1. Data controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Deutschland Kempo Federation e.V.
Humboldtstraße 9
31812 Bad Pyrmont
Germany
Email:
lentzue@gmail.com
Phone:
+49 1525 1509471
2. Provision and hosting of the website
Our website operates on a virtual private server hosted by IONOS.
The hosting provider is:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
When you access a website, technical reasons require the IP address of your device to be processed so that the requested content can be delivered. Technically necessary connection and request data may also be processed, such as the time of the request, the requested resource and information about your browser.
Regular HTTP access logging (“access logs”) is not enabled for our web server. System, security and error logs may, however, contain technical events where necessary for operation, troubleshooting and server security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our website.
IONOS acts as a service provider for hosting. The processing of personal data in connection with hosting is governed by data processing arrangements.
Under the current configuration, we do not use any additional IONOS backup or snapshot services configured by us for form data.
3. Contact and enquiry form
We provide a contact and enquiry form at /en/mitmachen/.
When you use the form, we process the information you enter. Depending on your enquiry, this may include:
- first and last name,
- email address,
- telephone number,
- club or dojo,
- city,
- role or position,
- selected areas of interest, and
- the content of your message.
The data is used solely to process your enquiry and for related communication.
Information submitted through the form is initially stored in a local database on our server. When a new enquiry is received, an email containing the form data needed to process it is automatically sent to our contact address. Where Gmail is used for this purpose, the personal data contained in the email is processed by Google as part of the email communication.
Where your enquiry concerns entering into or performing a membership, contract or comparable legal relationship, processing is based on Article 6(1)(b) GDPR.
General enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in handling enquiries from members, interested persons, clubs, athletes and other contacts.
Consent to processing is not required to submit the form.
Enquiries stored in the form database are automatically deleted three months after receipt.
The fields marked as required are necessary for us to process and answer your enquiry properly. Other information is optional.
4. Protection against form misuse
To protect the form against automated or abusive requests, the requesting device’s IP address is processed temporarily to enforce a technical access limit.
The IP address is not stored with your enquiry in our form database. It is processed only temporarily in the server’s volatile memory and automatically removed after the applicable period. This period is currently approximately ten minutes; technical clean-up is carried out regularly.
This processing protects the form and our server infrastructure from spam, automated requests, misuse and overload.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the security and functionality of our online service.
5. Contact by email or telephone
If you contact us by email or telephone, we process the data you provide in order to handle your enquiry.
Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR.
Email data is generally processed for as long as needed to handle and document the relevant matter. Further retention takes place only where there is a legal obligation or another lawful basis.
Use of Gmail
We currently use the email address lentzue@gmail.com and therefore Gmail for our email correspondence.
For users in the European Economic Area, Google services are generally provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When contacting us by email, Google therefore processes your email address, message contents, technical metadata and any other information you may send.
If we subsequently reply by email to a website form enquiry, the contact details needed for that reply may also be processed through Gmail.
Processing by Google companies in the United States cannot be ruled out. For transfers to appropriately certified US companies, an adequacy decision of the European Commission currently exists under the EU–US Data Privacy Framework. Google LLC is currently certified under this framework. Google also states that it uses standard contractual clauses for international transfers where required.
6. Fonts and external content
Our website currently loads no Google Fonts or other externally hosted fonts.
Previously embedded Google Fonts have been removed. The website uses the system fonts of each visitor’s device.
Under the current technical configuration, simply visiting our website also does not load third-party analytics, advertising or social media services.
A Content Security Policy provides additional technical protection by restricting the loading of unauthorised external resources.
7. Cookies, tracking and consent banner
According to the current technical configuration, this website does not use analytics or marketing cookies, advertising tracking or user tracking.
Submitting the contact form does not require marketing or analytics cookies.
We therefore do not currently use a consent banner for analytics, marketing or other non-essential tracking technologies.
If future services store or access information on a device or process personal data for analytics, marketing or similar purposes, we will assess whether consent is necessary before their use. This Privacy Policy will then be updated accordingly.
8. Recipients of personal data
Within Deutschland Kempo Federation e.V., access to personal data is limited to people who need it to handle the relevant matter.
Data may also be received by the following service providers in particular:
- IONOS for operating and hosting our server,
- Google Ireland Limited or other companies of the Google group, where communication takes place through Gmail.
Personal data will only be disclosed to other recipients if necessary for the relevant purpose, required by law or otherwise permitted on a lawful basis.
9. Data security
We take technical and organisational measures to protect personal data against loss, alteration, unauthorised access and other risks.
The website is served over encrypted HTTPS. Unencrypted website requests are redirected to HTTPS. Direct unencrypted access to the form API is blocked.
Further measures include security headers and a Content Security Policy.
10. No automated decision-making
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place in connection with this website.
11. Your data protection rights
Subject to the relevant legal requirements, you have the following rights in particular:
- Access to your processed personal data under Article 15 GDPR,
- Rectification of inaccurate or incomplete data under Article 16 GDPR,
- Erasure of personal data under Article 17 GDPR,
- Restriction of processing under Article 18 GDPR,
- Data portability under Article 20 GDPR, where the legal requirements are met,
- Objection to processing based on legitimate interests under Article 21 GDPR.
Where processing is based on Article 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation.
To exercise your rights, use the contact details above.
12. Right to lodge a complaint with a supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
The supervisory authority particularly responsible for us is:
The State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen)
Prinzenstraße 5
30159 Hannover
Germany
Phone: 0511 120-4500
Email:
poststelle@lfd.niedersachsen.de
Your right to contact another supervisory authority competent under the GDPR remains unaffected.
13. Changes to this Privacy Policy
We will update this Privacy Policy if the technical functionality of our website, the service providers we use or the legal framework changes.
Last updated: 1 October 2026