Privacy Policy

You can find the privacy notices for the internal tool GTM Optimizer and the CCA YouTube channel on the CCA’s own privacy page.

We are delighted that you have taken an interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your personal data.

1. Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
German Cheerleading Association e.V.
Head office: Nuremberg
You can find further contact details in our Legal Notice.

The organisational and technical aspects of the events are handled in collaboration with the CCA Central Cheerleading Agency, which acts as a data processor within the meaning of Article 28 of the GDPR.

2. Storage of access data in server log files

You can visit our website without providing any personal details. We only store access data in what are known as server log files, such as:

• Name of the file retrieved
• Date and time of access
• amount of data transferred
• Browser type and version
• Operating system
• Referrer URL
• IP address (truncated/anonymised)

This data is analysed solely to ensure the website runs smoothly and to improve our service; it does not allow us to identify you personally.

3. Collection and use of data when registering for events

We collect personal data when you provide it to us whilst registering for an event or when you contact us. The data collected is taken from the relevant input forms.

The data is processed for the purpose of organising and running the event. Once the event has concluded, the data will be stored in accordance with the statutory retention periods and subsequently deleted, unless further consent has been given.

You can request the deletion of your data at any time using the contact details provided in the legal notice.

4. Disclosure of data to partners and service providers

In order to organise events, we pass on personal data to the following organisations, where necessary:

• CCA CentralCheerleadingAgency (organisation and event management)
• technical service providers (e.g. hosting, IT systems)
• Payment service providers and credit institutions

Data is disclosed exclusively in accordance with legal requirements and on the basis of data processing agreements pursuant to Article 28 of the GDPR.

5. Data processing by Microsoft Azure

We use services provided by the Microsoft Azure Cloud (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) to store and process data.

Data processing takes place on servers within the EU or in accordance with the EU Standard Contractual Clauses. For further information, please refer to Microsoft’s privacy statement: https://privacy.microsoft.com/de-de/privacystatement

6. Using DeepL for translation

We use the DeepL service (DeepL SE, Maarweg 165, 50825 Cologne) to translate content. This may involve processing texts that contain personal data.

Use is based on a data processing agreement in accordance with Article 28 of the GDPR. Further information: https://www.deepl.com/de/privacy.html

7. Photography and video recording at events

Photographs and videos are taken at our events. These are used for documentation purposes, as well as for public relations and to promote future events.

By attending an event or purchasing a ticket, participants and spectators agree that photographs and video footage may be used for reporting and public relations purposes.

The legal basis is Article 6(1)(f) of the GDPR (legitimate interests).

8. Use of cookies

Our website uses cookies. Cookies are small text files that are stored on your device. Some cookies are technically necessary, whilst others are used to analyse user behaviour.

You can prevent cookies from being stored by adjusting the settings in your web browser.

9. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies to analyse how the website is used. The IP address is anonymised (IP anonymisation is enabled).

This processing is carried out on the basis of Article 6(1)(a) of the GDPR (consent).

Further information: https://policies.google.com/privacy

9.1 Consent management (the ‘Klara’ consent tool)

We use the ‘Klara’ consent tool (based on the open-source software Klaro) to request and manage your consents. On your first visit, you can choose whether to consent to individual services (e.g. ‘Google Analytics 4’, ‘Google Ads’, ‘Meta Pixel’). Your selection is stored in a cookie (‘klaro’) in your browser for 365 days. To provide evidence of consent (Art. 7(1) GDPR), we also store your selection, a random consent ID (cookie ‘klara_consent_id’), the time and hashed technical characteristics (IP address, browser identifier) – which are not stored in plain text – on our own server in Germany; this evidence is deleted after 365 days.

The Consent Tool’s programme files are delivered via content delivery networks (BunnyWay d.o.o., Slovenia, and KIProtect GmbH, Berlin); for technical reasons, your IP address is transmitted to these providers in the process. The legal basis is the fulfilment of our obligation to provide evidence (Article 6(1)(c) in conjunction with Article 7(1) of the GDPR) and Section 25(2)(2) of the TDDDG; for delivery via the networks, Article 6(1)(f) of the GDPR. You may change or withdraw your consent at any time via the cookie settings.

9.2 Meta Pixel

Where you have given your consent (the ‘Meta Pixel’ service), we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (‘Meta’). This enables us to measure whether visitors, after seeing one of our adverts on Facebook or Instagram, visit our website, start or complete a registration, or purchase tickets (events such as ‘PageView’, ‘Lead’, ‘CompleteRegistration’, ‘Purchase’), and enables us to target our adverts more effectively. In doing so, cookies (e.g. ‘_fbp’) are set and data such as IP address, browser information, pages visited and the aforementioned events are transmitted to Meta. Meta may link this data to your Facebook or Instagram account and also use it for its own purposes; we are jointly responsible with Meta for the collection and transmission of this data (Article 26 of the GDPR).

The legal basis is your consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG), which you may withdraw at any time via the cookie settings. The transfer of personal data to Meta Platforms, Inc. in the USA cannot be ruled out. An adequacy decision has been issued by the European Commission for the USA (EU-US Data Privacy Framework), under which Meta is certified; in addition, the European Commission’s Standard Contractual Clauses apply. Further information: https://www.facebook.com/privacy/policy/

10. Social media plugins

Our website may contain links to social media platforms (e.g. Facebook, Instagram, Twitter). When you click on these links, the privacy policies of the respective providers apply.

12. Rights of data subjects

You have the right to:

• Right of access (Article 15 of the GDPR)
• Rectification (Article 16 of the GDPR)
• Erasure (Article 17 of the GDPR)
• Restriction of processing (Article 18 of the GDPR)
• Data portability (Article 20 of the GDPR)
• Objection to processing (Article 21 of the GDPR)

Use of YouTube API Services

We use Google’s YouTube API Services to manage and make event videos available. This involves uploading videos of our events to YouTube, organising them and making them available on our website via embed links.

As part of the YouTube integration, the following data is processed:

• OAuth 2.0 authentication credentials (access tokens) for managing our YouTube channel
• Video metadata (titles, descriptions, tags, visibility settings)
• Playlist assignments

No personal data relating to website visitors is transmitted to YouTube beyond what is required for the standard embedding of YouTube videos.

Use of the YouTube API Services is subject to the YouTube Terms of Service as well as the Google’s Privacy Policy.

You can manage your Google privacy settings at https://myaccount.google.com/permissions manage and revoke the access rights granted there at any time.

Data processed via the YouTube API can be deleted at any time by using the contact options on our Legal Notice may be applied for.

13. Contact

If you have any questions regarding the processing of your personal data, please contact us using the contact details provided in our Legal Notice.

As at June 2026