Privacy notice.
Information about visiting this website and the contact options available here.
Last updated: 6 October 2026
1. Data controller
CSC Westfalen e.V.
CSC Westfalen e.V. Bornstr. 288 44145 Dortmund
Represented by: Nino Lobitz, 1. Vorsitzender & Larissa Schell, 2. Vorsitzende
Email: info@csc-westfalen.de
2. Website provision and hosting
The website is hosted on the club’s webspace at ALL-INKL.COM. When you access it, the hosting provider may process technical access data such as your IP address, date and time, requested file, browser information, operating system and transmitted referrer information.
Providing the website and maintaining its stability and security are legitimate interests under Article 6(1)(f) GDPR. The specific logging and retention rules depend on the hosting configuration and agreements with the provider.
Die Server-Logdateien unserer Website werden bei ALL-INKL.COM für maximal 190 Tage gespeichert und anschließend gelöscht.
3. Local fonts, images and website features
The website’s fonts, images and scripts are hosted on our own webspace. Google Maps and Instagram embeds are only loaded after you click “Load”. This transmits data including your IP address and browser details to Google or Meta, respectively.
The FAQ search and topic filters run locally in your browser. Public visits to the website do not require analytics or marketing cookies. A technically necessary session cookie is only set for signing in to and using the administration area.
4. Contact by email
When you send us an email, we process the details it contains to respond to your enquiry. Article 6(1)(b) GDPR may apply to enquiries about potential membership. We handle other general enquiries on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR.
The “Prepare a message” feature creates an email draft locally. This website does not transmit the form entries to a form server. They are sent through your email provider only when you send the message in your email programme.
Contact details are processed for as long as necessary to handle the enquiry. Statutory retention requirements and any periods necessary to protect legitimate interests must also be taken into account.
5. Registration and member access through Cannanas
Registration and member-access links lead to Cannanas. Clicking them opens an external website. Processing there is governed by the information and agreements for that service, together with the club’s separate privacy information for joining and member administration.
This website does not itself collect membership registrations, identity documents or payment details. The club code in the registration link associates the registration with CSC Westfalen.
6. Other external links
Profile and route links lead to Instagram or mapping services and take you away from our website. Official legal texts and prevention resources are also accessible through standard links. The respective provider’s privacy notice applies when you click them. External maps and Instagram embeds are only loaded after you click “Load”.
7. Your rights
Subject to the GDPR, you have rights including access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests where the legal conditions are met. If processing is based on consent, you may withdraw that consent for the future.
You may also lodge a complaint with a data protection supervisory authority, in particular the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
Information from the LDI Nordrhein-Westfalen
8. Changes
This notice must be updated when the actual processing of data changes. Further information about data protection in club administration is provided during the joining process or on request.
Administration area
For authorised club administrators, we store names, email addresses, roles and password hashes. Administrative actions are logged for traceability. The logs contain no passwords or message text and are cleared after 90 days during the next maintenance or administrative action. Failed sign-ins are stored temporarily with a pseudonymised identifier to limit sign-in attempts. Session cookies are used solely to operate the administration area securely.