LfDI (Baden-Württemberg) - 0523.1-2/3: Difference between revisions

From GDPRhub
No edit summary
No edit summary
(7 intermediate revisions by 4 users not shown)
Line 7: Line 7:
|DPA_With_Country=LfDI (Baden-Württemberg)
|DPA_With_Country=LfDI (Baden-Württemberg)


|Case_Number_Name=LfDI - Fine EUR 300,000 against VfB Stuttgart 1893 AG
|Case_Number_Name=Fine EUR 300,000 against VfB Stuttgart 1893 AG
|ECLI=
|ECLI=


|Original_Source_Name_1=LfDI
|Original_Source_Name_1=LfDI
|Original_Source_Link_1=https://www.baden-wuerttemberg.datenschutz.de/vfb-stuttgart-bussgeld-erlassen/
|Original_Source_Link_1=https://fragdenstaat.de/anfrage/bugeldbescheid-wegen-datenschutzverstoen-beim-vfb-stuttgart/603646/anhang/bugeldbescheid-vfb-stuttgart.pdf
|Original_Source_Language_1=German
|Original_Source_Language_1=German
|Original_Source_Language__Code_1=DE
|Original_Source_Language__Code_1=DE
Line 20: Line 20:
|Date_Published=10.03.2021
|Date_Published=10.03.2021
|Year=
|Year=
|Fine=300000
|Fine=300,000
|Currency=EUR
|Currency=EUR


Line 48: Line 48:
}}
}}


The Baden-Württemberg DPA (''Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg'') (LfDI) issued a fine of  €300,000 on the soccer club VfB Stuttgart 1893 AG for neglectful breach of data protection accountability principle under Art. 5(2)GDPR.
The Baden-Württemberg DPA (LfDI) issued a fine of  €300,000 on the soccer club VfB Stuttgart 1893 AG for neglectful breach of the accountability principle under Article 5(2) GDPR.


==English Summary==
==English Summary==


===Facts===
===Facts===
The controller supported the LfDI's investigation and clarification measures on his own initiative and assisted in a joint effort to accomplish an end of fine proceedings, highlighted the DPA. Furthermore, the soccer club is promoting the 'data projection goes to school' project to raise awareness of data protection issues.
In order to pursue the spin-off of the professional soccer department from "VfB Stuttgart 1893 e.V.", a registered association under German law, into a stock corporation ("VfB Stuttgart 1893 AG"), VfB Stuttgart 1893 e.V. transferred several tens of thousands of personal data of club members to an external service provider between 2016 and 2017. This included data of underage members who would have reached the age of 18 at the time of a general meeting at which a decision on the spin-off would be made. The soccer club also transferred an Excel spreadsheet with over 100,000 data records to the service provider after the GDPR came into force.


===Dispute===
At least until the time of the decision by the LfDI, VfB Stuttgart failed to provide a contractual basis for its cooperation with the service provider. Until then, it had not been documented by whom the service provider had originally been commissioned, what specific powers it had within VfB Stuttgart, and to what extent it had been given access to the personal data of members and employees.


===Holding===
==== Limitation of the proceedings to one Violation ====
The LfDI limited the proceedings to a violation of Article 5(2) GDPR. Further proceedings regarding potential other violations of the GDPR were provisionally terminated pursuant to § 46 of the German Act on Regulatory Offences (OWiG) in conjunction with § 154(2) the German Code of Criminal Procedure (StPO).
==== Violation of Article 5(2) GDPR ====
The LfDI decided that there was a violation of the accountability obligation according to Article 5(2) GDPR.


===Holding===
This was based on the fact that due to an insufficient documentation of the contractual relationship with the external service provider and its powers within the club, the lawfulness of the data processing operations carried out could not be sufficiently verified or proven.
The DPA from Baden-Württemberg (LfDI) found that the soccer club had breached its data protection obligations, because there was a non-compliance with general data processing principles.
 
For the assessment of the legal situation, it was irrelevant whether the above-mentioned data records had been sent to an internal VfB e-mail address of the service provider or to one of its external e-mail addresses.
 
The infringement was attributed to VfB Stuttgart 1893 AG on the basis of the functional company concept applicable under the GDPR. Knowledge of the transactions by the Board of Management was not relevant. The LfDI assumed negligence.
 
==== Fine Assessment ====
For the assessment of the fine, the LfDI, which applied the fine framework from Article 83(4) GDPR, initially relied on an understanding reached with the club during the investigation. According to this, it promised that the fine would be between approximately EUR 300,000 and 400,000, provided that the association confessed.
 
Initially, the LfDI came to the conclusion that a fine in the middle of the aforementioned range would be appropriate.
 
In favor of the controller, it was taken into account that
 
# the breach was only negligent,
# VfB Stuttgart simplified the investigation with a high level of cooperation and internal clarification efforts, and
# the club made efforts to improve its data protection and data security management at an early stage and before the fine proceedings.
 
Explicitly not to be taken into consideration was the worsened economic situation as a result of the Covid pandemic.


To the detriment of VfB AG, it was taken into account that a significant number of individuals were affected and that their data had been transferred to a third party without a verifiable legal basis.
However, the LfDI ultimately decided to impose a fine in the lower range (EUR 300,000) on the condition that VfB Stuttgart engage in social activities for young people in a manner determined by the LfDI. The club could choose between participating in an existing data protection project at schools, designing and conducting data protection training courses for the youth teams, or - if the aforementioned is not possible - making a donation to a non-profit organization in the field of data protection to be named by the LfDI.
==Comment==
==Comment==
''Share your comments here!''
''Share your comments here!''
Line 71: Line 96:


<pre>
<pre>
<!DOCTYPE html><!--[if IE 6]>
Fine proceedings against VfB Stuttgart 1893 AG end with the imposition of a fine.
<html id="ie6" lang="de-DE">
<![endif]--><!--[if IE 7]>
<html id="ie7" lang="de-DE">
<![endif]--><!--[if IE 8]>
<html id="ie8" lang="de-DE">
<![endif]--><!--[if !(IE 6) | !(IE 7) | !(IE 8)  ]><!--><html lang="de-DE"><!--<![endif]--><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://www.baden-wuerttemberg.datenschutz.de/xmlrpc.php" /><!--[if lt IE 9]>
<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/themes/Extra/scripts/ext/html5.js" type="text/javascript"></script>
<![endif]--><script type="text/javascript">
document.documentElement.className = 'js';
</script><script>var et_site_url='https://www.baden-wuerttemberg.datenschutz.de';var et_post_id='15708';function et_core_page_resource_fallback(a,b){"undefined"===typeof b&&(b=a.sheet.cssRules&&0===a.sheet.cssRules.length);b&&(a.onerror=null,a.onload=null,a.href?a.href=et_site_url+"/?et_core_page_resource="+a.id+et_post_id:a.src&&(a.src=et_site_url+"/?et_core_page_resource="+a.id+et_post_id))}
</script><title>VfB Stuttgart: Fine proceedings end with the imposition of a fine | The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg </title><link rel="alternate" type="application/rss+xml" title="The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg »Feed" href="https://www.baden-wuerttemberg.datenschutz.de/feed/" /><link rel="alternate" type="application/rss+xml" title="The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg »Comment feed" href="https://www.baden-wuerttemberg.datenschutz.de/comments/feed/" /><meta content="Extra v.4.9.1" name="generator"/><link rel='stylesheet' id='wp-block-library-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/css/dist/block-library/style.min.css?ver=5.6.2' type='text/css' media='all' /><link rel='stylesheet' id='qtip2-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/jquery.qtip.min.css?ver=5.6.2' type='text/css' media='all' /><link rel='stylesheet' id='mtfcf7-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/custom.css?ver=5.6.2' type='text/css' media='all' /><link rel='stylesheet' id='fontawesome-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/css/font-awesome.min.css?ver=4.7' type='text/css' media='all' /><link rel='stylesheet' id='contact-form-7-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.4' type='text/css' media='all' /><link rel='stylesheet' id='email-subscribers-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/email-subscribers/lite/public/css/email-subscribers-public.css?ver=4.6.12.1' type='text/css' media='all' /><link rel='stylesheet' id='lfdibw_extra-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/lfdibw-extra/lfdibw-extra.css?ver=5.6.2' type='text/css' media='all' /><link rel='stylesheet' id='ssp-recent-episodes-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/seriously-simple-podcasting/assets/css/recent-episodes.css?ver=2.6.1' type='text/css' media='all' /><link rel='stylesheet' id='extra-style-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/themes/Extra/style.css?ver=4.9.1' type='text/css' media='all' /><link rel='stylesheet' id='tablepress-default-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/tablepress-combined.min.css?ver=58' type='text/css' media='all' /><link rel='stylesheet' id='dashicons-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/css/dashicons.min.css?ver=5.6.2' type='text/css' media='all' /><link rel='stylesheet' id='cf7cf-style-css'  href='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/cf7-conditional-fields/style.css?ver=1.9.16' type='text/css' media='all' /><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/jquery/jquery.min.js?ver=3.5.1' id='jquery-core-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2' id='jquery-migrate-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/jquery.qtip.js?ver=5.6.2' id='qtip2-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/imagesloaded.pkgd.min.js?ver=5.6.2' id='jquery.imagesloaded-js'></script><script type='text/javascript' id='mtfcf7-js-extra'>
/* <![CDATA[ */
var mtfcf7 = {"css_code":".mm-tooltip-cf7-container { color: #FFFFFF; border-radius: 5px; font-size: 14px; background-color: #333333; -webkit-border-radius: 5px; -moz-border-radius: 5px; margin-left: 0px; margin-top: 0px; border-color: #333333; border-width: 1; line-height: 150%;}.mm-tooltip-cf7-content { line-height: 150%; padding: 2.4000000000000004px 6px 2.4000000000000004px 6px;}","css_options":"{\"fontColor\":\"#FFFFFF\",\"fontSize\":\"14\",\"backgroundColor\":\"#333333\",\"borderRadius\":5,\"offsetLeft\":\"0\",\"padding\":0.2,\"offsetTop\":\"0\",\"borderColor\":\"#333333\",\"borderWidth\":1,\"lineHeight\":\"150%\"}","js_code":"{\"position\":{\"my\":\"left center\",\"at\":\"right center\",\"adjust\":{\"method\":\"none\"}},\"style\":{\"classes\":\"mm-tooltip-cf7-container\"},\"content\":{\"text\":{\"0\":{},\"length\":1,\"prevObject\":{\"0\":{\"jQuery172021905201394110918\":4},\"context\":{\"jQuery172021905201394110918\":4},\"length\":1},\"context\":{\"jQuery172021905201394110918\":4},\"selector\":\".next(div)\"}},\"show\":true}"};
var mtfcf7_settings = {"dummy":"1","active_form":"8192","mouse_over":"1","add_icon":"1","add_icon_fontawsome":"1","custom_css":""};
/* ]]> */
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/magic-tooltips-for-contact-form-7/assets/js/custom.js?ver=1.61' id='mtfcf7-js'></script><script type='text/javascript' id='email-subscribers-js-extra'>
/* <![CDATA[ */
var es_data = {"messages":{"es_empty_email_notice":"Bitte gib eine E-Mail Adresse ein","es_rate_limit_notice":"Bitte warten Sie einige Zeit, bevor Sie sich erneut anmelden","es_single_optin_success_message":"Erfolgreich angemeldet.","es_email_exists_notice":"Diese E-Mail Adresse ist bereits registriert!","es_unexpected_error_notice":"Entschuldigung! Ein unerwarteter Fehler ist aufgetreten.","es_invalid_email_notice":"Ung\u00fcltige E-Mail Adresse","es_try_later_notice":"Bitte versuche es in K\u00fcrze nochmal"},"es_ajax_url":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-admin\/admin-ajax.php"};
/* ]]> */
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/email-subscribers/lite/public/js/email-subscribers-public.js?ver=4.6.12.1' id='email-subscribers-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/lfdibw-extra/lfdibw-extra-head.js?ver=5.6.2' id='lfdibw_extra_head-js'></script><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://www.baden-wuerttemberg.datenschutz.de/xmlrpc.php?rsd" /><link rel="wlwmanifest" type="application/wlwmanifest+xml" href="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/wlwmanifest.xml" /><meta name="generator" content="WordPress 5.6.2" /><meta name="generator" content="Seriously Simple Podcasting 2.6.1" /><link rel="canonical" href="https://www.baden-wuerttemberg.datenschutz.de/vfb-stuttgart-bussgeld-erlassen/" /><link rel='shortlink' href='https://www.baden-wuerttemberg.datenschutz.de/?p=15708' /><link rel="alternate" type="application/json+oembed" href="https://www.baden-wuerttemberg.datenschutz.de/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.baden-wuerttemberg.datenschutz.de%2Fvfb-stuttgart-bussgeld-erlassen%2F" /><link rel="alternate" type="text/xml+oembed" href="https://www.baden-wuerttemberg.datenschutz.de/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.baden-wuerttemberg.datenschutz.de%2Fvfb-stuttgart-bussgeld-erlassen%2F&#038;format=xml" /><style>
#category-posts-2-internal ul {padding: 0;}
#category-posts-2-internal .cat-post-item img {max-width: initial; max-height: initial; margin: initial;}
#category-posts-2-internal .cat-post-author {margin-bottom: 0;}
#category-posts-2-internal .cat-post-thumbnail {margin: 5px 10px 5px 0;}
#category-posts-2-internal .cat-post-item:before {content: ""; clear: both;}
#category-posts-2-internal .cat-post-excerpt-more {display: inline-block;}
#category-posts-2-internal .cat-post-item {list-style: none; margin: 3px 0 10px; padding: 3px 0;}
#category-posts-2-internal .cat-post-item:after {content: ""; display: table; clear: both;}
#category-posts-2-internal .cat-post-item .cat-post-title {overflow: hidden;text-overflow: ellipsis;white-space: initial;display: -webkit-box;-webkit-line-clamp: 2;-webkit-box-orient: vertical;padding-bottom: 0 !important;}
#category-posts-2-internal .cat-post-item:after {content: ""; display: table; clear: both;}
#category-posts-2-internal .cat-post-thumbnail {display:block; float:left; margin:5px 10px 5px 0;}
#category-posts-2-internal .cat-post-crop {overflow:hidden;display:block;}
#category-posts-2-internal p {margin:5px 0 0 0}
#category-posts-2-internal li > div {margin:5px 0 0 0; clear:both;}
#category-posts-2-internal .dashicons {vertical-align:middle;}
#category-posts-2-internal .cat-post-thumbnail .cat-post-crop img {height: 50px;}
#category-posts-2-internal .cat-post-thumbnail .cat-post-crop img {object-fit: cover; max-width: 100%; display: block;}
#category-posts-2-internal .cat-post-thumbnail .cat-post-crop-not-supported img {width: 100%;}
#category-posts-2-internal .cat-post-thumbnail {max-width:100%;}
#category-posts-2-internal .cat-post-item img {margin: initial;}
</style><link rel="alternate" type="application/rss+xml" title="Podcast RSS feed" href="https://www.baden-wuerttemberg.datenschutz.de/feed/podcast" /><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=1" /><link rel="preload" href="https://www.baden-wuerttemberg.datenschutz.de/wp-content/themes/Extra/core/admin/fonts/modules.ttf" as="font" crossorigin="anonymous"><meta name="referrer" content="no-referrer"><!-- Footer aendern --><script>
var year = new Date();
year = year.getFullYear();
jQuery(function($){
 $('#footer-info').html('&copy; ' + year + ' <a href="https://www.baden-wuerttemberg.datenschutz.de">LfDI Baden-Württemberg</a>' + '<a style = "padding-left: 40px;" href="https://www.baden-wuerttemberg.datenschutz.de/datenschutz/">Datenschutz</a>' + '<a style = "padding-left: 40px;" href="https://www.baden-wuerttemberg.datenschutz.de/impressum/">Impressum</a>');
});
</script><script>
 
jQuery( document ).ready(function() {
var txt = jQuery('.search .et_pb_extra_column_main > h1').text();
txt = txt.replace("Search Results for:", "Suchergebnisse für :");
jQuery('.search .et_pb_extra_column_main > h1').text(txt);
 
jQuery('.search article').each(function(){
jQuery(this).find('a.read-more-button').text('mehr');
});


});
LfDI Stefan Brink: “In addition to the noticeable fine, VfB is making significant organizational and technical improvements in data protection. In addition, happily, those responsible are planning to become involved in clarifying data protection issues in the future, with which young people in particular are to be addressed. "


</script><script>
The State Commissioner for Data Protection and Freedom of Information, Stefan Brink, concludes the proceedings against VfB Stuttgart 1893 AG and imposes a fine of 300,000 euros for negligent breach of accountability under data protection law in accordance with Art. 5 (2) GDPR.
jQuery(function($){
    $('.et_pb_accordion .et_pb_toggle_open').addClass('et_pb_toggle_close').removeClass('et_pb_toggle_open');


    $('.et_pb_accordion .et_pb_toggle').click(function() {
The responsible persons at VfB Stuttgart 1893 eV and VfB Stuttgart 1893 AG supported the educational and investigative measures of the state commissioner, promoted them on their own initiative and cooperated extensively with the authority of the state commissioner.
      $this = $(this);
      setTimeout(function(){
        $this.closest('.et_pb_accordion').removeClass('et_pb_accordion_toggling');
      },700);
    });
});
</script><!-- favicon --><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"><link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"><link rel="manifest" href="/site.webmanifest"><link rel="mask-icon" href="/safari-pinned-tab.svg" color="#5bbad5"><meta name="msapplication-TileColor" content="#da532c"><meta name="theme-color" content="#ffffff"><!-- Backlink auf Mastodon BaWü.social --><a rel="me" href="https://xn--baw-joa.social/@lfdi"></a><link rel="stylesheet" id="et-extra-customizer-global-cached-inline-styles" href="https://www.baden-wuerttemberg.datenschutz.de/wp-content/et-cache/global/et-extra-customizer-global-16154488643089.min.css" onerror="et_core_page_resource_fallback(this, true)" onload="et_core_page_resource_fallback(this)" /></head><body class="post-template-default single single-post postid-15708 single-format-standard et_extra et_fixed_nav boxed_layout et_pb_gutters3 et_primary_nav_dropdown_animation_fadeInTop et_secondary_nav_dropdown_animation_Default with_sidebar with_sidebar_right et_includes_sidebar et-db et_minified_js et_minified_css"><div id="page-container" class="page-container"><!-- Header --><header class="header left-right"><!-- #top-header --><div id="top-header" style=""><div class="container"><!-- Secondary Nav --><div id="et-secondary-nav" class=""><ul id="et-secondary-menu" class="nav"><li id="menu-item-5593" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-home menu-item-5593"> <a href="https://www.baden-wuerttemberg.datenschutz.de">Home page</a> </li><li id="menu-item-8158" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-8158"> <a href="https://www.baden-wuerttemberg.datenschutz.de/datenschutz/">data protection</a> </li><li id="menu-item-28" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-28"><a href="https://www.baden-wuerttemberg.datenschutz.de/impressum/">imprint</a> </li><li id="menu-item-148" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-148"> <a href="https://www.baden-wuerttemberg.datenschutz.de/inhalt/">content</a> </li></ul></div><!-- #et-info --><div id="et-info"><!-- .et-top-search --><div class="et-top-search" style=""><form role="search" class="et-search-form" method="get" action="https://www.baden-wuerttemberg.datenschutz.de/"><input type="search" class="et-search-field" placeholder="Suche" value="" name="s" title="Search for:" /><button class="et-search-submit"></button></form></div><!-- cart --></div></div><!-- /.container --></div><!-- /#top-header --><!-- Main Header --><div id="main-header-wrapper"><div id="main-header" data-fixed-height="80"><div class="container"><!-- ET Ad --><!-- Logo --> <a class="logo" href="https://www.baden-wuerttemberg.datenschutz.de/" data-fixed-height="51"><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/01/LfDI-Logo.svg" alt="The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg" id="logo" /></a> <!-- ET Navigation --><div id="et-navigation" class=""><ul id="et-menu" class="nav"><li id="menu-item-4096" class="mega-menu zweispalt-menu-links lfdi-menu menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-4096"> <a title="Information about our office" href="https://www.baden-wuerttemberg.datenschutz.de/der-landesbeauftragte-fuer-den-datenschutz-und-die-informationsfreiheit-baden-wuerttemberg/">about us</a> <ul class="sub-menu"><li id="menu-item-5134" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-5134"> <a><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2018/03/Dr_Stefan_Brink.jpg" alt="Person of the agent" width="100%" /> The state representative</a> <ul class="sub-menu"><li id="menu-item-5643" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-5643"> <a href="https://www.baden-wuerttemberg.datenschutz.de/der-landesbeauftragte-fuer-den-datenschutz-und-die-informationsfreiheit-baden-wuerttemberg/">Person of the agent</a> </li><li id="menu-item-5131" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-5131"> <a href="https://www.baden-wuerttemberg.datenschutz.de/pressefotos/">Press photos</a> </li><li id="menu-item-115" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-115"> <a href="https://www.baden-wuerttemberg.datenschutz.de/aufgaben-und-zustandigkeiten/">Tasks and responsibilities</a> </li><li id="menu-item-8200" class="menu-item menu-item-type-post_type menu-item-object-post menu-item-8200"> <a href="https://www.baden-wuerttemberg.datenschutz.de/der-landesbeauftrage-stellt-seine-dienststelle-vor/">Video presentation office</a> </li></ul></li><li id="menu-item-5136" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-5136"> <a><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2018/03/Organisation.jpg" alt="organization" width="100%" /> organization</a> <ul class="sub-menu"><li id="menu-item-114" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-114"> <a href="https://www.baden-wuerttemberg.datenschutz.de/aufbau-der-dienststelle/">Structure of the department, file plan, business distribution plan</a> </li><li id="menu-item-10704" class="menu-item menu-item-type-post_type menu-item-object-post menu-item-10704"> <a href="https://www.baden-wuerttemberg.datenschutz.de/dienststellenstatistik-fuer-2019/">Agency statistics for 2019</a> </li><li id="menu-item-111" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-111"> <a href="https://www.baden-wuerttemberg.datenschutz.de/arbeiten-beim-landesbeauftragten/">Working in the LfDI office</a> </li></ul></li></ul></li><li id="menu-item-14210" class="ds-menu menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-14210"> <a href="https://www.baden-wuerttemberg.datenschutz.de/alle-beitraege-zum-thema-datenschutz/">data protection</a> <ul class="sub-menu"><li id="menu-item-8561" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8561"> <a href="https://www.baden-wuerttemberg.datenschutz.de/ds-gvo/">Legal bases</a> </li><li id="menu-item-8581" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8581"> <a href="https://www.baden-wuerttemberg.datenschutz.de/datenschutzthemen/">Data protection topics AZ</a> </li><li id="menu-item-8562" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8562"> <a href="https://www.baden-wuerttemberg.datenschutz.de/faqs/">Frequently asked questions (FAQs)</a> </li><li id="menu-item-9928" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-9928"> <a href="https://www.baden-wuerttemberg.datenschutz.de/alle-beitraege-zum-thema-datenschutz/">All articles on the subject of data protection</a> </li></ul></li><li id="menu-item-14211" class="if-menu menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-14211"> <a href="https://www.baden-wuerttemberg.datenschutz.de/informationsfreiheit-haeufig-gestellte-fragen/">Freedom of information</a> <ul class="sub-menu"><li id="menu-item-8565" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8565"> <a href="https://www.baden-wuerttemberg.datenschutz.de/informationsfreiheit/">Legal bases</a> </li><li id="menu-item-8566" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8566"> <a href="https://www.baden-wuerttemberg.datenschutz.de/informationsfreiheit-haeufig-gestellte-fragen/">Frequently asked questions (FAQs)</a> </li><li id="menu-item-13553" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-13553"> <a href="https://www.baden-wuerttemberg.datenschutz.de/dokumente-der-konferenz-der-informationsfreiheitsbeauftragten-ifk/">Documents from the Conference of Freedom of Information Commissioners (IFK)</a> </li></ul></li><li id="menu-item-7536" class="info-menu menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-7536"> <a title="Notes, leaflets, frequently asked questions, press releases, media library">Info desk</a> <ul class="sub-menu"><li id="menu-item-7537" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-7537"> <a href="https://www.baden-wuerttemberg.datenschutz.de/tatigkeitsbericht/">Activity reports</a> </li><li id="menu-item-7564" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-7564"> <a href="https://www.baden-wuerttemberg.datenschutz.de/pressemitteilungen/">Press releases</a> </li><li id="menu-item-7765" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-7765"> <a href="https://www.baden-wuerttemberg.datenschutz.de/pressespiegel/">Press review</a> </li><li id="menu-item-8563" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8563"> <a href="https://www.baden-wuerttemberg.datenschutz.de/mediathek/">Media library</a> </li><li id="menu-item-14241" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-14241"> <a href="https://www.baden-wuerttemberg.datenschutz.de/datenfreiheit/">Podcast freedom of data!</a> </li><li id="menu-item-9932" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-9932"> <a href="https://www.baden-wuerttemberg.datenschutz.de/alle-beitraege-zu-veranstaltungen/">All contributions to events</a> </li><li id="menu-item-7595" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-7595"> <a href="https://www.baden-wuerttemberg.datenschutz.de/beitraege-nach-themengebieten/">Posts by topic</a> </li><li id="menu-item-14261" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-14261"> <a href="https://www.baden-wuerttemberg.datenschutz.de/datenschutzthemen/">Practice Aids AZ</a> </li></ul></li><li id="menu-item-12228" class="mega-menu einspalt-menu kult-menu menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-12228"> <a title="Data protection as a CULTURAL task" href="https://www.baden-wuerttemberg.datenschutz.de/datenschutz-als-kulturaufgabe/">Culture</a> <ul class="sub-menu"><li id="menu-item-12229" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-12229"> <a><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2020/07/KULTur-Menue.jpg" alt="" width="150%" /> Data protection as a CULTURAL task</a> <ul class="sub-menu"><li id="menu-item-12230" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-12230"> <a href="https://www.baden-wuerttemberg.datenschutz.de/datenschutz-als-kulturaufgabe/">Data protection as a CULTURAL task ...?</a> </li><li id="menu-item-12231" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-12231"> <a href="https://www.baden-wuerttemberg.datenschutz.de/kultur-projekte/">The CULTURE projects</a> </li></ul></li></ul></li><li id="menu-item-11627" class="mega-menu zweispalt-menu-rechts bidib-menu menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-11627"> <a href="https://www.baden-wuerttemberg.datenschutz.de/bildungszentrum/">Education Centre</a> <ul class="sub-menu"><li id="menu-item-11628" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-11628"> <a><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2020/06/workshop-2209239_1920.jpg" alt="BIDIB" width="100%" /> about us</a> <ul class="sub-menu"><li id="menu-item-11634" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-11634"> <a href="https://www.baden-wuerttemberg.datenschutz.de/bildungszentrum/">Home page</a> </li><li id="menu-item-11635" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-11635"> <a href="https://www.baden-wuerttemberg.datenschutz.de/gruendung/">founding</a> </li><li id="menu-item-11636" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-11636"> <a href="https://www.baden-wuerttemberg.datenschutz.de/bidib-ueber-uns/">We introduce ourselves</a> </li></ul></li><li id="menu-item-11631" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-11631"> <a><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2020/06/microphone-2316268_1920-1024x683-1.jpg" alt="BIDIB events" width="100%" /> Events</a> <ul class="sub-menu"><li id="menu-item-11637" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-11637"> <a href="https://www.baden-wuerttemberg.datenschutz.de/offene-veranstaltungen/">Open events</a> </li><li id="menu-item-11638" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-11638"> <a href="https://www.baden-wuerttemberg.datenschutz.de/individuell-vereinbarte-veranstaltungen/">Individual events</a> </li><li id="menu-item-11639" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-11639"> <a href="https://www.baden-wuerttemberg.datenschutz.de/bidib-kooperationen/">Cooperations</a> </li></ul></li></ul></li><li id="menu-item-8408" class="kontakt-menu menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-8408"> <a href="https://www.baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen/">Contact</a> <ul class="sub-menu"><li id="menu-item-14212" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-14212"> <a href="https://www.baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen/">How to contact us</a> </li><li id="menu-item-9933" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-9933"> <a href="https://www.baden-wuerttemberg.datenschutz.de/koordinierungs-und-pressestelle/">Contact the coordination and press office</a> </li><li id="menu-item-5147" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-5147"> <a href="https://www.baden-wuerttemberg.datenschutz.de/buergerbeauftragter/">Service Ombudsman</a> </li><li id="menu-item-15740" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-15740"> <a href="https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde/">give a complaint</a> </li><li id="menu-item-15741" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-15741"> <a href="https://www.baden-wuerttemberg.datenschutz.de/datenpanne-melden/">Report a data breach</a> </li><li id="menu-item-15742" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-15742"> <a href="https://www.baden-wuerttemberg.datenschutz.de/dsb-online-melden/">Report / deregister / delete DPO</a> </li><li id="menu-item-14248" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-14248"> <a href="https://www.baden-wuerttemberg.datenschutz.de/newsletter-anmeldung/">Subscribe to Newsletter</a> </li></ul></li><li id="menu-item-139" class="mega-menu dreispalt-menu service-menu menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-139"> <a href="https://www.baden-wuerttemberg.datenschutz.de/tatigkeitsbericht/">service</a> <ul class="sub-menu"><li id="menu-item-5190" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-5190"> <a title="Further information material"><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2018/03/Infothek.jpg" alt="Further information material" width="100%" /> Further information material</a> <ul class="sub-menu"><li id="menu-item-12417" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-12417"> <a href="https://www.datenschutzkonferenz-online.de/index.html" target="_blank" rel="nofollow">Data protection conference documents</a> </li><li id="menu-item-12418" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-12418"> <a href="https://www.ldi.nrw.de/mainmenu_Service/submenu_Entschliessungsarchiv/Inhalt/Beschluesse_Duesseldorfer_Kreis/index.php" target="_blank" rel="nofollow">Documents of the Düsseldorfer Kreis</a> </li><li id="menu-item-13552" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-13552"> <a href="https://www.baden-wuerttemberg.datenschutz.de/dokumente-der-konferenz-der-informationsfreiheitsbeauftragten-ifk/">Documents from the Conference of Freedom of Information Commissioners (IFK)</a> </li></ul></li><li id="menu-item-14507" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-14507"> <a title="External links"><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2018/03/Links.jpg" alt="Left" width="100%" /> Left</a> <ul class="sub-menu"><li id="menu-item-144" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-144"> <a href="https://www.baden-wuerttemberg.datenschutz.de/aufsichtsbehorden/">Supervisory authorities</a> </li><li id="menu-item-145" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-145"> <a target="_blank" rel="noopener nofollow" href="https://www.datenschutz.de">Virtual data protection office</a> </li><li id="menu-item-2762" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2762"> <a target="_blank" rel="noopener nofollow" href="http://www.youngdata.de">Data protection tips for young people (www.youngdata.de)</a> </li><li id="menu-item-3333" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-3333"> <a target="_blank" rel="noopener nofollow" href="http://www.silver-tipps.de">Silver Tips - Safe Online!</a> </li></ul></li><li id="menu-item-14506" class="mega-link mega-menu-heading menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children menu-item-14506"> <a title="Working at the state representative (job offers)"><img src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2019/01/Stellen.jpg" alt="Working at the state representative" width="100%" /> Working at the state representative</a> <ul class="sub-menu"><li id="menu-item-14549" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-14549"> <a href="https://www.baden-wuerttemberg.datenschutz.de/arbeiten-beim-landesbeauftragten/">We are looking for you!</a> </li></ul></li></ul></li></ul><div id="et-mobile-navigation"><div class="show-menu-button"><span></span><span></span><span></span></div><p> Select page </p><nav></nav></div><!-- /#et-mobile-navigation --></div><!-- /#et-navigation --></div><!-- /.container --></div><!-- /#main-header --></div><!-- /#main-header-wrapper --></header><div id="main-content"><div class="container"><div id="content-area" class="clearfix"><div class="et_pb_extra_column_main"><article id="post-15708" class="module single-post-module post-15708 post type-post status-publish format-standard has-post-thumbnail hentry category-aktuelle_meldungen category-datenschutz category-pressemitteilung category-pressespiegel category-slider tag-behoerde tag-bussgeld tag-datenschutz tag-ds-gvo tag-vfb tag-vfb-stuttgart et-doesnt-have-featured_image et-has-post-format-content et_post_format-et-post-format-standard"><div class="post-header"><h1 class="entry-title"> VfB Stuttgart: Fine proceedings end with the imposition of a fine</h1><div class="post-meta vcard"><p> Posted by <a href="https://www.baden-wuerttemberg.datenschutz.de/author/pressestelle/" class="url fn" title="Contributions from press office" rel="author">Press Office</a> | <span class="updated">March 10, 2021</span> | <a href="https://www.baden-wuerttemberg.datenschutz.de/category/aktuelle_meldungen/" rel="tag">Latest news</a> , <a href="https://www.baden-wuerttemberg.datenschutz.de/category/datenschutz/" rel="tag">data protection</a> , <a href="https://www.baden-wuerttemberg.datenschutz.de/category/pressemitteilung/" rel="tag">press releases</a> , <a href="https://www.baden-wuerttemberg.datenschutz.de/category/pressespiegel/" rel="tag">press reviews</a> , <a href="https://www.baden-wuerttemberg.datenschutz.de/category/slider/" rel="tag">sliders</a></p></div></div><div class="post-wrap"><div class="post-content entry-content"><p> <strong>Fine proceedings against VfB Stuttgart 1893 AG end with the imposition of a fine.</strong></p><p> <strong>LfDI Stefan Brink: “In addition to the noticeable fine, VfB is making significant organizational and technical improvements in terms of data protection. In addition, happily, those</strong> <strong>responsible are planning to become involved in clarifying data protection issues in the future, with which young people in particular are to be addressed. &quot;</strong></p><p> The State Commissioner for Data Protection and Freedom of Information, Stefan Brink, closes the proceedings against VfB Stuttgart 1893 AG and imposes a fine of 300,000 euros for negligent breach of accountability under data protection law in accordance with Art. 5 (2) GDPR.</p><p> The responsible persons at VfB Stuttgart 1893 eV and VfB Stuttgart 1893 AG supported the educational and investigative measures of the state commissioner, promoted them through their own initiative and cooperated extensively with the authority of the state commissioner.</p><p> In addition to paying the fine and the costly restructuring and improvement of its data protection management, VfB Stuttgart 1893 AG, in coordination with the LfDI, is taking measures to make young people aware of data protection issues.</p><p> The VfB is promoting the project “Data protection goes to school” by supporting public relations work for regional school days of action and by making videos suitable for children and young people to raise awareness of data protection issues. In addition, the VfB designs training courses for the youth soccer teams U10 to U21 on the subject of “data protection among young people”.</p><p> LfDI Stefan Brink: “By issuing this notice of fines, we are concluding a procedure that was also unusual for us as a supervisory authority. It was not only the subject of our proceedings that was unusual, but above all the public and media interest associated with it. Unusual was also the extent of the interest in clarification evidenced by the involvement of Esecon and the willingness of the VfB to cooperate with our authority. &quot;</p><p> This procedure results in a good chance, according to Stefan Brink, that VfB Stuttgart will in future be better positioned to deal fairly with members&#39; data. “Even if we weren&#39;t able to fully investigate all publicly discussed processes with a view to the statute of limitations, the result that has now been mutually agreed is convincing: In addition to the noticeable fine, the VfB ensures considerable organizational and technical improvements in terms of data protection. In addition, happily, those responsible are planning to become involved in clarifying data protection issues in the future, with which young people in particular are to be addressed. &quot;</p><p> The investigations against VfB Stuttgart 1893 eV and VfB Stuttgart 1893 AG are concluded with the issuance of the notice of fines.</p><p> <a href="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/20210310_PM_VfB-Stuttgart_Abschluss_Bussgeldverfahren.pdf" target="_blank" rel="noopener noreferrer">Access this press release as a PDF document.</a></p><p class="Brieftext"> If you have any questions, you can reach us on the telephone number<br /> 0711 / 615541-23 and by email: <a href="mailto:pressestelle@lfdi.bwl.de" target="_blank" rel="noopener noreferrer nofollow">pressestelle@lfdi.bwl.de</a></p><p class="Brieftext"> Further information on data protection and freedom of information can be found on the Internet at <a href="http://www.baden-wuerttemberg.datenschutz.de/" target="_blank" rel="noopener noreferrer">www.baden-wuerttemberg.datenschutz.de</a> or at <a href="http://www.datenschutz.de/" target="_blank" rel="noopener noreferrer nofollow">www.datenschutz.de</a> . </p><p></p></div></div><div class="post-footer"><div class="social-icons ed-social-share-icons"><p class="share-title"> Share:</p> <a href="#" class="social-share-link" title="Share &quot;VfB Stuttgart: Fine proceedings end with the imposition of a fine&quot; via email" data-network-name="basic_email" data-share-title="VfB Stuttgart: Bußgeldverfahren endet mit der Verhängung eines Bußgeldes" data-share-url="https://www.baden-wuerttemberg.datenschutz.de/vfb-stuttgart-bussgeld-erlassen/"><span class="et-extra-icon et-extra-icon-basic_email et-extra-icon-background-hover" ></span></a> <a href="#" class="social-share-link" title="Share &quot;VfB Stuttgart: Fine proceedings end with the imposition of a fine&quot; via print" data-network-name="basic_print" data-share-title="VfB Stuttgart: Bußgeldverfahren endet mit der Verhängung eines Bußgeldes" data-share-url="https://www.baden-wuerttemberg.datenschutz.de/vfb-stuttgart-bussgeld-erlassen/"><span class="et-extra-icon et-extra-icon-basic_print et-extra-icon-background-hover" ></span></a></div><style type="text/css" id="rating-stars">
.post-footer .rating-stars #rated-stars img.star-on,
.post-footer .rating-stars #rating-stars img.star-on {
background-color: #ef5555;
}
</style></div></article><nav class="post-nav"><div class="nav-links clearfix"><div class="nav-link nav-link-prev"><a href="https://www.baden-wuerttemberg.datenschutz.de/nabu-diskussion-20210222/" rel="prev"><span class="button">Previous</span> <span class="title">NABU regional chairman Enssle and state data protection officer on Transparency in Government</span></a></div><div class="nav-link nav-link-next"> <a href="https://www.baden-wuerttemberg.datenschutz.de/10-speyerer-forum-zur-digitalen-lebenswelt/" rel="next"><span class="button">Next</span> <span class="title">10th Speyer forum on the digital world</span></a> </div></div></nav></div><!-- /.et_pb_extra_column.et_pb_extra_column_main --><div class="et_pb_extra_column_sidebar"><div id="media_image-2" class="et_pb_widget widget_media_image"><h4 class="widgettitle"> Corona, cookies, clubs, ...</h4> <a href="https://www.baden-wuerttemberg.datenschutz.de/faqs#FAQ-Galerie"><img width="500" height="327" src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/FAQ_L.Klauser_AdobeStock_33867042.png" class="image wp-image-15620  attachment-full size-full" alt="" loading="lazy" style="max-width: 100%; height: auto;" title="Corona, cookies, clubs ..." srcset="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/FAQ_L.Klauser_AdobeStock_33867042.png 500w, https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/FAQ_L.Klauser_AdobeStock_33867042-300x196.png 300w" sizes="(max-width: 500px) 100vw, 500px" /></a> </div><!-- end .et_pb_widget --><div id="custom_html-9" class="widget_text et_pb_widget widget_custom_html"><h4 class="widgettitle">Contact</h4><div class="textwidget custom-html-widget"> <strong>phone</strong><br> 0711/61 55 41-0<br> Monday to Thursday from 10 a.m. to 12 p.m.<p></p><p></p> <strong>e-mail</strong> <br><img class="alignnone wp-image-6915 size-full" style="margin-bottom: -3px;"  src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2018/11/poststelle-at-lfdi.png" alt="Post office email address"  /><br><p></p><p></p> <strong>DE-Mail</strong> <br><img class="alignnone wp-image-6915 size-full" style="margin-left: -3px; margin-bottom: -3px;"  src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2018/12/poststelle-at-de-mail.png" alt="DE-mail address"  /><br><p style="margin-top:5px;line-height:inherit;color:#666;"> <em><strong>ATTENTION:</strong> Only for sending messages via the DE-Mail system, not for normal e-mails!</em></p> <strong>Note on sending e-mails</strong><br> We recommend converting the attached documents to the new formats (eg docx / xlsx / pptx) or to “pdf” before sending e-mail messages.<p></p><p></p> <a  title="Further contact options" href="https://www.baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen/"><font color="blue">Please click here for further contact options.</font></a><br><br> <strong>Newsletter</strong><br> <a  title="Newsletter" href="https://www.baden-wuerttemberg.datenschutz.de/newsletter-anmeldung/"><font color="blue">You can subscribe to</font></a> our newsletter here.<br><br> <strong>mastodon</strong><br> <a rel="me noopener" href="https://xn--baw-joa.social/@lfdi" target="_blank"><font color="blue">Mastodon BaWü.social</font></a> </div></div><!-- end .et_pb_widget --><div id="category-posts-2" class="et_pb_widget cat-post-widget"><h4 class="widgettitle"> Events &amp; Publications </h4><ul id="category-posts-2-internal" class="category-posts-internal"><li class='cat-post-item'><div> <a class="cat-post-thumbnail cat-post-none" href="https://www.baden-wuerttemberg.datenschutz.de/10-speyerer-forum-zur-digitalen-lebenswelt/" title="10th Speyer forum on the digital world"><span class="cat-post-crop cat-post-format cat-post-format-standard"><img width="50" height="50" src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/10.-Speyerer-Forum-Twitter-V1-440x440.jpg" class="attachment-150x150x1x151x151 size-150x150x1x151x151 wp-post-image" alt="" loading="lazy" data-cat-posts-width="50" data-cat-posts-height="50" srcset="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/10.-Speyerer-Forum-Twitter-V1-440x440.jpg 440w, https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/10.-Speyerer-Forum-Twitter-V1-150x150.jpg 150w" sizes="(max-width: 50px) 100vw, 50px" /></span></a> <a class="cat-post-title" href="https://www.baden-wuerttemberg.datenschutz.de/10-speyerer-forum-zur-digitalen-lebenswelt/" rel="bookmark">10th Speyer forum on the digital world</a> <span class="cat-post-date post-date">March 10, 2021</span></div></li><li class='cat-post-item'><div> <a class="cat-post-thumbnail cat-post-none" href="https://www.baden-wuerttemberg.datenschutz.de/diskussion-jetzt-online-stefan-brink-und-der-nabu-landesvorsitzende-enssle-ueber-transparenz-bei-behoerden/" title="Discussion now online: Stefan Brink and the NABU state chairman Enssle on transparency with authorities"><span class="cat-post-crop cat-post-format cat-post-format-standard"><img width="50" height="50" src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/20210222_NABU-Enssle_LfDI-440x440.jpg" class="attachment-150x150x1x151x151 size-150x150x1x151x151 wp-post-image" alt="" loading="lazy" data-cat-posts-width="50" data-cat-posts-height="50" srcset="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/20210222_NABU-Enssle_LfDI-440x440.jpg 440w, https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/03/20210222_NABU-Enssle_LfDI-150x150.jpg 150w" sizes="(max-width: 50px) 100vw, 50px" /></span></a> <a class="cat-post-title" href="https://www.baden-wuerttemberg.datenschutz.de/diskussion-jetzt-online-stefan-brink-und-der-nabu-landesvorsitzende-enssle-ueber-transparenz-bei-behoerden/" rel="bookmark">Discussion now online: Stefan Brink and NABU state chairman Enssle on transparency in authorities</a> <span class="cat-post-date post-date">March 4, 2021</span></div></li><li class='cat-post-item'><div> <a class="cat-post-thumbnail cat-post-none" href="https://www.baden-wuerttemberg.datenschutz.de/evaluation-5-jahre-landesinformationsfreiheitsgesetz-bw/" title="Evaluation: 5 years of the State Freedom of Information Act BW"><span class="cat-post-crop cat-post-format cat-post-format-standard"><img width="50" height="50" src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/02/IF_thingamajiggs-stock_adobe_com-440x440.jpeg" class="attachment-150x150x1x151x151 size-150x150x1x151x151 wp-post-image" alt="" loading="lazy" data-cat-posts-width="50" data-cat-posts-height="50" srcset="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/02/IF_thingamajiggs-stock_adobe_com-440x440.jpeg 440w, https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/02/IF_thingamajiggs-stock_adobe_com-150x150.jpeg 150w" sizes="(max-width: 50px) 100vw, 50px" /></span></a> <a class="cat-post-title" href="https://www.baden-wuerttemberg.datenschutz.de/evaluation-5-jahre-landesinformationsfreiheitsgesetz-bw/" rel="bookmark">Evaluation: 5 years of the State Freedom of Information Act BW</a> <span class="cat-post-date post-date">February 26, 2021</span></div></li><li class='cat-post-item'><div> <a class="cat-post-thumbnail cat-post-none" href="https://www.baden-wuerttemberg.datenschutz.de/handreichung-zugang-corona-fallzahlen-oeffentlichen-stellen/" title="Handout: Access to the corona case numbers from public bodies"><span class="cat-post-crop cat-post-format cat-post-format-standard"><img width="50" height="50" src="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/02/Wuerfel-Fact-oder-Fake_peterschreiber.media-AdobeStock_209339219-440x440.jpeg" class="attachment-150x150x1x151x151 size-150x150x1x151x151 wp-post-image" alt="" loading="lazy" data-cat-posts-width="50" data-cat-posts-height="50" srcset="https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/02/Wuerfel-Fact-oder-Fake_peterschreiber.media-AdobeStock_209339219-440x440.jpeg 440w, https://www.baden-wuerttemberg.datenschutz.de/wp-content/uploads/2021/02/Wuerfel-Fact-oder-Fake_peterschreiber.media-AdobeStock_209339219-150x150.jpeg 150w" sizes="(max-width: 50px) 100vw, 50px" /></span></a> <a class="cat-post-title" href="https://www.baden-wuerttemberg.datenschutz.de/handreichung-zugang-corona-fallzahlen-oeffentlichen-stellen/" rel="bookmark">Handout: Access to the corona case numbers from public bodies</a> <span class="cat-post-date post-date">February 24, 2021</span></div></li></ul> <a class="cat-post-footer-link" href="https://www.baden-wuerttemberg.datenschutz.de/alle-beitraege-zu-veranstaltungen-veroeffentlichungen/">All events &amp; Publ.</a> </div><!-- end .et_pb_widget --><div id="custom_html-10" class="widget_text et_pb_widget widget_custom_html"><h4 class="widgettitle"> search </h4><div class="textwidget custom-html-widget"><form role="search" method="get" class="search-form" style="text-align: right;" action="https://www.baden-wuerttemberg.datenschutz.de/"> <label><span class="screen-reader-text">Search for:</span> <input type="search" class="search-field" style="width: 75%; border: 1px solid #3e5062; background-color: #ecf0f5; font-weight; bold;" placeholder="..." value="" name="s"></label> <input type="submit" class="search-submit" style="font-family: ET-Extra !important; background-color: #3e5062; color: #fff; font-weight: 600;" value=""></form><script>
cleansidebar(window);
</script></div></div><!-- end .et_pb_widget --></div></div><!-- #content-area --></div><!-- .container --></div><!-- #main-content --><footer id="footer" class="footer_columns_4"><div id="footer-bottom"><div class="container"><!-- Footer Info --><p id="footer-info"> Designed by <a href="http://www.elegantthemes.com" title="Premium WordPress Themes">Elegant Themes</a> | Powered by <a href="http://www.wordpress.org">WordPress</a> </p><!-- Footer Navigation --></div></div></footer></div><!-- #page-container --><span title="Back to top" id="back_to_top"></span><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=7.4.4' id='wp-polyfill-js'></script><script type='text/javascript' id='wp-polyfill-js-after'>
( 'fetch' in window ) || document.write( '<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js?ver=3.0.0"></scr' + 'ipt>' );( document.contains ) || document.write( '<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js?ver=3.42.0"></scr' + 'ipt>' );( window.DOMRect ) || document.write( '<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js?ver=3.42.0"></scr' + 'ipt>' );( window.URL && window.URL.prototype && window.URLSearchParams ) || document.write( '<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill-url.min.js?ver=3.6.4"></scr' + 'ipt>' );( window.FormData && window.FormData.prototype.keys ) || document.write( '<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js?ver=3.0.12"></scr' + 'ipt>' );( Element.prototype.matches && Element.prototype.closest ) || document.write( '<script src="https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js?ver=2.0.2"></scr' + 'ipt>' );
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/i18n.min.js?ver=ac389435e7fd4ded01cf603f3aaba6a6' id='wp-i18n-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/vendor/lodash.min.js?ver=4.17.19' id='lodash-js'></script><script type='text/javascript' id='lodash-js-after'>
window.lodash = _.noConflict();
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/url.min.js?ver=98645f0502e5ed8dadffd161e39072d2' id='wp-url-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/hooks.min.js?ver=84b89ab09cbfb4469f02183611cc0939' id='wp-hooks-js'></script><script type='text/javascript' id='wp-api-fetch-js-translations'>
( function( domain, translations ) {
var localeData = translations.locale_data[ domain ] || translations.locale_data.messages;
localeData[""].domain = domain;
wp.i18n.setLocaleData( localeData, domain );
} )( "default", {"translation-revision-date":"2021-01-28 20:10:56+0000","generator":"GlotPress\/3.0.0-alpha.2","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"de"},"You are probably offline.":["Du bist wahrscheinlich offline."],"Media upload failed. If this is a photo or a large image, please scale it down and try again.":["Das Hochladen von Medien ist fehlgeschlagen. Wenn es sich um ein Foto oder ein gro\u00dfes Bild handelt, verkleiner es bitte und versuch es erneut."],"An unknown error occurred.":["Ein unbekannter Fehler ist aufgetreten."],"The response is not a valid JSON response.":["Die Antwort ist keine g\u00fcltige JSON-Antwort."]}},"comment":{"reference":"wp-includes\/js\/dist\/api-fetch.js"}} );
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/dist/api-fetch.min.js?ver=4dec825c071b87c57f687eb90f7c23c3' id='wp-api-fetch-js'></script><script type='text/javascript' id='wp-api-fetch-js-after'>
wp.apiFetch.use( wp.apiFetch.createRootURLMiddleware( "https://www.baden-wuerttemberg.datenschutz.de/wp-json/" ) );
wp.apiFetch.nonceMiddleware = wp.apiFetch.createNonceMiddleware( "809b692f60" );
wp.apiFetch.use( wp.apiFetch.nonceMiddleware );
wp.apiFetch.use( wp.apiFetch.mediaUploadMiddleware );
wp.apiFetch.nonceEndpoint = "https://www.baden-wuerttemberg.datenschutz.de/wp-admin/admin-ajax.php?action=rest-nonce";
</script><script type='text/javascript' id='contact-form-7-js-extra'>
/* <![CDATA[ */
var wpcf7 = [];
/* ]]> */
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.4' id='contact-form-7-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/masonry.min.js?ver=4.2.2' id='masonry-js'></script><script type='text/javascript' id='extra-scripts-js-extra'>
/* <![CDATA[ */
var EXTRA = {"images_uri":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-content\/themes\/Extra\/images\/","ajaxurl":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-admin\/admin-ajax.php","your_rating":"Deine Bewertung:","item_in_cart_count":"%d Item in Cart","items_in_cart_count":" %d Artikel im Warenkorb","item_count":"%d Item","items_count":" %d Elemente","rating_nonce":"105845cdf7","timeline_nonce":"0354913c31","blog_feed_nonce":"554373b5a8","error":"Es gab ein Problem, bitte versuchen Sie es erneut.","contact_error_name_required":"Namensfeld darf nicht leer sein.","contact_error_email_required":"Das E-Mail-Feld darf nicht leer sein.","contact_error_email_invalid":"Bitte geben Sie eine g\u00fcltige E-Mail-Adresse ein.","is_ab_testing_active":"","is_cache_plugin_active":"yes"};
var et_shortcodes_strings = {"previous":"Previous","next":"Next"};
var et_pb_custom = {"ajaxurl":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-admin\/admin-ajax.php","images_uri":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-content\/themes\/Extra\/images","builder_images_uri":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-content\/themes\/Extra\/includes\/builder\/images","et_frontend_nonce":"178d9c0d67","subscription_failed":"Bitte \u00fcberpr\u00fcfen Sie die Felder unten aus, um sicherzustellen, dass Sie die richtigen Informationen eingegeben.","et_ab_log_nonce":"59c8b18081","fill_message":"Bitte f\u00fcllen Sie die folgenden Felder aus:","contact_error_message":"Bitte folgende Fehler beheben:","invalid":"Ung\u00fcltige E-Mail","captcha":"Captcha","prev":"Vorherige","previous":"Vorherige","next":"Weiter","wrong_captcha":"Sie haben die falsche Zahl im Captcha eingegeben.","wrong_checkbox":"Checkbox","ignore_waypoints":"no","is_divi_theme_used":"","widget_search_selector":".widget_search","ab_tests":[],"is_ab_testing_active":"","page_id":"15708","unique_test_id":"","ab_bounce_rate":"5","is_cache_plugin_active":"yes","is_shortcode_tracking":"","tinymce_uri":""}; var et_builder_utils_params = {"condition":{"diviTheme":false,"extraTheme":true},"scrollLocations":["app","top"],"builderScrollLocations":{"desktop":"app","tablet":"app","phone":"app"},"onloadScrollLocation":"app","builderType":"fe"}; var et_frontend_scripts = {"builderCssContainerPrefix":"#et-boc","builderCssLayoutPrefix":"#et-boc .et-l"};
var et_pb_box_shadow_elements = [];
var et_pb_motion_elements = {"desktop":[],"tablet":[],"phone":[]};
var et_pb_sticky_elements = [];
/* ]]> */
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/themes/Extra/scripts/scripts.unified.js?ver=4.9.1' id='extra-scripts-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/themes/Extra/core/admin/js/common.js?ver=4.9.1' id='et-core-common-js'></script><script type='text/javascript' id='wpcf7cf-scripts-js-extra'>
/* <![CDATA[ */
var wpcf7cf_global_settings = {"ajaxurl":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-admin\/admin-ajax.php"};
/* ]]> */
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/cf7-conditional-fields/js/scripts.js?ver=1.9.16' id='wpcf7cf-scripts-js'></script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-includes/js/wp-embed.min.js?ver=5.6.2' id='wp-embed-js'></script><script type='text/javascript' id='statify-js-js-extra'>
/* <![CDATA[ */
var statify_ajax = {"url":"https:\/\/www.baden-wuerttemberg.datenschutz.de\/wp-admin\/admin-ajax.php","nonce":"9ea780513a"};
/* ]]> */
</script><script type='text/javascript' src='https://www.baden-wuerttemberg.datenschutz.de/wp-content/plugins/statify/js/snippet.min.js?ver=1.8.1' id='statify-js-js'></script><script>"undefined"!=typeof jQuery&&jQuery(document).ready(function(){"objectFit"in document.documentElement.style==!1&&(jQuery(".cat-post-item figure").removeClass("cat-post-crop"),jQuery(".cat-post-item figure").addClass("cat-post-crop-not-supported")),(document.documentMode||/Edge/.test(navigator.userAgent))&&(jQuery(".cat-post-item figure img").height("+=1"),window.setTimeout(function(){jQuery(".cat-post-item figure img").height("-=1")},0))});</script><script type="text/javascript">
if (typeof jQuery !== 'undefined') {


var cat_posts_namespace              = window.cat_posts_namespace || {};
In addition to paying the fine and the costly restructuring and improvement of its data protection management, VfB Stuttgart 1893 AG, in coordination with the LfDI, is taking measures to make young people aware of data protection issues.
cat_posts_namespace.layout_wrap_text = cat_posts_namespace.layout_wrap_text || {};
cat_posts_namespace.layout_img_size  = cat_posts_namespace.layout_img_size || {};


cat_posts_namespace.layout_wrap_text = {
The VfB is promoting the “Data Protection Goes to School” project by supporting public relations work for regional school days of action and by making videos suitable for children and young people to raise awareness of data protection issues. In addition, the VfB designs training courses for the youth soccer teams U10 to U21 on the subject of “data protection among young people”.
preWrap : function (widget) {
// var _widget = jQuery(widget);
jQuery(widget).find('.cat-post-item').each(function(){
var _that = jQuery(this);
_that.find('p.cpwp-excerpt-text').addClass('cpwp-wrap-text');
_that.find('p.cpwp-excerpt-text').closest('div').wrap('<div class="cpwp-wrap-text-stage"></div>');;
});
return;
},
add : function(_this){
var _that = jQuery(_this);
if (_that.find('p.cpwp-excerpt-text').height() < _that.find('.cat-post-thumbnail').height()) {
_that.find('p.cpwp-excerpt-text').closest('.cpwp-wrap-text-stage').removeClass( "cpwp-wrap-text" );
_that.find('p.cpwp-excerpt-text').addClass( "cpwp-wrap-text" );
}else{
_that.find('p.cpwp-excerpt-text').removeClass( "cpwp-wrap-text" );
_that.find('p.cpwp-excerpt-text').closest('.cpwp-wrap-text-stage').addClass( "cpwp-wrap-text" );
}
return;
},
handleLazyLoading : function(_this) {
var width = jQuery(_this).find('img').width();
if( 0 !== width ){
cat_posts_namespace.layout_wrap_text.add(_this);
} else {
jQuery(_this).find('img').one("load", function(){
cat_posts_namespace.layout_wrap_text.add(_this);
});
}
return;
},
setClass : function (widget) {
// var _widget = jQuery(widget);
jQuery(widget).find('.cat-post-item').each(function(){
cat_posts_namespace.layout_wrap_text.handleLazyLoading(this);
});
return;
}
}
cat_posts_namespace.layout_img_size = {
replace : function(_this){
var _that = jQuery(_this),
resp_w = _that.width(),
resp_h = _that.height(),
orig_w = _that.data('cat-posts-width'),
orig_h = _that.data('cat-posts-height');
if( resp_w < orig_w ){
_that.height( resp_w * orig_h / orig_w );
} else {
_that.height( '' );
}
return;
},
handleLazyLoading : function(_this) {
var width = jQuery(_this).width();
if( 0 !== width ){
cat_posts_namespace.layout_img_size.replace(_this);
} else {
jQuery(_this).one("load", function(){
cat_posts_namespace.layout_img_size.replace(_this);
});
}
return;
},
setHeight : function (widget) {
jQuery(widget).find('.cat-post-item img').each(function(){
cat_posts_namespace.layout_img_size.handleLazyLoading(this);
});
return;
}
}


jQuery( document ).ready(function () {
LfDI Stefan Brink: “By issuing this notice of fines, we are concluding a procedure that was also unusual for us as a supervisory authority. It was not only the subject of our proceedings that was unusual, but above all the public and media interest associated with it. Unusual was also the extent of the interest in clarification evidenced by the involvement of Esecon and the willingness of the VfB to cooperate with our authority. "
var widget = jQuery('#category-posts-2-internal');


This procedure results in a good chance, continues Stefan Brink, that VfB Stuttgart will be better positioned in the future when it comes to dealing fairly with members' data. “Even if we weren't able to fully investigate all publicly discussed processes with a view to the statute of limitations, the result that has now been mutually agreed is convincing: In addition to the noticeable fine, the VfB ensures considerable organizational and technical improvements in terms of data protection. In addition, happily, those responsible are planning to become involved in clarifying data protection issues in the future, with which young people in particular are to be addressed. "
cat_posts_namespace.layout_wrap_text.preWrap(widget);


The investigations against VfB Stuttgart 1893 eV and VfB Stuttgart 1893 AG are concluded with the issuance of the notice of fines.
jQuery(window).on('load resize', function() {
cat_posts_namespace.layout_wrap_text.setClass(widget);
cat_posts_namespace.layout_img_size.setHeight(widget);
});
});
}
</script></body></html>
</pre>
</pre>

Revision as of 12:58, 16 June 2021

LfDI - Fine EUR 300,000 against VfB Stuttgart 1893 AG
LogoDE-BW.png
Authority: LfDI (Baden-Württemberg)
Jurisdiction: Germany
Relevant Law: Article 5(2) GDPR
Type: Other
Outcome: n/a
Started:
Decided:
Published: 10.03.2021
Fine: 300,000 EUR
Parties: VfB Stuttgart 1893 AG
National Case Number/Name: Fine EUR 300,000 against VfB Stuttgart 1893 AG
European Case Law Identifier: n/a
Appeal: n/a
Original Language(s): German
Original Source: LfDI (in DE)
Initial Contributor: Lejla Rizvanovik

The Baden-Württemberg DPA (LfDI) issued a fine of €300,000 on the soccer club VfB Stuttgart 1893 AG for neglectful breach of the accountability principle under Article 5(2) GDPR.

English Summary

Facts

In order to pursue the spin-off of the professional soccer department from "VfB Stuttgart 1893 e.V.", a registered association under German law, into a stock corporation ("VfB Stuttgart 1893 AG"), VfB Stuttgart 1893 e.V. transferred several tens of thousands of personal data of club members to an external service provider between 2016 and 2017. This included data of underage members who would have reached the age of 18 at the time of a general meeting at which a decision on the spin-off would be made. The soccer club also transferred an Excel spreadsheet with over 100,000 data records to the service provider after the GDPR came into force.

At least until the time of the decision by the LfDI, VfB Stuttgart failed to provide a contractual basis for its cooperation with the service provider. Until then, it had not been documented by whom the service provider had originally been commissioned, what specific powers it had within VfB Stuttgart, and to what extent it had been given access to the personal data of members and employees.

Holding

Limitation of the proceedings to one Violation

The LfDI limited the proceedings to a violation of Article 5(2) GDPR. Further proceedings regarding potential other violations of the GDPR were provisionally terminated pursuant to § 46 of the German Act on Regulatory Offences (OWiG) in conjunction with § 154(2) the German Code of Criminal Procedure (StPO).

Violation of Article 5(2) GDPR

The LfDI decided that there was a violation of the accountability obligation according to Article 5(2) GDPR.

This was based on the fact that due to an insufficient documentation of the contractual relationship with the external service provider and its powers within the club, the lawfulness of the data processing operations carried out could not be sufficiently verified or proven.

For the assessment of the legal situation, it was irrelevant whether the above-mentioned data records had been sent to an internal VfB e-mail address of the service provider or to one of its external e-mail addresses.

The infringement was attributed to VfB Stuttgart 1893 AG on the basis of the functional company concept applicable under the GDPR. Knowledge of the transactions by the Board of Management was not relevant. The LfDI assumed negligence.

Fine Assessment

For the assessment of the fine, the LfDI, which applied the fine framework from Article 83(4) GDPR, initially relied on an understanding reached with the club during the investigation. According to this, it promised that the fine would be between approximately EUR 300,000 and 400,000, provided that the association confessed.

Initially, the LfDI came to the conclusion that a fine in the middle of the aforementioned range would be appropriate.

In favor of the controller, it was taken into account that

  1. the breach was only negligent,
  2. VfB Stuttgart simplified the investigation with a high level of cooperation and internal clarification efforts, and
  3. the club made efforts to improve its data protection and data security management at an early stage and before the fine proceedings.

Explicitly not to be taken into consideration was the worsened economic situation as a result of the Covid pandemic.

To the detriment of VfB AG, it was taken into account that a significant number of individuals were affected and that their data had been transferred to a third party without a verifiable legal basis. However, the LfDI ultimately decided to impose a fine in the lower range (EUR 300,000) on the condition that VfB Stuttgart engage in social activities for young people in a manner determined by the LfDI. The club could choose between participating in an existing data protection project at schools, designing and conducting data protection training courses for the youth teams, or - if the aforementioned is not possible - making a donation to a non-profit organization in the field of data protection to be named by the LfDI.

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the German original. Please refer to the German original for more details.

Fine proceedings against VfB Stuttgart 1893 AG end with the imposition of a fine.

LfDI Stefan Brink: “In addition to the noticeable fine, VfB is making significant organizational and technical improvements in data protection. In addition, happily, those responsible are planning to become involved in clarifying data protection issues in the future, with which young people in particular are to be addressed. "

The State Commissioner for Data Protection and Freedom of Information, Stefan Brink, concludes the proceedings against VfB Stuttgart 1893 AG and imposes a fine of 300,000 euros for negligent breach of accountability under data protection law in accordance with Art. 5 (2) GDPR.

The responsible persons at VfB Stuttgart 1893 eV and VfB Stuttgart 1893 AG supported the educational and investigative measures of the state commissioner, promoted them on their own initiative and cooperated extensively with the authority of the state commissioner.

In addition to paying the fine and the costly restructuring and improvement of its data protection management, VfB Stuttgart 1893 AG, in coordination with the LfDI, is taking measures to make young people aware of data protection issues.

The VfB is promoting the “Data Protection Goes to School” project by supporting public relations work for regional school days of action and by making videos suitable for children and young people to raise awareness of data protection issues. In addition, the VfB designs training courses for the youth soccer teams U10 to U21 on the subject of “data protection among young people”.

LfDI Stefan Brink: “By issuing this notice of fines, we are concluding a procedure that was also unusual for us as a supervisory authority. It was not only the subject of our proceedings that was unusual, but above all the public and media interest associated with it. Unusual was also the extent of the interest in clarification evidenced by the involvement of Esecon and the willingness of the VfB to cooperate with our authority. "

This procedure results in a good chance, continues Stefan Brink, that VfB Stuttgart will be better positioned in the future when it comes to dealing fairly with members' data. “Even if we weren't able to fully investigate all publicly discussed processes with a view to the statute of limitations, the result that has now been mutually agreed is convincing: In addition to the noticeable fine, the VfB ensures considerable organizational and technical improvements in terms of data protection. In addition, happily, those responsible are planning to become involved in clarifying data protection issues in the future, with which young people in particular are to be addressed. "

The investigations against VfB Stuttgart 1893 eV and VfB Stuttgart 1893 AG are concluded with the issuance of the notice of fines.