Privacy policy
In short
- This website only sets cookies and measures usage with Google Analytics if you agree in the banner. Without your consent nothing is loaded from Google.
- Apart from that it loads no content from third parties – fonts, icons and graphics come from our own server.
- We only process personal data if you write to us or sign in to the dashboard.
Controller
Lukas Musebrink, 4clubs
Krückenweg 61, 44227 Dortmund, Germany (see legal notice)
Email: hi@4clubs.io
Hosting and delivery
This website is hosted by Amazon Web Services (AWS) in Frankfurt am Main and delivered via the Amazon CloudFront content delivery network. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. We have a data processing agreement with AWS pursuant to Art. 28 GDPR; any transfers to third countries are covered by the EU standard contractual clauses.
When the site is accessed, CloudFront processes technically necessary data such as IP address, time, page requested and browser identifier to deliver the page and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). We don't store access logs containing IP addresses.
Google Analytics (only with consent)
If you agree in the banner, we use Google Analytics 4 to understand how our website is used (pages viewed, referrer, device and browser, approximate location, time on page). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google sets the cookies _ga and _ga_<ID> (lifetime up to 2 years) and processes your IP address, which according to Google is not stored by Google Analytics 4. Google may transfer data to the USA; Google is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply as well. Google keeps the data for at most 14 months.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent nothing is loaded from Google. We store your choice only in your browser (localStorage, not a cookie). You can withdraw your consent at any time via “Cookie settings” at the bottom of the page; we then delete the Google cookies and stop loading anything from Google.
Contact by email
If you write to us, we process your details to answer the enquiry (Art. 6 (1) (b) or (f) GDPR). We delete them as soon as they are no longer needed and no retention obligations apply. Our mailbox is hosted by Google Workspace (Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland). We have a data processing agreement with Google; Google may also store data outside the EU, covered by the EU standard contractual clauses and the EU-US Data Privacy Framework.
Dashboard
To sign in to the dashboard we process your email address and send you a one-time code (Amazon Cognito and Amazon SES, both in Frankfurt). The legal basis is the performance of a contract (Art. 6 (1) (b) GDPR). Only signed-in members of the club can see the preview of your website at <club>.sites.4clubs.io; for this we set a strictly necessary cookie after sign-in (4clubs-preview-<club>, 12 hours, only for the preview addresses, § 25(2) no. 2 TDDDG).
In the dashboard we log who changed what and when (change log, 180 days) so clubs can trace changes. Content entered by clubs (posts, teams, contacts, newsletter subscribers, form submissions …) is processed on behalf of the respective club under the data processing agreement (German). The club is the controller for it.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Just send us an email.