Data Protection (GDPR)

Our Commitment to Data Protection

FootballEvolution is committed to protecting the privacy and security of your personal data. This page provides information about how we handle your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. For a comprehensive overview, please also refer to our Privacy Policy.

1. Data Controller

FootballEvolution acts as the data controller for the personal data processed through our platform.

2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a Contract: Processing is necessary to provide the services you have subscribed to or requested (e.g., managing your account, providing training modules).
• Consent: Where required, we obtain your explicit consent for specific processing activities (e.g., collecting certain types of data, sending marketing communications, processing children's data with parental consent).
• Legitimate Interests: We process data for our legitimate interests, such as improving the platform, ensuring security, and analyzing usage patterns, provided these interests do not override your fundamental rights and freedoms.
• Legal Obligation: Processing is necessary to comply with legal requirements (e.g., financial regulations, law enforcement requests).

3. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): You can request the deletion of your personal data under certain conditions.
• Right to Restriction of Processing: You can request that we limit the processing of your data under certain circumstances.
• Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Information" section below or through your account settings where applicable.

4. Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Utilizing the security infrastructure of Supabase (our backend provider), which includes measures like encryption at rest and in transit.
• Implementing role-based access controls to limit data access to authorized personnel.
• Regularly reviewing our information collection, storage, and processing practices.
• Requiring secure password practices for user accounts.

While we strive to protect your personal data, no system is completely secure. We encourage you to use strong passwords and notify us immediately of any suspected unauthorized access to your account.

5. International Data Transfers

Our backend services are provided by Supabase, which may store data on servers located outside the European Economic Area (EEA). Supabase implements Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure that data transfers comply with GDPR requirements. By using our Service, you consent to the transfer of your data to these locations.

6. Data Breach Notification

In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, in accordance with GDPR requirements.

7. Children's Data and Parental Consent

We take special care in handling the data of children (Players). Access to and processing of a child's personal data requires verifiable consent from a parent or legal guardian. Parents/guardians have the right to review, modify, or request deletion of their child's personal data by contacting us.

8. Contact Information

If you have any questions about our data protection practices or wish to exercise your rights, please contact our Data Protection representative via:

• Email: dpo@footballevolution.com
• Our Contact Page

For more detailed information on how we handle your data, please review our full Privacy Policy.