Data protection duties of the leadership: DPA, imprint and protective settings
What you must do for your club's data protection as leadership: accept the contract, imprint, access and data breaches.
PrywatnośćPodstawowy (bezpłatny)Sprawdzono dnia 30.10.2026
Ten artykuł jest na razie dostępny tylko po niemiecku i angielsku; pokazujemy wersję angielską.
Wymagania
- You are an owner or administrator of the club.
Kto może to zrobić?
Only owners and administrators see and manage the data processing agreement. The organization's leadership changes the settings for the member list and 2FA. Only people with moderator, admin or owner rights see the administration.
Krok po kroku
Open administration
Open the club and “Manage”. At the bottom is the box “Data protection: Your duties as leadership”.
Accept the DPA
Choose “Data processing agreement”. After reading the contract under Art. 28 GDPR and the terms for organizations, click “Accept contract” as an authorized representative (for a new version “Accept new version”). The proof (time, role, version, checksum) is shown on the page. A group needs to accept nothing; the club's contract applies.
Provide an imprint
A publicly reachable club page usually needs an imprint (§ 5 DDG). If it is missing, it says “An imprint is missing”; choose “Add imprint”.
Protect the member list
Under “Who sees the member list?” “Leadership only (moderator and higher)” is the default. Choose “All members” only if you need it: otherwise names (including children's) are visible to all members. The number of members stays visible to all.
Require a second factor
With “Leadership requires second factor (2FA)” switch to “On — administration only with second factor”. First set up an authenticator app or passkey for your own account under Settings, Security.
Duties in daily life
Follow the notes in the box: purpose limitation, store exports securely, protect children's data, information duty for people without an account and reporting data breaches.
Funkcję znajdziesz tutaj: /organisation/<verein>/verwalten
Typowe błędy i rozwiązania
- “Without an accepted contract there is no legal basis for CLUP.life to process this organization's member data on its behalf.”
- Accept the contract if you may represent the organization.
- “First set up an authenticator app or passkey for your own account under Settings > Security.”
- Set up your second factor before you require 2FA for the leadership.
- “You have no administration rights”
- Only people with the role moderator, administrator or owner see this area.
- A data breach happened (wrong recipient, wrong visibility).
- Report it immediately to the operator's data protection officer. 72 hours apply.
Warto wiedzieć
- The German version of the contract always applies. This is not legal advice.
- Children: make health notes, photos and parent contacts visible only to supervisors; publish photos only with the guardians' consent. Inform people without an account whom you enter about purpose and retention period.