This privacy policy explains how FootballSociety handles your personal data. We think it is important that you know what data we collect, why we do so, and what rights you have. These include the right of access, correction, deletion and objection. Please read on for more information about your privacy and how you can exercise your rights.
Version 1.0 — Last updated 27-8-2026
Effective date 27-8-2026
FootballSociety attaches great value to the protection of personal data and the privacy of its users. This privacy policy explains how FootballSociety handles the personal data of users of the platform.
FootballSociety is responsible for the processing of personal data as described in this privacy policy.
For questions about the processing of personal data or this privacy policy, you can contact us using the email address above.
FootballSociety processes personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy legislation.
FootballSociety attaches great value to the protection of your personal data. In this privacy policy we explain how we handle your data and what rights you have.
Under the GDPR you have various rights, including the right to:
Want to exercise one of these rights? Contact us at team.footballsociety@outlook.com.
This policy applies to all users and is updated regularly. We recommend checking the latest version on our website.
This privacy policy applies to the processing of personal data by FootballSociety in connection with the use of the FootballSociety platform.
The privacy policy applies to all users of FootballSociety and covers the use of the website, application and other digital services offered by FootballSociety.
This privacy policy covers, among other things:
This privacy policy applies both to personal data provided directly by users and to personal data collected automatically during use of the platform or obtained via third parties.
This privacy policy does not apply to websites, applications, services or other external environments of third parties that FootballSociety refers to or that are accessible via FootballSociety.
In this privacy policy, the following terms have the meaning set out below:
Which personal data FootballSociety processes depends on how and with which functionalities a user uses the platform. You control the data you share and can adjust it in your profile settings.
Where required under applicable laws and regulations, FootballSociety may process additional data from sellers, including business data, VAT data, fiscal data, identification data and data necessary for seller verification.
FootballSociety processes authentication data necessary to keep an account securely accessible. Passwords are not stored in readable form.
When creating and using an account, the following data may be processed, among others:
Users can complete their profile themselves. The following data may be processed, among others:
When a user buys or sells products, the following data may be processed, among others:
For payments, data necessary to carry out the payment may be processed. Which data FootballSociety itself receives depends on the payment method and payment service provider used.
FootballSociety aims to have payment data processed as much as possible via specialised payment service providers and to store no more payment data than necessary.
To fulfil an order, the following data may be processed, among others:
When users contact FootballSociety or communicate with other users, messages, comments, complaints, questions and other communications may be processed, among other things.
When using the platform, technical data may be collected automatically, such as:
When users post content on FootballSociety, personal data may be included. This may relate, for example, to:
Users are themselves responsible for any personal data of third parties they include in their content.
FootballSociety collects personal data directly from users, automatically during use of the platform and, where necessary, via third parties. Processing is based on one or more lawful grounds as meant in the GDPR.
Personal data may be provided directly by the user, for example when the user:
Certain technical data may be collected automatically when a user visits or uses the platform. Cookies, log files and similar techniques may be used for this purpose.
FootballSociety may receive personal data from external parties when this is necessary to provide certain services.
This may relate, for example, to:
FootballSociety processes this data only insofar as it is necessary and a valid lawful ground exists.
FootballSociety processes personal data for various purposes. We only process personal data when this is necessary for the relevant purpose and a valid lawful ground exists. We process your data, among other things, to:
Personal data may be processed, among other things, for:
FootballSociety only processes personal data when a lawful ground as meant in the GDPR exists. You have the right to know on which ground we process your data. You can withdraw consent at any time via your account settings (where a functionality for this is available) or by contacting us at team.footballsociety@outlook.com.
Depending on the processing, FootballSociety may rely on the following grounds:
Personal data may be processed when this is necessary to perform a contract with the user.
This may relate, for example, to:
FootballSociety may process personal data when this is necessary to comply with a legal obligation.
This may relate, for example, to:
FootballSociety may process personal data when this is necessary for a legitimate interest of FootballSociety or a third party, provided the interests and fundamental rights of the user do not outweigh them.
This may relate, for example, to:
When FootballSociety relies on a legitimate interest, a balancing of interests is carried out where necessary.
For certain processing, FootballSociety may ask for consent.
This may relate, for example, to certain:
A user can withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
This chapter explains which personal data FootballSociety processes, for what purpose this data is processed and on which ground this processing is based. This makes clear how the purposes described in chapter 6 and the lawful grounds described in chapter 7 relate to each other.
FootballSociety processes personal data only for clearly defined purposes and only when a valid ground exists. Depending on the nature of the processing, this may be necessary, for example, to perform a contract with a user, to comply with a legal obligation, to pursue a legitimate interest of FootballSociety or to obtain the user’s consent.
The ground stated for each processing determines why FootballSociety may lawfully process this personal data.
This ground is used when the processing is necessary to perform the contract with the user. This applies, for example, to creating an account, facilitating marketplace transactions and processing orders.
FootballSociety processes certain personal data because this is legally required. This may relate, for example, to financial administration, fiscal obligations and retaining certain data for legal purposes.
FootballSociety may process personal data when this is necessary for a legitimate interest of FootballSociety or a third party, provided the interests, rights and freedoms of the user do not outweigh them. Examples include fraud prevention, security, preventing abuse and improving the safety of the platform.
When FootballSociety relies on a legitimate interest, it takes into account the necessity and proportionality of the processing and the user’s reasonable expectations.
Consent is required for certain processing. This may apply, for example, to non-essential cookies and certain forms of marketing communication. When consent is requested, the user may freely give or refuse it and withdraw it later.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.
For some processing, the applicable ground depends on how FootballSociety deploys the relevant technology. This applies in particular to analytics, cookies and comparable tracking technologies.
FootballSociety distinguishes between technologies that are necessary for the functioning of the platform and technologies used, for example, for analysis, personalisation or marketing. Non-essential technologies are only deployed when a valid ground exists, including consent where required by applicable laws and regulations.
More information on the use of cookies and comparable technologies is included in the FootballSociety Cookie Policy.
In certain situations, personal data may be processed for multiple related purposes. However, FootballSociety does not use data for new, incompatible purposes without an appropriate lawful ground.
When processing is necessary for multiple purposes, FootballSociety assesses per purpose which personal data is necessary and which lawful ground applies.
The above overview should be read in conjunction with chapter 6 (Purposes of processing) and chapter 7 (Lawful grounds) of this privacy policy. Together, these chapters provide insight into which personal data FootballSociety processes, why this happens and on what legal basis.
FootballSociety has a social character. Users can therefore make certain information public or visible to other users. You can decide for yourself which information you share publicly via your profile settings. We recommend dealing with this information carefully.
When you post information, photos, stories, comments, collections, advertisements or other content publicly on FootballSociety, this data can be viewed by other users and, depending on the functionality, by non-registered visitors. You should therefore not publish personal data that you do not wish to make public.
Depending on the functionalities and privacy settings of the platform, this may relate, among other things, to:
Data necessary for a transaction, such as payment and shipping data, is not placed publicly on a user’s profile.
Users should be aware that information they post publicly can be viewed, stored or shared by other users. Users should therefore deal carefully with the information they post on their profile or within the community.
Where technically possible, FootballSociety offers settings that allow users to determine which information is publicly visible.
When a user deletes public content, FootballSociety will delete or make this content inaccessible within a reasonable period. It is possible that technical copies or backups temporarily remain.
When users transact with each other via the FootballSociety Marketplace, personal data necessary to carry out the transaction is processed. We share your data with the other party only when necessary for the transaction, and you always have control over which data is shared.
When making a purchase, the following data may be processed, among others:
When making a sale, the following data may be processed, among others:
In facilitating transactions, FootballSociety processes, among other things:
FootballSociety shares only the personal data necessary to carry out a transaction.
When, for example, a football shirt must be shipped, it may be necessary to share the buyer’s name and delivery address with the seller or a shipping party involved. See further information on data sharing in the user agreement.
Payment data is not shared with other users without necessity.
Users may use personal data received through a transaction only insofar as necessary for the relevant transaction and any legal obligations.
FootballSociety may retain data about transactions for as long as necessary for the execution and administration of the transaction, handling any complaints or disputes, preventing fraud and complying with legal obligations.
The specific retention periods are further detailed in the Retention periods chapter of this privacy policy.
FootballSociety offers users the ability to post content on the platform themselves. This includes, among other things, photos, videos, texts, stories, comments, advertisements, football shirt collections and other contributions.
You are yourself responsible for the content you post and can determine who can see it via your privacy settings.
When posting user content, FootballSociety may process personal data that is part of this content. This may be, for example, a username, profile picture or other information the user themselves links to the content.
The user is themselves responsible for the personal data of third parties that appears in user content. Users should not publish personal data of other persons when they have no valid ground or consent to do so.
User content may be publicly visible to other users, depending on the relevant functionality and privacy settings.
FootballSociety may process user content to make it technically available, display it to other users, moderate it, secure it and make the platform function.
When a user deletes content, this content may remain in backups or technical systems for a limited period. When further retention is no longer necessary, the content is deleted or anonymised.
More information about users’ rights regarding their user content is included in the chapter on intellectual property and user content in the general terms and conditions.
FootballSociety may offer functionalities that allow users to communicate with each other, for example via private messages, comments or other community functionalities.
We use your communication data only to support your questions and to secure the platform. You can report or block abuse.
When users use these functionalities, FootballSociety may process data about this communication. This may relate, among other things, to:
This data is processed to enable communication between users and to safeguard the operation and security of the platform.
FootballSociety may inspect or process communication and other relevant data when necessary to investigate fraud, spam, abuse, threats, intimidation, scams or other violations of the general terms and conditions.
When a user reports another user, FootballSociety may use the relevant communication to assess the report.
FootballSociety will not use communication for purposes other than necessary for the service, security, legal obligations or handling reports and disputes, unless another valid lawful ground exists.
FootballSociety offers users the ability to offer and buy football shirts and any other permitted products.
For the Marketplace to function, personal data is processed from both buyers and sellers.
FootballSociety may process data about, among other things:
This data is processed to make the Marketplace function, facilitate transactions, prevent fraud and support users.
FootballSociety may use information about transactions to detect suspicious activity, for example when there are unusual transactions, multiple accounts, abuse of functionalities or other signs of fraud.
FootballSociety may retain certain data about transactions when necessary for legal obligations, administration, fraud prevention or handling disputes.
We share only the data needed for the transaction, such as shipping address and contact details, and inform you about this.
For payments via FootballSociety, external payment service providers may be used. In the case of FootballSociety, this is Stripe.
Depending on the chosen payment method, personal data may be provided to the relevant payment service provider.
This may relate, among other things, to:
Payments are processed by Stripe. FootballSociety receives and processes only the data necessary to carry out, check, refund and administer payments. The processing of payment data by an external payment service provider may also be subject to that party’s privacy policy. The payment service provider may process additional personal data in accordance with its own privacy policy.
When FootballSociety must process a payment, refund or payout, personal data may be exchanged with the relevant payment service provider.
Payments are handled via secure payment methods. We do not store payment data unless necessary for processing.
When a product is purchased via FootballSociety, personal data may be processed to have the product delivered to the buyer.
For this, the following data may be processed, among others:
This data may be shared with the seller and/or a carrier involved when necessary for shipping.
Shipping data may also be used to track an order, handle delivery problems and deal with complaints or disputes.
FootballSociety does not retain shipping data longer than necessary, unless a longer retention period is legally required or necessary.
You can adjust your shipping data and we use it only to ship your order.
FootballSociety may use external parties to enable the platform and its services.
This may involve, among others:
FootballSociety shares personal data only when necessary for the relevant purpose and when a valid lawful ground exists.
FootballSociety does not sell personal data to third parties.
External parties that process personal data on behalf of FootballSociety are, where necessary, designated as processors and must comply with the agreements made with FootballSociety.
We share your data only with reliable partners who comply with our agreements on privacy and security.
FootballSociety may engage external parties that process personal data on behalf of FootballSociety. These parties are called processors.
With processors, where legally required, agreements are made about, among other things:
Processors may process personal data only for the purposes for which FootballSociety engaged them, unless they are themselves independently responsible for processing under the law.
FootballSociety checks where appropriate whether processors apply appropriate technical and organisational security measures.
We make agreements with our processors and can inform you on request who they are.
FootballSociety seeks to process personal data within the European Economic Area (EEA) as much as possible.
However, it may happen that an external service provider processes personal data from a country outside the EEA.
When personal data is transferred outside the EEA, FootballSociety ensures a valid lawful ground and appropriate safeguards exist.
Depending on the situation, use may be made of, for example:
FootballSociety assesses where necessary whether the relevant transfer offers sufficient protection for users’ personal data.
FootballSociety takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, modification, disclosure and other unlawful use.
Depending on the nature of the processing, these measures may consist of:
Access to personal data is limited to persons and parties who necessarily need it for their work.
Although FootballSociety takes appropriate measures, no system can guarantee complete security.
We take technical and organisational measures such as encryption and access control to secure your data.
FootballSociety takes measures to prevent data breaches.
A data breach may arise, for example, from:
When a possible data breach is identified, FootballSociety assesses the nature and scope of the incident and the possible consequences for those involved.
Where legally required, FootballSociety reports a data breach to the Dutch Data Protection Authority.
When a data breach is likely to pose a high risk to the rights and freedoms of those involved, the relevant persons are informed in accordance with legal obligations.
FootballSociety does not retain personal data longer than necessary for the purpose for which it was collected.
The exact retention period may differ per type of personal data.
When determining retention periods, FootballSociety takes into account, among other things:
When data is no longer necessary, it is deleted or anonymised.
Data may still be temporarily available in backups after an account is deleted. This data is deleted according to the regular backup cycle.
Your data is deleted as soon as it is no longer needed, for example your account data after you delete your account.
A user can delete his or her FootballSociety account via the available functionality or by contacting FootballSociety.
After the account is deleted, personal data is deleted or anonymised when it is no longer necessary.
Certain data may be retained longer when necessary due to:
Deleting an account does not automatically mean that all information is immediately removed from all technical systems and backups.
Public user content may, depending on the functionality, be deleted, anonymised or made inaccessible.
Deleting your account is definitive, but some data may temporarily remain in backups.
Under the GDPR, users have various rights regarding their personal data.
Within the legal conditions, a user can:
Not every right can be exercised in every situation. This depends, among other things, on the lawful ground for the relevant processing.
You have the right to access, correction, deletion, objection and data portability. Request this at team.footballsociety@outlook.com.
When FootballSociety uses automated decision-making that has legal or similarly significant effects on a user, the user has the right to request human intervention, express their point of view and contest the decision, insofar as this right applies under the GDPR.
When a user exercises a privacy right, FootballSociety may request additional information to verify the user’s identity.
This is necessary to prevent personal data being provided to an unauthorised person.
FootballSociety requests no more information than necessary to sufficiently establish identity.
When a request is submitted on behalf of another person, FootballSociety may ask for proof that the requester is authorised to act on behalf of that person.
To protect your privacy request, we ask for proof of identity. We handle your request as quickly as possible.
FootballSociety can only carry out a privacy rights request after sufficient certainty about the requester’s identity exists. Where possible, data already known to FootballSociety is used for this. FootballSociety does not request more identifying data than necessary.
A user can submit a request regarding personal data via email: team.footballsociety@outlook.com.
FootballSociety handles requests within the legal deadline.
A response is given within one month in principle. When a request is complex or when multiple requests are submitted at the same time, the period may be extended under the conditions of the GDPR.
When FootballSociety does not carry out a request, the user is informed and, where required, an explanation is given of why the request cannot be carried out.
When a user has a complaint about how FootballSociety handles personal data, the user can contact FootballSociety.
FootballSociety tries to handle complaints as carefully and quickly as possible.
A complaint can be submitted via email: team.footballsociety@outlook.com.
Users can also submit a complaint to the competent privacy supervisory authority. For users in the Netherlands, this is the Dutch Data Protection Authority.
The user does not have to first submit a complaint to FootballSociety before submitting a complaint to the supervisory authority, insofar as the law does not provide otherwise.
FootballSociety uses cookies and similar techniques.
Cookies can be used for:
FootballSociety distinguishes between necessary cookies and cookies that require the user’s consent.
When consent is necessary, it is requested in advance.
Users can adjust their cookie preferences via the available cookie settings.
More information about cookies, the cookies used and the retention periods is included in the FootballSociety Cookie Policy.
FootballSociety may use analytics tools to gain insight into the use of the platform.
This can be used to investigate, for example:
Where possible, data is anonymised or pseudonymised.
When an analytics tool processes personal data for which consent is required, FootballSociety will request consent in advance.
The specific analytics tools and vendors are included in the Cookie Policy and/or the overview of external service providers.
FootballSociety may inform users about:
Where consent is required, FootballSociety requests it in advance.
Users can unsubscribe from commercial communications at any time via the unsubscribe option in the relevant message.
Necessary communications about, for example:
may also be sent when a user has unsubscribed from commercial communications.
FootballSociety may use data to better tailor the platform to users’ interests.
This may relate, for example, to:
FootballSociety may take into account, for example:
Profiling is applied only when a valid lawful ground exists.
When consent is necessary for a specific form of profiling, it is requested in advance.
FootballSociety may in the future use automated systems and artificial intelligence.
This may be applied, for example, for:
When AI is used to process personal data, this happens in accordance with applicable laws and regulations.
FootballSociety will not make decisions based solely on automated processing when these decisions have legal effects on or similarly significantly affect the user, unless this is legally permitted and the legal conditions are met.
When such automated decision-making takes place, users are informed of their relevant rights in accordance with applicable legislation.
FootballSociety may use social media platforms such as Instagram, TikTok, Facebook and other relevant platforms.
Via these platforms, FootballSociety can share content and communicate with users.
When users communicate with FootballSociety via social media, personal data may be processed by both FootballSociety and the relevant social media platform.
The privacy policy of the relevant social media platform also applies to the processing carried out by that platform itself.
When FootballSociety uses social media functionalities or integrations on its platform, information may be shared with the relevant service provider insofar as this is necessary and legally permitted.
FootballSociety is not intended for children under 16. To create and use an account, a minimum age of 16 applies. To use the Marketplace, a minimum age of 18 applies.
The platform is not aimed at processing the personal data of children under 16.
When consent from a parent or legal representative is required for the processing of a minor’s personal data, this consent is obtained in the legally required manner.
FootballSociety seeks to limit the processing of minors’ personal data as much as possible to data necessary for the use of the relevant functionality.
When FootballSociety determines that a child’s personal data has been processed without the required consent, FootballSociety takes appropriate measures to delete this data when no other lawful ground exists.
The FootballSociety platform may contain links to websites, applications and services of third parties.
These external websites may relate, for example, to:
FootballSociety is not responsible for how these external parties process personal data.
Users are therefore advised to review the privacy policy of external websites before providing personal data.
To make FootballSociety function properly, the platform may use external services and technical integrations.
When these services process personal data, an assessment is made of which privacy agreements and legal safeguards are necessary.
FootballSociety seeks to ensure that external parties apply appropriate security measures and do not use personal data for purposes other than those for which they were engaged, unless they have their own legal responsibility for this.
Users who sell football shirts via the Marketplace may need to provide additional personal data.
This may relate, for example, to:
This data may be necessary to:
Certain data may be visible to buyers when necessary for a safe and transparent Marketplace.
FootballSociety shares no more sellers’ personal data than necessary for the relevant purpose.
FootballSociety may process personal data to prevent fraud, scams, abuse and other forms of undesirable behaviour.
This may involve processing, for example:
This processing may be used to, for example:
Where necessary, FootballSociety may temporarily restrict, block or terminate an account in accordance with the general terms and conditions.
Fraud and security data is not retained longer than necessary for the relevant purpose, unless a longer retention period is necessary or legally required.
FootballSociety may derive signals and risk characteristics from account, technical, transaction and behavioural data to detect suspicious activity.
FootballSociety may process personal data when necessary to comply with legal obligations.
This may relate, for example, to:
When FootballSociety is obliged to provide personal data to a competent authority, it will provide only the data necessary under the relevant obligation, unless the law provides otherwise.
FootballSociety may change this privacy policy from time to time.
This may be necessary, for example, due to:
The most recent version of the privacy policy is made available via the FootballSociety platform.
For important changes that may have a significant impact on users’ privacy, FootballSociety will inform users in an appropriate manner.
The top of the privacy policy states when the policy was last changed.
When a change may have a significant impact on the way personal data is processed and consent is required under the GDPR, FootballSociety will request this consent again.
For questions, requests or complaints about this privacy policy or the processing of personal data, you can contact FootballSociety.
Do you have questions or suggestions? Feel free to contact us at team.footballsociety@outlook.com.
Version 1.0 — Last updated 27-8-2026