EYEBALL PLAYER APPLICATION PRIVACY POLICY

Eyeball s.r.o. with registered office Jungmannova 745/24, Prague 1 110 00, ID No.: 096 74 454, Tax ID No.: CZ09674454, registered in the Commercial Register maintained by Municipal Court in Prague, section C, insert 340190 (“EYEBALL“, “we”, “us” or “our”), as the data controller hereby informs in accordance with Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR“) about the processing of personal data within the EYEBALL Player Application (“Application“).

This document contains information about what personal data EYEBALL processes about users of the Application (“User”, “you” or “your”) and if relevant, their guardians, on what legal basis, for what purposes, to whom it may be transferred, and what rights User and guardians have in relation to the processing of personal data by EYEBALL

A. WHAT PERSONAL DATA DO WE PROCESS?

EYEBALL processes the following personal data:

a) Identification and contact data such as first name(s), surname, date of birth, address, nationality, second nationality, e-mail address, phone number, jersey number, team, photo; physical characteristics like height, weight, strong foot, position;

b) physical characteristics like height, weight, strong foot, position

c) profile information like your interests, language skills, favourite players and teams, etc. that you provide to us

d) recordings such as footage of matches you have played;

e) performance data derived from recordings such as data about passes, goals and other and other measured data;

f) service usage data such as content uploaded to the Application, your interactions with the Application and other players;

g) network identifiers including IP address, cookies and other similar technologies;

h) records of mutual communication such chat messages, e-mails, written correspondence, records of phone calls and records of other communication made through different channels;

i) data about your guardian such as the first name(s), surname, e-mail address, phone number.

B. WHY DO WE PROCESS PERSONAL DATA AND WHAT ENTITLES US TO DO SO?

EYEBALL processes personal data for the following purposes:

a) registration and maintenance of User account, based on the performance of the contract concluded with you;

b) provision of services within the Application, based on the performance of the contract concluded with you;

c) sending of news about the Application and our services and their updates, based on our legitimate interest since we would like to inform you about our products and services, as well as provide you with up-to-date information;

d) ensuring the quality of services, creation of analyses, surveys and statistics, based on our legitimate interest in keeping track of how our services are being used and in improving of quality of those services;

e) protection of legal claims, based on our legitimate interest in ensuring the proper protection and effective exercise of our rights and claims; and

f) compliance with our legal obligations, in particular in the field of tax and accounting that apply to us;

C. WHAT IS THE SOURCE OF THE PERSONAL DATA AND FOR HOW LONG DO WE PROCESS IT?

EYEBALL gets this information directly from you or from other sources, such as the affiliate club you play at or other recordings.

EYEBALL keeps personal data to the extent necessary for: a) the duration of the contract in the case of a purposes under points a) and b) above;

b) the duration of the contract and for following 12 months after its termination in the case of purpose under point c) above, unless you have previously objected to such processing;

c) the duration of the statute of limitations, including the period covering any suspension or interruption thereof, but typically not more than 4 years after the termination of the contract in the case of the purposes under points d) and e) above; d) the period stipulated by the relevant legal obligations in the case of the purpose under point f) above.

D. PROCESSING OF PERSONAL DATA OF GUARDIANS

If you are a guardian, we process your personal data, in particular your name, surname, e-mail address, telephone number and your relation to the player, for the purpose of provision of services within the Application to the player, based on our legitimate interest to provide Application to young players. For this purpose, we process your personal data for the duration of the contract.

We may also process your personal data for the purpose of protection of legal claims, based on our legitimate interest in ensuring the proper protection and effective exercise of our rights and claims. For this purpose, we process your personal data for the duration the statute of limitations, including the period covering any suspension or interruption thereof, but typically not more than 4 years after the termination of the contract.

If you give us your consent, we also process your personal data for the purpose of sending of news about the Application and our services and their updates until you withdraw your consent.

E. WHO PROCESSES YOUR PERSONAL DATA AND TO WHOM DO WE TRANSFER IT?

All of the above-mentioned personal data are processed by us as the controller. This means that we determine the above-defined purposes for which your data are collected, determine the means of processing and are responsible for its proper execution.

We may transfer your personal data to other controllers for the purpose of provision of services provided within the Application, especially by making data available to scouts, and the recruitment units of professional clubs.

Your personal data can also be transferred to other controllers in cases where we are obliged to pass on such data by law (in particular to tax authorities, courts and police in the exercise of their legal powers) and cases where we pass on such data to state authorities or third parties (in particular to victims of unlawful conduct) in order to achieve the aforementioned purposes.

EYEBALL also involves other entities as processors who process personal data on behalf of us and according to our instructions. In particular providers of information systems and technical infrastructure, in particular Mailgun Technologies, Inc., Amazon Web Services, Inc., White Interactive, Ltd., Google Firebase, Plotline, data analysis providers. All processors are bound by a data processing agreement to comply with the requirements under data protection legislation, in particular to protect your personal data.

Based on the location of the recipient, personal data may be transferred to third countries outside the European Economic Area. These countries may have different data protection laws and standards. All such transfers are only made if we take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Privacy policy. These steps include ensuring that third country to which transfer is made has been deemed adequately protective of your personal data for the purposes of data protection law by the relevant bodies or imposing contractual obligations on the recipient of your personal data using the standard contractual clauses issued by the European Commission.

F. WHAT RIGHTS DO YOU HAVE WHEN PROCESSING PERSONAL DATA?

Just as we have rights and obligations when processing your personal data, you also have certain rights when processing your personal data. These rights include:

F.1 Right to withdraw consent to processing

You may withdraw your consent at any time. However, this does not affect the lawfulness of the processing based on the consent given before its withdrawal.

F.2 Right of access

Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it outside of us and what other rights you have in relation to the processing of your personal data. You can find out all of this in this document. However, if you are unsure which personal data we process about you, you can ask us to confirm whether or not personal data relating to you is processed by us and, if it is, you have the right to access it. As part of your right of access, you can ask us for a copy of the personal data we are processing, and we will provide you with the first copy free of charge and subsequent copies at a charge.

F.3 Right to rectification

If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.

F.4 Right to erasure

In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met:

a) we no longer need your personal data for the purposes for which we processed it;

b) you exercise your right to object to processing (see “Right to object to processing” below) for personal data that we process on the basis of our legitimate interests, and we find that we no longer have such legitimate interests that would justify such processing.

c) it turns out that our processing of personal data no longer complies with generally binding regulations.

This right does not apply if the processing of your personal data is still necessary for:

a) to fulfil our legal obligation;

b) for archival, scientific or historical research or statistical purposes; or

c) establish, exercise or defend our legal claims.

F.5 Right to restriction of processing

In some cases, in addition to the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and not subject to any further processing operations – in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data if:

a) You dispute the accuracy of the personal data before we agree on what data is correct.

b) We process your personal data without a sufficient legal basis (e.g. beyond what we need to process), but you may prefer to limit such data before deleting it (e.g. if you expect to provide us with such data in the future anyway).

c) We no longer need your personal data for the above processing purposes, but you require it for the establishment, exercise or defence of your legal claims.

d) you object to the processing. The right to object is described in more detail in the section “Right to object to processing” below. We are obliged to restrict the processing of your personal data for the period of time that we are investigating whether your objection is justified.

F.6 Right to portability

You have the right to obtain from us all your personal data that you have provided to us and that we process on the basis of the performance of the contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order to enable us to easily transfer the data at your request, it may only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you in this form all data that we keep in paper form.

F.7 Right to object to processing

You have the right to object to the processing of your personal data based on our legitimate interest. We will stop processing your personal data if we do not have compelling legitimate grounds to continue such processing.

F.8 Right to lodge a complaint

Exercising your rights in the above manner is without prejudice to your right to lodge a complaint with the Personal Data Protection Office. You can exercise this right if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations.

You can file a complaint with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.

G. HOW CAN I EXERCISE INDIVIDUAL RIGHTS?

You can contact us on all matters relating to the processing of your personal data, whether it is a query, exercising a right, lodging a complaint or anything else, using the following contacts:

a) By email to: gdpr@eyeball.club

b) In writing to: Jungmannova 745/24, Prague 1 110 00

Current contact information is available on our website.

We will process your request without undue delay, but within one month at most. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.