Data Protection and Use of the GTM Optimizer
These notes relate to the internal GTM Optimizer, including the management of the CCA YouTube channel. For the rest of the germancheeropen.de website, the following applies: Privacy Policy of the Deutscher Cheersport Verein e.V.
Data controller and contact details
CCA CentralCheerleadingAgency e.K., owned by Holger Schmidt,
Hans-Bunte-Straße 41, 90431 Nuremberg, Germany.
Data protection enquiries regarding the GTM Optimizer: mail@germancheeropen.de.
Purposes and legal bases
The Optimizer is used for the internal administration of CCA websites, Google services and shared YouTube posts. For the processing of account and usage data by internal administrators, as well as for technical access security, CCA relies on Article 6(1)(f) of the GDPR. The legitimate interest is the controlled and secure management of its own online services and its own YouTube channel. Confirmation of this information in the YouTube section is a condition of use and does not in itself constitute consent under data protection law. The following apply to the recording and publication of recognisable individuals in videos: Media information regarding GermanCheerOpen events and the rights and authorisations obtained by CCA for publication. CCA publishes only those recordings authorised for this purpose via this tool.
YouTube API Services
Authorised staff use the GTM Optimizer to view the official CCA channel, videos and playlists, upload approved videos, and manage their titles, descriptions, visibility and playlist assignments. The service processes channel IDs, video and playlist data, as well as the files and metadata selected by staff. Visibility and content are selected prior to a write operation; uploads are private by default.
For authorisation purposes, Google OAuth access and refresh tokens are stored on the Optimizer server. The video file submitted for upload is removed upon completion or if an error occurs in the job. Upload files left orphaned following a process termination are removed after 48 hours during the next hourly purge or upon the next service start. The job status, including title, result or error, is removed 24 hours after the last update upon subsequent access or during the hourly clean-up. The Optimizer deletes its local OAuth file upon local logout; following revocation in Google settings, a request for additional deletion must be made to CCA.
Other Google features of the Optimizer
Depending on the function used, Google Single Sign-On may also read or edit data from Google Tag Manager, Google Ads and Data Manager, Google Analytics 4, Search Console, Google Business Profile and Merchant Centre. This may include account and property identifiers, configurations, campaign and analytics data. Access is granted only when authorised staff members use the relevant function. Active site configurations remain in place until the site is removed. Completed reports are automatically deleted after twelve months. Technical logs and backups are subject to the company’s rotation and backup cycles; data is retained beyond this only where required by a specific security incident or a legal obligation.
Recipients and other services
The data and videos selected for processing are transmitted directly from the GTM Optimizer to the Google and YouTube API services. The separate ChatGPT connection via Composio is not part of this direct Optimizer route and is currently deactivated. The Optimizer runs on a server operated by CCA at netcup. Google processes the data sent via the APIs for the respective services; processing may take place in the USA. Google describes its participation in the EU-US Data Privacy Framework in the Information on international data transfers. The hosting provider is granted only the access technically necessary for operation and maintenance.
Withdrawal and deletion
Google account holders can manage the app’s access in the Google security settings withdraw. Please address any requests for access to or deletion of data stored by CCA to mail@germancheeropen.de. Following revocation in Google Settings, CCA will, upon request, remove the local OAuth connection and verify the deletion of stored API data. Videos already stored on YouTube must be managed separately via the CCA channel.
You can find further information in the Google’s Privacy Policy.
Your rights
In accordance with the statutory requirements, data subjects may request access to their data, rectification, erasure, restriction of processing and data portability, as well as object to processing. They may also lodge a complaint with a competent data protection supervisory authority. Please address any enquiries in this regard to mail@germancheeropen.de. The association named there is responsible for the rest of the website; CCA is responsible for the Optimizer and the CCA YouTube channel described here.
Consent in the internal YouTube section
Before you can access YouTube’s features for the first time, you will be asked to give your explicit consent to these notices and YouTube’s Terms of Service. The Optimizer stores this decision as a signed cookie in the browser for a maximum of 180 days; it contains a version of the policy, the time of confirmation and a signature, but no name. If a new version of the policy is released, consent must be given again.
Terms of Use for the internal YouTube section
The GTM Optimizer is intended for use by persons authorised by CCA. When using it, the following also apply: YouTube Terms of Service; authorised users must give their consent before accessing the content. Changes to the CCA channel may only be made following internal approval. Before each upload, users must confirm that they are authorised to upload the content to the CCA channel and that it complies with the YouTube Community Guidelines complies with.