Privacy

1. Controller and scope

The controller is rocketSPORTS GbR, represented by Nicolai Vollmer and Philipp Huber, Remchinger Str. 4, 75236 Kämpfelbach, Germany. You can contact us by telephone on +49 178 8270493 or by email at info@rocket-sports.de.

This notice covers our IONOS-hosted website at rocket-sports.de and neu.rocket-sports.de, including the protected scouting portfolio. Visits to the former domain rock3t-sports.de are intended to be redirected to this website; connection data technically required for the redirect is covered by the hosting information. The information below reflects the position as at 19 October 2026.

2. Hosting, connection data and security

We use web hosting provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When a page or file is requested, connection data is processed, including the IP address, access time, requested resource, previously visited page and information about the browser, operating system and device.

This processing enables us to deliver the website, maintain its operation and investigate technical problems or misuse. Where personal data is involved, we rely on Article 6(1)(f) GDPR. Our legitimate interest is in providing a stable and secure website.

For this web hosting service, IONOS describes anonymised visitor data, retention for eight weeks and no transfer of this visitor data to third countries. Data processing by IONOS on our behalf is governed by a contract. Further information is available in the IONOS web hosting privacy information.

Transmission is encrypted using HTTPS/TLS. Encryption protects data in transit; it does not replace careful handling of login details and messages.

3. Cookies, local functions and statistics

Our website serves its images and font files from its own web space. Menus, search, filters, the shortlist and selection of a contact topic operate in your browser during your visit. For these functions, the website code does not set cookies or permanently save your selection in local browser storage. Club access uses the session cookie described below.

Club access and session cookie: Visiting /scouting/ sets the RS_SCOUTING cookie. It contains a random session identifier linking your browser to a server-side session. In that session we process form security values, the time the form was made available and, where applicable, your sign-in status and technical sign-in timestamps. The application code does not store the entered password or the contents of an access request in this session.

The cookie has no fixed expiry date and is maintained as a session cookie by your browser. Browsers may restore sessions when reopening windows. Independently, the server-side sign-in expires no later than eight hours after sign-in or after two hours of inactivity; signing out ends the sign-in authorisation. Server-side session files are cleaned up by the hosting service’s PHP session management, which may take place after the sign-in authorisation has expired.

The session enables secure use of sign-in and the request form, particularly protection against forged form submissions. Storage and access on your device that are strictly necessary for these functions fall under Section 25(2), point 2 TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure operation of club access and protection against unauthorised access.

IONOS provides WebAnalytics for statistical analysis and technical optimisation of the website. According to the product documentation, no cookies are used and IP addresses are anonymised immediately after transmission. The information recorded includes the requested resource, access time, referrer and technical device and browser information. Further information: IONOS WebAnalytics.

Where personal data is processed before anonymisation, this serves our legitimate interest in technically providing and optimising the website under Article 6(1)(f) GDPR. The current website code does not include advertising pixels, heatmap services or Google Analytics.

Other storage or access requiring consent may take place only after you have been appropriately informed and have given consent. No cookie consent tool is included for the functionality currently implemented.

4. Contact and preparation for working together

You can contact us by email, telephone, WhatsApp or the portfolio access request form. We process your contact details and message to respond to your enquiry and, where appropriate, prepare for working together.

Requesting portfolio access: The form at /scouting/ requires your name, club, role at the club and email address. Details about the player profile you are looking for, position and timeframe are optional. Submitting the form sends the information to our web server, which forwards it by email to info@rocket-sports.de. We personally review access eligibility and reply to the email address provided. The application code does not maintain an additional enquiry database for this purpose.

We handle access requests from club contacts under Article 6(1)(f) GDPR. Our legitimate interest is in communicating with clubs and scouting teams and controlling access to our portfolio. For other enquiries, Article 6(1)(b) GDPR applies to pre-contractual steps at your own request and performance of a contract, or Article 6(1)(f) GDPR applies to other communication with prospective clients and business partners. Consent may provide a basis under Article 6(1)(a) GDPR for specifically identified additional processing.

Providing form data is not a statutory requirement and does not automatically conclude a contract. Without the marked required information, we cannot process an access request through this form. You can contact us directly instead. Please provide only necessary information and do not submit health data, copies of identity documents or other particularly sensitive information.

An email prepared through an email link or the shortlist is transmitted to us only when you send it from your email application. The information in Section 5 also applies to WhatsApp, Section 6 covers form security, and Sections 8 and 9 cover recipients, retention periods and your rights.

5. WhatsApp and external links

You can contact us using a simple link to WhatsApp. The website itself does not embed a WhatsApp chat. Opening the link takes you to a WhatsApp service. We use the standard WhatsApp app, not WhatsApp Business.

When you contact us, we process the telephone number, profile name where applicable, and messages you provide in order to handle your enquiry. The legal bases in Section 4 and the retention rules in Section 8 apply to our handling of this information.

WhatsApp Ireland Limited additionally processes usage and communication data under its own terms. Processing may also take place outside the EU. Information about recipients, transfers and your settings is available in the WhatsApp privacy information. Alternatively, you can contact us by email or telephone.

Instagram links and other external links lead to separate services. Simply visiting our website does not load embedded social media content. Once you open an external service, its own privacy information applies.

6. Protected scouting portfolio and abuse prevention

The scouting portfolio is intended for authorised club contacts, scouts and sporting directors. In club access, we process the shared access password to verify authorisation and manage sign-in status through the session described in Section 3. The portfolio is additionally protected by IONOS directory protection. This processes a username and password to verify authorisation; your browser may temporarily retain this sign-in. The club access session time limits do not apply to the separate directory protection.

Access protection restricts the group of recipients and protects against unauthorised access. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in access control. The shared access password remains valid until changed; session validity is separate. Section 2 applies to access data processed by the hosting provider.

Protection against automated requests and sign-in attempts: We check an additional form field hidden from human users, the time since the form was made available and a security value linking submission to the session. To limit repeated attempts, we also derive a hash identifier from the IP address and the type of action. Under this pseudonymised identifier, we store a counter and the start of the relevant time window on the server. These counter files do not store the plain-text IP address, password or form contents.

The counting window is 15 minutes for sign-in attempts and 30 minutes for access requests. Counter files that have not been updated for more than one hour are selected for deletion at the next attempt-limit check. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is preventing spam, automated abuse and unauthorised access. No external captcha service is embedded for this purpose.

Search, filters and the shortlist work with the supplied profiles in your browser’s working memory. They do not transmit your search terms, filter choices or shortlisted players to us or permanently save them in local browser storage. We receive the selected players only when you send a prepared email yourself. Please treat profile content as confidential and share login details only with authorised people.

7. Player profiles and AI illustrations

The website and portfolio contain information about female players and AI-created illustrations of real people. Depending on the profile, the information displayed includes name, club, position, shirt number, date of birth, height, preferred foot and nationality. Information and reference images come from materials we used for the design or from publicly available club information.

The purposes are to present our agency’s work and player profiles to the intended recipients. Publicly available information or a photograph is not automatically authorised for every further use. The necessary legal basis and any image rights must be considered separately for each publication; for under-18s, particular attention must be paid to their interests and the necessary involvement of parents or legal guardians.

If you appear in a profile or illustration, you can contact us about the origin, use, correction or removal of your information and images. Details about the illustrations and their labelling are available under AI image information. This labelling does not replace necessary rights or permissions.

8. Recipients and retention periods

Contact and portfolio access enquiries are accessible to the people within our agency dealing with the matter. We use IONOS to provide the form and send requests from the web server; the communication providers used for our email account are involved in receiving and handling them. Other recipients are involved only where a specific disclosure is necessary and lawful, for example as part of working together at your request or because of a legal obligation.

Contact details and messages are retained for as long as needed to handle them or any resulting working relationship. We then delete them unless a statutory retention obligation or another lawful reason for retention applies. Contractual and business records may, in particular, be subject to commercial and tax retention periods. Data needed to establish or defend legal claims may remain necessary during the relevant periods.

We make profile information available for the relevant presentation purpose and review the need to update or delete it when representation or player information changes. Consent may be withdrawn at any time with effect for the future. Other applicable legal bases and retention obligations may still need to be considered.

9. Your rights

Subject to the statutory conditions, you have rights of access to your personal data, rectification, erasure, restriction of processing and data portability under Articles 15 to 20 GDPR. Where processing is based on consent, you may withdraw it at any time with effect for the future under Article 7(3) GDPR. This does not affect the lawfulness of prior processing.

Objection: Where processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. We will then assess whether processing must stop or whether grounds specified by law permit it to continue. You may object to processing for direct marketing at any time without stating such grounds.

You may lodge a complaint with a data protection supervisory authority, in particular where you live, work or suspect an infringement. In Baden-Württemberg, you can contact the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg. For enquiries to us, use the contact details in Section 1.

Our website does not carry out automated individual decision-making with legal or similarly significant effects under Article 22 GDPR. The AI images shown are used for illustration.

10. Further development of the website

New functions may involve additional processing. Before introducing additional forms, newsletters, appointment booking, embedded media, external fonts or further analytics services, for example, information about the relevant service and, where required, a consent solution must be added. This notice does not provide blanket consent to future services.

The current legal texts are provided as local pages. Automatic inclusion of external legal texts is not enabled in this version. When changes are made, we adapt the information to the functionality actually provided.

Last updated: 1 November 2026.