Data Privacy Policy (Apps)
Data protection and the private sphere of the users are very important to OneFootball GmbH (hereinafter referred to as "OneFootball"). The collecting and use of your personal data takes place exclusively within the framework of the statutory provisions of applicable data protection laws. With this data privacy policy, OneFootball is providing information concerning the processing of personal data in the mobile applications (hereinafter referred to jointly as "OneFootball apps" or simply "apps").
1 Point of contact
The point of contact and so-called responsible body for the lawfulness of the processing of your personal data under data protection laws is
OneFootball GmbH Greifswalder Str. 212 D-10405 Berlin
Should you have any questions relating to data protection, you can get in touch with our company's data protection officer at any time. The data protection officer can be contacted at the postal address above, as well as by email [email protected]. The data protection officer is also available should you have any queries concerning the transfer of data to third countries and can provide copies or guarantees in the form of standard data protection clauses. Should you have any general concerns or queries, you can also contact OneFootball by email at [email protected].
2 Area of applicability
This data privacy policy applies to all OneFootball apps with all content, functions and services, even if these only contain seasonal, short term or event related services (for example European Championships or World Cup, special features) within the operating systems which are offered (iOS, Android, Windows Mobile). Should you be interested in data protection on our websites, please read the Data Privacy Policy (web) of the OneFootball websites.
3 Processing of personal data
Personal data will be processed before and during the downloading and installation of the apps and during handling with and without a registration. Personal data is information relating to factual or personal relationships of a defined or definable natural person. Above all, this includes information which allows your identity to be traced, for example name, address or email address. Statistical data which we collect during a visit to our apps for example and which cannot be connected to you does not come under the definition of personal data. Rather this is so-called anonymous data.
3.1 Processing before downloading and installing the apps
Before the app is downloaded, the marketing attribution may by calculated by Adjust. This is the case if the apps are not searched for and downloaded directly in the app store, rather when the user is redirected to the app store via an advert of our apps. In such a case, a connection of the advertising ID with Localytics and Adjust takes place before the downloading (see point 10 analysis and point 11 advertising).
3.2 Processing when downloading and installing the apps
In order to be able to download and install our apps from an app store (for example Google Play Store or Apple App Store), you need to register first with the provider of the app store for a user account and finalize a corresponding use contract with the provider of the app store. We have no control over this, in particular we are not party to such a use contract. When downloading and installing the apps, the necessary information in this respect will be transferred to the respective app store, in particular your username, email address and customer number of your account, the time of the download and the individual device number. We have no control over this data collecting and are not responsible for this. We only process this data which has been provided should this be necessary for downloading and installing the app on your mobile end device (for example, smartphone, tablet). Should this concern a chargeable OneFootball app, we only process billing and payment data in order to carry out the purchase. In such as case, the legal basis is Article 6 Paragraph 1 b) GDPR.
3.3 Processing when using the apps without registration
You can use key parts of our apps without registration. Should you use the basic functions of our apps which do not require a registration, personal data is still processed, however.
The OneFootball apps provide the following basic functions:
In order to use the basic functions, the apps generate a number which is specific to the device when opened for the first time. This number cannot be assigned to a specific affected person (pseudonym). In addition, in order to technically display the named content, the operating system used (for example, Android or iOS), the hostname of the accessing device (IP address) and the time of the server request are processed.
Due to the way the Internet functions, the brief saving of the IP address is technically necessary. The IP addresses are deleted or anonymized after the processing. In case of anonymization, the IP addresses are changed in such a way that the affected person cannot be identified or can no longer be identified. On the basis of the anonymized IP address, a location search will be carried out. For reasons connected to data protection, this only takes place on the geographical level of the country from where the access is taking place. By means of this, it is not possible to trace the concrete location or place of residence of a user. If you have consented to specific advertising technologies described under §10, these may have more specific localization services in place.
The data in technical protocols (so-called log files) are evaluated by us in anonymized form in order to continually improve our apps and make them more user friendly, as well as in order to find and correct errors more quickly.
The data processing is necessary so that you can find out about the content of our apps. The legal basis is Article 6 Paragraph 1 f) GDPR, based on our interest in informing users of our content. The processing of the named data is necessary in order to provide the content. Otherwise, it is not possible for you to use the apps as requested.
3.4 Processing when using the apps with registration
You can use the apps both with and without registration. You can register with your account of a social network, in order to further personalize the apps. In addition, there is the option of uploading a profile picture and selecting a username. This takes place solely on a voluntary basis.
The OneFootball apps therefore provide extended personalization functions in order to
a) Via incorporated social media services, this personalization can be carried out by the user in the apps. For this purpose, OneFootball uses the systems "Facebook Sign In" (a service of Facebook Inc, 1601 Willow Road, Menlo Park, California, 94025, USA) and "Google+ Sign In" (a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU. A connection between the apps and the Facebook or Google account takes place. From Facebook, we save and process the email address, the URL of the profile picture, the name, the public profile and the token. From Google, we save and process the standard entitlements set by Google. These are the profile, JWT (token) and Google ID. We transfer our app ID to both services. These extended personalization functions are optional and you can remove the personalization and connection with the social media services in the app at any time. The purpose and scope of the data collecting and the subsequent processing and use of the data by the social media providers, as well as your rights and settings options in this respect concerning the protection of your private sphere can be found in the data protection notices of Facebook or Google.
b) You can register and sign in to our apps with "Sign in with Apple". "Sign in with Apple" is a service of Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014. This will link your Apple ID and the OneFootball apps together. You have the option to share or hide your email address in your iPhone settings. If you choose "share email address", we will receive the email address and name associated with your Apple ID. With hide e-mail address, Apple's email relay service, you can create a unique, random email address that forwards email to your home email address. This allows you to receive messages from the app without sharing your home email address with us.
We do not share any information with Apple; through your connection to Apple, your IP address is transferred to Apple. Responsible for the processing of personal data for individuals, within the European Economic Area, is Apple Distribution International ltd., Hollyhill Industrial Estate, Hollyhill Cork, Republic of Ireland. In the event that personal data is processed outside of the European Union, the provider has undertaken to comply with EU data protection standards. For more information about any data processing by Apple, please refer to the Apple Privacy Policy.
The legal basis is Article 6 Paragraph 1 f) GDPR, based on the legitimate interest of OneFootball in providing extended functions for a more personal use experience. This is also the legal basis for the general processing when using the apps with registration, based on the legitimate interest in creating synchronization options between end devices and providing functions with social interaction options. Should you not wish to use the registration, the described functions cannot be used, however basic use of the apps is possible.
c) You can register using your email address. When you register by email, we collect the following data:
E-mail address
Name
The legal basis for this data processing is Art. 6 para. 1 b) GDPR.
We use Firebase. Firebase authenticates users with their email addresses and passwords. The Firebase Authentication SDK provides methods to create and manage users logging in with their email addresses and passwords. Firebase is a service provider of the company Google Inc. responsible for Google services in the European area in Google Ireland Limited.
If data is processed outside the European Union, Iceland, Liechtenstein and Norway, in so-called, third countries, Google uses so-called standard contractual clauses, Art 64 (2) & (3) DSGVO, which are based on the implementing decision of the EU Commission: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de Google Privacy Policy: https://policies.google.com/privacy?hl=en-US and the Google Ads Data Dissemination Terms: https://business.safety.google/adsprocessorterms/
3.5 Processing when using the feedback/report content option
If you chose to give us feedback using the relevant features in the apps or website, we will use SurveyMonkey to process the information (SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland). SurveyMonkey enables us to learn more about your enquiry and direct you to relevant articles in our FAQs. If there is yet to be a relevant answer listed then SurveyMonkey allows us to categorize your enquiry, helping us process it more quickly. SurveyMonkey will process your email address, country, device language, app version, OS version, device ID, device name, IP address, and the information you enter in the comments in case you are accessing the feature through the app. If you use the feedback option/"Report Content" feature on the website, only your email address, IP address and the information you provided will be processed.
The information you provide (excluding your IP address) will be processed using “Zapier” (Zapier Inc., 548 Market St. 62411, San Francisco, CA 94104-5401), and be transferred to our service provider Zendesk (an offer from Zendesk Inc., 1019 Market St, San Francisco, CA 94103, USA). If you use the "Report Content" feature, there will be no transfer of your data to Zendesk. Your feedback will be forwarded via Zapier to a closed slack channel (Slack Technologies Limited). Also, should you contact us by email your email address will only be processed by Zendesk. In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU. With Zapier, SurveyMonkey and Slack, we have also agreed so-called "standard contract clauses". Zendesk is also one of the few software providers in the world that introduced company-wide Binding corporate rules”,that have been approved by the EU Commission, Article 47 GDPR. Further information on data protection can be found in the privacy statements of Zendesk, Zapier and Surveymonkey. All data collected will be deleted by Zendesk within 6 months. For Zapier and SurveyMonkey we delete the data after one month.
The legal basis for the processing operations described above is Article 6 Paragraph 1 f) GDPR, based on our legitimate interest in improving our product and being accessible for our users.
3.6 Data processing as part of raffles
a) Raffles solely organized by OneFootball
The data required for you to participate in the contest will be collected and stored by OneFootball. This data will be used for the following purposes: To execute the contest, to notify prizewinners, and to clarify the shipping address for your prize. Unless otherwise stated, all data collected will be deleted after the conclusion of the contest.
b) Raffles organized by or in cooperation with a raffle partner
The data required for you to participate in the raffle will be collected and stored by OneFootball. This data will be used for the following purposes: To execute the raffle, to notify prizewinners, and to clarify the shipping address for your prize. If the raffle partner is responsible for organizing and processing the prize (e.g. shipping, coordinating, or registrations), OneFootball will provide the partner with the necessary information. The winner will be expressly notified of this disclosure at that time. If an option to subscribe to a newsletter is provided, your email address will also be collected by OneFootball for the purpose of sending a subscription confirmation email. OneFootball will collect the data required to sign up for the raffle partner's newsletter and forward it to the partner provided you have given your consent.
3.7 OneFootball uses YouBora, a service provided by NicePeopleAtWork S.L. "NPAW", C/ Roc Boronat 23, 08005 Barcelona, Spain, to analyze video errors. With the help of Youbora, OneFootball can detect and analyze reasons for errors during video playing.
The legal basis is Article 6 Paragraph 1 f) GDPR, based on the legitimate interest of OneFootball in providing error-free video and picture contents.
In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU.
3.8 Surveys
Through AirShip, we regularly send out opportunities within the app to participate in surveys (via in app message). We conduct these surveys using Surveymonkey (SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland). You can access the surveys via a link directly to Surveymonkey. Participation is voluntary. These surveys are mostly anonymous, which means that no personal data is processed. For statistical purposes, we sometimes collect data such as gender, age, place of residence, etc.. For some surveys, we ask for your email address in case you want to participate in further surveys and/or interviews. If you participate in interviews, you will receive a separate privacy notice. SurveyMonkey may process information about the device and application you use to take the survey, among other things. This includes IP address, version of your operating system, device type, and system and performance information and browser type. If you participate in the survey through a mobile device, SurveyMonkey also collects the device's UUID. SurveyMonkey also uses so-called third-party tracking services, which in turn use cookies and page tags to collect usage data and user statistics. OneFootball has no control over the data collected by SurveyMonkey. In the event that personal data is processed outside the European Union area, SurveyMonkey has committed to comply with EU data protection standards. With Surveymonkey, we have additionally agreed to so-called ""standard contractual clauses"". For more information on data protection, please see Surveymonkey's privacy policy. The legal basis for these processing operations for the use of Surveymonkey is your consent according to Art. 6 para. 1, a.) of the GDPR.
3.9 Newsletter
If you give us your consent to send you news, products and promotions, the data in the form will be transmitted to us.For the registration to the newsletter we use a double-opt-in-process. After registration, you will receive an e-mail. By clicking on the link in the e-mail, you confirm that we may send you e-mails. When you register for the newsletter, your IP address and the date and time of registration are stored. This prevents misuse of the services or the email address of the data subject. We use this data only for sending news, products and promotions so the data. You can withdraw your consent to the storage of personal data at any time, there is a corresponding link in each newsletter. The legal basis for the processing of the data after registration for the newsletter by the user is, if the user has given his consent, Art. 6 para. 1 lit. a) GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) Act against Unfair Competition.
4 Disclosure of personal data
In principle OneFootball does not pass your personal data on to third parties. The data collected by us is only passed on to third parties, if this is necessary to provide the technical functionality of the apps or another legal basis for the disclosure of data exists. Personal data may only be used by our service providers in order to fulfil their tasks. These were carefully selected by us and engaged in writing. They are subject to our instructions and are regularly monitored by us. Other use of the information is not permitted and is not carried out by any of the service providers used by us. Alongside the service providers listed separately in this data privacy policy, data may be disclosed to individual categories of recipients, i.e. to companies in order to support promotions and special campaigns, as well as to external advisors and enforcement authorities.
5 Privacy Screen and Privacy Settings
In one of your first sessions on our apps, you will be presented with a Privacy Screen where you can choose whether you would like to consent to advertising or analysis technologies or not. The apps can be used without your consent to this data processing. You may refuse disclosure to all or some partners by clicking on “Info & Settings” in the Privacy Screen and then choosing “Disagree to all”. Your consent therefore is voluntary and may be revoked at any time by deactivating the relevant processing or all the processing using the switch under Settings > Info > Privacy Settings. In order to review the individual processes, please review our partners and processes in the Privacy Settings. There you will find detailed information about our partners with the links to their respective Privacy Policies and a list of purposes for which the apps process your data. In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU. In case that personal data is transferred to other countries which do not have a reasonable level of data protection in accordance with the opinion of the European Commission, similarly the so-called "standard contractual clauses" have been agreed with the partner.
In order to manage consent, we use the service Didomi, a company based in 10 rue Vaudetard, 92130 (Issy-les-Moulineaux), France. We will ask you for your consent via a pop-up in the App to disclose information with certain partners and/or for specific uses. Your choice will be saved on your device and communicated to all partners. The legal basis of this data processing is your consent under Article 6 Paragraph 1 a) GDPR.
Please note: even if you do not give your consent, some of the partners listed in our Privacy Settings will perform some data processing. Such data processing is provided by the partners on the basis of Article 6 Paragraph 1 f) GDPR in accord with their legitimate interest in such data processing even without your consent. This processing involves, for example the production of statistics, anti-fraud measures, or false-click detection. This may also include data processing that is technically necessary.
If you have deactivated your advertising ID (see below under 12), the dialogue box and the Privacy Settings just described will not be displayed. Personalization of advertising and/or the use of the advertising ID is not possible and therefore a consent to data processing is not necessary. If you activate the use of your advertising ID by making settings in your operating system, you will also see the dialogue described above. If you are using a version of the app that was released before the version with the version number 12.6.0 (Android) and 13.8.0 (iOS), the privacy settings are not provided with Didomi but with a former consent management system. If your version is older than 11.8.0 (Android), 12.16 (iOS), the dialog described above will not be displayed at all. This means that you have NOT GIVEN your consent to the described procedures. This means that only those processing operations will be carried out which can be carried out without your consent.
6 Storage of personal data
Data which is collected for payment processes for chargeable apps is only saved by us for as long as it held to be necessary in order to fulfil contractual or legal obligations, i.e. until the expiry of the statutory limitation period for proof purposes for claims under civil law or due to statutory retention obligations. For proof purposes, we must retain data from payment processes for a further three years from the end of the year in which the business relationships end. Any claims are time-barred according to the regular statutory limitation period, at the earliest at this time. Also following this period, we need to save certain data for bookkeeping reasons. We are obliged to do this due to statutory documentation requirements under the German Commercial Code and German Tax Code. The retention periods for documents stated therein are up to ten years. Data which can be assigned to a device-specific number will be deleted at the latest after 5 years of inactivity.
7 Push notification
The apps use push notifications, which you can select, alter or fully deactivate yourself in the apps at any time. Below, we will explain to you - in separate terms according to the mobile operating systems for which we offer the app - how the activation or deactivation of the push notifications work. In order to be able to send you push notifications, we use the technology of Urban Airship Inc, 1417 NW Everett St, Suite 300, Portland OR 97209, USA.
a) iOS
Open the application "settings" of iOS and select the menu point "notifications". In the following menu, you can find an overview of all apps which are installed on your device and which support push functions. Select the corresponding OneFootball app. You can activate or deactivate the push notifications as described here.
Inside the apps, you can set your preferences and only receive push notifications relating to your selected topics. In order to do this, open the "notifications" which you will find under "settings". Here, you can find an overview of your push settings, such as club, national team or news which you can individualize in detail (for example receipt of messages concerning all match results or only in case of goals, etc.). Finally, you can select the push notification for various events and turn these on or off via the symbol with the bell, which you can find in the top right hand side of the screen for each game.
b) Android
Open the application "settings" in the Android operating system and select the menu point "notifications" under "sounds and notifications. In the following menu, you can find an overview of all apps which are installed on your device and which support push functions. Select the OneFootball app. Here, you can activate or deactivate the push notifications. The names may differ slightly according to the Android version used.
In order to set your preferences for push notifications inside the apps, open the menu point "settings". Under "notifications", you can turn on or turn off push notifications for various events.
c) Windows Mobile
Open the settings app which you can find under "system settings" in the Windows Mobile operating system and select the menu point "notifications". In the following menu, you can find an overview of all apps which are installed on your device and which support push functions. Select the corresponding OneFootball app. Here, you can turn the push notifications on or off.
Inside the apps, you can set your preferences and only receive push notifications relating to your selected topics. In order to do this, you open the main menu and select the menu point "Favourites", which you can find under your profile. Here you can activate or deactivate push notifications for your favourites or teams which you follow, as well as for news.
8 Permissions
For certain functions, the apps need to be able to access certain services and data of your device. Depending on which mobile operating system you use, this may require you express agreement to the accessing. Below, we will explain to you - in separate terms according to the mobile operating systems for which we offer the app - what authorisations the apps requests and what these are necessary for.
a) iOS
Push notifications: Should you click OK in the request "Enable push notifications" , you are permitting the apps to inform you of certain events and topics by means of push notification (for example a goal scored by your favourite team), even if the apps are not currently open. The notifications can take place by means of sounds, reports and/or symbol letter (a picture of a number on the app icon). Further information concerning push notifications and your configuration options can be found under number 6a). Background updating: This function enables the apps to download data in the background and to update this, even if the apps are not currently open or are not being actively used.
Mobile data: This function enables the apps to download and update data outside of a WLAN network via mobile data connections (for example GSM, UMTS or LTE). Camera use: We only request this permission if you wish to take and share a photo within the app. It goes without saying that we do not save the photos.
b) Android
Apart from the standard entitlements for the operation of Android apps (such as the receipt of internet access or the option of letting the device vibrate; also called "normal entitlements" by Google), we do not request any further entitlements. Using data which is saved on an external storage device: This function allows the app to save content on the storage card of your device. This is necessary in order to be able to provide content, for example relating to your favourite team, even if no Internet connection is currently present. For this purpose, the apps only use their own saved content. Other data on the storage card is neither deleted, altered or read.
c) Windows Mobile
Access to your Internet connection, using network services of your device, access to your browser, access to your Internet connection as server: These functions allow the apps to obtain data from the Internet (such as current messages and live scores) and to determine whether a connection to the Internet exists via a WLAN network or via a mobile data connection (for example GSM, UMTS or LTE), By means of this, larger data quantities causing problems for possible restricted data volumes should be avoided. In addition, this function allows the regular updating and delivery of new data in the apps as a so-called "live tile", which you can activate or deactivate in your system settings at any time. Using an anonymous Microsoft account: These functions simplifies your login in process within the apps by means of the issuing of an anonymised Microsoft account. Using music, using current reproduced media elements: These functions allow the apps to reproduce music (for example, live reporting, radio) and clips. Send push messages: This function permits the apps to inform you of certain events and topics by means of push notification (for example, a goal scored by your favourite team), even if the apps are not currently open. You can find further information under number 6c). Using data which is saved on an external storage device: This function allows the app to save content on the storage card of your device. This is necessary in order to be able to provide content, for example relating to your favourite team, even if no Internet connection is currently present. For this purpose, the apps only use their own saved content. Other data on the storage card is neither deleted, altered or read.
9 Inclusion of videos
a) YouTube
We have included videos in our apps saved with YouTube which can be played directly from our apps. YouTube is a group company of Google and a service of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. By means of the visit to our apps, YouTube is informed that you have accessed the corresponding sub-page. This takes place regardless of whether you are logged into YouTube or not. Should you be logged in to YouTube, your data is however assigned directly to your account. Should you not wish for this to take place, you need to log out before viewing the video. YouTube saves your data as usage profiles and uses these for the purposes of advertising, market research and designing its website in line with customer requirements. Such an evaluation takes place even for users who are not logged in. You can prevent the recording of this data by Google by de-activating the "personalised advertising on the web" button in the Google advertising settings. In this case, Google will only continue to display general advertising which was not selected on the basis of the information relating to you which was recorded.
In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU. The legal basis is Article 6 Paragraph 1 f) GDPR, based on the legitimate interest of OneFootball in providing video and picture contents. The purpose and scope of the data collecting by YouTube, as well as the further processing and use of your data there and your rights and settings options for the protection of your private sphere in this respect can be found in the privacy policy of Google.
b) JW Player
We also use the JW Player to integrate videos into our site. For this purpose, the services of LongTail Ad Solutions, Inc., d/b/a JW Player, 2 Park Avenue, 10th floor, New York, NY 10016, USA (“JW Player”) are integrated into our app. To show you relevant videos and analyse your interactions in reports, we will process the following data: your IP address, device identifiers, operating system, browser, screen resolution and your interaction with the JW Player, this information will be stored and processed by JW Player. Further information can be found in its Privacy Policy of Google. In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU. We have agreed the standard contractual clauses with JW Player as identified in the Official Journal of the European Community. The legal basis for the data processing as described is Article 6 Paragraph 1 f) GDPR and is based on the legitimate interest of OneFootball in the integration of video and image content.
10 Analysis
In order to improve our apps, we use various technologies to analyze the usage behavior and to evaluate the associated data. These procedures take place anonymously or on the basis of pseudonyms, however never in a directly personal way. Below, we wish to explain these technologies and the providers used for this purpose in more detail. For this purpose, we use so-called number pixels with which we create statistics.
a) iOS and Android:
We use the services of branch.io (a service of Branch Metrics, Inc., 2443 Ash Street, Palo Alto, California 94306, USA). Branch provides us with a deep linking solution, therefore helps us to point you to the exact part of the content you were looking for. We use different Firebase Services, including Remote Config, A/B Testing, Performance Monitoring, Crashlytics, Predictions and App Distribution (services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Those services help us to optimize our product, spot and fix issues and make sure, that all APIs work properly, like Didomi that is collecting your consent. Urban Airship (a service of Urban Airship Inc, 1417 NW Everett St, Suite 300, Portland OR 97209, USA), we use to deliver in-app messages and push notifications to the right users (e.g. followed teams).
Localytics (a service of Localytics, Inc., 8th Floor, 101 Arch St, Boston, MA 02110, USA) helps us to understand the user’s problems as well as gives us insight on how many we users we have, we look at this data in an aggregated form and not at single user behaviour. For iOS only, we also use the service of New Relic, (New Relic, Inc. is a Delaware corporation headquartered at 188 Spear Street, Suite 1200, San Francisco, CA 94105. New Relic, Inc.) that enables us to spot and fix issues as well.
In the cases where personal data is transferred outside of the European Union, the named providers have undertaken to comply with the data protection standards of the EU. In case that personal data is transferred to the USA or to other countries which do not have a reasonable level of data protection in accordance with the opinion of the European Commission, the so-called "standard contractual clauses" have been agreed with Localytics Inc, which you can view in the Official Journal of the European Communities.
The legal basis is Article 6 Paragraph 1 f) GDPR, based on our legitimate interest in analyzing usage behavior in order to improve and further develop the apps.
b) Analytics and marketing attribution
With the help of adjust.io, an offer of Adjust GmbH, Saarbrücker Straße 37a, 10405 Berlin, Germany, we collect information, evaluate it and optimize the advertisements booked by us (see also below under 11 Advertising). For this purpose, Adjust collects information from you as user of our apps. This applies, for example, to device identifiers and connection data, such as your IP address or advertising ID. With the help of this data, your app usage will be evaluated and advertisements that brought you or are intended to bring you to our Apps, will be optimized. You can find more information about Adjust on the privacy pages of Adjust. The legal basis is Article 6 Paragraph 1 f) GDPR, based on our legitimate interest in analysing usage behaviour and marketing measures in order to allocate budgets and improve the apps.
c) Opt-Out of Analytics
You can deactivate these services, if you no longer require the OneFootball analyses. For this purpose, you can easily carry out the deactivations with the assistance of the "opt out" button which is visible in the data privacy policy. You can find this by clicking in on "info" in the corresponding app under your profile and then selecting "data privacy policy". Regarding Urban Airship and Localytics, opting out does not mean a complete deactivation of the services. In both cases “keep-alive” server call may take place. These are maintaining a connection between the servers. No personal data is processed in these cases.
11 Advertising
In order to showcase relevant adverts to our users, we use various advertising technologies. These procedures take place anonymously or on the basis of pseudonyms, however never in a directly personal way. In case you have consented to the processing, we, respectively our partners collect and process the Apple advertising ID (IDFA) on iOS devices and the Google advertising ID on Android devices in order to analyze and measure, select content and personalize advertisements. The advertising IDs are unique but not personalized and non-permanent identification numbers (see below 10.2 a) and b)) for a specified end device which are provided by the operating systems. In case you want to know more about our partners, check our Privacy Settings described in 5 above.
12 Deactivating Ad IDs
In addition to our Privacy Settings described under 5 above, you can also use settings in your operating system to prevent the delivery of personalized advertising. We will explain to you below - in separate terms according to the mobile operating systems for which we offer the app - how the activation or deactivation of the personalized advertising technologies (usage of advertising IDs) works. By deactivating you ensure that the delivered advertisement is no longer interest-based, as the Apple Ad-ID or Google Advertising ID is no longer used and information about your interaction with the app or advertisements can no longer be associated with an Advertising ID.
a) iOS
Open the "Settings" application of iOS and choose the menu point "data protection" and then the sub-point "Advertising". Activate the option "Limited ad tracking", then we can only carry out limited measures, such as the determining the unique user or combating fraud. In the same menu, you can reset the Ad ID at any time ("Reset Ad ID"), then a new ID will be created which will not combined with the data which was previously collected.
b) Android
Open the application "Google settings" and select the menu point "Adverts". Activate the "Deactivate interest related advertising" option, in order to prevent the creation of profiles and the display of interest related advertising. In the same menu, you reset the Google advertising ID at any time ("Reset advertising ID"), then a new ID will be created which will not combined with the data which was previously collected.
13 Your rights
You have the right to information about the processing of your personal data by us at any time. In this context we will explain the data processing to you and provide you with an overview of the data stored about you. If data stored by us is incorrect or no longer current, you have the right to have this data corrected. You can also request the deletion of your data. If, in exceptional cases, deletion is not possible due to other legal regulations, the data will be blocked - provided the necessary conditions are met - so that it is only available for this legal purpose. You can also have the processing of your personal data restricted if, for example, you doubt the accuracy of the data. Under certain conditions, you also have the right to data transferability, i.e. that we send you upon request a digital copy of the personal data you have provided us with. In order to assert your rights described here, you can contact us at any time using the contact details given above. This also applies if you wish to receive copies of guarantees to prove an adequate level of data protection.
Your inquiries regarding the assertion of data protection rights and our answers to them will be kept for documentation purposes for a period of three years and in individual cases for the assertion, exercise or defense of legal claims even beyond this period. The legal basis is Art. 6 Paragraph 1, f.) GDPR, based on our interest in defending against any civil law claims under Art. 82 GDPR, avoiding fines under Art. 83 GDPR and fulfilling our accountability under Art. 5 GDPR. You have the right to revoke a consent previously provided to us at any time. The consequence of this is that we will no longer process your data in relation to that consent in the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation. If we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time for on grounds relating to your particular situation. If you object to data processing for direct marketing purposes, you have a general right of objection, which we will implement without requiring you to state your reasons for objecting. If you wish to exercise your right of revocation or objection, simply send an informal message to the contact details listed above.
Finally, you have the right to complain to the regulatory authority responsible for data. You can exercise this right at the regulatory authority in the member country of your place of residence, your place of work, or the place in which the violation allegedly took place. In Berlin, where the registered office of OneFootball is located, the regulatory authority is: the Berlin Data Protection and Freedom of Information Officer, Friedrichstrasse 219, 10969 Berlin. 14 Changes to the data privacy policy We reserve the right to alter this data privacy policy. The current version can be accessed via our apps.
As of: May 2022