Privacy Policy

We provide users of the mobile application “Roster PlayIn” (hereinafter, the App) with this Privacy Policy to offer information on how we process their personal data and protect their privacy and information.

We may update this Privacy Policy whenever necessary. If changes are made, we will notify you through the App or by other means so that you are informed of the new Privacy conditions. By continuing to use the features provided by our company after being notified of these changes, you are deemed to agree to them, except in cases where your explicit consent is required.

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights, and Law 34/2002 of July 11 on Information Society Services and Electronic Commerce, users of the platform are informed of the following:

1. WHO IS THE DATA CONTROLLER?

Your personal data will be processed by Roster PlayIn S.L. (hereinafter also referred to as “Roster PlayIn”), acting as the “Data Controller.” You may contact the Data Controller at the following email address: dpo@rosterplayin.com.

To ensure proper management of your data processing, Roster PlayIn has appointed a Data Protection Officer (hereinafter, DPO), who you may contact for any concerns. The DPO can be reached at the following email address: dpo@rosterplayin.com.

2. HOW AND WHY WILL YOUR PERSONAL DATA BE PROCESSED?

Personal data collected through this website may be processed by Roster PlayIn for the following purposes:

Purpose 1. User account management

Description: Creating an account and managing your profile (managing sports teams through the App).

Data processed: Identification data and personal characteristics, provided directly by the User via the corresponding form.

Legal basis: Article 6.1(b) of the GDPR. Processing necessary to provide the service (contractual performance).

Purpose 2. Customer support

Description: Providing requested services and information, both through the chatbot and conventional methods.

Data processed: Identification data.

Legal basis: Article 6.1(b) of the GDPR. Execution of the established contractual relationship.

Purpose 3. Sending proprietary commercial communications

Description: Sending commercial communications about products, services, and activities offered by Roster PlayIn that may interest users via conventional and electronic means (email and similar methods). Commercial communications may also be made through social media on behalf of Roster PlayIn.

Data processed: Identification data.

Legal basis: Article 6.1(a) of the GDPR. User consent.

Purpose 4. User behavior analysis with internal sources

Description: Analyzing navigation in the App to optimize and improve the User experience. These are non-invasive analyses aimed at improving services and applied technology.

Data processed: Identification data, personal and social characteristics (where applicable), obtained from the User’s navigation within Roster PlayIn.

Legal basis: Article 6.1(f) of the GDPR. Roster PlayIn’s legitimate interest in continuously improving the business model offered in the App and addressing any deficiencies in service delivery. For more information, you can contact the DPO at: dpo@rosterplayin.com.

Purpose 5. Sending satisfaction surveys

Description: Sending questionnaires and surveys to users to gather feedback on the services provided.

Data processed: Identification data.

Legal basis: Article 6.1(f) of the GDPR. Roster PlayIn’s legitimate interest in continuously improving the service offered in the App. For more information, you can contact the DPO at: dpo@rosterplayin.com.

Purpose 6. Transactional communications related to the service

Description: Communications via conventional and/or electronic means to the contact information provided by the User for the development, monitoring, maintenance, and execution of the Service.

Data processed: Identification and contact data.

Legal basis: Article 6.1(b) of the GDPR. Processing necessary to provide the service (contractual performance).

Purpose 7. Compliance with applicable regulations

Purpose: Ensuring compliance with legal obligations imposed on Roster PlayIn, which may include responding to judicial and administrative orders.

Data processed: Identification and contact data; data derived from the use of the service.

Legal basis: Article 6.1(c) of the GDPR. Processing necessary to comply with a legal obligation applicable to the data controller.

Purpose 8. User geolocation

Purpose: Obtaining geolocation data from the User’s personal digital device to provide better services through the App.

Data processed: Geolocation identification data.

Legal basis: Article 6.1(a) of the GDPR. User consent.

3. PERSONAL DATA RETENTION PERIODS

The personal data provided by the User will be retained as long as they remain registered in the App, without prejudice to the rights regulated in this clause and in clause 7. Additionally, data may be retained when necessary to comply with a legal obligation or for the formulation, exercise, and defense of legal claims.

If the User revokes their consent or exercises their rights to cancellation or deletion, their data will be retained in a blocked state and made available to judicial authorities for the legally established timeframes to address any potential liabilities arising from the processing of personal data.

In any case, the User may request detailed information about the applicable data retention periods by contacting dpo@rosterplayin.com.

4. ORIGIN OF PERSONAL DATA

The personal data processed by Roster PlayIn has been provided primarily by the User directly, such as name, surname, and contact details. The User is responsible for ensuring the accuracy and updating of this information.

Roster PlayIn may also collect information through the App, as well as data related to interests and usage, such as statistical or browsing data, based on the User’s participation.

The User is informed of their ability to edit the information they choose to share with Roster PlayIn. They can grant broader or more restricted access to their information as desired and may revoke their consent at any time.

Additionally, geolocation data from the User’s device may be collected, provided that the User has granted consent for this purpose. This data is used to facilitate service delivery and provide personalized and location-appropriate information. The User may disable access to geolocation data at any time and revoke consent for geolocation through their device or terminal settings.

5. DISCLOSURE AND RECIPIENTS OF PERSONAL DATA

All disclosures of personal data made by Roster PlayIn are necessary to fulfill the stated purposes or to comply with a legal obligation. These disclosures may involve the following companies and public entities:

• RECIPIENT 1: Public Administrations and the Justice Administration.

• RECIPIENT 2: Companies and entities collaborating with Roster PlayIn for the organization, management, and/or promotion of requests, events, or promotions, provided the User has decided to register and/or participate in them.

• RECIPIENT 3: Service providers contracted by Roster PlayIn to measure website traffic and user behavior using cookies and similar systems, in accordance with the Cookie Policy. These entities act as data processors.

Regarding the aforementioned disclosures, Users may request information about the specific entities with which agreements are maintained for such purposes.

In addition to the communications listed above, the personal data of the data subject may be accessed by third parties providing administrative or other services (e.g., administrative management or security services) to Roster PlayIn, as well as IT support, maintenance, or other IT services. These third parties may need access to and process personal data on behalf of Roster PlayIn, acting as data processors.

Some data processors, when providing services to Roster PlayIn, may transfer your personal data to servers located outside the European Union. In such cases, any international data transfer will comply with the criteria and requirements established by current regulations, ensuring appropriate legal guarantees. These guarantees may include entering into agreements with the data recipient that involve: (i) Standard Contractual Clauses approved by the European Commission to legitimize international data transfers to third countries, or (ii) Another valid legal instrument that ensures an adequate level of protection equivalent to that of the European Economic Area.

If you wish, you can obtain additional information about international transfers by contacting our DPO at dpo@rosterplayin.com.

6. MEASURES TAKEN TO PROTECT YOUR DATA

To ensure the security and confidentiality of your data, Roster PlayIn is committed to processing your personal data with absolute confidentiality and using it solely for the purposes stated in this privacy policy.

Roster PlayIn has adopted the security levels required for data protection and has implemented the necessary technical and organizational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorized processing, or access. These measures take into account the state of the technology, the nature of the data stored, and the risks to which they are exposed, whether from human actions or physical or natural environments. However, it is important to note that Internet security measures are not infallible.

7. WHAT ARE YOUR RIGHTS?

Roster PlayIn informs you that you have the right to confirm whether we are processing your personal data. Additionally, you have the following rights regarding your personal data:

• Access your data: You have the right to access your data to know what personal data we are processing that concerns you.

• Request rectification or deletion of your data: In certain circumstances, you have the right to rectify inaccurate personal data or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

• Request the limitation of data processing: In certain circumstances, you have the right to request the limitation of your data processing. In such cases, we will only retain your data for the exercise or defense of claims as stipulated by the General Data Protection Regulation (GDPR).

• Data portability: In certain circumstances, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and to transfer it to another data controller.

• Object to the processing of your data: In certain circumstances and for reasons related to your particular situation, you have the right to object to the processing of your data. In such cases, we will stop processing your data unless continued processing is necessary for compelling legitimate reasons or for the exercise or defense of potential claims.

• Right not to be subject to automated decisions: You have the right not to be subject to decisions based solely on automated processing, including profiling, that produces legal effects on you or significantly affects you in a similar way.

To exercise these rights, you may contact Roster PlayIn by sending an email to dpo@rosterplayin.com.

We will respond to your requests as soon as possible and, in any case, within one month of receiving your request. This period may be extended by an additional two months if necessary, taking into account the complexity and number of requests. In such a case, Roster PlayIn will inform you of the extension within the first month after the request.

Roster PlayIn informs you that you have the right to file a complaint with the competent data protection authority, especially if you are not satisfied with the exercise of your rights. For this purpose, you should contact the Spanish Data Protection Agency (www.aepd.es).www.aepd.es).

Before filing a complaint with the Spanish Data Protection Agency, you can contact Roster PlayIn’s DPO at dpo@rosterplayin.com.