This website is operated by two joint controllers within the meaning of Art. 26 GDPR:
(1) [Full name of the operator], The Football Pathway, [Street and house number],
[Postal code] [City], Germany (also the service provider named in the Legal Notice).
(2) Christopher Nwabuisi Ezeala, reachable via the email address given below.
Both jointly determine the purposes and means of the processing of the data collected through this website. In an agreement pursuant to Art. 26 GDPR we have set out who fulfils which obligations, in particular who handles requests from data subjects and who fulfils the information obligations. We will make the essential content of this agreement available to you on request. You may exercise your rights against either of the two controllers. The central point of contact is: info@thefootballpathway.eu.
This policy informs you about which personal data we collect and how we use it. Personal data is any data that can be used to identify you personally. This website is transmitted in encrypted form (SSL/TLS, recognisable by the https in the address bar) so that content you send cannot be read by third parties.
This website is hosted by Vercel (Vercel Inc., USA). When the site is accessed, Vercel processes technically necessary access data (see section 4). The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR). As Vercel is a US provider, a transfer to the USA may take place; appropriate contractual safeguards are in place with the provider for this (see section 11).
When you visit the website, information that your browser transmits is automatically recorded: IP address, date and time of access, the page accessed, the browser and operating system used. This data is used exclusively for the technical provision, security and error analysis of the site and is not combined with other data. The legal basis is Art. 6 (1) (f) GDPR.
To ensure a consistent appearance we use fonts (Google Fonts) that are loaded from Google servers when the page is accessed. In the process your IP address is transmitted to Google (provider for the European area: Google Ireland Limited). The legal basis is our legitimate interest in an appealing presentation (Art. 6 (1) (f) GDPR). [It is more privacy-friendly to embed the fonts locally so that no connection to Google is established. This is technically easy to implement before launch and is recommended.]
When you register for a camp or apply for the USA through a form, we process the details you enter into the form. Depending on the form, these are:
First and last name, date of birth, email address and phone number, sporting details (position, height, weight, club, class year, years of experience), t-shirt size, a link to a highlight tape, an emergency contact, and for the USA application the selection of schools or programs. For minors, additionally the name and contact details of a parent or legal guardian as well as their consent.
We process this data in order to organise the camps, evaluate players and place them with programs and schools, and to get in touch with you. The legal bases are your consent (Art. 6 (1) (a) GDPR, in the case of children in conjunction with Art. 8 GDPR) and the initiation and performance of a contractual relationship (Art. 6 (1) (b) GDPR).
A large part of our target group is under age. Players under 18 may only register with the consent of a parent or legal guardian. This consent is requested separately in the form and logged with a time stamp. Without this consent we do not process the data of minors. Parents or legal guardians may withdraw their consent at any time with effect for the future (see section 16).
A core part of our offering is placing suitable players with schools and programs in the USA. For this we may pass on profile data (for example name, sporting details and highlight tape) to schools, coaches or programs in the USA. The USA is a third country without a level of data protection generally recognised as equivalent by the EU. Such a transfer only takes place after your separate, explicit consent, and for minors additionally with the consent of the parents. Before you give consent we inform you of the possible risks of a transfer to the USA. The legal basis is Art. 49 (1) (a) GDPR (explicit consent to the transfer of data to a third country). [Have this section and the exact form of the consent reviewed legally.]
Photos and details of players only appear on this website after separate consent. We show exclusively the first name, position and class year, never the last name. For minors, parental consent is also required for this. Consent can be withdrawn at any time; we will then remove the entry from the website.
To provide our offering we use carefully selected service providers who process data on our behalf. Where required, data processing agreements are in place with them (Art. 28 GDPR). In detail:
Forms: Tally (provider in the EU/Belgium).
Automation: Make (operated by Make.com, EU data centre).
Spreadsheets and email: Google Workspace (Google Ireland Limited, Ireland; parent company in the USA).
Website content: Airtable (Airtable Inc., USA).
Hosting: Vercel (Vercel Inc., USA).
With the US providers a transfer of data to the USA may take place. We base this on the contractual safeguards of the providers (the EU Commission's Standard Contractual Clauses and, where applicable, their certification under the EU-US Data Privacy Framework). [Take the exact company addresses and the current basis for the transfer from the providers' privacy notices and review them before launch.]
The website itself does not set any cookies for advertising or analytics purposes. Technically necessary cookies may arise through embedded services, in particular through the embedded forms (Tally). [Before launch, check whether the embedding sets cookies that require consent. If so, a consent banner is required.]
We store personal data only for as long as is necessary for the stated purposes or as legal retention periods require. You can request the deletion of your data at any time. An email to info@thefootballpathway.eu is sufficient. Your entry and your profile will then be removed from all systems we use.
You have the right to information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). To exercise these rights an informal message to the email address above is sufficient.
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: The Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg, Germany. [Check the address for accuracy before launch. If the operator is based not in Hamburg but in another federal state, the supervisory authority of that state must be entered.]
Many processing operations are only possible with your consent. You can withdraw consent you have already given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected. An informal message to the email address above is sufficient.
We adapt this privacy policy as soon as changes to our services or the legal situation make this necessary. The version published on this page applies in each case. As of: July 2026.