We are only a small club

Data protection in the association, "What should happen, we are only a small association? The sentence is easily pronounced, but could ultimately cost the entire association head and neck. Not that in approximately a warning of the authority is expressed or this overlooks once over it, no, apart from fines even the executive committee is asked personally to the cash.

Why then in data protection in the association?

Even in the smallest club personal data such as name, date of birth, membership number and account details are processed and allow conclusions to be drawn about the respective person.

In the association, the data of members, full-time employees and volunteers, as well as functionaries, fans and service providers are processed.

Protection against data theft

The responsibility in dealing with personal data is high and processing must be well protected. Your computers should therefore be protected by passwords and virus protection, for example, and regular data backups and security updates should be carried out.

Data Protection Officer

According to Art. 37 (7) DSGVO, the association must notify its data protection officer to the competent supervisory authority. Of course, you can do this via the online form service or by mail. The data protection officer is appointed by the board of directors. He or she must have the necessary expertise and reliability to carry out his or her duties. (§ 4 f para. 2 BDSG). This includes knowledge of the association but also basic knowledge of data protection law.

Children and teenagers

Members under 16 years of age are particularly protected. Here, the legal representatives must fill out and sign the so-called declaration of consent, only then is it legally effective.

In a nutshell: Also In future, associations should address the topic of data protection and fulfill at least the basic requirements from now on. This means obtaining declarations of consent from members/festival attendees, at events on Photography  and data protection rights, a Appoint a data protection officer and keep data secure at all times.