On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) will go into effect
The European Parliament adopted the GDPR in April 2016, replacing an outdated data protection directive from 1995. It carries provisions that require businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. The GDPR also regulates the exportation of personal data outside the EU.
Your data controller role as a competition Organizer
Statbeat acts as a data processor for Organizers that use Statbeat to organize a competition. You as an Organizer have a customer relationship with players and teams that attend your competition. Therefore, you as a data controller have a legal agreement to collect attendees register. After the competition, when all obligations are filled, you as a data controller have to transform personal data anonymous if attendees want to. Statbeat will keep all anonymous statistics forever for statistical purposes. You as an Organizer can demand a DPA (Data Processing Agreement) from Statbeat to make sure Statbeat does not give your customers’ personal data to third parties. Also, Statbeat has signed DPAs from its all third party data sub processors to protect personal data in Statbeat.
Your data inputting role as a team manager
The competition Organizer acts as a data controller in a competition they Organize with Statbeat. You can not attend a competition without giving personal data about your team and attendees to the Organizer. You as a team manager and your team players have a customer relationship with the Organizer, that is the reason for a legal agreement to collect personal data. You can demand the Organizer to transform your personal data anonymous after the competition when all obligations are filled.
Statbeat collects personal data for two purposes:
a) We collect personal data as a data processor for Organizers, such as name, phone number and email address, player names and statistics, player numbers, player ages, team manager billing, under the direction of our Organizers for teams to attend a competition, and have no direct relationship with individuals whose personal data we process in connection with our Organizer’s use of Statbeat.
b) If you decide to create an account in Statbeat, we collect personal data during the sign up process as a data controller, such as your name and email address, and other data you decide to give us, in order to provide the service. We also store your social connections, team memberships, activities, posts, match and event attendances and match statistics.
We use personal data for two purposes:
a) Organizers that use Statbeat to organize a competition use collected personal data to do actions that are mandatory to organize a competition, such as collect payments, contact attending team managers, collect match statistics and penalties for team players and control team players punishments and age restrictions. We use email to inform team managers and players automatically on behalf of the Organizer about the tournament.
b) If you decide to create an account in Statbeat, we use personal data to provide Statbeat. We use email to inform about competitions, events and statistics in Statbeat. We will also inform you about our product designed for Organizing a competition.
Our sub processors’ Data Usage
Statbeat uses certain sub processors and content delivery networks to assist it in providing Statbeat. A sub processor is a third party data processor engaged by Statbeat who has or potentially will have access to or process service data (which may contain personal data). Statbeat engages different types of sub processors to perform various functions as explained below. Statbeat undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed sub processors that will or may have access to or process personal data.
Statbeat requires its sub processors to satisfy equivalent obligations as those required from Statbeat (as a data processor) as set forth in Statbeat’s Data Processing Agreement (DPA):
This policy does not give Organizers any additional rights or remedies and should not be construed as a binding agreement. The data herein is only provided to illustrate Statbeat’s engagement process for sub processors as well as to provide the actual list of third party sub processors and content delivery networks used by Statbeat as of the date of this policy (which Statbeat may use in the delivery and support). If you are a Statbeat Organizer and wish to enter into our DPA, please contact firstname.lastname@example.org.
Statbeat servers and databases are hosted at Digital Ocean. Digital Ocean's products are certified under the EU-U.S. Privacy Shield framework set forth by the U.S. Department of Commerce and the European Union. Statbeat uses two different services by Digital Ocean.
Statbeat works with certain third parties to provide specific functionality within Statbeat. These providers are the sub processors set forth below. In order to provide the relevant functionality these sub processors access personal data.
Statbeat discloses all personal data for statistical purposes in competitions, events or player profile except email, date of birth and competition payment information.
Data Deletion Policy
Statbeat does not delete personal data ever because of competition and personal career statistical purposes.
a) If you have attended a competition organized with Statbeat and would either like to amend or delete your personal data or no longer wish to be contacted by one of our Organizer’s that use Statbeat, please contact the Organizer that you interact with directly. Your personal data and team players’ competition statistics are kept forever because of your career and the competition statistical purposes. If you want to be totally forgot, your competition organizer can contact Statbeat to transform your statistics anonymous. With anonymized data, there is no way to re-identify the data subject and, therefore, it is outside the scope of the GDPR.
b) If you have created an account in Statbeat and would like to amend personal data, please log in to Statbeat and go to your profile. If you don’t remember your password please go to https://www.statbeat.com/password_forgotten. If you want to be totally forgot, you can change your name to Anonymous Player and deactivate your account. With anonymized data, there is no way to re-identify the data subject and, therefore, it is outside the scope of the GDPR
Your rights as an individual Data subject
A key part of GDPR is letting individuals choose what happens to their personal data. Individuals can ask Organizers (data controller in competitions) and Statbeat (data controller in Statbeat user register) to:
With anonymized data, there is no way to re-identify the data subject and, therefore, it is outside the scope of the GDPR.
Like most website operators, Statbeat collects non-personally-identifying data of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Statbeat's purpose in collecting non-personally identifying data is to better understand how Statbeat's visitors use its website.
Statbeat uses retargeting, which allows us to make our online offer more interesting when you later browse internet. This technology implies that we can advertise our website and products after you visited our website. We do this by analyzing user behavior from data collected by our cookies. Even this kind of data is anonymous, with no personal data or user profiles being stored.
| Business Transfers
If Statbeat, or substantially all of its assets were acquired, or in the unlikely event that Statbeat goes out of business or enters bankruptcy, user data would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Statbeat may continue to use your personal data as set forth in this policy.