Last updated: 22 July 2026
1.Introduction
BVB International Academy Thailand is a football development programme operated by RIS Swiss Section – Deutschsprachige Schule Bangkok in cooperation with Borussia Dortmund.
RIS Swiss Section – Deutschsprachige Schule Bangkok acts as the data controller for the personal data described in this Privacy Policy.
We respect the privacy of our website visitors, prospective and registered players, parents, legal guardians and other persons who interact with the Academy.
This Privacy Policy explains how we collect, use, disclose, transfer, store and protect personal data in connection with:
- the website bvbintacademyth.com;
- enquiries and trial requests;
- player registrations;
- payment verification;
- team and age-category allocation;
- access to the BVB eAcademy;
- communication through the Academy’s communication platform;
- football training, camps, competitions, trips and events;
- photographs and video recordings; and
- related administrative and organisational activities.
This Privacy Policy is intended to serve as a privacy notice under Thailand’s Personal Data Protection Act B.E. 2562 (2019), commonly referred to as the PDPA.
Where another applicable data-protection law grants additional mandatory rights, those rights will be respected to the extent that the relevant law applies.
2. Data Controller
The data controller is:
RIS Swiss Section – Deutschsprachige Schule Bangkok
BVB International Academy Thailand
6/1 Ramkhamhaeng 184 Road
Bangkok 10510
Thailand
Email: bvb@ris-swiss-section.org
Telephone: +66 2 026 6648
Questions, requests or complaints regarding personal data may be submitted using the contact details above.
3. Persons Whose Data We Process
We may process personal data relating to:
- prospective players;
- registered players;
- trial participants;
- parents and legal guardians;
- emergency contacts;
- website visitors;
- participants in training sessions, camps, competitions, trips and events;
- coaches and authorised Academy personnel;
- volunteers and event helpers;
- persons who contact the Academy; and
- persons who interact with the Academy’s digital communication channels.
Because most Academy players are minors, registrations must normally be completed or authorised by a parent or legal guardian.
4. Personal Data We May Collect
The personal data we collect depends on the relevant programme, service or interaction.
4.1 Player information
We may collect:
- full name;
- preferred name;
- date of birth;
- age;
- gender, where relevant for sporting or administrative purposes;
- nationality;
- school;
- residential area or address;
- football experience;
- current or previous club;
- playing position;
- preferred or assigned age category;
- assigned team;
- registration number;
- uniform or kit size;
- attendance information;
- participation history;
- training and development information;
- match and competition information;
- disciplinary or behavioural records where necessary;
- photographs and video recordings; and
- other information voluntarily provided during registration or participation.
4.2 Parent or legal guardian information
We may collect:
- full name;
- relationship to the player;
- email address;
- telephone number;
- residential or correspondence address;
- preferred language;
- communication history;
- consent records;
- declarations;
- payment status; and
- other information necessary to administer the player’s participation.
4.3 Emergency contact information
We may collect:
- emergency contact name;
- relationship to the player;
- telephone number;
- alternative contact details; and
- information necessary to reach the appropriate person in an emergency.
4.4 Health and safety information
Where necessary to protect the player or other participants, we may collect:
- allergies;
- medical conditions relevant to participation;
- medication requirements;
- existing or previous injuries;
- dietary requirements;
- physical limitations;
- accessibility requirements;
- emergency-treatment instructions; and
- other health-related information relevant to safe participation.
Health information may constitute sensitive personal data. We will process such information only where necessary and where an appropriate legal basis, including explicit consent where required, is available.
4.5 Registration information
The registration process may collect:
- selected programme;
- preferred training location;
- preferred age category;
- registration date;
- season;
- player and parent details;
- declarations and consents;
- acceptance of the Terms and Conditions;
- acceptance of the liability disclaimer;
- acknowledgement of insurance responsibilities;
- payment-related information;
- proof of payment;
- transaction reference;
- registration status; and
- other information necessary to process the registration.
4.6 Payment information
Payments are handled outside the public Website through the payment methods communicated by the Academy.
We may process:
- amount due;
- registration fee;
- training fee;
- payment status;
- payment date;
- bank-transfer reference;
- uploaded payment confirmation;
- invoice or receipt information;
- refund status; and
- relevant correspondence.
The public Website does not itself process or store full payment-card information.
4.7 BVB eAcademy and communication information
After registration and payment verification, information may be processed through the Academy’s BVB eAcademy and communication platform.
This may include:
- player name;
- parent or guardian name;
- email address;
- team;
- age category;
- training schedule;
- attendance information;
- Academy announcements;
- team messages;
- learning and development content;
- training exercises;
- coach communication;
- player-development information; and
- other information necessary to provide the eAcademy and team communication services.
4.8 Photographs, videos and audio recordings
Subject to the relevant consent and legal requirements, we may collect:
- individual photographs;
- team photographs;
- training and match photographs;
- video recordings;
- interviews;
- audio recordings;
- event recordings; and
- photographs or videos submitted by players or parents.
4.9 Website and technical information
When the Website is used, certain technical information may be collected automatically, including:
- IP address;
- browser type;
- browser version;
- device type;
- operating system;
- language settings;
- referring website;
- pages visited;
- date and time of access;
- approximate location derived from the IP address;
- cookie identifiers;
- security logs; and
- diagnostic and performance information.
The exact technical information collected depends on the Website configuration, active service providers and the user’s cookie choices.
4.10 Communications
We may collect information contained in:
- emails;
- contact forms;
- registration forms;
- telephone enquiries;
- social-media messages;
- communication-app messages;
- complaints;
- feedback;
- survey responses; and
- other communications with the Academy.
5. How We Collect Personal Data
We may collect personal data:
- directly from a player;
- from a parent or legal guardian;
- through the Academy’s registration platform;
- through email, telephone or social media;
- during trials, training sessions, camps, matches, competitions, trips or events;
- from authorised coaches or Academy personnel;
- from RIS Swiss Section where relevant to Academy administration;
- through the BVB eAcademy and communication platform;
- through cookies and similar technologies;
- from tournament or event organisers;
- from medical or emergency personnel where necessary; and
- from third parties where the person concerned has authorised the disclosure or where disclosure is otherwise permitted by law.
6. Player Registration System
6.1 Registration provider
Player registration is completed through an external registration platform operated by:
[Registration provider or platform – TBD]
The exact provider name will be added to this Privacy Policy once confirmed.
The registration provider may process personal data on behalf of RIS Swiss Section or in accordance with its own legal responsibilities, depending on the contractual and technical arrangement.
Users should review any additional privacy information presented during registration before submitting personal data.
6.2 Location of the registration database
Personal data submitted through the registration system is saved in secured Amazon Relational Database Service database instances located in the AWS Europe (Frankfurt) Region.
The database location is therefore in Frankfurt, Germany.
Appropriate technical and organisational security measures are used to protect registration information. These may include:
- controlled user access;
- authentication requirements;
- role-based permissions;
- database-security settings;
- encryption in transit where configured;
- backups;
- activity logging;
- system monitoring; and
- access restrictions based on operational responsibilities.
The use of a secured database does not eliminate every possible security risk. However, reasonable measures are taken to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.
6.3 Information collected during registration
The registration system may collect:
- player information;
- parent or guardian information;
- emergency contacts;
- selected programme or age category;
- health and safety information;
- consent declarations;
- acceptance of Academy terms;
- payment status;
- proof of payment; and
- other information necessary to process and administer the registration.
7. Registration, Payment Verification and Team Access Process
The usual registration process is as follows:
- A parent or legal guardian submits the player registration through the designated registration platform.
- The required registration fee and training fee are paid using the payment method communicated by the Academy.
- The Academy reviews the submitted information.
- The Academy verifies receipt of payment.
- The player is assigned to the appropriate age category or team.
- After the registration has been completed and payment has been verified, the parent or legal guardian receives an automated email.
- The automated email contains a link to the relevant age-category or team environment within the BVB eAcademy and communication platform.
Submission of a registration form alone does not automatically provide access to the eAcademy or guarantee final acceptance into a programme.
8. Coachbetter and the BVB eAcademy
8.1 Role of Coachbetter
Coachbetter is the provider of the Academy’s BVB eAcademy and communication platform.
Coachbetter is not the provider through which the initial Academy player registration is completed.
The platform is used after registration and payment verification to support:
- team communication;
- age-category communication;
- training schedules;
- attendance management;
- Academy announcements;
- educational football content;
- player-development resources;
- training exercises;
- coach-to-family communication; and
- other Academy and team-related activities.
8.2 Access to Coachbetter
Parents or legal guardians do not normally receive the relevant team link until:
- the registration has been completed;
- the registration information has been reviewed;
- payment has been received and verified; and
- the player has been allocated to the appropriate age category or team.
The parent or legal guardian will then normally receive an automated email containing the relevant access link.
8.3 Data processed through Coachbetter
Personal data processed through Coachbetter may include:
- player name;
- player age category;
- team;
- parent or guardian name;
- email address;
- contact information;
- attendance information;
- training information;
- Academy and team communications;
- player-development information;
- learning content; and
- other information required to provide the eAcademy and communication services.
Coachbetter may process personal data according to:
- its contractual relationship with RIS Swiss Section;
- its own privacy documentation;
- applicable data-protection legislation; and
- the technical operation of its platform.
Users should review the privacy information provided by Coachbetter when accessing or activating the platform.
9. Purposes of Processing
We may collect, use and disclose personal data for the following purposes.
9.1 Responding to enquiries
We may process personal data to:
- answer questions;
- provide information about Academy programmes;
- explain fees and schedules;
- arrange trial sessions;
- respond to requests; and
- follow up on expressed interest.
9.2 Processing player registrations
We may process personal data to:
- receive and review registrations;
- verify player eligibility;
- determine the appropriate age category;
- allocate a player to a team;
- verify submitted information;
- confirm payment;
- communicate the registration status;
- create administrative records; and
- provide access to the relevant eAcademy environment.
9.3 Administering football programmes
We may process personal data to:
- organise training sessions;
- manage teams;
- administer attendance;
- create training groups;
- organise matches and competitions;
- arrange camps and events;
- issue football kits;
- communicate changes;
- manage coach assignments;
- prepare team lists; and
- support the player’s football development.
9.4 Safety and emergency management
We may process personal data to:
- protect the health and safety of players;
- respond to injuries or emergencies;
- contact parents, guardians or emergency contacts;
- inform medical professionals;
- provide reasonable accommodations;
- manage allergies or medical requirements; and
- assess whether participation can take place safely.
9.5 Payment and financial administration
We may process personal data to:
- issue payment instructions;
- verify payments;
- issue receipts or invoices;
- administer fees;
- process exceptional refund requests;
- maintain accounting records;
- comply with tax and financial obligations; and
- resolve payment questions or disputes.
9.6 Communication with families
We may process contact information to send:
- registration confirmations;
- payment confirmations;
- eAcademy access links;
- training schedules;
- team information;
- changes or cancellations;
- emergency notices;
- administrative reminders;
- event information; and
- other communications necessary for participation.
Operational messages necessary to administer a player’s participation are not treated as optional promotional marketing.
9.7 Marketing communication
Subject to consent where required, we may send information about:
- registration openings;
- future seasons;
- football camps;
- trials;
- tournaments;
- trips;
- special events;
- partner activities; and
- other Academy opportunities.
Marketing consent may be withdrawn at any time.
9.8 Photography and video
Subject to the relevant consent and legal requirements, we may use photographs and videos for:
- the Academy Website;
- official Academy social-media channels;
- RIS Swiss Section communication channels;
- Borussia Dortmund or authorised BVB Academy channels;
- newsletters;
- flyers and brochures;
- event reports;
- presentations;
- promotional videos; and
- other Academy communication materials.
9.9 Website operation and security
We may process technical data to:
- operate the Website;
- maintain security;
- prevent misuse;
- identify technical problems;
- manage cookies;
- improve performance;
- analyse general Website usage; and
- comply with legal or technical requirements.
9.10 Legal and organisational requirements
We may process personal data to:
- comply with legal obligations;
- establish, exercise or defend legal claims;
- manage complaints;
- investigate misconduct;
- enforce Academy rules;
- maintain safeguarding records;
- cooperate with competent authorities;
- manage insurance matters; and
- protect the rights, safety and property of the Academy and other persons.
10. Legal Bases
Depending on the relevant processing activity, we may rely on:
- consent;
- explicit consent for sensitive personal data where required;
- steps taken at the request of a person before entering into an agreement;
- performance of an agreement;
- compliance with a legal obligation;
- protection of vital interests;
- legitimate interests;
- establishment, exercise or defence of legal claims; and
- another lawful ground permitted by applicable law.
Where we rely on legitimate interests, we consider whether the processing is necessary, proportionate and compatible with the rights of the person concerned.
11. Personal Data of Minors
The Academy primarily provides football programmes for children and young people.
A registration for a minor must be completed or authorised by a parent or legal guardian.
The person submitting the registration confirms that they:
- have authority to register the player;
- have authority to provide the player’s personal data;
- have authority to make the relevant declarations;
- have provided accurate information;
- have informed the player in an age-appropriate manner where appropriate; and
- will notify the Academy if relevant information changes.
Where consent is required, consent relating to a minor will be obtained in accordance with applicable law. Depending on the player’s age and legal capacity, consent may need to be provided by:
- the parent or legal guardian;
- the player;
- or both.
A child should not independently submit personal data without the knowledge and involvement of a parent or legal guardian.
12. Required and Optional Information
Some personal data is required to:
- process a registration;
- determine age eligibility;
- allocate the player to a team;
- communicate with the family;
- confirm payment;
- protect participant safety;
- provide access to the eAcademy; or
- comply with legal and administrative requirements.
Where required information is not provided, we may be unable to:
- process the registration;
- confirm the player’s place;
- provide access to the team environment;
- allow participation; or
- provide a particular service.
Optional information will be identified as optional where reasonably practical.
13. Disclosure of Personal Data
We do not sell personal data.
Where necessary, personal data may be disclosed to:
- authorised employees of RIS Swiss Section;
- Academy managers;
- authorised coaches;
- administrative personnel;
- authorised IT personnel;
- Borussia Dortmund and authorised BVB Academy entities where relevant to an official programme;
- the registration-system provider;
- Amazon Web Services as cloud-infrastructure provider;
- Coachbetter as provider of the eAcademy and communication platform;
- payment and banking service providers;
- tournament, competition and league organisers;
- venues and programme partners;
- travel and accommodation providers for Academy trips;
- insurance providers;
- medical or emergency services;
- IT, hosting, email and cloud-service providers;
- professional advisers;
- auditors;
- government authorities;
- courts;
- law-enforcement bodies; and
- other parties where disclosure is authorised or required by law.
Recipients should receive only the personal data reasonably necessary for their function.
14. International Data Transfers
Personal data may be processed or stored outside Thailand.
In particular:
- registration information is stored in Amazon RDS database instances in Frankfurt, Germany;
- Coachbetter or its service providers may process data in other jurisdictions;
- information may be shared with Borussia Dortmund or authorised BVB Academy entities outside Thailand;
- cloud, email and technology providers may operate internationally; and
- international trips or tournaments may require information to be shared with overseas organisers.
Where personal data is transferred internationally, we will take reasonable steps to ensure that:
- the transfer is permitted by applicable law;
- an appropriate level of protection exists;
- contractual, technical or organisational safeguards are used;
- the recipient is subject to appropriate confidentiality and security obligations; or
- another lawful transfer condition applies.
15. Data Security
We use reasonable technical and organisational measures intended to protect personal data against:
- unauthorised access;
- unlawful use;
- unauthorised disclosure;
- accidental loss;
- alteration;
- destruction;
- misuse; and
- other security risks.
Measures may include:
- access controls;
- user authentication;
- role-based permissions;
- password protection;
- secure database configurations;
- encryption in transit where configured;
- backups;
- logging;
- confidentiality obligations;
- system monitoring;
- staff responsibilities; and
- security procedures.
No electronic system or internet transmission can be guaranteed to be completely secure.
Users should avoid sending unnecessary sensitive personal data through ordinary, unsecured email.
16. Personal Data Breaches
If a personal data breach occurs, we will:
- assess the nature of the incident;
- investigate the affected systems and data;
- take reasonable measures to contain and address the incident;
- assess the possible consequences for affected persons; and
- document the incident where required.
Where required by applicable law, we will notify the competent authority and affected individuals within the legally prescribed period.
17.Data Retention
We retain personal data only for as long as reasonably necessary for the relevant purpose.
Retention periods may depend on:
- the duration of the player’s participation;
- the relevant football season;
- the nature of the programme;
- safeguarding requirements;
- legal limitation periods;
- accounting and tax requirements;
- insurance obligations;
- complaints or disputes;
- consent status; and
- historical or archival purposes.
As a general guideline:
- enquiries and incomplete registrations may be retained for up to two years;
- player registration and programme records may be retained during participation and for a reasonable period afterwards;
- payment, invoice and accounting records may be retained for the legally required period;
- health and emergency information will be reviewed and removed when it is no longer required;
- consent records may be retained as evidence of the consent provided;
- communication records may be retained where necessary for administration, safeguarding or dispute resolution; and
- photographs and published materials may remain in historical reports or archives, subject to applicable rights and consent arrangements.
When data is no longer required, it may be:
- securely deleted;
- anonymised;
- aggregated; or
- securely archived where continued retention is justified.
18. Rights of Data Subjects
Subject to applicable law and relevant exceptions, a data subject may have the right to:
- request access to personal data;
- request a copy of personal data;
- request correction of inaccurate or incomplete data;
- request deletion, destruction or anonymisation;
- request restriction or suspension of processing;
- object to certain processing;
- withdraw consent;
- request data portability where applicable;
- request information about the source of personal data;
- request information about recipients;
- lodge a complaint with the competent authority; and
- request information concerning international data transfers.
A parent or legal guardian may exercise relevant rights on behalf of a minor where legally authorised.
Requests may be sent to:
bvb@ris-swiss-section.org
We may need to verify:
- the requester’s identity;
- the requester’s authority;
- the identity of the relevant player; and
- the scope of the request.
Certain data may continue to be retained where required by law or where another lawful ground applies.
Withdrawal of consent does not affect processing that took place lawfully before the consent was withdrawn.
19.Marketing Preferences
A person may withdraw consent to optional marketing communications at any time by:
Withdrawal from marketing does not prevent us from sending necessary operational messages regarding:
- registration;
- payment;
- training;
- team organisation;
- safety;
- programme changes; or
- participation.
We may retain limited information on a suppression list to ensure that the marketing preference is respected.
20. Cookies and Similar Technologies
The Website may use cookies and similar technologies.
These may include:
- essential cookies;
- security cookies;
- preference cookies;
- analytics cookies;
- embedded-media technologies; and
- marketing technologies, if activated.
Non-essential cookies should be activated only in accordance with applicable consent requirements.
Additional information is provided in the Website’s Cookie Policy.
21. External Platforms and Websites
The Website and Academy communications may contain links to:
- the external registration platform;
- Coachbetter;
- Facebook;
- Instagram;
- Borussia Dortmund;
- RIS Swiss Section;
- tournament platforms;
- payment providers; and
- other third-party services.
External providers may collect personal data under their own privacy notices and terms.
We do not control independent third-party websites or platforms and are not responsible for their independent data-processing practices.
22. European and Swiss Visitors
RIS Swiss Section and BVB International Academy Thailand are based in Thailand and primarily offer football activities in Thailand.
The European Union General Data Protection Regulation, the Swiss Federal Act on Data Protection or other foreign privacy legislation may apply in limited circumstances depending on:
- the location of the person concerned;
- the service offered;
- the nature of the processing; and
- the relevant legal requirements.
Where such legislation applies, we will respect the mandatory rights and obligations arising from that legislation.
23. Complaints
We encourage any person with a privacy concern to contact us first so that we can attempt to resolve the matter.
Complaints may be sent to:
BVB International Academy Thailand
Email: bvb@ris-swiss-section.org
A person may also have the right to submit a complaint to Thailand’s Personal Data Protection Committee or another competent supervisory authority.
24. Changes to This Privacy Policy
We may update this Privacy Policy where:
- Academy activities change;
- the registration provider changes;
- technology systems change;
- new service providers are introduced;
- legal requirements change; or
- our data-processing practices are updated.
The revised version will be published on the Website with an updated revision date.
Material changes may also be communicated by email, through the eAcademy or by another appropriate method.
25. Contact
For questions, requests or concerns concerning this Privacy Policy or the processing of personal data, please contact:
RIS Swiss Section – Deutschsprachige Schule Bangkok
BVB International Academy Thailand
6/1 Ramkhamhaeng 184 Road
Bangkok 10510
Thailand
Email: bvb@ris-swiss-section.org
Telephone: +66 2 026 6648
