Privacy Policy Footy Holding B.V.
Last updated: March 10, 2025
Footy Holding B.V., located in Amsterdam at Sportpark Spieringhorn 10, places great importance on the protection of your personal data. In this privacy policy, we explain which personal data we collect, how we process it, and what rights you have based on the General Data Protection Regulation (GDPR).
For privacy-related questions, you can contact us via info@footy.nl.
Data Controller
Footy Holding B.V. is the data controller within the meaning of the GDPR. This means that we determine which personal data is processed, for what purpose, and how. We are responsible for the lawful and careful processing of your personal data.
This privacy policy applies to all personal data that you provide to us or that we process in the context of our services.
Which personal data do we process and why?
We process personal data only if there is a valid legal basis under the GDPR.
Categories of personal data and legal bases:
| Personal Data | Purpose of Processing | Legal Basis under GDPR |
|---|---|---|
| First and last name | Account management and organizing matches | Performance of a contract (Art. 6(1)(b) GDPR) or Legitimate interest (Art. 6(1)(f) GDPR) |
| Passport photo | Identification of players during matches | Legitimate interest (Art. 6(1)(f) GDPR) |
| Email address | Communication, newsletters, and service updates | Performance of a contract (Art. 6(1)(b) GDPR) or consent (Art. 6(1)(a) GDPR) |
| Phone number | Contact for questions and verification | Legitimate interest (Art. 6(1)(f) GDPR) |
| IP address | Fraud prevention and security | Legitimate interest (Art. 6(1)(f) GDPR) |
Explanation:
- Legitimate interest (Art. 6(1)(f) GDPR): Showing passport photos and names is necessary to ensure the correct individuals participate in matches, to prevent fraud, and for awarding prizes, including “Man of the League.” The primary justification for legitimate interest is that through this registration, a (temporarily) suspended player cannot play again, either with the same or a different team.
- Performance of contract (Art. 6(1)(b) GDPR): Some data is necessary to manage your account and enable participation in the competition.
- Newsletters & Promotional Emails: We will only send marketing communications if you have given consent. You can unsubscribe at any time via the unsubscribe link in the email.
- Service updates: Messages regarding changes to our services or terms and conditions will always be sent, as it is necessary to inform you of important changes to your agreement.
Additionally, we may be required by law to process your personal data.
Name and photo in the Footy app
Your name and passport photo will be displayed on the Squad page in the Footy app. This is necessary for player identification by the Footy match coordinator prior to a match.
Having your passport photo and name in the Footy app is required for participation in matches. Footy may deny your participation if you have not uploaded a recognizable passport photo.
Your passport photo is visible only to your teammates, the match coordinator, developers, and the Footy system administrator. For other users of the Footy app, only your name is visible.
Disclosure to Third Parties
We may share your personal data with third parties if it is compatible with the purposes mentioned above. Disclosure to third parties may be necessary for the execution of the agreement we have with you, to serve our legitimate interest, or to comply with any legal obligation.
Our partners Zendesk (CRM), Mailchimp, PostgreSQL, and Firebase process personal data. If data is processed outside the European Economic Area (EEA), we apply standard contractual clauses (SCCs) to protect your data.
We sign processor agreements with companies that process your data on our behalf to ensure a similar level of security and confidentiality. We remain responsible for these processes. Outside of the above situations, we will only provide your personal data to other third parties with your explicit consent.
Our processors may only process data on our behalf and not for their own purposes.
Commercial Purposes
We may use your personal data for commercial purposes, such as informing you about new products or services from Footy. In such cases, you will only be informed via the email address or WhatsApp number you have registered. If you do not wish to receive information about new products or services, you can easily indicate this by clicking “unsubscribe” in the received email or by responding via WhatsApp that you no longer wish to be contacted.
Your data will not be sold or shared with third parties for commercial purposes unless you give explicit consent.
Cookies
A cookie is a small text file that is stored on your computer, tablet, or smartphone during your first visit to this website. You can opt out of these cookies by configuring your internet browser to stop storing cookies. You can also delete any previously stored information through your browser settings.
We use the following cookies:
- Functional cookies: These are cookies necessary for the technical functioning of the website and user convenience. They ensure the website works properly and remember, for example, your preferences. We can also use them to optimize the website. These are analytical cookies that do not infringe on your privacy, and we do not need prior consent to use them.
- Tracking cookies: We place cookies that track your browsing behavior so that we can offer tailored content and ads. Upon your first visit to our website, we already informed you about these cookies and asked for your consent for their use. You can opt out of cookies by configuring your internet browser to stop storing cookies. You can also delete previously stored information via your browser settings.
- Google Analytics: This website uses cookies from the American company Google as part of the “Analytics” service. We use this service to receive reports on how the website is used and to measure its quality and effectiveness. We use Google Analytics in the way prescribed by the Dutch Data Protection Authority to fall under the exception in the cookie law, so we do not need prior consent to use Google Analytics.
Your Rights: Access, Correct, or Delete
You have the right to access, correct, delete, or restrict the processing of your personal data. Additionally, you have the right to withdraw your consent for data processing or object to the processing of your personal data. If we are no longer allowed to process your data, it may have adverse effects on the products and services you receive from us.
You have the right to data portability if we process digital personal data that we either process with your consent or to perform an agreement we have with you.
This means you can request to transfer the digital personal data we hold about you to you or another organization you specify in a readable computer file.
You can send a request to access, correct, delete, transfer your personal data, withdraw your consent, or object to the processing of your personal data to info@footy.nl.
To ensure the request for access is made by you, we ask that you send a copy of your ID along with the request. In this copy, please black out your photo, MRZ (machine-readable zone), passport number, and Social Security Number (BSN) for privacy protection. We will respond within 30 days. For complex requests, this period can be extended by up to 60 days.
We also want to point out that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority.
Where and How are Personal Data Stored?
Your personal data is processed and stored in the following systems:
- League Manager (LM): Footy’s proprietary software where player data is managed.
- PostgreSQL database & Firebase: Secure storage locations for user data.
- Zendesk (CRM): Data is shared via an API with Footy’s customer service system.
Access Rights and Security
The CRM and LM are accessible to a limited number of Footy staff.
The PostgreSQL database and Firebase are accessible only to the match coordinator, authorized developers, and the system administrator.
We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, or unlawful processing.
If you suspect your data is not securely stored or have indications of misuse, please contact us immediately at info@footy.nl.
How Long Do We Retain Personal Data?
Personal data is not kept longer than necessary for the purposes for which it was collected. We apply the following retention periods:
- Account data: Retained as long as the account is active. After deletion, data is permanently erased within six months.
- Suspended accounts: Accounts of suspended players are kept for two years to prevent re-registration.
- Newsletter registration: Until you unsubscribe, with a maximum retention period of 5 years after the last contact.
After the retention period expires, we delete or anonymize your personal data.
Contact
We take the protection of your data seriously and implement appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unlawful alteration. If you believe your data is not properly secured or suspect misuse, please contact us at info@footy.nl or call +31(0)638032132.