Data protection and your privacy are very important to OneFootball GmbH (hereinafter referred to as “OneFootball”). The collection and use of your personal data takes place exclusively within the framework of the statutory provisions of the applicable data protection law. With this data protection declaration, OneFootball informs about the processing of personal data on the OneFootball websites and web applications (hereinafter collectively referred to as "websites").

1. Contact person
The contact person and so-called person responsible for the lawfulness of the processing of your personal data within the meaning of the data protection laws is

OneFootball GmbH
Greifswalder Str. 212
D-10405 Berlin

If you have any questions about data protection at OneFootball, you can contact our company data protection officer at any time. This can be reached at the above postal address and by email at The data protection officer is also available for questions about the transfer to third countries or provides copies of guarantees in the form of standard data protection clauses. For general suggestions or questions, you can also send an email to OneFootball at

2. Scope
This data protection declaration applies to all OneFootball websites with all online offers, content, functions and services - even if they only contain seasonal, short-term or event-related offers (e.g. for the European or World Cup, special features).
If you are interested in data protection in our apps, please read the data protection declaration (apps).

3. Processing of personal data
Personal data is processed when you only visit our website (informational use) and when you enter data or click buttons (use with interaction).
Personal data is information about factual or personal circumstances of a specific or identifiable natural person. This primarily includes information that allows conclusions to be drawn about your identity, for example your name, address, email address or your favorite club.
Statistical data that we collect, for example, when you visit our website and that cannot be directly associated with you, do not come under the term of personal data.

3.1. Informational use
If you only use the website for informational purposes, i.e. if you have not logged in or otherwise provide us with information, we do not collect any personal data, with the exception of the data that your browser transmits to enable you to visit the website. These are:

  •  IP address
  • Date and time of the request
  • Time zone difference to Greenwich Main Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • amount of data transferred in each case
  • Website from which the request came
  • Browser
  • Operating system and its interface
  • Language and version of the browser

The IP addresses of our users are deleted after the end of their use or anonymized after seven days at the latest. In the case of anonymization, the IP addresses are changed in such a way that the individual details about personal or factual circumstances can no longer be assigned to a person or can only be assigned to a person with a disproportionately large amount of time, costs and manpower. The data in the so-called log files are evaluated by us in an anonymized form in order to further improve our websites and make them more user-friendly, as well as to find and correct errors more quickly. In addition, they are used to control server capacities so that appropriate data volumes can be made available if necessary.
The data processing is necessary so that you can first find out about the content of OneFootball. The legal basis is Art. 6 Paragraph 1, f.) GDPR, based on OneFootball's legitimate interest in making users aware of our content. The processing of the data mentioned is necessary for the provision of the content. Otherwise you will not be able to use the website as desired.

3.2. Use with interaction
In contrast to our apps, there are few options for interaction on our websites. At the moment you can primarily take part in surveys. The data is only saved using cookies (see section 6 below), not assigned to your person and is deleted as soon as the survey is removed from the respective website (which may differ depending on the survey).

3.3 Processing when using the feedback option
If you would like to provide us with feedback via the corresponding function of the website, we will use Usabilla, a product by Surveymonkey (SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland) to find out more about your request, if necessary to offer suitable articles in our FAQ and, if the appropriate answers are not included, to classify your request into categories in order to be able to process them more quickly.
If you use the website's feedback option, only your email address, IP address and your details will be processed. The data just given, excluding your IP address, will be transmitted to our service provider Zendesk (an offer from Zendesk Inc., 1019 Market St, San Francisco, CA 94103, USA). If you contact us directly by email, your email address will only be processed by Zendesk.
In the event that personal data is processed outside of the European Union, the provider has undertaken to comply with the EU data protection standards. With Surveymonkey we have also agreed so-called "standard contract classes". Zendesk is also one of the few software providers worldwide that have introduced so-called binding corporate rules company-wide, which have been approved by the EU Commission, Article 47 GDPR. Further information on data protection can be found in the data protection guidelines of Zendesk and Surveymonkey. All of the data collected will be deleted at Zendesk within 6 months. At Surveymonkey, we delete the data after just one month.
The legal basis for the processing operations just described for the use of Usabilla / Surveymonkey is your consent in accordance with Art. 6 Paragraph 1, a.) Of the General Data Protection Regulation with regard to the use of Zendesk, our legitimate interest according to Art. 6 Paragraph 1 f of the General Data Protection Regulation, based on our legitimate interest in improving our product and being accessible to our users.

3.4 Data processing in competitions
a) Competition is the sole responsibility of OneFootball
For the purposes of participating in the competition, the data required for participation will be collected and stored by OneFootball. This data is used for the following purposes: Implementation of the competition, including notification of the prize, clarification of the shipping address if necessary. Unless otherwise stated, all data collected will be deleted after the competition has ended.
b) Competition of a competition partner or competition in cooperation with a competition partner
For the purposes of participating in the competition, the data required for participation will be collected and stored by OneFootball. This data is used for the following purposes: Implementation of the competition, including notification of the prize, clarification of the shipping address if necessary. If the competition partner is responsible for the organization and processing of the prize (e.g. shipping, voting, registration), OneFootball will pass on the necessary data to the partner. The winner will be explicitly informed of this again.
If it is possible to subscribe to a newsletter, the e-mail address is also collected for the purpose of sending a confirmation e-mail. OneFootball collects the data required for the respective newsletter registration for the competition partner and, if you have given your consent, forwards it to the competition partner.


4. Facebook fan pages
We run fan pages on Facebook to get in touch with our fans, to inform them about content and to keep you generally up to date. When you use our Facebook pages, your data is processed. In addition to data processing, if you comment on posts or write us messages, data processing takes place on the fan pages with the help of which overviews and insights into the use of our Facebook pages are created (you can find more information here). The usage behavior of the users of our pages is evaluated in order to place advertisements inside and outside of Facebook. Facebook Ireland Limited (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) and OneFootball GmbH are jointly responsible for this data processing (see agreement on joint processing of personal data). At least part of the processing of the data by Facebook takes place outside the EU. In the event that personal data is processed outside of the European Union, the provider has undertaken to comply with the EU data protection standards.
The processing of the data for the purposes just mentioned is based on our legitimate interest in contacting you as a user and being able to communicate, as well as on our legitimate interest in financing our offer with advertisements, Art. 6 lit f) GDPR.
Further information can be found on the data protection pages. You can explain your objection to the data processing here.
With regard to your rights such as information, deletion and correction, based on the data collected about your usage behavior, we recommend that you contact Facebook directly, as the processing takes place there.


5. Online shop

5.1 Data processing when ordering merchandise
We run an online shop for ordering merchandise. When you make a purchase through this online shop that is trying to make a purchase, we collect certain information from you, including your name, billing and delivery address, payment information, telephone number and email address.
We use Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) to run our online store - you can read more about how Shopify does yours in Shopify's privacy policy uses personal data.

5.2 Payment service providers
We use the following payment service providers, to whom your data will only be passed on for the purpose of payment processing. The data is passed on on the basis of Art. 6 Para. 1 b) GDPR. Processing of the contract and payment is not possible without forwarding your data.

  • Credit card, your data will be processed by the respective credit institution.
  • Shopify Payments (Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland), you can find more information on data protection here.
  • PayPal, a service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg - here you can find information on data protection at PayPal.
  • EPS, a service of the Study Society for Cooperation in Payment Transactions GmbH Frankgasse 10/8, 1090 Vienna, information on data protection can be found here.
  • iDEAL (Currence Holding BV, Beethovenstraat 300, Amsterdam, 1077 Netherlands), information on data protection from iDEAL can be found here,
  • Bancontact, a service of the Bancontact Payconiq Company (Rue d’Arlon 82, 1040-Brussels, Belgium). You can find information on data protection in the data protection declaration from Bancontact.
  • Apple Pay, a service provided by Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014 - Information on data protection when you use Apple Pay can be found in the data protection declaration.
  • To pay with us, you can also use Google Pay, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, information on data protection can be found here.

5.3 Automatic decision making
When providing the services, Shopify uses various machine learning algorithms and forms of automated decision-making. Automated decision-making is used for the following purposes, among others: to prevent risks and fraud by merchants, to support merchants in preventing fraudulent transactions of their customers, to personalize the merchant experience when using our admin area and the app store and to determine the authorization for certain services (such as Shopify Capital). You can find more about this in Section 13 of Shopify's privacy policy.

6. Transfer of personal data
In principle, OneFootball does not pass on your personal data to third parties. The data we collect will only be passed on to third parties if this is necessary to provide the technical functionality of the website or if there is another legal basis for data transfer, for example if you have consented to the processing. Our service providers may only use personal data to fulfill their task. These have been carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly checked by us. Any other use of the information is not permitted and is not carried out by any of the service providers we use.
In addition to the service providers listed separately in this data protection declaration, data can be passed on to individual categories of recipients, namely to companies supporting promotions and special campaigns as well as external consultants and enforcement authorities.


7. Privacy settings and cookies

7.1 Privacy settings
When you visit our website for the first time, you will be presented with a data protection popup where you can choose whether you want to consent to advertising and analysis technologies or not. The website can be used for this data processing without your consent. You can opt out of sharing with all or some partners by clicking on "Info & Settings" on the "Privacy Settings" screen and then selecting "Decline for All". Your consent is therefore voluntary and can be revoked at any time by deactivating the relevant processing or all processing in the window under data protection settings (link is in the footer of the website).
To check the individual processes, please have a look at our partners and processes in the data protection settings. There you will find detailed information about our partners with the links to their respective data protection guidelines and a list of the purposes for which the apps process your data. In the event that personal data is processed outside the European Union, the provider has undertaken to comply with the EU data protection standards or the so-called "standard contractual clauses" have been agreed with the partner, which you can see in the Official Journal of the European Communities . In the event that personal data is transmitted to other countries which, in the opinion of the European Commission, do not have an adequate level of data protection, the so-called "standard contractual clauses" have also been agreed with the partner.
To manage the consent, we use the service of Didomi, a company based at 10 rue Vaudetard, 92130 (Issy-les-Moulineaux), France. We will ask for your consent via a pop-up on the website to disclose information with certain partners and / or for certain purposes. Your choice will be saved on your device and communicated to all partners. The legal basis for this data processing is your consent in accordance with Article 6 Paragraph 1 a) GDPR.

7.2 Cookies
Cookies are small files that are stored on your data carrier and that save certain settings and data for exchange with our system via your browser. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.
Basically, a distinction is made between two different types of cookies, so-called session cookies, which are deleted as soon as you close your browser (= end of the session) and temporary / permanent cookies, which are stored on your data carrier for a longer period or indefinitely. This storage helps us to design our website and makes it easier for you to use it, for example by saving certain entries so that you do not have to repeat them all the time (e.g. saving the language in which the websites were viewed). Analysis methods are also based on cookies (see section 7 below).
You can delete the cookies in the security settings of your browser at any time and configure your browser settings according to your wishes (e.g. the acceptance of third-party cookies or the rejection of all cookies). As a rule, the help function in the menu bar of your web browser shows you how you can reject new cookies and delete those that have already been received. However, we would like to point out that you may then not be able to use all the functions of our website.


8. Analysis method
In order to improve our websites, we use various technologies to analyze usage behavior and evaluate the associated data. This process takes place anonymously or using pseudonyms. In the following section we would like to explain these technologies and the providers used for them in more detail.
OneFootball uses Localytics (a service from Localytics, Inc., 8th Floor, 101 Arch St, Boston, MA 02110, USA). Localytics helps us to analyze your use of the website. Localytics also gives us an insight into the number of users. We consider this data in aggregated form and not the behavior of individual users.
As shown above, you can configure your browser so that it rejects cookies, as described under 6.2.

9. Integration of videos
We have integrated videos into our websites that are stored on YouTube and can be played directly from our websites. YouTube is a group company of Google and a multimedia service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. We integrate the videos with the help of the extended data protection mode.
When you visit our website, YouTube receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether you are logged into YouTube or not. If you are logged in to YouTube, however, your data will be assigned directly to your account. If you do not want that, you have to log out before watching the video.
YouTube saves your data as a user profile and uses it for advertising, market research and the needs-based design of its website. Such an evaluation is carried out even for users who are not logged in. As shown above, you can configure your browser so that it rejects cookies, or you can prevent the collection of the data generated by cookies and related to your use of this website and the processing of this data by Google by changing the Google settings for advertising deactivate the button "Personalized advertising on the web". In this case, Google will only display general advertising that has not been selected based on the information collected about you.
In the event that personal data is processed outside of the European Union, the provider has undertaken to comply with the EU data protection standards. The legal basis is Art. 6 Paragraph 1, f.) GDPR, based on OneFootball's legitimate interest in the integration of video and image content.
The purpose and scope of the data collection by YouTube as well as the further processing and use of your data there as well as your related rights and setting options to protect your privacy can be found in Google's data protection information.


10. Your rights
You have the right to information about the processing of your personal data by us at any time. In this context, we will explain the data processing to you and provide an overview of the data stored about you. If the data stored by us is incorrect or no longer up-to-date, you have the right to have this data corrected. You can also request the deletion of your data. If, in exceptional cases, deletion is not possible due to other legal provisions, the data will be blocked - provided the necessary requirements are met - so that they are only available for this legal purpose. You can also restrict the processing of your personal data if, for example, you doubt the correctness of the data. Under certain conditions, you also have the right to data portability, i.e. we can send you a digital copy of the personal data you have provided on request. In order to assert your rights described here, you can contact the above contact details at any time. This also applies if you would like to receive copies of guarantees to prove an adequate level of data protection.
Your inquiries about the assertion of data protection rights and our answers to them will be stored for documentation purposes for a period of three years and in individual cases for the assertion, exercise or defense of legal claims. The legal basis is Art. 6 Para. 1, f.) GDPR, based on our interest in defending against any civil law claims under Art. 82 GDPR, avoiding fines under Art. 83 GDPR and fulfilling our accountability under Art. 5 GDPR .

You have the right to revoke your consent to us at any time. As a result, we will no longer continue the data processing based on this consent in the future. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal. If we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time for reasons that arise from your particular situation. If you object to data processing for the purposes of direct advertising, you have a general right of objection, which we will implement without giving reasons.

If you would like to make use of your right of revocation or objection, an informal message to the contact details mentioned above is sufficient.

Finally, you have the right to complain to the data protection supervisory authority responsible for us. You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged violation. In Berlin, Germany, the headquarters of OneFootball, the responsible supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.


11. Change of the data protection declaration
We reserve the right to change this privacy policy. The current version is available on our website.

Status: December 2020