We are delighted that you are interested in the VELTINS-Arena/FC Gelsenkirchen-Schalke 04 e.V. website. The protection of your privacy is very important to us. In the following, we will inform you in detail about how we handle your data. This privacy policy relates to the website of the VELTINS-Arena - www.en.veltins-arena.de


The responsible body is:
FC Gelsenkirchen-Schalke 04 e.V.
Ernst-Kuzorra-Weg 1
45891 Gelsenkirchen


Executive Board authorized to represent the company
Matthias Tillmann (Chairman), Christina Rühl-Hamers


Data protection officer
The controller has appointed a data protection officer:
The data protection officer can be contacted at the following e-mail address: datenschutz@schalke04.de


Type of data processed

  • Web access metadata (IP address and log data)
  • Usage data for access statistics (see Google Analytics)
  • Contact details in the registration process or newsletter registration
  • Login data for the S04 account
  • Ticket data for the display of e-tickets


Categories of data subjects
Visitors and users of the online offer (hereinafter we also refer to the data subjects collectively as "users").


Legal basis and purpose of processing
We process data on the basis of our legitimate interest within the meaning of Art. 6 para. 1 f) GDPR for the following purposes:

  • Provision of the website
  • Answering contact requests and communicating with users
  • Simplification of the ordering process for customers
  • Provision of a login functionality for the Schalke 04 account
  • Display of e-tickets
  • Security measures
  • Marketing measures and statistical analysis


We process data on the basis of your consent within the meaning of Art. 6 para. 1 a) GDPR for the following processing operations:

  • Subscribe to the newsletter


You can revoke your consent at any time:

  • Consent to receive advertising by clicking on the link to the preference center contained in every newsletter
  • You can have your S04 account deleted by sending a message to our customer service (post@schalke04.de)
  • You can stop the Messenger service at any time by sending a message with the text "DELETE ALL DATA" and have your data deleted there


As part of order processing, we process your data for the purpose of contract fulfillment or pre-contractual measures within the meaning of Art. 6 para. 1 b) GDPR:

  • Display of ordered tickets as e-tickets in the S04 app (for iPhone and Android)


Duration of storage
The storage periods are listed in the relevant sections of this privacy policy where possible. Please refer to the relevant sections.


Right to lodge a complaint
If you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint.

The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (http://www.ldi.nrw.de/metanavi_Kontakt/index.php) is responsible for the federal state of North Rhine-Westphalia.


Information, deletion, blocking, correction and revocation
You have the right to receive information about the personal data stored by us at any time.

You have the right to have your personal data corrected, blocked or deleted (unless we are required to store it due to other regulations or obligations).

You can request changes or corrections to your personal data at any time.

You can withdraw your consent at any time with effect for the future by notifying us accordingly.


Processing carried out on the website
We list the specific processing operations below.


Processing of personal data based on your consent
With the exception of your IP address (see below), personal data is only collected if you provide it to us.

  • when registering for the Schalke 04 newsletter
  • when registering for the Messenger service


The data provided when registering for the newsletter will be used to verify your e-mail address. You will then receive an e-mail containing a declaration of consent and a link - this double opt-in process is intended to ensure that we only send you the information you want.

If you do not give your consent, the e-mail address transmitted will be deleted after 30 days.

The data for the newsletter or Schalke 04 account will be stored by us until you either close your account yourself or exercise your right to delete your personal data and request us to delete it.

When you sign up for the Messenger service, your telephone number is stored with a service provider (see next section).


Processing of personal data based on our legitimate interests
The data provided when registering for a Schalke 04 account will be used to simplify ordering processes, to manage your newsletter subscriptions and to authenticate for services you have ordered. We will not use your data for other purposes without your consent. In your account, you can optionally consent to receiving advertising.


Processing of personal data in the context of contract fulfillment
As part of the "e-tickets" functionality, your data on the tickets you have purchased is stored by a service provider and can be displayed on smartphones (Android and Iphone) using the S04 app.

The e-ticket data will be deleted from the service provider's e-ticket database 7 days after the event has taken place and will be stored until then to enable tracking and resolution of technical problems.


Messenger service
By sending a start message to FC Schalke 04 e.V. (hereinafter referred to as the sender), the user consents in accordance with Art. 6 para. 1 lit. a GDPR that the sender uses personal data (e.g. surname and first name, telephone number, messenger ID, profile picture, messages) for direct communication and the data processing required for this purpose using the selected messenger. An existing messaging account with the respective provider is required to use this service.

The responsible provider of the Messenger is


The user must be aware that the respective provider receives personal data (in particular communication metadata) that is also processed on servers in countries outside the EU (e.g. USA) where an adequate level of data protection cannot be guaranteed. However, Whatsapp Inc is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law. Further information can be found in the privacy policies of the respective messenger above. The sender has neither precise knowledge nor influence on the data processing by the respective provider.

Your consent to this data processing can be freely revoked at any time by entering "STOP" in the respective messenger.

To have all your data stored with our service provider removed, please send a message with the text "DELETE ALL DATA" via your Messenger.

The technical service provider WhatsBroadcast GmbH, Herzog-Heinrich-Str. 9, 80336 Munich, is used as the sender's processor to provide this service.


Web server access logs
To prevent risks, access to the web server is stored in the web server's access log for a period of 7 days and then automatically deleted.
The time, IP address and page accessed (URL) are stored here.
The purpose of the storage is to detect hacker attacks.


Cookies are small text files that the web browser can store.

The browser can be set so that no cookies are stored on the hard disk or cookies that have already been stored are deleted again. However, in order to be able to use all the functions of the website, we recommend that you agree to the use of cookies, as this enables us to better analyze the reach and use of our website.

We use cookies to statistically analyze the use of our website with the help of Google Analytics (see Google Analytics) or to improve our advertising presence on the Internet.

PingDom also measures performance with the help of cookies, which are explained in the PingDom section.

We also use a cookie that stores whether the user has already been informed about the use of cookies.

These statistics are completely anonymous, as Google Analytics only stores the data anonymously.

Cookies are also used to store whether the user has already consented to the use of cookies.

Cookies are small text files that are stored on your computer and saved by your browser.

Storage periods: The cookies are automatically deleted from your computer after a predefined period of time. The storage periods for Google cookies are managed by Google and can be accessed here:


The cookie that stores the consent to the use of cookies has a storage period of 2 months.


We use the website performance and availability monitoring service Pingdom from the third-party provider SolarWinds Worldwide, LLC, 3711 South MoPac Expressway, Building Two, Austin, TX 78746, USA.

For more details, see the privacy policy: http://www.solarwinds.com/legal/privacy.


Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). It is used on the basis of Article 6(1)(f) of the GDPR. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. See also the Cookies section of this privacy policy. The information generated about your use of the website such as

  • Browser type/version,
  • operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are generally transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We have also added the code "anonymizeIP" to Google Analytics on this website. This guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. [Note: You can find information on integrating the opt-out cookie at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable].

We continue to use Google Analytics to analyze data from double-click cookies and AdWords for statistical purposes. If you do not want this, you can deactivate this via the Ads Preferences Manager(https://adssettings.google.com/authenticated?hl=de).

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help section(https://support.google.com/analytics/answer/6004245?hl=de).


Google Re/Marketing Services
We use the marketing and remarketing services ("Google Marketing Services" for short) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 letter f of the GDPR).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law(http://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to present users only with advertisements that potentially match their interests. If, for example, a user is shown ads for products that they have shown an interest in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer. The IP address of the user is also recorded, whereby we inform you in the context of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offers. Google may also combine the aforementioned information with such information from other sources. If the user subsequently visits other websites, they can be shown ads tailored to their interests.

User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the USA.

The Google marketing services we use include the online advertising program "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". Cookies can therefore not be tracked via the websites of AdWords customers. The information collected with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

We can integrate third-party advertisements on the basis of the Google marketing service "AdSense". AdSense uses cookies to enable Google and its partner websites to serve ads based on users' visits to this website or other websites on the Internet.

We may also use the "Google Tag Manager" to integrate and manage Google analysis and marketing services on our website.

Further information on the use of data for marketing purposes by Google can be found on the overview page: https://www.google.com/policies/technologies/ads, Google's privacy policy is available at http://www.google.com/policies/privacy.

If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: https://www.google.com/ads/preferences.

Details on the purpose and scope of the data collection and the further processing and use of the data by the networks, as well as your rights in this regard and setting options to protect your privacy, can be found in the data protection information of the operator of the relevant network:

Facebook Inc.
1601 S. California Ave
Palo Alto, CA 94304 USA

Twitter Inc.
795 Folsom St., Suite 600
San Francisco, CA 94107 USA

Google Inc.
1600 Amphitheatre Parkway
Mountain View, CA 94043, USA

Instagram Inc.
1 Hacker Way
Menlo Park
CA 94025

We use the Qualtrics service of the provider Qualtrics LLC, 333 W. River Park Drive, Provo, UT 84604, United States of America to implement and analyze surveys of fans and members.

When participating in a survey, certain information such as device type, operating system version, the approximate location of the device, user language, date and some technical data about the end device is sent to Qualtrics in order to obtain a more reliable analysis. This data also includes the IP address.

If you voluntarily provide demographic data such as membership, age, gender, distance to Gelsenkirchen, surname, first name, e-mail address, this data will also be stored.

The data will be stored for as long as reasonably required for the purpose of processing. It will then be deleted. Qualtrics LLC may disclose this information to affiliated companies and service providers and transfer it to third parties if required by law.

Insofar as data is processed outside the EEA, where there is no level of data protection corresponding to the European standard, we have concluded an order processing agreement with the service provider, including the necessary EU standard contractual clauses, in order to establish a secure level of data protection.

For more information about Qualtrics' terms of use and privacy policy, please visit: https: //www.qualtrics.com/privacy-statement/

Data is only collected and stored with your express consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR. This can be revoked at any time with effect for the future.