Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

STAIDIUM GmbH
Industriestraße 32F
53359 Rheinbach
Germany
Represented by the Managing Director Peter Lauterbach
Email: info@staidium.org

2. Scope

This privacy policy applies to the website bencoach.de. The BENcoach app has its own privacy policy, which is linked in the app and in the app stores.

3. Hosting and server log files

This website is hosted on a cloud server operated by us at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When you visit the website, our server automatically stores the following information in server log files:

• IP address, truncated only (the last byte is removed from IPv4 addresses; only the first 48 bits of IPv6 addresses are stored)
• date and time of the request
• requested page or file and HTTP status code
• amount of data transferred
• referrer URL (the previously visited page)
• browser type, version and operating system

This data is processed to ensure the secure and stable operation of the website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing the website securely and without technical errors. The log files are deleted automatically after 7 days.

If a technical error occurs during a request, the server's error log may contain the full IP address. It is used solely for troubleshooting and is also deleted automatically after 7 days.

4. Contact form and email

If you send us a request via the contact form, we transmit your details (type of request, name, club or venue, email address, phone number if provided, role, location or preferred date if provided, and message) to our server in encrypted form. From there they are sent as an email via Microsoft 365 to our mailbox bencoach@staidium.org. The same mailbox receives your message if you write to this address directly.

We use Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to send and store emails. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. Processing in the USA cannot be ruled out; it takes place on the basis of the EU-U.S. Data Privacy Framework, under which Microsoft Corporation is certified, and the EU Standard Contractual Clauses.

We process this data to handle your request. It is not passed on to third parties unless we are legally obliged to do so. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering requests).

The data is deleted as soon as your request has been fully dealt with, unless statutory retention obligations apply.

5. Cookies, analytics and external content

This website does not set cookies, does not use analytics or tracking services and does not load content from third parties (e.g. fonts, videos or maps). Images and the font are delivered from our own server.

6. Links to other websites

In the footer we link to our websites staidium.org and benarena.staidium.org. Data is only transferred to the respective website when you click such a link; their privacy policies then apply.

7. Your rights

Under the GDPR you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected

To exercise these rights, contact info@staidium.org.

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

8. Last updated

October 2026

This English version is provided for convenience. The German version is legally binding.