Privacy / Datenschutz

Controller

Who is responsible

Website hosting

Cloudflare Pages

This hosting information applies from publication of this Cloudflare-hosted version of the website. The public website at https://infifantino.com uses Cloudflare Pages and Cloudflare’s delivery and security network, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. IONOS continues to provide the email mailbox described below.

Depending on the request and enabled services, connection and request data can include IP addresses, requested URLs, date and time, referrer, user-agent, browser, device and operating-system information, traffic-routing and system-configuration information, response status and security-related signals. Cloudflare also caches public website files to deliver them efficiently; cached content and request or security records have different purposes.

The purpose is reliable page delivery, security, abuse prevention and technical fault analysis. Our legal assessment is that Art. 6(1)(f) GDPR applies: the legitimate interest in providing a secure, stable public website. This is InFIFAntiNo’s assessment, not a legal approval provided by Cloudflare.

Cloudflare’s Self-Serve Subscription Agreement incorporates its Data Processing Addendum for covered personal data. The published DPA is version 6.4, effective 3 April 2026. Cloudflare processes customer logs and transmitted customer content on our behalf, and acts as an independent controller for other processing described in its privacy policy. These roles depend on the data and purpose.

Cloudflare operates globally, including in the United States. It describes reliance on the EU–US Data Privacy Framework where applicable and standard contractual clauses for other relevant transfers or if that framework ceases to apply. The linked documents explain the safeguards.

Cloudflare privacy information ↗Cloudflare Data Processing Addendum ↗Cloudflare Self-Serve Subscription Agreement ↗

Server logs and storage

Technical processing without optional visitor measurement

Retention depends on the data, service and processing purpose. Cloudflare’s privacy policy describes criteria including the purpose, nature and sensitivity of the data, security risks and applicable legal requirements. Its DPA covers processing needed to provide the contracted services. These documents do not establish one universal retention period for all Cloudflare data.

For this public website, Cloudflare Web Analytics and Real User Measurements are disabled. Email Address Obfuscation is disabled. There is no public visitor counter, Google Analytics, first- or third-party tracking pixel, advertising network, affiliate tracking, social-media embed, externally embedded video or project-added browser fingerprinting or newsletter tracking. Google Search Console ownership is verified through a DNS TXT record; no Search Console tracking code is embedded in the website.

The InFIFAntiNo application sets no cookies and does not use localStorage or sessionStorage. Browser Integrity Check and Cloudflare’s standard security protections remain enabled. They can inspect request headers and block or challenge suspicious requests. A security challenge may use cookies, such as cf_clearance to record that a challenge was passed. This conditional security processing is separate from optional visitor measurement.

Any future analytics, embeds, forms, marketing, newsletter or non-essential browser storage require a fresh assessment before activation.

Cloudflare cookie information ↗

Email contact

IONOS Mail Basic

The public mailbox at contact@infifantino.com is provided through IONOS Mail Basic by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS acts as a processor and recipient within commissioned processing for the data needed to operate the mailbox.

If you email us, we process your name if provided, sender address, message content, technical email metadata and any attachments so that we can receive, assess and answer the message.

Providing information by email is voluntary. Without a usable sender address and the information needed to handle the matter, we may be unable to answer the enquiry.

For enquiries aimed at entering into or performing a contract, the legal basis is Art. 6(1)(b) GDPR. Other relevant correspondence is processed under Art. 6(1)(f) GDPR based on the legitimate interest in answering editorial, press, source and correction enquiries. Messages are reviewed after the matter is concluded and deleted if no further factual or legal retention reason applies. Longer storage takes place only where required by law or for the establishment, exercise or defence of legal claims.

IONOS privacy information ↗IONOS AVV information ↗

External destinations

Links and mailto actions

No data is sent to an external source, campaign or petition merely because its link appears on a page. Data is transferred to that third party only when you choose to follow the link. A mailto link opens the email software configured on your device; sending the message uses your own email provider before it reaches the IONOS mailbox.

The petition for a choice of official physical admission tickets is provided on Change.org. When you open the petition, your browser connects to Change.org. Change.org processes the resulting data under its own privacy policy. A signature and the data processing required for it take place on the Change.org platform. InFIFAntiNo receives no form or signature data through its own website.

External sites are governed by their own privacy practices. They open in a new tab and use rel="noopener noreferrer".

Change.org privacy policy ↗

Physical-ticket petition

Supporter information available to the petition starter

The physical-ticket petition is operated on Change.org. Change.org collects signer information under its own privacy policy. According to Change.org’s current information, an individual petition starter may be provided with a signer’s first name, last name, country, postal code, date of signature and optional comment. Change.org states that email addresses and telephone numbers are not provided to an individual petition starter.

Change.org states that the petition starter can download a CSV containing those categories. As of 24 August 2026, InFIFAntiNo has not downloaded a supporter CSV and does not store a supporter list outside Change.org. The source of any supporter information made available to InFIFAntiNo as petition starter is Change.org.

The limited purposes are administration of the petition; reviewing the level and geographic distribution of support; communicating with supporters through Change.org’s own petition-update function; and preparing and, where appropriate, presenting the documented support to the decision-maker or organisation addressed by the petition.

We rely on Art. 6(1)(f) GDPR for the limited processing described in this section. The legitimate interests are administration of the petition, verification and documentation of support, and presenting the petition’s support to the addressed decision-maker. This statement does not claim qualified legal approval of that assessment.

Supporter information is not imported into the InFIFAntiNo Outreach system and is not used for off-platform email contact, direct marketing, fundraising, advertising, profiling, sale or transfer to address brokers, or any purpose unrelated to the petition.

The documented petition support may later be presented to the decision-maker or organisation named in the petition. This does not mean that a complete supporter list has already been transferred to FIFA or another recipient.

InFIFAntiNo currently stores no supporter list outside Change.org. Processing within the platform is initially governed by Change.org’s privacy policy and the relevant account settings. Before any later CSV export, a concrete internal storage, access and deletion rule must be established and this notice must be updated where necessary. Any list later stored outside Change.org may be retained only as long as necessary to administer, deliver and document the petition, or where a legal reason requires retention.

For InFIFAntiNo’s own processing, or a copy later stored by InFIFAntiNo, data-protection requests can be sent to contact@infifantino.com. For Change.org’s independent processing on its platform, its own contact and rights-exercise channels apply. No joint-controller relationship is claimed here.

If a CSV is later downloaded, stored outside Change.org or provided to the addressed decision-maker, this privacy information must be updated and reviewed before or, at the latest, when that changed processing begins.

Change.org supporter-data information ↗Change.org privacy policy ↗

Your rights

Data-protection requests

Subject to the legal conditions, you may request access, correction, erasure, restriction of processing and data portability where applicable. You may object to processing based on legitimate interests. Contact contact@infifantino.com to exercise these rights.

You may also lodge a complaint with a supervisory authority. The authority responsible for non-public bodies in Bavaria is:

InFIFAntiNo does not use visitor data for profiling or solely automated decisions with legal or similarly significant effects. Cloudflare may apply the automated security checks described above. This statement does not describe processing by external sites that visitors choose to open.