Privacy policy
1. Controller
The controller responsible for data processing on this website is:
Schalke FanClub UK
Address is in the legal notice
## 2. Overview
We only process personal data where this is necessary to run this website, to manage our members and to run our prediction game. We do not use tracking or analytics tools. All fonts, images and scripts are served from our own server, except for the prediction game, which is only loaded after you click (see section 6).
## 3. Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich (owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). When you visit the website, the server processes technically necessary data such as your IP address, date and time, the page requested and the browser type in so-called server log files. We have concluded a data processing agreement with the host.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website.
To protect against misuse, we store the IP address for failed login attempts in the protected admin area for no longer than 24 hours.
## 4. Cookies and local storage
We only use technically necessary storage:
- Language choice (“fcuk_lang”, cookie, up to 1 year): remembers whether you read the site in German or English.
- Session cookie (“fcuk_sid”): only set for our team in the admin area, not for normal visitors.
- Session storage entry (“fcuk_kicktipp”): remembers until you close the browser tab that you wanted to show the prediction game.
The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
## 5. Contact by email
If you email us, we process your details (for example name, email address and the content of your message) to answer your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. We delete the data once your enquiry has been dealt with, unless statutory retention periods apply.
## 6. Prediction game (Kicktipp)
Our prediction game runs on Kicktipp. When you click “Show prediction game”, we load content from kicktipp.co.uk (on the German-language page from kicktipp.de). Your IP address is transmitted to Kicktipp and cookies may be set. No connection to Kicktipp is made before you click.
The legal basis is your consent by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time by leaving the page and deleting any cookies set in your browser. If you play directly on Kicktipp or create an account there, Kicktipp’s privacy policy applies.
You can find more information in Kicktipp’s privacy policy.
## 7. Member administration and newsletter
To manage our members we store name, email address, the Schalke 04 membership number and the fan club membership number. Only the four members of the fan club committee have access to this data. Access is password-protected and secured with two-factor authentication. Access, changes and exports are logged (only user name, time, IP address and the record number) and deleted after 12 months.
The legal basis is Art. 6(1)(b) GDPR (performance of the membership). We only send newsletters by email if you have given your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.
We store the data for the duration of the membership. After you leave, we delete it after [period, e.g. 12 months], unless statutory retention obligations apply. [If applicable: for ticket allocation we pass the Schalke membership number on to [recipient].]
## 8. Social networks
We link to our profiles on Facebook and Instagram (Meta). No plug-ins are embedded. Only when you click the icon do you leave our website, and the privacy policy of the respective provider applies.
## 9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). You can withdraw any consent at any time with effect for the future. To do so, write to the email address above.
You also have the right to lodge a complaint with a data protection supervisory authority, for example [competent state data protection authority at the fan club’s seat]. For members in the United Kingdom this is the Information Commissioner’s Office (ICO, ico.org.uk).
## 10. Status
October 2026. We will update this policy when the website or the legal situation changes.