1. Purposes of processing
1.1. Processing of personal data you provide
We process personal data that you provide in the context of using certain content and functions on our website or app. For example, if you use the contact form, we process your personal data to respond to your inquiry. The same applies to contact by other means, such as email, messenger or telephone. The legal basis for this processing of your personal data is Art. 6 (1) b) GDPR.
1.2 Creation of FAN.BADGES
If a Creator creates a FAN.BADGE for you, we store it in your Wallet. We generate the respective private key and transfer it to your wallet. We only store the Private Key in plain text in the Wallet App. At MyFS, only an encrypted backup of the respective is stored. The key for decrypting this encryption lies exclusively with you. The legal basis is Art. 6 (1) b) GDPR.
1.3. Purchasing of FAN.COLLECTIBLES
When you buy FAN.COLLECTIBLES, the cryptographic key is stored in your wallet. This will include your blockchain address and other information necessary to complete the transaction. Subsequently, the purchased FAN.COLLECTIBLE will be displayed in your account. The legal basis is Art. 6 (1) b) GDPR.
1.4. Trade with FAN.COLLECTIBLES
This cryptographic key is transferred to the buyer's wallet during a trade. The legal basis for the related processing is Art. 6 (1) b) GDPR as well.
1.5. Member participation via FAN.VOICE
When casting votes via FAN.VOICE, the personal data you provide will be used to conduct polls. When voting via FAN.VOTING, we store this in an audit-proof manner on a blockchain. The legal basis in each case is Art. 6 (1) b) GDPR.
1.6. Log data
1.7. Google Analytics
We use Google Analytics with your consent (Art. 6 (1) a GDPR) to better understand our visitors and their interests and to continuously improve our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“ Google“). Google Analytics allows us to analyze traffic and usage patterns of individual users (without further identifying them) or groups (which offers are used how often, how often users return, how long they stay, from which websites users come, from which regions, etc.). Google acts as our processor. The cookies used for this purpose expire after 14 months.
1.8. Google Web Fonts
1.9. Google Tag Manager
Google Tag Manager is a tag management system provided by Google that we use on our websites. Google Tag Manager allows us to add code snippets, pixels or similar, to our web pages. Google will only process your IP address as a processor and in accordance with the EU standard contractual clauses. Google will not combine your IP address with personal information from other sources. The legal basis is Art. 6 (1) f) GDPR.
1.10. Google Ads
With your consent (Art. 6 (1) a GDPR), we use various Google services for marketing measures.
We use Google Ads to display ads in the Google search engine or on third-party websites. Google Ads can be used to display targeted ads based on the user data available at Google (so-called “target group targeting“). As a website operator, we can evaluate this data by analyzing, for example, which search terms led to the display of our ads. This allows us to optimize our offer and our advertisements.
1.11. Payment service providers
We use PayPal and Stripe as payment service providers. In addition to your IP address and browser data, they have access to your payment data (esp. credit card number). Paypal is an offer of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. The provider of Stripe is Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. The legal basis is Art. 6 (1) b) GDPR.
1.12. Other purposes for which we process your personal data
We process your personal data for:
- fulfill existing and implement new business relationships. We will retain these for the duration of our business relationship. During our business relationship, we may collect contact information, professional qualification data (publications, etc.). Some data is obtained from public sources and websites. Legal basis: Art. 6 (1) b) and f) GDPR.
- To meet our legitimate interests (Art. 6 (1) f) GDPR), including the following:
- Enter into corporate transactions (e.g., restructuring, sale or assignment of assets, merger); and
- to fulfill our legal obligations, court orders or other binding decisions. The legal basis is Art. 6 (1) c) GDPR.
- with your consent (Art. 6 (1) a GDPR) for other purposes, such as subscription to a newsletter; in this case, you have the option to revoke your consent at any time.
2. Recipients of personal data
In addition to the recipients of personal mentioned above, we also use other companies to process personal data on our behalf, for example for hosting, technical support of our website, sending newsletters or for analysis and advertising purposes. Such service providers only process the data on our behalf as so-called processors (Art. 28 GDPR). A processor is in particular our wallet provider Quantoz N.V., Europalaan 100, 3526 KS Utrecht, The Netherlands.
Furthermore, we will share your name and email address as necessary with our cooperation partners, in particular Associazione Calcio Milan and HDR Global Trading Ltd. (BitMEX). This serves the implementation of the cooperation (e.g. for the allocation of rewards).
Furthermore, we transmit personal data to third parties if this is required by law, if this is necessary for the exercise and defense of legal claims or if third parties provide certain services for us (e.g., lawyers, tax consultants).
Insofar as we transfer personal data to third countries outside the EU, we ensure an appropriate level of data protection through contractual measures. You have the right to receive copies of these contracts.
3. Cookies use
Non-required and non-functional cookies (e.g. for marketing purposes), on the other hand, are only processed with your consent. The legal basis for this is Art. 6 (1) a) GDPR.
You can find more information about the cookies set on this website and the possibility to revoke or give your consent here.
4. Retention periods
5. Your rights
You can request information about your stored data. If you have provided personal data on the basis of a contract or consent, you have the right to receive this data in a standard and machine-readable format.
In addition, in justified cases, you can also request the deletion, correction or restriction of the processing of your data.
You can revoke your consent at any time with effect for the future.
You can object to the processing of data processed on the basis of our legitimate interests at any time under the conditions of the GDPR.
6. Contact; complaint to supervisory authority
Please address your questions or concerns regarding the processing of your personal data to:
My Football Space GmbH Richard-Wagner-Str. 7d 60318 Frankfurt, Germany
In case of questions and in case of possible concerns about the data processing, you can also contact a supervisory authority. The responsible supervisory authority for myfs is:
The Hessian Commissioner for Data Protection and Freedom of Information