and availability, including Cloudflare security functions.
However, no internet transmission or digital storage system can guarantee absolute security.
17. Your data protection rights
Subject to the conditions of the GDPR, you have the right to:
• Request Access to Your Personal Data
• Request Correction of Inaccurate Personal Data
• Request Deletion of Your Personal Data
• Request Restriction of Processing
• Object to Processing Based on Legitimate Interests
• Request Data Portability Where Applicable
• Withdraw Consent at Any Time With Effect for the Future
Where processing is based on our legitimate interests under Article 6(1)(f) GDPR, you may object to the processing in accordance with Article 21 GDPR.
Where processing is based on your consent, withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, please contact:
We may need to verify your identity before responding to your request.
18. Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority responsible for our organisation is currently:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
You may also contact a competent supervisory authority in the EU Member State where you live or work.