Reputation League · World Economic Board

Legal notice & privacy.

How Reputation League content should be read, and how we process the personal data of visitors to this website.

02GDPR

Privacy policy

Effective date: 26 October 2026

Issued under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree No. 196/2003 as amended by Legislative Decree No. 101/2018.

01 Data Controller

The data controller is World Economic Board, the organisation that develops and operates the Reputation League project, Piazza Cordusio, 20123 Milano, Italy. For all privacy matters and to exercise your rights, contact: signal@reputationleague.com.

A Data Protection Officer has not been appointed, as appointment is not mandatory for the processing described here; all requests are handled at the contact address above.

02 Scope

This policy describes how we process (a) the personal data of visitors to this website and of people who contact us, and (b) the limited personal data of football players and other public figures that appear in our published analyses. It does not apply to third-party websites reachable through external links, which have their own privacy policies.

03 Categories of Personal Data

Navigation data: technical data automatically transmitted by your browser when visiting the site (IP address, device and browser type, operating system, pages requested, date and time of access, referrer). These data are processed in the logs of our hosting and content-delivery providers and, when a page loads published figures, by our database provider.

Contact data: your email address, name and any information you voluntarily provide when you write to us at signal@reputationleague.com.

Data in our published analyses: names of football players, coaches and other public figures, together with publicly available professional information such as club, national team, nationality and participation in fixtures, used in our assessments (for example PEAF and the Reputation D'Or).

Cookies: the site does not use analytics, advertising or profiling cookies and does not store information on your device for tracking purposes. No cookie banner is therefore required; should this change, this policy will be updated and consent will be requested where the law requires it. To understand which public profiles are of interest, the Economic Activation Platform counts, anonymously and in aggregate, how often club, host city and competition profiles are opened (one daily count per profile); no cookies, identifiers or personal data are stored for this purpose.

04 Purposes and Legal Bases

Operating, securing and maintaining the website, delivering its pages and data, and preventing abuse — our legitimate interest in providing a secure and functioning service (Art. 6(1)(f) GDPR).

Responding to your enquiries and correspondence — steps taken at your request prior to entering into a contract, or our legitimate interest in answering you (Art. 6(1)(b)/(f)).

Publishing independent economic analyses that mention public figures — our legitimate interest and the freedom of expression and information, including for analytical, editorial and journalistic purposes (Art. 6(1)(f) and Art. 85 GDPR; Articles 136–139 of Legislative Decree No. 196/2003). Only information relating to the person's public professional activity is used; no special categories of data are processed.

Complying with legal obligations to which we are subject, and establishing, exercising or defending legal claims (Art. 6(1)(c) and (f)).

05 Sources and Provision of Data

Navigation data are collected automatically; their provision is a technical necessity of using the site. Contact data are provided by you voluntarily; failure to provide them may prevent us from responding. Data about public figures are obtained from publicly available official and reputable sources, such as competition organisers, clubs, federations and established media.

We do not send marketing or newsletter communications and we do not sell personal data.

06 Recipients and Processors

Personal data are processed on our behalf by service providers acting as data processors under Art. 28 GDPR: Vercel Inc. (website hosting and delivery), SiteGround (domain and DNS), Supabase (database and API, EU region — Frankfurt), jsDelivr and cdnjs (content-delivery networks that serve website resources) and Microsoft (email).

Data may also be disclosed to competent authorities where required by law. Published analyses are, by their nature, available to the public.

07 International Transfers

Our database is hosted within the European Union. Some providers, such as our website host and content-delivery networks, operate global infrastructures and may process navigation data outside the European Economic Area, including in the United States. Such transfers take place only on the basis of a European Commission adequacy decision (including the EU–U.S. Data Privacy Framework, where the provider is certified) or Standard Contractual Clauses under Art. 46 GDPR. You may request information on the safeguards applied at the contact address above.

08 Retention

Navigation data are kept only for the short period set by our providers' log settings and in any case for no longer than 12 months, unless they are needed to investigate a security incident or to comply with a legal obligation.

Correspondence is kept for up to 24 months from our last exchange, unless a longer period is required by law or to establish, exercise or defend legal claims.

Published analyses are kept in our archive for as long as they serve their analytical and historical purpose, subject to your right to object.

09 Your Rights

Under Articles 15–22 GDPR you have the right to access your personal data and to obtain rectification, erasure, restriction of processing and portability, and the right to object at any time, on grounds relating to your particular situation, to processing based on legitimate interest. To exercise these rights, contact us at signal@reputationleague.com; we will respond without undue delay and in any case within one month, extendable where the law allows.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your country of residence or work.

10 Automated Decision-Making, Security and Minors

We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on individuals. Rankings and scores in our analyses describe economic activation and do not constitute decisions about any person.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, including encrypted connections (HTTPS) and read-only public access to published data.

This website is not directed at children and we do not knowingly collect personal data from minors.

11 Changes

We may update this Privacy Policy to reflect changes in the law or in our processing. The current version and its effective date are shown on this page.