Data protection duties of the leadership: DPA, imprint and protective settings
What you must do for your club's data protection as leadership: accept the contract, imprint, access and data breaches.
PrivacidadBásico (gratis)Revisado el 30.10.2026
Este artículo solo está disponible por ahora en alemán e inglés; mostramos la versión en inglés.
Requisitos
- You are an owner or administrator of the club.
¿Quién puede hacerlo?
Only owners and administrators see and manage the data processing agreement. The organization's leadership changes the settings for the member list and 2FA. Only people with moderator, admin or owner rights see the administration.
Paso a paso
Open administration
Open the club and “Manage”. At the bottom is the box “Data protection: Your duties as leadership”.
Accept the DPA
Choose “Data processing agreement”. After reading the contract under Art. 28 GDPR and the terms for organizations, click “Accept contract” as an authorized representative (for a new version “Accept new version”). The proof (time, role, version, checksum) is shown on the page. A group needs to accept nothing; the club's contract applies.
Provide an imprint
A publicly reachable club page usually needs an imprint (§ 5 DDG). If it is missing, it says “An imprint is missing”; choose “Add imprint”.
Protect the member list
Under “Who sees the member list?” “Leadership only (moderator and higher)” is the default. Choose “All members” only if you need it: otherwise names (including children's) are visible to all members. The number of members stays visible to all.
Require a second factor
With “Leadership requires second factor (2FA)” switch to “On — administration only with second factor”. First set up an authenticator app or passkey for your own account under Settings, Security.
Duties in daily life
Follow the notes in the box: purpose limitation, store exports securely, protect children's data, information duty for people without an account and reporting data breaches.
Encontrarás la función aquí: /organisation/<verein>/verwalten
Errores habituales y soluciones
- “Without an accepted contract there is no legal basis for CLUP.life to process this organization's member data on its behalf.”
- Accept the contract if you may represent the organization.
- “First set up an authenticator app or passkey for your own account under Settings > Security.”
- Set up your second factor before you require 2FA for the leadership.
- “You have no administration rights”
- Only people with the role moderator, administrator or owner see this area.
- A data breach happened (wrong recipient, wrong visibility).
- Report it immediately to the operator's data protection officer. 72 hours apply.
Conviene saber
- The German version of the contract always applies. This is not legal advice.
- Children: make health notes, photos and parent contacts visible only to supervisors; publish photos only with the guardians' consent. Inform people without an account whom you enter about purpose and retention period.