Privacy Policy

Thank you for your interest in Toni Kroos and this website. Protecting personal data is of great importance to us. We thus pay very close attention to this aspect in our online activities. Your personal data is processed by SportsTotal GmbH on a legal basis and, where required, based on your consent. Since 25/05/2018, the principal legal basis has been the EU General Data Protection Regulation (GDPR). Of course, we also comply with all other relevant statutory provisions, especially those of the German Federal Data Protection Act (BDSG) and of the German Telemedia Act (TMG).
Below, we would like to provide you with as precise information as possible, pursuant to the relevant legal requirements, esp. the GDPR, as to how your personal data is processed when you visit this website.

1. Controller
You are on the website of Toni Kroos. The controller for data processing within the framework of your use of this website is SportsTotal GmbH, Mittelstrasse 11-13, 40789 Monheim, Germany (hereinafter: “SportsTotal”), as the management of Toni Kroos.

2. Browsing on www.toni-kroos.com/en
For what purposes do we process your data?
When you visit this website, your browser contacts our web server to call up the websites you want to access. Basically, you do not have to register or identify yourself to use this function. However, the enquiries and feedbacks of our server are assigned based on your IP address, which may be used to establish a connection to your identity.
In detail, personal data, such as your IP address, is transferred to our web server within the framework of a HTTP/S retrieval. This connection data is processed by our web server to enable access to the website.
Moreover, the respective HTTP/S retrievals are logged in a log file, which is used by us for technical troubleshooting and allows us to ward off and solve attacks on our systems. In addition, based on the log files already stored, we prepare evaluations to optimise our website. In this context, evaluation as such is anonymised, i.e. access data is aggregated to ensure that the results will no longer contain any personal reference.

On what legal basis do we process your data?
The legal basis for any processing of your data during your visit of this website depends on the specific purpose of your visit:

  • If you visit our website to initiate contracts or business relationships with us, the legal basis for processing your data is Art. 6(1) point (b) GDPR (initiation and/or implementation of a contract).
  • Moreover, as a rule, the data is processed on account of our legitimate interests acc. to Art. 6(1) point (f) GDPR. Our legitimate interest is to operate a website for general information, presentation and communication purposes.

As a rule, the log files are processed on account of our legitimate interests acc. to Art. 6(1) point (f) GDPR. Our legitimate interest is to protect our installations and systems against attacks and to take legal action against attackers, if appropriate, as well as to enhance our website for economic purposes.

Are you obliged to provide your data and what happens if you disagree?
It is not possible to use the website without your connection data being processed.

To whom is the data disseminated and/or who is involved in the processing of your data?
Basically, the data is processed fully automatically by our web hoster, Aclewe GmbH Werbeagentur, Marzellenstr. 43b, 50668 Cologne, Germany. Our web hoster’s IT department can access the log files which are used by the relevant internal departments for the aforementioned purposes and, where required, also transferred to external recipients (esp. law enforcement authorities to prosecute attacks).

How long will your data be retained?
All of the data will be erased immediately after the HTTP/S retrieval.

3. Communication by E-Mail or Phone
For what purposes do we process your data?

Our website provides you with the opportunity to contact us by e-mail and/or phone. In this case, the information provided by you is retained for the purpose of dealing with the contact request and for possible enquiries. If you contact us with a specific concern or if we contact you, we also process, of course, your personal data, e.g. name, address, e-mail address, phone number, and the communication contents to implement the exchange of information with you.

On what legal basis do we process your data?
Within the framework of the e-mail or phone communication, your data is processed based on Art. 6(1) point (b) GDPR, provided that such exchange is related to the initiation or performance of a contract with you.
For the rest, the legal basis depends on the specific purpose of the exchange; in most cases, Art. 6(1) point (f) GDPR (our legitimate interest to conduct business correspondence or, for ex., to respond to queries on data protection) will be relevant.

Are you obliged to provide your data and what happens if you disagree?
You are not obliged to provide your data. However, it is not possible to communicate by e-mail or phone without your personal data being processed.

To whom will the data be disseminated and/or who is involved in the processing of your data?
Internally, we will disseminate your data only to the respective body responsible for your request.
Where any dissemination of your data to third parties is necessary to comply with and/or process your request, we notify you separately thereof and, of course, will not disseminate your data if you disagree with such dissemination.

How long will your data be retained?
Your personal data will be erased once it is no longer required for any exchange with you. If appropriate, the data is kept longer based on Art. 6(1) point (c) GDPR icw the respective relevant legal retention periods (esp. acc. to commercial as well as tax and fiscal legislation). Business correspondence is commonly retained for six to ten years following the end of the year in which it was received.

4. Ordering an Autograph
For what purposes do we process your data?

On this website, we provide you with the opportunity to order an autograph card of Toni Kroos. In this case, the information provided by you (e.g. name, address) is processed and retained to attend to your request and to handle the contact as well as for possible enquiries.

On what legal basis do we process your data?
Within the framework of the communication to request an autograph card, your data is processed based on Art. 6(1) point (f) GDPR. Processing is based on your legitimate interest to receive an autograph card of Mr Kroos.

Are you obliged to provide your data and what happens if you disagree?
You are not obliged to provide your data. However, it is not possible to send an autograph card to you without your personal data being processed.

To whom will the data be disseminated and/or who is involved in the processing of your data?
Internally, we will disseminate your data only to the respective body responsible for your request to send an autograph card.
Your data will not be disseminated to third parties.

How long will your data be retained?
Your personal data will be erased once it is no longer required for any exchange with you. If appropriate, the data is kept longer based on Art. 6(1) point (c) GDPR icw the respective relevant legal retention periods (esp. acc. to commercial as well as tax and fiscal legislation). Business correspondence is commonly retained for six to ten years following the end of the year in which it was received.

5. Cookies
We do not use any cookies on this website.

6. Social Media
Using different links on this website, you can access the online presence of the social media used by Toni Kroos (Facebook, Twitter, Instagram). We do not use any social media plug-ins in this context, but only a link taking you to the website of the corresponding social media platform. As long as you stay on our website, the social media platforms will not collect or process any data. Once you click on one of the links offered and are forwarded to a corresponding website, however, SportsTotal will no longer have any influence on any further data processing. In this case, data is exclusively processed on the respective social media platform’s own responsibility. Information about the data processed in this context can be found in the respective privacy policy on the social media platform homepage.

7. Other Links on www.toni-kroos.com/en
Moreover, this website offers links to other websites. If you click on such a link and are forwarded to the respective homepage of said link, SportsTotal will no longer have any influence on the processing of your data on the corresponding website. This will be the responsibility of the respective website operator. Information about the data processing performed there can be found in the corresponding privacy policy of the website.

8. Your Rights
Where we have processed data about your identity, you have the following rights within the respective limits of statutory regulations:

  • right of access, especially to the data retained at the controller’s and its processing purposes (Art. 15 GDPR);
  • right to rectification of inaccurate and/or completion of incomplete data (Art. 16 GDPR);
  • right to erasure, e.g. data unlawfully processed or no longer necessary (Art. 17 GDPR);
  • right to restriction of processing (Art. 18 GDPR);
  • right to object to processing, especially if data is processed to safeguard legitimate interests of the controller (Art. 21 GDPR); and
  • right to data portability, where processing is based on consent or carried out to implement a contract or by automated means (Art. 20 GDPR).


To exercise your legal rights and for any questions and complaints regarding data processing, you can contact us using the most comfortable option for you:

  • E-mail address: mgeis(at)sportstotal.com
  • Phone number: +49 (0 21 73) 2 97 24 30
  • In writing to: SportsTotal GmbH, Mittelstrasse 11-13, 40789 Monheim, Germany.


Where any processing is based on a consent given by you (Art. 6(1) point (a) GDPR or Art. 9(2) point (a) GDPR), you have the right to withdraw your consent at any time. This does not affect the lawfulness of any processing carried out based on the consent up to your withdrawal.
Where you address a data protection request to us, we process your personal data to deal with your request, as a rule, on the basis of Art. 6(1) point (b) GDPR (contract implementation or initiation). In this case, personal data is erased where it is no longer necessary to deal with your request and any legal retention periods have expired.

Furthermore, you can address any complaints to the competent supervisory authority, the State Commissioner for Data Protection and Freedom of Information for North Rhine-Westphalia (Kavalleriestr. 2-4, 40213 Düsseldorf, poststelle(at)ldi.nrw.de).