W WOMSO Market

Privacy Policy

Auf Deutsch lesen

Last updated: 12 October 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states as well as other data protection regulations is:

Patrick Balonier
Thielemannweg 7
99885 Ohrdruf OT Gräfenhain
Germany
Email: info@womso-market.com

2. General information on data processing

2.1 Scope of processing

We collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of users' personal data regularly takes place only after the user's consent or where another legal basis permits such processing.

2.2 Legal bases

Where we obtain the data subject's consent for processing operations involving personal data, Art. 6 (1) lit. a GDPR serves as the legal basis. For processing necessary to safeguard a legitimate interest, Art. 6 (1) lit. f GDPR serves as the legal basis.

2.3 Data deletion and storage period

The data subject's personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if the European or national legislator has stipulated this in EU regulations, laws or other provisions to which the controller is subject.

3. Provision of the website and server log files

Each time our website is accessed, our hosting provider automatically collects information that your browser transmits to our server. This includes:

This data is stored in the server log files of our host. Merging this data with other data sources does not take place. Processing is based on Art. 6 (1) lit. f GDPR for our legitimate interest in the technical provision, security and stability of the website.

3.1 Hosting via Cloudflare Pages

This website is hosted on the "Cloudflare Pages" platform of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes technical connection data (in particular the IP address) to deliver the content and protect against attacks. Data transfer to the USA takes place; Cloudflare is certified under the EU-US Data Privacy Framework. A Data Processing Agreement (DPA) based on the Standard Contractual Clauses is in place with Cloudflare. More information: https://www.cloudflare.com/en-gb/privacypolicy/.

4. Embedded third-party content

Fonts and layout styles are served from our own server (resp. the Cloudflare CDN delivering the website). No data is transmitted to Google Fonts or other external font providers.

4.1 Country flag images via flagcdn.com

To display country flags, images are loaded via the public CDN "flagcdn.com". Your IP address is transmitted to the CDN provider in the process. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in technical provision).

4.2 YouTube video thumbnails

Some player profiles show a thumbnail of a highlight video. The thumbnail is loaded from the server i.ytimg.com of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address is transmitted to Google in the process, and a transfer to Google LLC in the USA is possible. Google is certified under the EU-US Data Privacy Framework. The video itself only opens on YouTube after a click. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in an appealing presentation).

4.3 Script library via cdnjs

On the "Watchlist" page, a script library for exporting a spreadsheet file is loaded via cdnjs.cloudflare.com (Cloudflare, Inc.). Your IP address is transmitted to Cloudflare in the process. The legal basis is Art. 6 (1) lit. f GDPR.

5. Cookies and audience measurement

5.1 Cookies

We do not use cookies for advertising or analytics. Only when you log in to your user account is a technically necessary session cookie set that keeps you logged in. It contains a random identifier and is deleted on logout or expires automatically. The legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) lit. b GDPR.

5.2 Audience measurement with GoatCounter

To measure which pages are visited and how often, we use the service GoatCounter, operated by Martin Tournoij, Ireland. The data is stored on servers of Hetzner Online GmbH in Germany and Finland. GoatCounter stores no information on your device (no cookies, no local storage) and does not store IP addresses. It records the page visited, the referring page, browser, operating system, screen size and the country derived from the IP address. No link to an identifiable person is made and no cross-site tracking takes place. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in improving our service). More information: https://www.goatcounter.com/help/privacy.

6. Content about third parties (players and coaching staff)

This platform publicly displays data of professional women's football players and coaching staff. The processing of this data is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in providing a transparent, market-related information platform for professional women's football.

Categories of data processed may include: name, date of birth, nationality, place of birth, position, club affiliation, contract terms, match and goal statistics from official competitions, coaching positions, and publicly available career data. The data is sourced exclusively from publicly accessible sources or own research.

Right to object. Pursuant to Art. 21 GDPR, data subjects have the right to object to the processing of data concerning them at any time. An informal objection by email to info@womso-market.com is sufficient. We will examine the objection and remove the relevant data without delay, unless compelling legitimate grounds for processing override the objection.

7. Contact by email

If you contact us by email, your information (email address, name, content of the message) will be stored for the purpose of processing your inquiry. The legal basis is Art. 6 (1) lit. b GDPR (initiation/performance of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest in answering inquiries). Your data will be deleted as soon as the inquiry has been completed and no statutory retention obligations exist.

7.1 User account, watchlist and notifications

You can voluntarily create a user account. We process your email address, your name, optionally agency and role, and your password, which is stored only in encrypted form (as a hash). We also store the players on your watchlist and the notifications we show you in your account. The data is held in a database of Cloudflare, Inc. (see section 3.1). The legal basis is Art. 6 (1) lit. b GDPR. The data is deleted when you have your account deleted. An informal email to info@womso-market.com is sufficient.

7.2 Sending emails

For emails about your account, such as resetting your password, we use the email service Resend of Plus Five Five, Inc., USA. Your email address, your name and the content of the email are transmitted. A transfer to the USA takes place. The legal basis is Art. 6 (1) lit. b GDPR.

7.3 Agency application form

The agency application form is transmitted to us via the service Formspree of Formspree, Inc., USA. We process the information in the form (in particular agency name, contact person, contact details, VAT identification number, list of represented players and uploaded files such as the logo). A transfer to the USA takes place. The legal basis is Art. 6 (1) lit. b GDPR (initiation of a contract). We keep invoice and contract data for up to ten years in line with statutory retention periods (§ 147 AO, § 257 HGB).

8. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

An informal email to info@womso-market.com is sufficient to exercise these rights.

9. Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. The competent authority for the controller is:

Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI)
Häßlerstraße 8, 99096 Erfurt, Germany
Web: https://www.tlfdi.de

10. Currency and amendments to this Privacy Policy

This Privacy Policy is currently valid and dated April 2026. Due to the further development of the website and offers or due to changed legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current Privacy Policy can be accessed on this page at any time.