Data controller:<\/strong> Remedios Garrido L\u00f3pez AndOne Stats acts as the data controller for the data required to manage its own relationship with users and customers, including account creation, handling enquiries, invoicing, payments, security, communications and commercial management.<\/p>\n\n\n\n When a club, academy or other organisation enters players\u2019, families\u2019, coaches\u2019 or team members\u2019 data into the platform and determines the purposes for which that data is used, that organisation is the data controller. In such cases, AndOne Stats processes the data on behalf of the organisation as a data processor, in accordance with the corresponding agreement. Requests relating to such data should preferably be addressed to the club or organisation that entered it, without prejudice to AndOne Stats\u2019 cooperation.<\/p>\n\n\n\n Identification and contact details:<\/strong> first name, surname, email address, telephone number and account details.<\/p>\n\n\n\n Club and team relationship data:<\/strong> organisation, role, category, team, season and assigned permissions.<\/p>\n\n\n\n Player data:<\/strong> first name, surname, date of birth, photograph, team and category.<\/p>\n\n\n\n Sports data:<\/strong> games, minutes played, points, rebounds, assists, fouls, statistics, assessments, reports, rankings and development by season.<\/p>\n\n\n\n Subscription and billing data:<\/strong> subscription plan, trial period, subscription status, invoices and tax information. AndOne Stats does not store full card details when payment is processed through Stripe or Google Play.<\/p>\n\n\n\n Technical and security data:<\/strong> IP address, device, browser, access logs, account activity and incidents.<\/p>\n\n\n\n Communications data:<\/strong> enquiries, support requests, preferences and consent to receive commercial communications.<\/p>\n\n\n\n The application is primarily intended for clubs, academies, coaches and responsible adults. Minors must not create an independent account. If, in exceptional circumstances, an account is enabled for a person under the age of 18, the prior and verifiable authorisation of their parent or legal guardian will be required in accordance with the platform\u2019s rules.<\/p>\n\n\n\n Sports data relating to minors may be entered by clubs, academies or authorised adults. The organisation or person entering the data is responsible for properly informing the families and ensuring that there is a valid legal basis for the processing. Where processing is based on consent and the child is under 14 years of age, consent must be given by the person exercising parental responsibility or legal guardianship. AndOne Stats may request supporting evidence and apply data-minimisation measures or restrict or delete the data.<\/p>\n\n\n\n Health data, information about injuries or diagnoses, or any other specially protected information must not be entered in free-text fields, notes or assessments unless a feature has been specifically enabled for this purpose and there is a sufficient legal basis and the relevant safeguards are in place.<\/p>\n\n\n\n Data may be processed by service providers that help us deliver the service, subject to the safeguards and agreements required by law. These may include:<\/p>\n\n\n\n Data may also be disclosed to public authorities, courts, financial institutions or other bodies where required by law or where necessary to establish, exercise or defend legal claims.<\/p>\n\n\n\n Some technology providers, such as Stripe or Google, may process data outside the European Economic Area. Where this occurs, the safeguards provided for under the General Data Protection Regulation will be applied, such as adequacy decisions, Standard Contractual Clauses or other valid mechanisms. Specific information is available in each provider\u2019s privacy policy.<\/p>\n\n\n\n Where authorised by the user, AndOne Stats may send news, content and offers relating to its services. Subscription is voluntary and may be cancelled at any time by using the unsubscribe link included in the messages or by writing to privacidad@andonestats.com<\/a>.<\/p>\n\n\n\n Communications required for account administration, security, service changes, payments or support are not advertising communications and may be sent for as long as the contractual relationship remains in force.<\/p>\n\n\n\n Data subjects may request access to, rectification or erasure of their data, restriction of processing, data portability or object to processing. They may also withdraw their consent without affecting the lawfulness of processing carried out before its withdrawal.<\/p>\n\n\n\n To exercise these rights, they may write to privacidad@andonestats.com<\/a>, stating which right they wish to exercise and providing the information required to verify their identity.<\/p>\n\n\n\n Where the data has been entered by a club or academy, the request may be forwarded to that organisation because it is the data controller. AndOne Stats will cooperate so that the organisation can respond to the request.<\/p>\n\n\n\n
Tax Identification Number (NIF):<\/strong> 30823897X
Business address:<\/strong> Calle La Ladera, 10, 14007 C\u00f3rdoba, Spain
Contact email:<\/strong> privacidad@andonestats.com<\/a>
Trade name:<\/strong> AndOne Stats<\/p>\n\n\n\n2. When AndOne Stats Acts as Data Controller and When It Acts as Data Processor<\/h2>\n\n\n\n
3. Data We May Process<\/h2>\n\n\n\n
4. Purposes, Legal Bases and Retention Periods<\/h2>\n\n\n\n
Purpose<\/th> Legal basis<\/th> Retention period<\/th><\/tr><\/thead> To create and manage accounts, provide the application, offer support and maintain security.<\/td> Performance of a contract and steps taken prior to entering into a contract; legitimate interest in maintaining security.<\/td> While the account or relationship remains active and thereafter for the applicable statutory or limitation periods.<\/td><\/tr> To manage trials, subscriptions, payments, invoicing and accounting or tax obligations.<\/td> Performance of a contract and compliance with legal obligations.<\/td> For the applicable tax, accounting and liability periods.<\/td><\/tr> To respond to enquiries and requests.<\/td> Steps taken prior to entering into a contract, consent or legitimate interest, depending on the circumstances.<\/td> For as long as necessary to handle them and, as a general rule, for up to one year thereafter, unless they must be retained for another reason.<\/td><\/tr> To send news, promotions and commercial communications relating to our services.<\/td> Consent; or legitimate interest where there is a prior relationship and the law permits it.<\/td> Until consent is withdrawn or the individual objects.<\/td><\/tr> To prevent misuse, unauthorised access, fraud and technical incidents.<\/td> Legitimate interest and, where applicable, compliance with legal obligations.<\/td> For as long as necessary to investigate and manage the incident and for the applicable liability periods.<\/td><\/tr> To host and manage sports data entered by clubs or organisations.<\/td> The legal basis is determined by the organisation acting as data controller; AndOne Stats acts as data processor.<\/td> In accordance with the organisation\u2019s instructions and the corresponding agreement. Upon termination, the data will be returned or deleted unless retention is required by law.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n 5. Children\u2019s Data<\/h2>\n\n\n\n
6. Recipients and Service Providers<\/h2>\n\n\n\n
\n
7. International Data Transfers<\/h2>\n\n\n\n
8. Commercial Communications<\/h2>\n\n\n\n
9. Data Protection Rights<\/h2>\n\n\n\n