We are delighted that you have taken an interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your personal data.

. Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
German Cheerleading Association e.V.
Headquarters: Nuremberg
You can find further contact details in our Legal Notice.

The organisational and technical aspects of the events are carried out in collaboration with the CCA Central Cheerleading Agency, which acts as a data processor within the meaning of Article 28 of the GDPR.

. Storage of access data in server log files

You can visit our website without providing any personal details. We only store access data in what are known as server log files, such as:

• Name of the file retrieved
• Date and time of access
• amount of data transferred
• Browser type and version
• Operating system
• Referrer URL
• IP address (truncated/anonymised)

This data is analysed solely to ensure the website runs smoothly and to improve our service; it does not allow us to identify you personally.

. Collection and use of data when registering for events

We collect personal data when you provide it to us whilst registering for an event or when you contact us. The data collected is taken from the relevant input forms.

The data is processed for the purpose of organising and running the event. Once the event has concluded, the data will be stored in accordance with the statutory retention periods and subsequently deleted, unless further consent has been given.

You can request the deletion of your data at any time using the contact details provided in the legal notice.

. Disclosure of data to partners and service providers

In order to organise events, we pass on personal data to the following organisations, where necessary:

• CCA CentralCheerleadingAgency (organisation and event management)
• technical service providers (e.g. hosting, IT systems)
• Payment service providers and credit institutions

Data is disclosed exclusively in accordance with legal requirements and on the basis of data processing agreements pursuant to Article 28 of the GDPR.

. Data processing by Microsoft Azure

We use services provided by the Microsoft Azure Cloud (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) to store and process data.

Data processing takes place on servers within the EU or in accordance with the EU Standard Contractual Clauses. For further information, please refer to Microsoft’s privacy statement: https://privacy.microsoft.com/de-de/privacystatement

. Using DeepL for translation

We use the DeepL service (DeepL SE, Maarweg 165, 50825 Cologne) to translate content. This may involve processing texts that contain personal data.

This processing is carried out on the basis of a data processing agreement in accordance with Article 28 of the GDPR. Further information: https://www.deepl.com/de/privacy.html

. Photography and video recording at events

Photographs and videos are taken at our events. These are used for documentation purposes, as well as for public relations and to promote future events.

By attending an event or purchasing a ticket, participants and spectators agree to the use of photographic and video material for the purposes of reporting and public relations.

The legal basis is Article 6(1)(f) of the GDPR (legitimate interests).

. Use of cookies

Our website uses cookies. Cookies are small text files that are stored on your device. Some cookies are technically necessary, whilst others are used to analyse user behaviour.

You can prevent cookies from being stored by adjusting the settings in your browser.

. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies to analyse how the website is used. The IP address is anonymised (IP anonymisation is enabled).

This processing is carried out on the basis of Article 6(1)(a) of the GDPR (consent).

Further information: https://policies.google.com/privacy

0. Social media plugins

Our website may contain links to social media platforms (e.g. Facebook, Instagram, Twitter). When you click on these links, the privacy policies of the respective providers apply.

2. Rights of data subjects

You have the right to:

• Right of access (Article 15 of the GDPR)
• Rectification (Article 16 of the GDPR)
• Erasure (Article 17 of the GDPR)
• Restriction of processing (Article 18 of the GDPR)
• Data portability (Article 20 of the GDPR)
• Objection to processing (Article 21 of the GDPR)

Use of YouTube API Services

We use Google’s YouTube API Services to manage and make event videos available. This involves uploading videos of our events to YouTube, organising them, and making them available on our website via embed links.

As part of the YouTube integration, the following data is processed:

• OAuth 2.0 authentication credentials (access tokens) for managing our YouTube channel
• Video metadata (titles, descriptions, tags, visibility settings)
• Playlist assignments

No personal data relating to website visitors is transmitted to YouTube beyond what is required for the standard embedding of YouTube videos.

Use of the YouTube API Services is subject to the YouTube Terms of Service as well as the Google’s Privacy Policy.

You can manage your Google privacy settings at https://myaccount.google.com/permissions manage and revoke the access rights granted there at any time.

Data processed via the YouTube API can be deleted at any time using the contact options on our Legal Notice may be applied for.

3. Contact

If you have any questions regarding the processing of your personal data, please contact us using the contact details provided in our Legal Notice.

As at June 2026