Privacy Policy

Controller identification

1. Legal framework

The controller processes personal data of users in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act No. 18/2018 Coll. on Personal Data Protection

2. What personal data we collect

When providing services we process the following categories of personal data:

• Identification data: Name, surname, email address
• Technical data: IP address, browser type, operating system, cookies
• Payment data: Processed securely via third parties (Stripe, PayPal) – we do not store card numbers
• Usage data: History of interaction with the site, user preferences

3. Purpose and legal basis of processing

We process personal data on the following legal bases:

• Performance of contract (Art. 6(1)(b) GDPR): Account registration, service provision, payment processing
• Legitimate interest (Art. 6(1)(f) GDPR): Service improvement, analytics, protection against abuse
• Consent (Art. 6(1)(a) GDPR): Marketing communications, cookies (where required)
• Legal obligation (Art. 6(1)(c) GDPR): Accounting, tax regulations

4. Data retention periods

• Accounting and tax documents: 10 years (pursuant to Slovak laws: Act No. 222/2004 Coll. on Value Added Tax and Act No. 431/2002 Coll. on Accounting)
• User account data: Until account deletion or withdrawal of consent
• Technical logs: Maximum 12 months
• Marketing consents: Until withdrawal of consent

5. Your rights under GDPR

As a data subject you have the following rights:

• Right of access (Art. 15 GDPR): Obtain confirmation of what data we process about you
• Right to rectification (Art. 16 GDPR): Correct inaccurate or incomplete data
• Right to erasure (Art. 17 GDPR): "Right to be forgotten" under certain conditions
• Right to restriction (Art. 18 GDPR): Restrict the processing of your data
• Right to portability (Art. 20 GDPR): Receive data in a structured format
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interest
• Right to lodge a complaint: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic

Exercise your rights: Contact us at: info@futbaldata.sk

6. Data security

We have implemented appropriate technical and organisational measures to protect personal data:

• SSL/TLS encryption for data transmission
• Regular security updates of systems
• Restricted access to personal data for authorised persons only
• Data backups in case of failure

7. Cookies and tracking technologies

We use the following types of cookies:

• Necessary cookies: Required for basic functionality (login, cart)
• Analytical cookies: Help us understand how you use our site
• Marketing cookies: Only with consent, for personalised advertising

You can reject cookies at any time in your browser settings.

8. Sharing data with third parties

We may share your data with:

• Payment processors: Stripe, PayPal (within the EU)
• Hosting services: For server operation
• Analytics tools: Google Analytics (anonymised data)

All processors are contractually bound to comply with GDPR and ensure the protection of your data.

9. Consent and withdrawal

If we process your data based on consent, you may withdraw that consent at any time by sending an email to info@futbaldata.sk.

Note: Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal, but may limit the provision of some services.

10. Changes to the privacy policy

These policies may be updated in accordance with changes in legislation or our services. We will inform you of significant changes by email or notice on the site.

Last updated: 2 February 2026