Source: https://company.onefootball.com/privacy-policy?of
Timestamp: 2020-01-26 22:11:30
Document Index: 193717687

Matched Legal Cases: ['§10', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§2']

Onefootball — Privacy policy
Data protection and the private sphere of the users are very important to Onefootball GmbH (hereinafter referred to as “Onefootball”). The collecting and use of your personal data takes place exclusively within the framework of the statutory provisions of applicable data protection laws. With this data privacy policy, Onefootball is providing information concerning the processing of personal data in the mobile applications (hereinafter referred to jointly as “Onefootball apps” or simply “apps”).
Should you have any questions relating to data protection, you can get in touch with our company’s data protection officer at any time. The data protection officer can be contacted at the postal address above, as well as by email at privacy@onefootball.com. The data protection officer is also available should you have any queries concerning the transfer of data to third countries and can provide copies or guarantees in the form of standard data protection clauses. Should you have any general concerns or queries, you can also contact Onefootball by email at feedback@onefootball.com.
This data privacy policy applies to all Onefootball apps with all content, functions and services, even if these only contain seasonal, short term or event related services (for example European Championships or World Cup, special features) within the operating systems which are offered (iOS, Android, Windows Mobile).
Should you be interested in data protection on our websites, please read the Data Privacy Policy (web) of the Onefootball websites.
Before the app is downloaded, the marketing attribution may by calculated by Adjust. This is the case if the apps are not searched for and downloaded directly in the app store, rather when the user is redirected to the app store via an advert of our apps. In such a case, a connection of the advertising ID with Localytics and Adjust takes place before the downloading (see point 10 analysis and point 11 advertising).
In order to be able to download and install our apps from an app store (for example Google Play Store or Apple App Store), you need to register first with the provider of the app store for a user account and finalise a corresponding use contract with the provider of the app store. We have no control over this, in particular we are not party to such a use contract. When downloading and installing the apps, the necessary information in this respect will be transferred to the respective app store, in particular your user name, email address and customer number of your account, the time of the download and the individual device number. We have no control over this data collecting and are not responsible for this. We only process this data which has been provided should this be necessary for downloading and installing the app on your mobile end device (for example, smartphone, tablet). Should this concern a chargeable Onefootball app, we only process billing and payment data in order to carry out the purchase. In such as case, the legal basis is Article 6 Paragraph 1 b) GDPR.
The Onefootball apps provide the following basic functions:
● Naming of a favourite team and the “following” of players, competitions and clubs
Due to the way the Internet functions, the brief saving of the IP address is technically necessary. The IP addresses are deleted or anonymised after the processing. In case of anonymisation, the IP addresses are changed in such a way that the affected person cannot be identified or can no longer be identified. On the basis of the anonymised IP address, a location search will be carried out. For reasons connected to data protection, this only takes place on the geographical level of the country from where the access is taking place. By means of this, it is not possible to trace the concrete location or place of residence of a user. If you have consented to specific advertising technologies described under §10, these may have more specific localisation services in place.
3.4 Processing when using the apps with registration
You can use the apps both with and without registration. You can register with your account of a social network, in order to further personalise the apps. In addition, there is the option of uploading a profile picture and selecting a user name. This takes place solely on a voluntary basis.
The Onefootball apps therefore provide extended personalisation functions in order to
● keep the settings concerning favourite teams and competitions up to data between different devices and
● to provide the apps with a profile picture and name
Via incorporated social media services, this personalisation can be carried out by the user in the apps. For this purpose, Onefootball uses the systems “Facebook Sign In” (a service of Facebook Inc, 1601 Willow Road, Menlo Park, California, 94025, USA) and “Google+ Sign In” (a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). In cases where personal data is transferred to the USA, the named providers have undertaken to comply with the EU-US Privacy Shield. A connection between the apps and the Facebook or Google account takes place. From Facebook, we save and process the email address, the URL of the profile picture, the name, the public profile and the token. From Google, we save and process the standard entitlements set by Google. These are the profile, JWT (token) and Google ID. We transfer our app ID to both services. These extended personalisation functions are optional and you can remove the personalisation and connection with the social media services in the app at any time. The purpose and scope of the data collecting and the subsequent processing and use of the data by the social media providers, as well as your rights and settings options in this respect concerning the protection of your private sphere can be found in the data protection notices of Facebook or Google.
The legal basis is Article 6 Paragraph 1 f) GDPR, based on the legitimate interest of Onefootball in providing extended functions for a more personal use experience. This is also the legal basis for the general processing when using the apps with registration, based on the legitimate interest in creating synchronisation options between end devices and providing functions with social interaction options. Should you not wish to use the registration, the described functions cannot be used, however basic use of the apps is possible.
3.5 Processing when using the feedback/report content option
If you chose to give us feedback using the relevant features in the apps or website, we will use Surveymonkey to process the information (SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland). SurveyMonkey enables us to learn more about your enquiry and direct you to relevant articles in our FAQs. If there is yet to be a relevant answer listed then Surveymonkey allows us to categorise your enquiry, helping us process it more quickly.
Surveymonkey will process your email address, country, device language, app version, OS version, device ID, device name, IP address, and the information you enter in the comments in case you are accessing the feature through the app. If you use the feedback option/”Report Content” feature on the website, only your email address, IP address and the information you provided will be processed.
The information you provide (excluding your IP address) will be processed using “Zapier” (Zapier Inc., 548 Market St. 62411, San Francisco, CA 94104-5401), and be transferred to our service provider Zendesk (an offer from Zendesk Inc., 1019 Market St, San Francisco, CA 94103, USA).
If you use the “Report Content” feature, there will be no transfer of your data to Zendesk. Your feedback will be forwarded via Zapier to a closed slack channel (Slack Technologies Limited). Also, should you contact us by email your email address will only be processed by Zendesk.
In the event that personal information is transferred to the United States, Surveymonkey, Zendesk, Zapier and Slack have agreed to comply with the EU-US Privacy Shield. With Zapier, Surveymonkey and Slack, we have also agreed so-called “standard contract clauses”. Zendesk is also one of the few software providers in the world that introduced company-wide “Binding corporate rules”, that have been approved by the EU Commission, Article 47 GDPR. Further information on data protection can be found in the privacy statements of Zendesk, Zapier and Surveymonkey. All data collected will be deleted by Zendesk within 6 months. For Zapier and Surveymonkey we delete the data after one month.
The legal basis for the processing operations described above is Art. 6 para. 1, f.) GDPR, based on our legitimate interest in improving our product and being accessible for our users.
3.6 Data processing as part of raffles
a) Raffles solely organised by Onefootball
The data required for you to participate in the contest will be collected and stored by Onefootball. This data will be used for the following purposes: To execute the contest, to notify prizewinners, and to clarify the shipping address for your prize. Unless otherwise stated, all data collected will be deleted after the conclusion of the contest.
b) Raffles organised by or in cooperation with a raffle partner
The data required for you to participate in the raffle will be collected and stored by Onefootball. This data will be used for the following purposes: To execute the raffle, to notify prizewinners, and to clarify the shipping address for your prize. If the raffle partner is responsible for organising and processing the prize (e.g. shipping, coordinating, or registrations), Onefootball will provide the partner with the necessary information. The winner will be expressly notified of this disclosure at that time.
If an option to subscribe to a newsletter is provided, your email address will also be collected by Onefootball for the purpose of sending a subscription confirmation email. Onefootball will collect the data required to sign up for the raffle partner’s newsletter and forward it to the partner provided you have given your consent.
The information will only be disclosed if you have accepted the newsletter subscription by clicking on the link in the confirmation email. We will always provide the name and address of the data recipient on the contest entry page. If you wish to unsubscribe from the newsletter, please contact the raffle partner. The necessary information can be found on the contest page and the partner’s privacy policy.
In principle Onefootball does not pass your personal data on to third parties. The data collected by us is only passed on to third parties, if this is necessary to provide the technical functionality of the apps or another legal basis for the disclosure of data exists. Personal data may only be used by our service providers in order to fulfil their tasks. These were carefully selected by us and engaged in writing. They are subject to our instructions and are regularly monitored by us. Other use of the information is not permitted and is not carried out by any of the service providers used by us.
Data which is collected for payment processes for chargeable apps is only saved by us for as long as it held to be necessary in order to fulfil contractual or legal obligations, i.e. until the expiry of the statutory limitation period for proof purposes for claims under civil law or due to statutory retention obligations. For proof purposes, we must retain data from payment processes for a further three years from the end of the year in which the business relationships end. Any claims are time-barred according to the regular statutory limitation period, at the earliest at this time. Also following this period, we need to save certain data for bookkeeping reasons. We are obliged to do this due to statutory documentation requirements under the German Commercial Code and German Tax Code. The retention periods for documents stated therein are up to ten years.
In order to be able to send you push notifications, we use the technology of Urban Airship Inc, 1417 NW Everett St, Suite 300, Portland OR 97209, USA.
Open the application “settings” of iOS and select the menu point “notifications”. In the following menu, you can find an overview of all apps which are installed on your device and which support push functions. Select the corresponding Onefootball app. You can activate or deactivate the push notifications as described here.
Open the application “settings” in the Android operating system and select the menu point “notifications” under “sounds and notifications. In the following menu, you can find an overview of all apps which are installed on your device and which support push functions. Select the Onefootball app. Here, you can activate or deactivate the push notifications. The names may differ slightly according to the Android version used.
Open the settings app which you can find under “system settings” in the Windows Mobile operating system and select the menu point “notifications”. In the following menu, you can find an overview of all apps which are installed on your device and which support push functions. Select the corresponding Onefootball app. Here, you can turn the push notifications on or off.
Inside the apps, you can set your preferences and only receive push notifications relating to your selected topics. In order to do this, you open the main menu and select the menu point “Favourites”, which you can find under your profile. Here you can activate or deactivate push notifications for your favourites or teams which you follow, as well as for news.
Access to your Internet connection, using network services of your device, access to your browser, access to your Internet connection as server: These functions allow the apps to obtain data from the Internet (such as current messages and live scores) and to determine whether a connection to the Internet exists via a WLAN network or via a mobile data connection (for example GSM, UMTS or LTE), By means of this, larger data quantities causing problems for possible restricted data volumes should be avoided. In addition, this function allows the regular updating and delivery of new data in the apps as a so-called “live tile”, which you can activate or deactivate in your system settings at any time.
Using an anonymous Microsoft account: This functions simplifies your login in process within the apps by means of the issuing of an anonymised Microsoft account.
Using music, using current reproduced media elements: These functions allow the apps to reproduce music (for example, live reporting, radio) and clips.
Send push messages: This function permits the apps to inform you of certain events and topics by means of push notification (for example, a goal scored by your favourite team), even if the apps are not currently open. You can find further information under number 6c).
8 Inclusion of videos
a) We have included videos in our apps which are saved with YouTube and which can be played directly from our apps. YouTube is a group company of Google and a service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By means of the visit to our apps, YouTube is informed that you have accessed the corresponding sub-page. This takes place regardless of whether you are logged into YouTube or not. Should you be logged in to YouTube, your data is however assigned directly to your account. Should you not wish for this to take place, you need to log out before viewing the video.
YouTube saves your data as usage profiles and uses these for the purposes of advertising, market research and designing its website in line with customer requirements. Such an evaluation takes place even for users who are not logged in. You can prevent the recording of this data by Google by de-activating the “personalised advertising on the web” button in the Google advertising settings. In this case, Google will only continue to display general advertising which was not selected on the basis of the information relating to you which was recorded.
In cases where personal data is transferred to the USA, Google has undertaken to comply with the EU-US Privacy Shield. The legal basis is Article 6 Paragraph 1 f) GDPR, based on the legitimate interest of Onefootball in providing video and picture contents.
The purpose and scope of the data collceting by YouTube, as well as the further processing and use of your data there and your rights and settings options for the protection of your private sphere in this respect can be found in the Privacy Policy of Google.
b) We also use the JW Player to integrate videos into our site. For this purpose, the services of LongTail Ad Solutions, Inc., d/b/a JW Player, 2 Park Avenue, 10th floor, New York, NY 10016, USA are integrated into our app.
JW Player will process the following data: your IP address, device identifiers, operating system, browser, screen resolution. It also collects information about your interaction with the JW Player.
JW Player uses this data to display videos, display advertisements, provide reports and analyses to Onefootball, to evaluate the technology offered, and improve the products. Further information can be found in its privacy policy.
JW Player has submitted to the EU-US Privacy Shield, which affects the transfer of any data to the United States. We have agreed the standard contractual clauses with JW Player as identified in the Official Journal of the European Community.
The legal basis for the data processing as described is Art. 6 para. 1 lit. f GDPR and is based on the legitimate interest of Onefootball in the integration of video and image content.
For the apps on iOS and Android we use the services of branch.io (a service of Branch Metrics, Inc., 2443 Ash Street, Palo Alto, California 94306, USA), Flurry Analytics (a service of Oath (EMEA) Limited, 5-7 Point Square, North Wall Quay, Dublin 1, Ireland), Google Analytics for Firebase (a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Hockey App (a service of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA), , Urban Airship (a service of Urban Airship Inc, 1417 NW Everett St, Suite 300, Portland OR 97209, USA) and Localytics (a service of Localytics, Inc., 8th Floor, 101 Arch St, Boston, MA 02110, USA). In cases where personal data is transferred to the USA, Branch Metrics Inc, Google LLC and the Microsoft Corporation have undertaken to comply with the EU-US Privacy Shield. In case that personal data is transferred to the USA or to other countries which do not have a reasonable level of data protection in accordance with the opinion of the European Commission, the so-called “standard contractual clauses” have been agreed with Localytics Inc, which you can view in the information sheet of the European Communities.
With the help of adjust.io, an offer of Adjust GmbH, Saarbrücker Straße 37a, 10405 Berlin (you can find more information about Adjust on the privacy pages of Adjust), we collect information, evaluate it and optimize the advertisements booked by us (see also above under 9 Analysis). For this purpose, Adjust collects information from you as user of our apps. This applies, for example, to device identifiers and connection data, such as your IP address or advertising ID. With the help of this data, your app usage will be evaluated and advertisements that brought you or are intended to bring you to our Apps, will be optimized. For example, we place advertisements on Pinterest, an offer from Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (see Pinterest’s privacy pages for more information). By means of a conversion measurement by Adjust we determine which users came to our app via one of our advertisements on Pinterest and let Pinterest know as well.
You can deactivate these services, if you no longer require the Onefootball analyses. For this purpose, you can easily carry out the deactivations with the assistance of the “opt out” button which is visible in the data privacy policy. You can find this by clicking in on “info” in the corresponding app under your profile and then selecting “data privacy policy”. Regarding Urban Airship and Localytics, opting out does not mean a complete deactivation of the services. In both cases “keep-alive” server call may take place. These are maintaining a connection between the servers. No personal data is processed in these cases.
A) In order to showcase relevant adverts to our users, we use various advertising technologies. These procedures take place anonymously or on the basis of pseudonyms, however never in a directly personal way. Within the framework of advertising technologies, we, respectively our partners collect and process the Apple advertising ID (IDFA) on iOS devices and the Google advertising ID on Android devices in order to provide personalised advertising and to be able to evaluate its use. The advertising IDs are unique but not personalised and non-permanent identification numbers (see below 2 a) and b)) for a specified end device which are provided by the operating systems.
1. In principle, the following applies to the advertising procedures we use: processing of pseudonyms and/or non-anonymised data for advertising purposes listed below only takes place with your consent. For this, a dialogue in the app will ask you for your consent to disclose information with certain partners and/or for specific uses.
You may refuse disclosure to all partners by closing the dialogue box by hitting the “X”. Your consent is voluntary and may be revoked at any time by deactivating the relevant processing using the switch under Settings > Info > Ad Privacy Settings.
The app can be used even without your consent to this data processing.
The legal basis of this data processing is your consent under Art. 6 para. 1 lit. a GDPR.
Please note: even if you do not give your consent, some of the partners listed below will perform some data processing. Such data processing is provided by the partners on the basis of Art. 6 para. 1 lit. f GDPR in accord with their legitimate interest in such data processing even without your consent. This processing involves, for example the production of statistics, anti-fraud measures, or false-click detection. This may also include data processing that is technically necessary.
If you have deactivated your advertising ID (see below under §2), the dialogue box just described will not be displayed. Personalisation of advertising and/or the use of the advertising ID is not possible and therefore a consent to data processings that require this is not possible. If you activate the use of your advertising ID by making settings in your operating system, you will also see the dialogue described in 1). If you are using a version of the app that was released before the version with the version number 11.8.0 (Android), 12.16 (iOS), the dialog described in 1. will not be displayed. This means that you have NOT EXPLAINED your consent to the described procedures. This means that only those processing operations will be carried out which can be carried out without your consent.
2. In addition to that described under 1) above, you can also use settings in your operating system to prevent the delivery of personalized advertising. We will explain to you – in separate terms according to the mobile operating systems for which we offer the app – how the activation or deactivation of the personalized advertising technologies (usage of advertising IDs) works. By deactivating you ensure that the delivered advertisement is no longer interest-based, as the Apple Advertising ID or Google Advertising ID is no longer used and information about your interaction with the app or advertisements can no longer be associated with an Advertising ID.
B) Individual processes
1. Facebook Audience Networks
For advertising within the Apps we use the services of Facebook Audience Network (Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA). If you have consented to Facebooks data processing: this advertising service uses identifiers for mobile devices (see above) and cookie-like technology for running ads within our apps. These advertisements will, through using this data, better suit your interests and be more relevant to you. For this purpose, we have integrated the Facebook Software Development Kit (= a set of software development tools that enables and simplifies the development of applications in an app) into our app.
If you have not consented to Facebooks data processing, Onefootball will not disclose your advertising ID or IP address to Facebook.
For more information, visit the Facebook privacy page.
2. Double Click for Publisher
We use the DoubleClick for Publishers service (a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA).
Doubleclick is a platform for the delivery, control and optimization of advertisements. Doubleclick enables us to reach and engage our app users in other apps within the Google ad network, as well as showcase ads based on their interests. Further information can be found in the privacy statement of Google.
If you have given your consent to Google’s processing, Google will use your advertising ID and associate it with your search queries, app visits, demographic information, and your location. This information will then be used to show you personalised ads in our app. Google uses technology partners for the measurement, delivery, and other functions as listed. You can also consult the respective privacy policy of these partners.
If you have not given your consent regarding Google’s processing, Google will not use your advertising ID and will instead provide non-personalised advertising that is contextual, i.e. advertising that takes into account and references the content of our app and, for example, your stay (only at the city level).
MoPub (MoPub, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) is also used in our apps. Mopub is another ad network that helps us place ads in our apps.
If you have consented to Mopub processing, your IP address, advertising ID, your stay, and possibly your age and gender will be processed. This data will be processed to identify your interests and then display advertising based on your interests and related to your present location. Also, if you have consented Mopubs Partners listed here will also receive your data.
Even if you have not given your consent, Mopub will do certain processing, such as creating and processing an ID to make sure you are not shown ads too frequently.
If you have not consented to Mopubs processing, Ads will be showcased to you, that might be relevant to you based on the content of our apps and the type of our apps itself. For this purposes, Mopub will not process personal data of you, also neither your precise location, nor your interest information will be processed. Please refer to MoPubs privacy statement for further information.
4. Remerge
For retargeting purposes, we use the technologies of our partner Remerge (remerge GmbH, Oranienburger Strasse 27, 10117 Berlin). Retargeting in this case means that Remerge will use insights gained during your use of the Onefootball App so that we can appeal to you (again) in other apps and make you aware of content available in the other apps and/or in the Onefootball app. Retargeting enables us to serve you with Onefootball ads that are relevant for you and thus allows us to differentiate ourselves from the mass of irrelevant advertising. Insofar as you consent to such data processing, we will provide Remerge with the following data for these purposes: advertising IDs, information about the initial installation and how you interact with the Onefootball app, information about which ads you interact with and which ads you have seen, and information about which smartphone you use and which country you are in.
Remerge will not share this information with third parties, but will only use it in the context of the data processing relationship contractually agreed between Onefootball and Remerge, whereby Onefootball will decide on how to process and use your data.
If you do not consent to data processing by Remerge, Remerge will not carry out retargeting for us on our behalf.
Further information can be found in the Remerge privacy policy.
We use the content discovery technology of Taboola (Taboola Europe Limited, Aldgate House, 33 Aldgate High Street, London EC3N 1DL, United Kingdom). If you consent to the collection of your data by Taboola, Taboola will recommend to you other online content that you may be interested. For these purposes, Taboola uses, for example, information about the device and operating system you are using, your advertising ID in “hashed” form (i.e. converted by a mathematical function into a data set that does not allow direct inferences about your advertising ID) and your app usage. Taboola will also collect and merge cross-device information if you are recognized on a device other than your smartphone (or vice versa). Taboola may also obtain information about you from its data partners. The list of currently used Taboola’s data partners can be found here.
If you do not consent to this data collection by Taboola, Taboola will not receive your advertising ID, will not be able to track your app usage, will not be able to recognize you across devices and will not be able to match third party data of their partners with you. Nevertheless, you will still see Taboola ads in our app. These are not interest- based.
To learn more, see Taboola’s Privacy Policy.
6. SpotX
To show video advertisements in the app before and after the actual content, we use the services of SpotX Deutschland GmbH (“SpotX”). SpotX operates the smartclip platform we use in this context.
Depending on whether you have consented to the processing of your personal data, your interests will be considered as much as possible when showing video advertisements. If you consent to SpotX’s data processing, SpotX will use the advertising ID provided by Onefootball to classify your interactions with video content and our app and enrich this with data from third-party sources (see the list of “DMP & Data Partners“) in order to display the video advertising most relevant to your interests.
The data collected by SpotX may also be shared with third parties (advertisers) who buy the advertising space within the video (see “DSP Partners“).
If you do not consent to this processing of your data, we will not give your advertising ID to SpotX. SpotX will then not be able to match information to this ID. In this case, we will only provide SpotX with non-personal information (e.g. information about the video, the video player, whether the video user has specified a favourite team, whether the video user is following a specific match); the video ads that will then display will not be specifically targeted to your interests. For more information about how SpotX processes your data, see here and here.”
We use the Software Development Kit (SDK) from Smaato (Smaato, Inc., 240 Stockton St, 10th Floor San Francisco, CA 94108, USA) in our apps. Smaato’s ad services help us to place ads in our apps.
If you have consented to Smaato’s data processing, your IP address, advertising ID, information about the device you are using, and possibly your location, age, and gender will be used. This data will be processed to identify your interests and then display advertising based on your interests and related to your present location. Also, if you have consented, Smaato’s Partners will also receive your data in order to display personalized ads. You can withdraw your consent with effect for the future at any time by deactivating the relevant processing using the switch under Settings > Info > Ad Privacy Settings.
Based on Smaato’s legitimate interests, Smaato will further use your IP address to make sure you are not shown ads too frequently, and for statistics, anti-fraud, and security measures.
If you have not consented to Smaato’s and its Partners’ processing, Ads will be displayed to you, that might be relevant to you based on the content of our apps and the type of our apps itself. For these purposes, Smaato will only use your IP address to serve this ad.
For more information, see Smaato’s Privacy Policy.
8. Data processing outside the European Union
In cases where personal data is transferred to the USA, Facebook, MoPub, Google and Smaato have undertaken to comply with the EU-US Privacy Shield.
Finally, you have the right to complain to the competent supervisory authority for data protection, if you believe that the processing of personal data relating to you breaches data protection laws. You can claim this right by contacting a supervisory authority in the member state of your place of residence, place of employment or the location of the alleged breach. In Berlin, Germany, the competent authority is: Data protection and information freedom officer of Berlin (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstr. 219, 10969 Berlin.
12 Changes to the data privacy policy