Privacy Notice

 

Who are we

 

The controller is the company SUPER SPORT d.o.o., Zagreb, Krčka 18/d, OIB: 48471634697, and this Privacy Notice explains how your personal data will be used. This notice refers to the protection of personal data whose collection is related to the use of the “HRnogomet” application and web site.

 

We are committed to protecting your personal data when you use our “HRnogomet” service (via the application or web site) and we take the security of your data very seriously. We have strict security measures to protect your personal information that include robust security procedures that are regularly tested and updated. If you have any concerns about how we process or protect your personal information, or you wish to contact us regarding any aspect of this Notice, please contact us via the contact details at the bottom of this Notice.

 

Information we collect about you

 

We will collect personal information about you:

 

·        when you're using  “HRnogomet”,

·        when you register as a user of the “HRnogomet”,

·        when you communicate with us (e.g. by e-mail),

·        when there is any other interaction regarding the use of our services.

 

 

What we use your personal data for

 

What we use your personal data for

Typical personal data

Additional information

Legal basis

Fulfilment of obligations arising from contractual obligations from the use of the services for the registered players

·         name, surname, e-mail address, username

Processing is necessary to fulfil our obligations to enable the use of the application and the web site.

·         Performance of a contract

Improving the functionality of services and ensuring the system is secured and up to date

·         Log In data, IP address, technical information about your device

 

 

Processing is necessary for improving the functionality of the application and the web site and presentation of content in the most appropriate way, as well as for internal procedures and solving technical problems, data analysis, testing and research.
Also, processing is necessary to monitor compliance with the terms of use or other terms and conditions related to the use of the application and the web site, as well as to generally ensure the system is secured and up to date.

·         Legitimate interest in ensuring appropriate, working and effective interaction with users.

·         Legitimate interest in ensuring that the system is secured and up to date.

Communication with Customer Service

·         Name and surname, username, contact information, communication related to the reason why the user contacted customer service

Processing is necessary to provide you with customer support, to respond to your questions or to resolve complaints or concerns received.

·         Performance of a contract

·         Legitimate interest in increasing the satisfaction of the users with the service

 

Who we share your data with

 

We may share your data with third parties to ensure that our legal obligations are fulfilled or when we need support in fulfilling contractual obligations, for example:

 

·         Third parties authorized by us to act on our behalf to provide administrative, professional and technical support, such as business partners, suppliers and subcontractors, to manage the services we provide to you;

·         police, regulatory authorities or legal advisers in connection with any alleged criminal offence, illegal activity or suspected violation of the Terms of Use and/or violations of other rights and obligations, if required by law or where we suspect damage or potential harm to others;

·         professional associates outside the Company (e.g. lawyers, accountants, auditors);

·         associated companies.

In no case do we sell, disclose, disseminate, make available, transfer or otherwise communicate your information orally, in writing, electronically or by other means, to other entities for monetary or other compensation.

 

How long we keep your personal data

 

We store your personal data for a period specified by legal regulations or if the storage period is not prescribed, we keep personal data for as long as necessary for the purposes for which they are processed.

 

Exceptionally, all retention periods may be extended, for example, if necessary for the fulfilment of a specific regulatory obligation, the investigation of a criminal offence, the conduct of proceedings before a competent public authority or the resolution of a request or complaint.

 

Locations to which we may transfer your personal data

 

Our service providers, affiliates and third parties with whom we cooperate may be located outside the European Economic Area (EEA) in countries that do not have the same standards of personal data protection as those countries.

 

We will transfer your personal data to a territory outside the European Economic Area only under the following conditions:

·         The European Commission has determined that there is an adequate level of protection of personal data in the country to which we transfer your data;

·         A data processing and sharing contract containing standard contractual data protection clauses adopted by the European Commission regulating the transfer of personal data has been concluded;

·         Other protective mechanisms have been set up.

Further information on the safeguards for the transfer of personal data that we can apply can be found here.

 

Security

 

We take compliance with security regulations, standards, guidelines and privacy laws very seriously and promote security measures that will maintain the confidentiality, integrity and availability of personal data. We use reasonable organizational, technical and administrative measures to protect users personal data from unauthorized access, alteration, disclosure or destruction.

 

As a company, we use secure data centers with firewalls, high encryption standards and operate in accordance with the ISO27001:2013 standard. We also take the necessary steps to ensure that our business partners meet the appropriate safety standards.

 

Where we have given you (or where you have chosen) a password that allows you to access certain parts of our app, you are responsible for keeping that password. Please do not share your password with anyone.

 

 

Your rights

 

RIGHT

DESCRIPTION OF RIGHTS

Right to access

You have the right to access your personal data that we collect, and you can request detailed information in particular about the purpose of the processing, the type/categories of personal data being processed including access to your personal data, the recipients or categories of recipients and the envisaged period for which the personal data will be stored. Access to personal data may be restricted only in cases prescribed by Union or national law or where such restriction respects the essence of the fundamental rights and freedoms of others.

Right to be informed

You have the right to be provided with clear, transparent and easy-to-understand information about how we use your data and what are your rights.

Right to rectification

You have the right to request rectification or completion of your personal data if your data is not accurate, complete or up to date.

Right to erasure

You have the right to request the erasure of personal data if one of the following conditions is met:

  • Your personal data is no longer necessary in relation to the purposes for which it was processed;
  • You have withdrawn your consent on which the processing is based and there is no other legal basis for the processing;
  • You have objected to the processing of your personal data and the controller has no overriding legitimate reasons for the processing;
  • The personal data have been unlawfully processed;
  • The personal data must be erased in order to comply with a legal obligation under Union or State law to which the controller is a subject;
  • Personal data is collected in connection with the offer of information society services.

Right to restriction of processing

In certain cases, you have the right to request the restriction of the processing of personal data we hold about you:

·         if you dispute the accuracy of the personal data we hold;

·         or where you would have the right to demand the deletion of personal data, but you would prefer that we restrict our processing instead;

·         or where we no longer need to use the personal data to achieve the purpose for which we collected it, but you do need the data for the purpose of resolving legal claims;

·         or if you have objected to the processing of your personal data.

Right to data portability

You have the right to receive your personal data, which you have previously provided to the controller, in a structured form and in a commonly used and machine-readable format. You have the right to transfer this data to another controller without interference from the controller to whom the personal data was provided, if the processing is carried out by automated means and is based on consent or contract.

Right to object to processing

You have the right to object to the processing of your personal data based on our legitimate interest. If you exercise this right, we may no longer process your data for this purpose, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or if the processing is necessary for the establishment, exercise or defense of legal claims.

If personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data and the personal data shall no longer be processed for such purposes.

The right not to be subject to automated decisions, including profiling

You have the right not to be subject to a decision based solely on automated processing, including   profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to withdraw consent

You can withdraw your consent to the processing of your personal data at any time.  (e.g.  which you have given to provide you with marketing information about our services or products).  The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority, Croatian Personal Data Protection Agency (AZOP), via e-mail: azop@azop.hr or by post, at the address Selska cesta 136, 10 000 Zagreb.

 

To verify your identity, we may ask you for additional information necessary to identify you.

 

Contact us or our Data Protection Officer

 

If you have any questions about the Privacy Notice or want further information about your rights, please contact us via:

·         e-mail address osobni.podaci@supersport.hr, or

·         by post, at: SUPER SPORT d.o.o., Personal Data Protection Officer, Krčka 18/d, 10 000 Zagreb.

 

Changes to the Privacy Notice

 

Any changes to this Privacy Notice in the future will be posted on this page and, where necessary, you will be notified of them by e-mail.  Check regularly for updates or changes to this Notice.


This notice was last updated: June 2023.