Loshkarev: The Gatekeeper

1. Responsible and contact person

The contact person and so-called controller for the processing of your personal data when you visit this website within the meaning of the General Data Protection Regulation (GDPR) is:

For the processing of your personal data in connection with the data processes relating to the issuance, sale, transfer and any further transactions of and with respect to the OneFootball Credit tokens (“$OFC Tokens”) as well as all associated actions, the controller, in addition to OneFootball GmbH, will also be:

If you have any questions about data protection in connection with the use of our website, OneFootball support and the OneFootball TV app (hereinafter referred to as OneFootball services) or in connection with the $OFC Token, you can also contact our external data protection officer at any time. This can be contacted at the above postal address and by email at privacy@onefootball.com (keyword: "Attn. data protection officer"). We expressly point out that if you use this email address, the content will not be viewed exclusively by our data protection officer. If you wish to exchange confidential information, we therefore ask that you first contact us directly via this e-mail address.

2. Data processing on our website

2.1 Accessing our website / connection data

Each time you use our website, we process connection data that your browser automatically transmits to enable you to visit the website. This connection data comprises the so-called HTTP header information, including the user agent, and includes in particular

IP address of the requesting device;
Method (e.g. GET, POST), date and time of the request;
Address of the requested website and path of the requested file;
if applicable, the previously accessed website/file (HTTP referrer);
Information about the browser and operating system used;
Version of the HTTP protocol, HTTP status code, size of the delivered file;
Request information such as language, type of content, encoding of content, character sets;
Cookies stored on the end device of the domain called up.

The data processing of this connection data is absolutely necessary to enable the visit to the website, to ensure the permanent functionality and security of our systems and to maintain our website in general for administrative purposes. The connection data is also stored in internal log files for the purposes described above, temporarily and limited in content to what is absolutely necessary, in order to find the cause and take action in the event of repeated or criminal calls that jeopardise the stability and security of our website.

The legal basis for this processing is Art. 6 para. 1 lit. b GDPR, provided that the page visit is made in the course of the initiation or execution of a contract, and otherwise Art. 6 para. 1 lit. f GDPR due to our legitimate interest in enabling website access and the permanent functionality and security of our systems.

2.2 Contact us

You have various options for getting in touch with us. These include the contact form and the e-mail address feedback@onefootball.com . In this context, we process your data exclusively for the purpose of communicating with you.

The legal basis for this processing is Art. 6 para. 1 lit. b GDPR, insofar as your details are required to answer your enquiry or to initiate or execute a contract, and otherwise Art. 6 para. 1 lit. f GDPR due to our legitimate interest in you contacting us and us being able to answer your enquiry.

The data collected by us when you contact us will be automatically deleted after your enquiry has been fully processed, unless we still need your enquiry to fulfil contractual or legal obligations (see section 7 "Storage duration").

2.3 Registration

You have the option of registering with an account for our login area in order to be able to use the full range of functions on our website. We have highlighted the data that you are required to enter as mandatory fields. Registration is not possible without this data.

You will need to enter your e-mail address and password.

The following data may be processed as part of the registration process:

Salutation, gender (optional);
First and last name (optional);
Date of birth (optional);
Profile picture (optional)

3. OneFootball Credit token $OFC

Within the OneFootball Community, users can obtain $OFC Tokens. The issuer of $OFC Tokens is the OneFootball Capital GmbH as described in Section 1 of this Privacy Policy. To acquire $OFC Tokens, users must be part of the OneFootball Community and create a self-custodial OneFootball smart wallet. OneFootball processes the personal data collected from the registration process for the OneFootball Community or, in case of public sale events, from third parties to identify the user of the OneFootball Community accordingly. Such data can typically be name, email address, login credentials, etc. OneFootball links the wallet address of the specific user to the user’s OneFootball Community account. The legal basis for this data processing is OneFootball’s contractual obligations to provide services to the user (Art. 6 (1) (b) GDPR).

To comply with legal regulations, in particular to prevent money laundering and terrorist financing, OneFootball is obliged to verify the identity of the user and match certain data with third-party providers for KYC (“know your customer”) and AML (“anti-money laundry”) purposes. Third-party service providers may conduct KYC processes. The personal data involved in these processes includes, for example, identification documents, proof of residence and risk-based checks. OneFootball may be required to submit regulatory reports to the financial supervisory authority or other authorities. This data processing is based on OneFootball’s legal obligation pursuant to Art. 6 (1) (c) GDPR.

To enable OneFootball’s token-related services, the token and trading data (e.g. transfers, allocations, purchases, sales, timestamps) is processed. The legal basis for this type of data processing is the fulfillment of OneFootball’s contractual obligations towards the user pursuant to Art. 6 (1) lit. b) GDPR. Due to the nature of blockchain technology certain transaction-related data such as wallet addresses and technical metadata may be stored on a public and decentralized blockchain. While no directly identifying information such as names or email addresses is stored on the blockchain, wallet addresses may potentially be linked to the identity of users by third parties. Entries recorded on the blockchain are permanent and cannot be altered or deleted retroactively. Therefore, the rights of erasure or rectification regarding such data may be limited due to the inherent technology of the blockchain.

To ensure the security, stability and availability of the services, OneFootball processes certain technical information such as IP addresses, log files and device information. This also serves to detect and defend against unlawful access or attempted fraud. The legal basis for this type of data processing is OneFootball’s legitimate interest in the secure operation of its services and the avoidance of risks in accordance with Art. 6 (1) (f) GDPR.

4. Use of tools

4.1 Technologies used

This website uses various services and applications (collectively "tools") that are offered either by us or by third parties. These include, in particular, tools that use technologies to store or access information in the end device:

Cookies: Information stored on the end device, consisting in particular of a name, a value, the storing domain and an expiry date. So-called session cookies (e.g. PHPSESSID) are deleted after the session, while so-called persistent cookies are deleted after the specified expiry date. Cookies can also be removed manually.
Web storage (local storage / session storage): Information stored on the end device, consisting of a name and a value. Information in session storage is deleted after the session, while information in local storage has no expiry date and remains stored unless a mechanism for deletion has been set up (e.g. storage of a local storage with a time entry). Information in local and session storage can also be deleted manually.
JavaScript: programming codes (scripts) embedded or called up in the website that, for example, set cookies and web storage or actively collect information from the end device or about the user behaviour of visitors. JavaScript may be used for "active fingerprinting" and the creation of user profiles. JavaScript can be blocked by a setting in the browser, although most services will then no longer work.
Pixel: A tiny graphic automatically loaded by a service that can make it possible to recognise visitors by automatically transmitting the usual connection data (in particular IP address, information about the browser, operating system, language, address called up and time of the call) and, for example, to determine whether an email has been opened or a website visited. With the help of pixels, "passive fingerprinting" and the creation of user profiles can be carried out. The use of pixels can be prevented, for example, by blocking images, such as in emails, although the display is then severely restricted.
TC-String: For providers participating in the Transparency and Consent Framework ("TCF") of the Interactive Advertising Bureau ("IAB"), user preferences recorded in a content management platform are coded and stored in a sequence of letters and numbers, the so-called Transparency and Consent String ("TC-String"). Providers can use this TC string to display targeted advertising to users.

With the help of these technologies and also by simply establishing a connection on a page, it may be possible to create so-called "fingerprints", i.e. user profiles that do not require the use of cookies or web storage but can still recognise visitors. Fingerprints based on the connection setup cannot be completely prevented manually.

Most browsers are set by default to accept cookies, the execution of scripts and the display of graphics. However, you can usually adjust your browser settings so that all or certain cookies are rejected or scripts and graphics are blocked. If you completely block the storage of cookies, the display of graphics and the execution of scripts, our services may not work or may not work properly.

In the following, the tools we use are listed according to category, whereby we inform you in particular about the providers of the tools, the storage duration of cookies or information in local storage and session storage as well as the transfer of data to third parties. We also explain in which cases we obtain your voluntary consent to use the tools and how you can withdraw this consent.