Privacy Policy

Your privacy is very important to us. Accordingly, we have developed this Policy in order for you to understand how we collect, use, disclose and delete personal data. By using or accessing Statbeat, you are accepting the practices described in this Privacy Policy.

On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) will go into effect

The European Parliament adopted the GDPR in April 2016, replacing an outdated data protection directive from 1995. It carries provisions that require businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. The GDPR also regulates the exportation of personal data outside the EU.

Your data controller role as a competition Organizer

Statbeat acts as a data processor for Organizers that use Statbeat to organize a competition. You as an Organizer have a customer relationship with players and teams that attend your competition. Therefore, you as a data controller have a legal agreement to collect attendees register. After the competition, when all obligations are filled, you as a data controller have to transform personal data anonymous if attendees want to. Statbeat will keep all anonymous statistics forever for statistical purposes. You as an Organizer can demand a DPA (Data Processing Agreement) from Statbeat to make sure Statbeat does not give your customers’ personal data to third parties. Also, Statbeat has signed DPAs from its all third party data sub processors to protect personal data in Statbeat.

Your data inputting role as a team manager

The competition Organizer acts as a data controller in a competition they Organize with Statbeat. You can not attend a competition without giving personal data about your team and attendees to the Organizer. You as a team manager and your team players have a customer relationship with the Organizer, that is the reason for a legal agreement to collect personal data. You can demand the Organizer to transform your personal data anonymous after the competition when all obligations are filled.

Data Collecting

Statbeat collects personal data for two purposes:

a) We collect personal data as a data processor for Organizers, such as name, phone number and email address, player names and statistics, player numbers, player ages, team manager billing, under the direction of our Organizers for teams to attend a competition, and have no direct relationship with individuals whose personal data we process in connection with our Organizer’s use of Statbeat.

b) If you decide to create an account in Statbeat, we collect personal data during the sign up process as a data controller, such as your name and email address, and other data you decide to give us, in order to provide the service. We also store your social connections, team memberships, activities, posts, match and event attendances and match statistics.

Data Usage

We use personal data for two purposes:

a) Organizers that use Statbeat to organize a competition use collected personal data to do actions that are mandatory to organize a competition, such as collect payments, contact attending team managers, collect match statistics and penalties for team players and control team players punishments and age restrictions. We use email to inform team managers and players automatically on behalf of the Organizer about the tournament.

b) If you decide to create an account in Statbeat, we use personal data to provide Statbeat. We use email to inform about competitions, events and statistics in Statbeat. We will also inform you about our product designed for Organizing a competition.

Our sub processors’ Data Usage

Statbeat uses certain sub processors and content delivery networks to assist it in providing Statbeat. A sub processor is a third party data processor engaged by Statbeat who has or potentially will have access to or process service data (which may contain personal data). Statbeat engages different types of sub processors to perform various functions as explained below. Statbeat undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed sub processors that will or may have access to or process personal data.

Statbeat requires its sub processors to satisfy equivalent obligations as those required from Statbeat (as a data processor) as set forth in Statbeat’s Data Processing Agreement (DPA):

  • Protect personal data.
  • In connection with their subprocessing activities, use only personnel who are reliable and subject to a contractually binding obligation to observe data privacy and security, to the extent applicable, pursuant to applicable data protection laws.
  • Provide training in security and data protection to personnel to whom they grant access to personal data.
  • Promptly inform Statbeat about any actual or potential security breach.
  • Cooperate with Statbeat in order to deal with requests from data controllers, data subjects or data protection authorities, as applicable.
  • This policy does not give Organizers any additional rights or remedies and should not be construed as a binding agreement. The data herein is only provided to illustrate Statbeat’s engagement process for sub processors as well as to provide the actual list of third party sub processors and content delivery networks used by Statbeat as of the date of this policy (which Statbeat may use in the delivery and support). If you are a Statbeat Organizer and wish to enter into our DPA, please contact [email protected].

    Statbeat servers and databases are hosted at Digital Ocean. Digital Ocean's products are certified under the EU-U.S. Privacy Shield framework set forth by the U.S. Department of Commerce and the European Union. Statbeat uses two different services by Digital Ocean.

  • Digital Ocean (Digital Ocean, Inc., Cloud service provider, US) Statbeat uses Digital Ocean Platform to host Statbeat servers. Digital Ocean gets access to name, email, date of birth, statistics, teams, competitions, messages and billing data.
  • Digital Ocean Postgres (Digital Ocean, Inc., Cloud service provider, US) Statbeat uses Digital Ocean Postgres to store application data. Digital Ocean Postgres gets access to name, email, date of birth, statistics, teams, competitions, messages and billing data.
  • Statbeat works with certain third parties to provide specific functionality within Statbeat. These providers are the sub processors set forth below. In order to provide the relevant functionality these sub processors access personal data.

  • SendGrid (SendGrid, Inc., E-mail delivery service, US) Statbeat uses SendGrid to send notification emails to Organizers, team managers and registered or invited players. SendGrid gets access to name, email, team and competition.
  • Paytrail (Paytrail Oyj, Online payment service, Finland) Statbeat uses Paytrail to offer online payments to Organizers. Paytrail gets access to payee name, email, address, and phone number.
  • Data Disclosing

    Statbeat discloses all personal data for statistical purposes in competitions, events or player profile except email, date of birth and competition payment information.

    Data Deletion Policy

    Statbeat does not delete personal data ever because of competition and personal career statistical purposes.

    a) If you have attended a competition organized with Statbeat and would either like to amend or delete your personal data or no longer wish to be contacted by one of our Organizer’s that use Statbeat, please contact the Organizer that you interact with directly. Your personal data and team players’ competition statistics are kept forever because of your career and the competition statistical purposes. If you want to be totally forgot, your competition organizer can contact Statbeat to transform your statistics anonymous. With anonymized data, there is no way to re-identify the data subject and, therefore, it is outside the scope of the GDPR.

    b) If you have created an account in Statbeat and would like to amend personal data, please log in to Statbeat and go to your profile. If you don’t remember your password please go to https://www.statbeat.com/password_forgotten. If you want to be totally forgot, you can change your name to Anonymous Player and deactivate your account. With anonymized data, there is no way to re-identify the data subject and, therefore, it is outside the scope of the GDPR

    Your rights as an individual Data subject

    A key part of GDPR is letting individuals choose what happens to their personal data. Individuals can ask Organizers (data controller in competitions) and Statbeat (data controller in Statbeat user register) to:

  • Amend personal data
  • Delete personal data (transform personal data anonymous to keep statistics)
  • Export it
  • With anonymized data, there is no way to re-identify the data subject and, therefore, it is outside the scope of the GDPR.

    Website Visitors

    Like most website operators, Statbeat collects non-personally-identifying data of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Statbeat's purpose in collecting non-personally identifying data is to better understand how Statbeat's visitors use its website.

    Cookies

    A cookie is a string of data that a website stores on a visitor’s computer, and that the visitor's browser provides to the website each time the visitor returns. Statbeat uses cookies to help Statbeat identify and track visitors, their usage of Statbeat website, and their website access preferences. Cookies are required to use the Statbeat service.

    Retargeting

    Statbeat uses retargeting, which allows us to make our online offer more interesting when you later browse internet. This technology implies that we can advertise our website and products after you visited our website. We do this by analyzing user behavior from data collected by our cookies. Even this kind of data is anonymous, with no personal data or user profiles being stored.

    | Business Transfers

    If Statbeat, or substantially all of its assets were acquired, or in the unlikely event that Statbeat goes out of business or enters bankruptcy, user data would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of Statbeat may continue to use your personal data as set forth in this policy.

    Changes

    Statbeat may change its Privacy Policy from time to time, and in Statbeat's sole discretion. Statbeat encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.