Last update: 19 June 2026
1. Identity and contact details of the controller
VOLLEY-CLUB BELAIR
Non-profit association governed by Luxembourg law
Address: 167, rue de Beggen, L-1221 Luxembourg
Email: volleyclubbelair@gmail.com
Website: https://vcb.lu/
Represented by: President of VCBelair
2. Purposes and legal bases for processing
The association processes personal data of its members in the context of its activities, in particular:
| Purposes | Legal bases |
|---|---|
| Membership management and administration of the association | Performance of a contract – Article 6(1)(b) GDPR |
| Organisation of trainings, matches, events and club activities | Legitimate interest – Article 6(1)(f) GDPR |
| Accounting and administrative management (membership fees, expenses, subsidies) | Legal obligation – Article 6(1)(c) GDPR |
| Communication with members (information, training schedules, match organisation, invitations) | Consent – Article 6(1)(a) GDPR |
| Promotion of the club and its activities (e.g. publication of photos, results, team information) | Consent – Article 6(1)(a) GDPR |
3. Categories of personal data
The data collected and processed mainly include:
- identification data (last name, first name);
- contact data (email address, telephone number, postal address);
- data related to club participation (membership status, team allocation, attendance, competition participation);
- where applicable, data relating to your image (photos/videos taken during matches, trainings or events).
Other data may be generated or collected during the course of the relationship.
Consents given may be withdrawn at any time, in the same manner as they were given, notably by contacting the association.
4. Categories of recipients of the personal data
Personal data may be disclosed to the following recipients:
- Internally, to members of the board of directors, coaches and persons in charge of the club’s management, strictly on a need-to-know basis;
- External service providers (processors) acting on behalf of the association (e.g. IT hosting, email services, club management tools, accounting), under data processing agreements compliant with the GDPR;
- Sports federations or competition organisers, where necessary for participation in competitions or official registration;
- Public authorities, where required by law;
- Other members, solely in the context of team organisation, communication or internal directories, and where appropriate, based on consent.
Where personal data is transferred outside the European Economic Area, such transfers are safeguarded in accordance with the GDPR (e.g. standard contractual clauses or other appropriate safeguards).
Data is hosted by providers located in the European Union.
5. Retention periods
- Membership data: retained for the duration of the membership and for a period of 5 years after termination;
- Accounting and financial data: retained for 10 years, in accordance with Luxembourg legal obligations;
- Data used for communications: retained until withdrawal of consent or for a period of 2 years after last contact;
- Photos and videos: retained and used until withdrawal of consent. However, where photos or videos have been published and no request for withdrawal has been made within one (1) month following their publication, such content may no longer be subject to withdrawal, except in exceptional circumstances. In such cases, the continued use of the content is based on the legitimate interest of the club to ensure effective and consistent communication.
- Event and competition-related data: retained for a period of 2 years.
Retention periods may be adapted to comply with legal obligations or for the establishment, exercise or defence of legal claims.
6. Cookies policy
A cookie (hereinafter the “Cookie(s)”) is a small text file stored on a device (computer, tablet, or smartphone) when visiting a website. A Cookie is used in particular to collect information relating to the User’s browsing activity on the Site and to provide the User with personalized services and content.
A Cookie is considered “essential” when it is “used solely for the purpose of carrying out the transmission of a communication over an electronic communications network” or when it is “strictly necessary in order for the provider to supply an information society service explicitly requested by the subscriber or user.” An essential Cookie therefore does not require the User’s prior consent.
Our website vcb.lu uses only essential Cookies, which are strictly necessary for the proper operation of the Site and for the provision of the services requested by the User. These Cookies do not require the User’s prior consent.
7. Rights of data subjects
Under the GDPR, you have the following rights:
- right of access (Article 15 GDPR)
- right to rectification (Article 16 GDPR)
- right to erasure (Article 17 GDPR)
- right to restriction of processing (Article 18 GDPR)
- right to data portability (Article 20 GDPR, where applicable)
- right to object (Article 21 GDPR, in particular for processing based on legitimate interest)
You may exercise your rights by contacting the association at: volleyclubbelair@gmail.com
8. Complaint
If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with the Luxembourg supervisory authority (CNPD):
https://cnpd.public.lu/fr/particuliers/faire-valoir/formulaire-plainte.html