1. PROVIDER AND RESPONSIBLE PARTY

Responsible in the sense of the General Data Protection Regulation (GDPR) is
Clava Sports S.R.L.
Via Fasser 16/A
39042 Brixen
Email: privacy@clava-sports.com

2. DATA CATEGORIES, PURPOSES, AND LEGAL BASIS

2.1. Establishing Connection

Each time a user accesses the app, the device used automatically transmits the following data for technical reasons to the Clava Sports web server:

This data is processed for the purpose of enabling the use of the app (establishing connection), system security, technical administration, and improving the network infrastructure. Data is only matched with other data sets or shared with third parties in anonymized form. Additionally, anonymized usage is conducted for statistical purposes. More information about web analysis can be found below in section 4 "Web Analysis". The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the above-listed purposes for data collection. Under no circumstances do we use the collected data to draw conclusions about your person. We delete this data after 50 days.

2.2. Clava Account

To create a Clava account, every user must register for Clava Sports' digital offering. The following data is collected:

We need this information to assign an account to a specific user.

A logged-in user has the opportunity to manage a fan ticker. The username is published in this process.

After registration and the first login, the current terms of use are automatically displayed, which can be read at any time at https://www.clava-sports.com/tos.

2.3. Player Profile

Registered users can take over a registered player profile. Here, we offer the possibility to voluntarily provide the following data:

The provision of this additional information can make the Clava account more attractive and informative. This is intended to enhance networking and interaction among users and strengthen the sense of community in the South Tyrolean football community as a whole.

The data collected in this context is processed for the creation and display of the account. The legal basis for processing is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. a GDPR, insofar as you provide data voluntarily.

3. RIGHTS OF THE DATA SUBJECT

If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR).

If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).

If the legal requirements are met, you can request the deletion or restriction of processing and object to the processing (Art. 17, 18, and 21 GDPR).

If you have consented to data processing or if there is a contract for data processing and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).

To exercise your rights, please contact privacy@clava-sports.com.

For data protection complaints, you can contact the competent supervisory authority.

4. WEB ANALYSIS

With the services listed in this section, the provider can monitor and analyze traffic data as well as track user behavior.

4.1 Google Analytics for Firebase (Google Ireland Limited)

Google Analytics for Firebase or Firebase Analytics is an analysis service provided by Google Ireland Limited.

More information on the use of data by Google can be found in Google's partner policy. Firebase Analytics can share data with other tools provided by Firebase such as Crash Reporting, Authentication, Remote Config, or Notifications. Users can review this privacy policy for a detailed explanation of the other tools used by the owner. This application uses identifiers for mobile devices and cookie-like technologies to run the Google Analytics for Firebase service. Users can opt-out of certain Firebase features through their mobile device settings, such as ad settings for mobile devices, or by following other instructions in this privacy policy regarding Firebase.

Processed personal data: application executions; application updates; number of users; number of sessions; app launches; operating systems; unique device identification for advertising (e.g., Google Advertising ID or IDFA); device information; usage data; region; session duration; tracker. Processing location: Ireland – Privacy Policy.

5. COOKIES

We use cookies. Cookies are small text files that are stored on your device when you access the site. They cannot transmit viruses or malware to your computer but can contain information that allows the identification of the user.

There is a distinction between transient cookies, which are deleted once your browser is closed, and persistent cookies, which are stored beyond the respective session and recognize you on your next visit to the website.

In terms of function, there is a distinction between:

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We would like to point out that you may not be able to use all features of this website.

6. REQUESTS VIA EMAIL OR TELEPHONE

If you contact us via email or telephone, we will store and use your provided data to process your request. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR. We delete the data arising in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

7. NEWSLETTER

We offer a newsletter to inform you about current events. To receive the newsletter, we need your email address and the following data:

After entering the data, you will receive an email to confirm your registration. This ensures that no one registers for the newsletter with an email address belonging to another person. Registration is logged to verify the registration process in accordance with legal requirements. The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent to receive the newsletter at any time by unsubscribing via the link at the end of each newsletter.

8. HOSTING

To operate our website, we use services provided by hosting companies that ensure the functionality of our website. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

9. STORAGE DURATION

We store your personal data only as long as necessary to achieve the purposes outlined in this privacy policy or as required by law.

After the storage duration has expired, your data will be deleted unless you have expressly consented to further use of your data or if we have reserved a legally permitted further use of the data, about which we inform you accordingly.

10. PUSH NOTIFICATIONS WITH GOOGLE FIREBASE CLOUD MESSAGING

We use the messaging service Google Firebase Cloud Messaging to send you push notifications. Firebase Cloud Messaging is provided by Google Ireland Limited.

To enable you to receive push notifications, your device is registered with a unique device ID. This is only used for sending notifications. The processing of personal data in this context is based on Art. 6 para. 1 sentence 1 lit. f GDPR.

Processed personal data: unique device identification for advertising (e.g., Google Advertising ID or IDFA). Processing location: Ireland – Privacy Policy.

11. DISPLAY OF CONTENT FROM EXTERNAL PLATFORMS

We use services to display content from external platforms on our website and in our app. The use of such services can result in data being collected by the provider of the respective platform. Processed personal data: usage data. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

12. INFRASTRUCTURE MONITORING

We use services to monitor and analyze our infrastructure to ensure the operation and stability of our digital offerings. Processed personal data: usage data. The legal basis for processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

13. ADDITIONAL INFORMATION ABOUT DATA COLLECTION AND PROCESSING

We may provide you with additional information about specific data collection and processing activities related to our digital offerings and services. For more detailed information, please refer to the respective sections of this privacy policy or contact us directly.


Version 2.0.0 of the Privacy Policy, published 2023-10-02