Privacy policy

Effective date: April 1st, 2023

Introduction

This privacy policy (the "Privacy Policy") for 24/8 Basketball ("24/8 Basketball", "24/8", "we", "us", or "our") explains how and why we collect, store, use, and/or share ("process") information from you when you use our websites, mobile applications, or other services (collectively, the "Services").

Please also read our Terms and Conditions, which set forth the terms of use of the Services, located at https://24eight.app/en/legal/terms-and-conditions .

By using our services you agree to this Privacy Policy.

We reserve the right to modify this Privacy Policy at any time. In this case, if you are a registered user of our services, we will notify you by e-mail at least two (2) weeks before the new Privacy Policy comes into effect and display the corresponding information on the website. In addition, we will note the date of the last modification of this statement at the top. Any change will automatically take effect after these two (2) weeks.

If you have any questions or comments about this privacy policy, you can contact us at mail@24eight.app.

What data we collect

Data provided by you

We only collect personal information when you provide it to us, such as when you contact us, especially when you register for a 24/8 account, when you upload or share data within our 24/8 app in your profile or feed or through your general usage of our services.

We use the personal data you provide only when it is necessary to fulfill our services.

Through this personal data, you can be identified directly or indirectly.

Registration of a 24/8 account

To use our services such as the 24/8 Basketball App, you need a user account, which you can create directly in the app. When registering, you will be asked to provide some of the data listed below (some of which is mandatory) and by registering you agree to our Privacy Policy and Terms and Conditions. All data you enter in your account will be stored in a database at the service provider mentioned below.

Overview of collected data

Data

Purpose of processing

Legal basis of processing

Storage duration

Name

Direct communication  & presentation

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

E-mail address

Identification of the customer account

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Password

Identification of the customer account

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Profile picture

Representation

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Position

Representation

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Size

Representation

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Team

Representation

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Location data

Presentation/Local Rankings

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Birthdate

Assignment of fitting opponents and game modes

Implementation of the contractual relationship

Until 30 days after deletion of the customer account

Overview of partners with whom data is shared

Designation of the provider

Service provider type

Data transfer to third country

Third country

Guarantees according to Art. 44ff DSGVO

Amazon Web Services

Processor

Yes

Ireland

EU standard contractual clauses

Firebase

Processor

Yes

Global server network

EU standard contractual clauses

Google

Processor

Yes

Global server network

EU standard contractual clauses

Google AdMobs

Processor

Yes

Global server network

EU standard contractual clauses

SendInBlue

Processor

No

-

-

Mixpanel

Processor

No

-

-

Registering an account through Google

Instead of registering via your email, you can alternatively register via Google. If you choose this option, you will be automatically redirected to Google, where you will need to sign in to an existing Google account. Your 24/8 account will then be linked to this Google account. In the process you will be informed which data will be transferred from Google to us. This includes only your email and your first and last name so that we can identify you. We store your email address and name, but your login details are not stored, let alone transmitted.

In the privacy settings of your Google account, you can define which data may be transmitted to us. You can view Google's privacy policy here.

Registering an account through Apple

You also have the option to register your account via "Apple Login". When you select the corresponding option, you can decide whether you want to hide your email address or not. If you do not choose this option, Apple will send us the email address of your account and otherwise a fake email address. Your name will also be transmitted to us and stored together with the email. You can find more information about "Apple Login" here.

Sensitive information

We do not process sensitive information from you.

Profile and activity data

The concept of 24/8 Basketball has, among other things, a focus on interaction between Users, which creates a distinct community within the 24/8 Services ("24/8 Community" or "Community"). An optimal 24/8 experience and the Community itself are based on the fact that training statistics and progress in the various badges (hereinafter "Activity Data") and user profiles, including yours, are publicly accessible or accessible to their own friends and connections in the app.

Accordingly, we record your training stats and badge progress as soon as you complete a training. This includes the specific workout, the shots you made, the time you completed it, and the geographic location (if you've allowed this, see the relevant section for more information).

If you interact (e.g. claps or comments) with posts in the feed, these interactions will be saved as well.

Location data

Your location is used for certain features of the 24/8 app. For example, your location is needed to add your workout to the leaderboard of the basketball court where you did the workout. You can always prohibit the use of the location in your device settings and will be asked if the location can be used before the first use of this feature. As our app and your devices operating system continuously communicate, using location services is technically impossible for us if you reject the permission. If you do not actively use the app, your location will not be tracked. Even when using the app, location is only requested and stored at the time you complete a workout. Location data is also requested when you access the map or create a basketball court, but we do not store your location here. If you agree to the use of your device location, the current location will be associated with each completed workout. If you do not agree to the use of your location or subsequently revoke the necessary permissions for the app, your location will not be recorded. In this case, some features, such as local leaderboards, will not be fully available to you. For participants under the age of 16 years we assume that consent of the legal representatives for the use of location services has been given.

Technical data

When you use our services, additional technical data is stored or access to certain device functions is requested.

  • Camera, microphone, and gallery access. Some features, such as uploading your own profile picture, require access to either your photo gallery or your camera in order to take a picture. To do this, the app will ask you for the appropriate permissions. If you want to revoke these permissions, you can do so at any time in the device settings.
  • Device Data. We automatically collect information about the device you are using, such as your unique device ID, model, manufacturer, operating system, and the app version you are using.
  • Push Notifications. We will ask you for permission to send push notifications to your device. You can revoke this permission at any time in your device settings.

Automatically collected data

We automatically collect certain information when you use our Services. This information will not be traceable to your specific identity, but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily required to ensure the security and accessibility of our services and to perform internal analysis.

How we use data

We use your information for different purposes, depending on how you use our services

To provide our services

  • To create your user profile that allows you and others to analyze your performance. For example, you can compare your past training performances with your current ones or view your training statistics in aggregated form.
  • Interact and compare yourself  with other basketball players. For example, you can compare your score on a basketball court with that of others, compare your shooting percentage in a practice with that of other participants, or applaud others for their performance.
  • Discover new basketball courts. For example, you can find other basketball courts nearby.

Your data will be shared with the 24/8 Community so that you can participate in the respective features, e.g. to show at which ranking position you currently are. Your location  when completing a training will also be shared with the 24/8 Community, as long as you have not objected to the usage. Your friends can see where you are playing. Others can see the number of currently active players on a court. As a result, your friends or other users that you may not know, may come to visit the same court while you are still there. Aggregated data, e.g. about your team or general user activity in your region, may also be shared with non-members outside the community.

To provide you with a personalized user experience

We use your data to provide you with the most personalized user experience possible. For example, we can suggest suitable trainings or events for you based on your past performance and your favorite basketball courts.

To protect you, others and our services

The data collected is used to protect users and enforce our Terms and Conditions. For example, we may identify and remove misleading basketball courts or/and fake results and hate speech and spam, and block or delete related accounts.

To communicate with you

We use your information, such as your email address, to respond to your requests or problems with support services. We may use your information to contact you for feedback and questions or to send you an email in case of important matters (e.g. change of the privacy policy or the general terms and conditions). For these purposes, we store your contact information in the email service of the third-party provider SendInBlue (see below).

We may also use your information to market and promote our services. This includes, for example, promotional messages and/or push notifications alerting you to new features or interesting activities. We will only send you such communications in the form of e-mails (hereinafter "newsletter") if you have explicitly agreed to receiving e-mails. This agreement is given via a button that is displayed once before you access our mobile app or via the form on our website. Only when you activate this button ("checkbox") or on the website click on the button to subscribe to the newsletter, you can receive the newsletter from us. You can opt out of receiving emails at any time by unsubscribing via the link at the bottom of each email.

Aggregated data

We do not sell your personal data.

However, aggregate data we collect from you and others may be posted publicly or shared with third parties. This includes, for example, data about devices, usage, demographics, performance, basketball courts (locations).

How data is shared

Community functions

For the provision of our community functions, we share your data with other 24/8 members. For example, they can view your data in your profile and your training results in the feed. Furthermore, you can share data via the "Share" function on other (social) media with the users and the respective operators of these platforms. You or the third party with whom you share the data are responsible for the protection of the data shared in this way.

Our service providers for the operation of our service, maintenance, analysis and advertising

Amazon Web Services

In order to provide our service, we use the services of various providers (more precisely: cloud service providers). These include Amazon Web Services (AWS), on whose servers in Ireland we store e.g. your profile data, training data etc. Communication with these servers and storage there is handled in compliance with modern security standards. The use of these services enables us to operate the services without the cost-intensive acquisition, maintenance and protection of our own servers. For these purposes, data from you will be shared with this provider. You can object to this at any time as described under "Rights".

Firebase

For some features, such as authenticating/logging in to your account via email, Google or Apple, sending push notifications or tracking crashes and errors, we use services from Firebase. For these purposes, data from you will be shared with this provider. You can object to this at any time as described under "Rights". Firebase is a service of Google. You can find more details about Google's handling of your data here: https: //policies.google.com/technologies/partner-sites. The complete privacy policy of Google can be found here: https://www.google.com/policies/privacy/

Google Analytics

We use the services of Google Analytics to analyze the use of our services and to develop new features or improve existing ones based on this analysis. For these purposes, your data will be shared with this provider. You can object to this at any time as described under "Rights". You can find more detailed information about how Google Analytics handles your data here: https: //policies.google.com/technologies/partner-sites. The complete privacy policy of Google can be found here: https://www.google.com/policies/privacy/

Google AdMobs

We use Google AdMob to display advertisements within the app. Google may use the advertising ID of your terminal device, as well as cookies and/or similar technologies, to collect personal data for the purpose of generating and displaying personalized advertising. You can object to this at any time as described under "Rights". More detailed information about what data Google collects and how it is processed can be found here: https://policies.google.com/technologies/partner-sites. Google's full privacy policy can be found here: https://www.google.com/policies/privacy/

SendInBlue

We use the email service SendInBlue to manage email addresses and contact details and to send our newsletter or important messages to the saved contacts. For these purposes, data about you will be shared with this provider as soon as you create an account with our services or register for the newsletter (e.g. via the form on our website). You can object to this at any time as described under "Rights". You can find more detailed information about SendInBlue's handling of your data here: https://de.sendinblue.com/legal/privacypolicy/ .

Mixpanel

We use the service provider Mixpanel for data analysis in our basketball app. Mixpanel is an analytics tool that allows us to understand and improve user behavior within the app. By using Mixpanel, we gain valuable insights into how you and other users are using the app and which features are most popular. This data helps us improve our app and tailor future developments to the needs of you and other users. To this end, certain data is collected by Mixpanel, including device information, IP addresses, and activities within the app. You can object to this as described under "Rights" at any time. For more information on how Mixpanel handles your data, please see their privacy policy here: https://mixpanel.com/legal/privacy-policy/

Legal requirements

We may retain and share your information with third parties, including law enforcement and public or governmental agencies or private plaintiffs in or outside your country of residence, if we conclude that such disclosure is lawful or reasonably necessary to comply with the law or to respond to court orders, warrants, subpoenas and any other lawful or regulatory process. We may also retain, preserve or disclose your information if we believe it is reasonably necessary or appropriate to protect any person from death or serious injury, to protect national security or matters of public importance, to prevent or detect violations of our Terms and Conditions or fraud or abuse of 24/8 or its members, or to protect our operations or property or other legal rights. This includes disclosure to our lawyers and other advisors and third parties in connection with actual or potential litigation.

DMCA News (DMCA = a law of the United States of America, which serves to implement the WIPO Copyright Treaty of 1996 into national law).

In some circumstances, your information may be shared with third parties when we forward Digital Millennium Copyright Act  (DMCA) notices, which are forwarded as submitted to us, without omissions.

How we protect information

The protection of your data is important to us. We take several organizational and technical measures to protect the data of our users to an appropriate extent. We use modern web technologies to protect our servers and databases from unauthorized access. Despite various security measures, a complete, 100% secure protection of data on the Internet is not possible. Although we will do our best to protect your data, the transfer of your data to and from our services is ultimately at your own risk.

Data storage

We will retain your data for as long as necessary to provide our services to you and others and to comply with any legal obligations. If you delete your account, we will delete your personal data within 30 days. In addition, you can change some information (e.g. your name, your team affiliation, your profile picture) in your profile at any time. In addition, we may store your information to comply with legal obligations, prevent fraud, collect possible payments, resolve issues, enforce our Terms and Conditions, or take other legally permissible actions. All data we store will be treated in accordance with this Privacy Policy.

Data about you (such as training statistics) may still be used in aggregate, untraceable form after your personal data is deleted (e.g., to present aggregate statistics from the past year to other users). We will also continue to store public content that you have created (such as public basketball courts that you have created), but this data will no longer be personally traceable to you.

Rights

Your rights in the European Economic Area

If you are a permanent resident of the European Economic Area, you have various rights. These include the right to access, correct, download, be informed, and delete your data. You also have the right to restrict or prohibit the processing of your data.

Access and rectification of many of your data is possible directly through our services. You can submit a request for extended access, rectification, erasure, information, restriction of processing or an objection to further processing of your data at any time by sending an email to [email protected]. If you have any concerns about our use of your information, please let us know at any time by sending an email to [email protected]. You also have the right to raise these concerns with your local supervisory authority.

If you are a resident of Germany, you also have the right to report content that you believe is illegal under the Network Enforcement Act. To report this or if you have any questions, please send an email to [email protected].

Our legal basis

As explained under "How we use data", we cannot provide our essential services without processing data. The processing of your data is therefore essential for the performance of our contract with you. Thus, the legal basis is the implementation of the contractual relationship.

We ask for your consent to process your data for some purposes, such as tracking your location for local rankings or for sending marketing communications. You can withdraw this consent at any time via your settings or, if otherwise not possible, by sending an email to [email protected]. You also have the right to port or transfer the data. The legal basis for the processing here is your consent.

Furthermore, we may process data if we are required to do so by lawor if the processing is necessary to protect avital interest or to protect a person from serious physical harm.

Furthermore, we process your data forour or third parties' legitimate interests , e.g. the interest to protect our members, the interest of our partners to cooperate with our members or our economic interest to maintain the sustainability of the services. You have the right to object to the processing of your personal data on the basis of legitimate interests at any time.

Our service providers who do not store data exclusively in the EU have legally bound themselves to comply with certain data protection standards by signing the EU's standard contractual clauses. A copy of these contractual clauses can be viewed on the pages of the European Commission ( https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc/standard-contractual-clauses-international-transfers_de).

Person responsible for data processing

24-8 Sports UG (haftungsbeschränkt)

August-Bebel-Straße 88

14482 Potsdam

Germany

E-mail: [email protected]