Privacy policy
Effective date: April 1st, 2023
Introduction
This privacy policy (the "Privacy Policy") for 24/8 Basketball ("24/8 Basketball", "24/8", "we", "us", or "our") explains how and why we collect, store, use, and/or share ("process") information from you when you use our websites, mobile applications, or other services (collectively, the "Services").
Please also read our Terms and Conditions, which set forth the terms of use of the Services, located at https://24eight.app/en/legal/terms-and-conditions .
By using our services you agree to this Privacy Policy.
We reserve the right to modify this Privacy Policy at any time. In this case, if you are a registered user of our services, we will notify you by e-mail at least two (2) weeks before the new Privacy Policy comes into effect and display the corresponding information on the website. In addition, we will note the date of the last modification of this statement at the top. Any change will automatically take effect after these two (2) weeks.
If you have any questions or comments about this privacy policy, you can contact us at mail@24eight.app.
What data we collect
Data provided by you
We only collect personal information when you provide it to us, such as when you contact us, especially when you register for a 24/8 account, when you upload or share data within our 24/8 app in your profile or feed or through your general usage of our services.
We use the personal data you provide only when it is necessary to fulfill our services.
Through this personal data, you can be identified directly or indirectly.
Registration of a 24/8 account
To use our services such as the 24/8 Basketball App, you need a user account, which you can create directly in the app. When registering, you will be asked to provide some of the data listed below (some of which is mandatory) and by registering you agree to our Privacy Policy and Terms and Conditions. All data you enter in your account will be stored in a database at the service provider mentioned below.
Overview of collected data
Data | Purpose of processing | Legal basis of processing | Storage duration |
Name | Direct communication & presentation | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
E-mail address | Identification of the customer account | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Password | Identification of the customer account | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Profile picture | Representation | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Position | Representation | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Size | Representation | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Team | Representation | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Location data | Presentation/Local Rankings | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Birthdate | Assignment of fitting opponents and game modes | Implementation of the contractual relationship | Until 30 days after deletion of the customer account |
Overview of partners with whom data is shared
Designation of the provider | Service provider type | Data transfer to third country | Third country | Guarantees according to Art. 44ff DSGVO |
Amazon Web Services | Processor | Yes | Ireland | EU standard contractual clauses |
Firebase | Processor | Yes | Global server network | EU standard contractual clauses |
Processor | Yes | Global server network | EU standard contractual clauses | |
Google AdMobs | Processor | Yes | Global server network | EU standard contractual clauses |
SendInBlue | Processor | No | - | - |
Mixpanel | Processor | No | - | - |
Registering an account through Google
Instead of registering via your email, you can alternatively register via Google. If you choose this option, you will be automatically redirected to Google, where you will need to sign in to an existing Google account. Your 24/8 account will then be linked to this Google account. In the process you will be informed which data will be transferred from Google to us. This includes only your email and your first and last name so that we can identify you. We store your email address and name, but your login details are not stored, let alone transmitted.
In the privacy settings of your Google account, you can define which data may be transmitted to us. You can view Google's privacy policy here.
Registering an account through Apple
You also have the option to register your account via "Apple Login". When you select the corresponding option, you can decide whether you want to hide your email address or not. If you do not choose this option, Apple will send us the email address of your account and otherwise a fake email address. Your name will also be transmitted to us and stored together with the email. You can find more information about "Apple Login" here.
Sensitive information
We do not process sensitive information from you.
Profile and activity data
The concept of 24/8 Basketball has, among other things, a focus on interaction between Users, which creates a distinct community within the 24/8 Services ("24/8 Community" or "Community"). An optimal 24/8 experience and the Community itself are based on the fact that training statistics and progress in the various badges (hereinafter "Activity Data") and user profiles, including yours, are publicly accessible or accessible to their own friends and connections in the app.
Accordingly, we record your training stats and badge progress as soon as you complete a training. This includes the specific workout, the shots you made, the time you completed it, and the geographic location (if you've allowed this, see the relevant section for more information).
If you interact (e.g. claps or comments) with posts in the feed, these interactions will be saved as well.
Location data
Your location is used for certain features of the 24/8 app. For example, your location is needed to add your workout to the leaderboard of the basketball court where you did the workout. You can always prohibit the use of the location in your device settings and will be asked if the location can be used before the first use of this feature. As our app and your devices operating system continuously communicate, using location services is technically impossible for us if you reject the permission. If you do not actively use the app, your location will not be tracked. Even when using the app, location is only requested and stored at the time you complete a workout. Location data is also requested when you access the map or create a basketball court, but we do not store your location here. If you agree to the use of your device location, the current location will be associated with each completed workout. If you do not agree to the use of your location or subsequently revoke the necessary permissions for the app, your location will not be recorded. In this case, some features, such as local leaderboards, will not be fully available to you. For participants under the age of 16 years we assume that consent of the legal representatives for the use of location services has been given.
Technical data
When you use our services, additional technical data is stored or access to certain device functions is requested.
- Camera, microphone, and gallery access. Some features, such as uploading your own profile picture, require access to either your photo gallery or your camera in order to take a picture. To do this, the app will ask you for the appropriate permissions. If you want to revoke these permissions, you can do so at any time in the device settings.
- Device Data. We automatically collect information about the device you are using, such as your unique device ID, model, manufacturer, operating system, and the app version you are using.
- Push Notifications. We will ask you for permission to send push notifications to your device. You can revoke this permission at any time in your device settings.
Automatically collected data
We automatically collect certain information when you use our Services. This information will not be traceable to your specific identity, but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily required to ensure the security and accessibility of our services and to perform internal analysis.
How we use data
We use your information for different purposes, depending on how you use our services
To provide our services
- To create your user profile that allows you and others to analyze your performance. For example, you can compare your past training performances with your current ones or view your training statistics in aggregated form.
- Interact and compare yourself with other basketball players. For example, you can compare your score on a basketball court with that of others, compare your shooting percentage in a practice with that of other participants, or applaud others for their performance.
- Discover new basketball courts. For example, you can find other basketball courts nearby.
Your data will be shared with the 24/8 Community so that you can participate in the respective features, e.g. to show at which ranking position you currently are. Your location when completing a training will also be shared with the 24/8 Community, as long as you have not objected to the usage. Your friends can see where you are playing. Others can see the number of currently active players on a court. As a result, your friends or other users that you may not know, may come to visit the same court while you are still there. Aggregated data, e.g. about your team or general user activity in your region, may also be shared with non-members outside the community.
To provide you with a personalized user experience
We use your data to provide you with the most personalized user experience possible. For example, we can suggest suitable trainings or events for you based on your past performance and your favorite basketball courts.
To protect you, others and our services
The data collected is used to protect users and enforce our Terms and Conditions. For example, we may identify and remove misleading basketball courts or/and fake results and hate speech and spam, and block or delete related accounts.
To communicate with you
We use your information, such as your email address, to respond to your requests or problems with support services. We may use your information to contact you for feedback and questions or to send you an email in case of important matters (e.g. change of the privacy policy or the general terms and conditions). For these purposes, we store your contact information in the email service of the third-party provider SendInBlue (see below).
We may also use your information to market and promote our services. This includes, for example, promotional messages and/or push notifications alerting you to new features or interesting activities. We will only send you such communications in the form of e-mails (hereinafter "newsletter") if you have explicitly agreed to receiving e-mails. This agreement is given via a button that is displayed once before you access our mobile app or via the form on our website. Only when you activate this button ("checkbox") or on the website click on the button to subscribe to the newsletter, you can receive the newsletter from us. You can opt out of receiving emails at any time by unsubscribing via the link at the bottom of each email.
Aggregated data
We do not sell your personal data.
However, aggregate data we collect from you and others may be posted publicly or shared with third parties. This includes, for example, data about devices, usage, demographics, performance, basketball courts (locations).
How data is shared
Community functions
For the provision of our community functions, we share your data with other 24/8 members. For example, they can view your data in your profile and your training results in the feed. Furthermore, you can share data via the "Share" function on other (social) media with the users and the respective operators of these platforms. You or the third party with whom you share the data are responsible for the protection of the data shared in this way.
Our service providers for the operation of our service, maintenance, analysis and advertising
Amazon Web Services
In order to provide our service, we use the services of various providers (more precisely: cloud service providers). These include Amazon Web Services (AWS), on whose servers in Ireland we store e.g. your profile data, training data etc. Communication with these servers and storage there is handled in compliance with modern security standards. The use of these services enables us to operate the services without the cost-intensive acquisition, maintenance and protection of our own servers. For these purposes, data from you will be shared with this provider. You can object to this at any time as described under "Rights".
Firebase
For some features, such as authenticating/logging in to your account via email, Google or Apple, sending push notifications or tracking crashes and errors, we use services from Firebase. For these purposes, data from you will be shared with this provider. You can object to this at any time as described under "Rights". Firebase is a service of Google. You can find more details about Google's handling of your data here: https: //policies.google.com/technologies/partner-sites. The complete privacy policy of Google can be found here: https://www.google.com/policies/privacy/
Google Analytics
We use the services of Google Analytics to analyze the use of our services and to develop new features or improve existing ones based on this analysis. For these purposes, your data will be shared with this provider. You can object to this at any time as described under "Rights". You can find more detailed information about how Google Analytics handles your data here: https: //policies.google.com/technologies/partner-sites. The complete privacy policy of Google can be found here: https://www.google.com/policies/privacy/
Google AdMobs
We use Google AdMob to display advertisements within the app. Google may use the advertising ID of your terminal device, as well as cookies and/or similar technologies, to collect personal data for the purpose of generating and displaying personalized advertising. You can object to this at any time as described under "Rights". More detailed information about what data Google collects and how it is processed can be found here: https://policies.google.com/technologies/partner-sites. Google's full privacy policy can be found here: https://www.google.com/policies/privacy/
SendInBlue
We use the email service SendInBlue to manage email addresses and contact details and to send our newsletter or important messages to the saved contacts. For these purposes, data about you will be shared with this provider as soon as you create an account with our services or register for the newsletter (e.g. via the form on our website). You can object to this at any time as described under "Rights". You can find more detailed information about SendInBlue's handling of your data here: https://de.sendinblue.com/legal/privacypolicy/ .
Mixpanel
We use the service provider Mixpanel for data analysis in our basketball app. Mixpanel is an analytics tool that allows us to understand and improve user behavior within the app. By using Mixpanel, we gain valuable insights into how you and other users are using the app and which features are most popular. This data helps us improve our app and tailor future developments to the needs of you and other users. To this end, certain data is collected by Mixpanel, including device information, IP addresses, and activities within the app. You can object to this as described under "Rights" at any time. For more information on how Mixpanel handles your data, please see their privacy policy here: https://mixpanel.com/legal/privacy-policy/
Legal requirements
We may retain and share your information with third parties, including law enforcement and public or governmental agencies or private plaintiffs in or outside your country of residence, if we conclude that such disclosure is lawful or reasonably necessary to comply with the law or to respond to court orders, warrants, subpoenas and any other lawful or regulatory process. We may also retain, preserve or disclose your information if we believe it is reasonably necessary or appropriate to protect any person from death or serious injury, to protect national security or matters of public importance, to prevent or detect violations of our Terms and Conditions or fraud or abuse of 24/8 or its members, or to protect our operations or property or other legal rights. This includes disclosure to our lawyers and other advisors and third parties in connection with actual or potential litigation.
DMCA News (DMCA = a law of the United States of America, which serves to implement the WIPO Copyright Treaty of 1996 into national law).
In some circumstances, your information may be shared with third parties when we forward Digital Millennium Copyright Act (DMCA) notices, which are forwarded as submitted to us, without omissions.
How we protect information
The protection of your data is important to us. We take several organizational and technical measures to protect the data of our users to an appropriate extent. We use modern web technologies to protect our servers and databases from unauthorized access. Despite various security measures, a complete, 100% secure protection of data on the Internet is not possible. Although we will do our best to protect your data, the transfer of your data to and from our services is ultimately at your own risk.
Data storage
We will retain your data for as long as necessary to provide our services to you and others and to comply with any legal obligations. If you delete your account, we will delete your personal data within 30 days. In addition, you can change some information (e.g. your name, your team affiliation, your profile picture) in your profile at any time. In addition, we may store your information to comply with legal obligations, prevent fraud, collect possible payments, resolve issues, enforce our Terms and Conditions, or take other legally permissible actions. All data we store will be treated in accordance with this Privacy Policy.
Data about you (such as training statistics) may still be used in aggregate, untraceable form after your personal data is deleted (e.g., to present aggregate statistics from the past year to other users). We will also continue to store public content that you have created (such as public basketball courts that you have created), but this data will no longer be personally traceable to you.
Rights
Your rights in the European Economic Area
If you are a permanent resident of the European Economic Area, you have various rights. These include the right to access, correct, download, be informed, and delete your data. You also have the right to restrict or prohibit the processing of your data.
Access and rectification of many of your data is possible directly through our services. You can submit a request for extended access, rectification, erasure, information, restriction of processing or an objection to further processing of your data at any time by sending an email to [email protected]. If you have any concerns about our use of your information, please let us know at any time by sending an email to [email protected]. You also have the right to raise these concerns with your local supervisory authority.
If you are a resident of Germany, you also have the right to report content that you believe is illegal under the Network Enforcement Act. To report this or if you have any questions, please send an email to [email protected].
Our legal basis
As explained under "How we use data", we cannot provide our essential services without processing data. The processing of your data is therefore essential for the performance of our contract with you. Thus, the legal basis is the implementation of the contractual relationship.
We ask for your consent to process your data for some purposes, such as tracking your location for local rankings or for sending marketing communications. You can withdraw this consent at any time via your settings or, if otherwise not possible, by sending an email to [email protected]. You also have the right to port or transfer the data. The legal basis for the processing here is your consent.
Furthermore, we may process data if we are required to do so by lawor if the processing is necessary to protect avital interest or to protect a person from serious physical harm.
Furthermore, we process your data forour or third parties' legitimate interests , e.g. the interest to protect our members, the interest of our partners to cooperate with our members or our economic interest to maintain the sustainability of the services. You have the right to object to the processing of your personal data on the basis of legitimate interests at any time.
Our service providers who do not store data exclusively in the EU have legally bound themselves to comply with certain data protection standards by signing the EU's standard contractual clauses. A copy of these contractual clauses can be viewed on the pages of the European Commission ( https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de).
Person responsible for data processing
24-8 Sports UG (haftungsbeschränkt)
August-Bebel-Straße 88
14482 Potsdam
Germany
E-mail: [email protected]