Privacy Policy
Version 1.0
1. Who processes your data
The data controller is PL Predictor. For questions and to exercise your rights: privacy@example.com.
2. What we collect
- Name — shown in the standings and in your groups.
- Email address — for signing in, confirming your account and resetting your password.
- Phone — to contact you about your account.
- Password — stored only as an irreversible hash; we never see it.
- Predictions and points — your results in the game.
- Groups — which groups you belong to, and in what role.
- Technical data on consent — IP address and browser, recorded as evidence of when and to what you consented.
3. Why, and on what basis
| Purpose | Data | Basis (Art. 6 GDPR) |
|---|---|---|
| Creating and running your account, taking part in the game | Name, email, phone, password, predictions | Performance of a contract — Art. 6(1)(b) |
| Email confirmation and preventing duplicate accounts | Legitimate interest — Art. 6(1)(f) | |
| Marketing emails | Name, email | Consent — Art. 6(1)(a) |
| Analytics cookies | Technical data | Consent — Art. 6(1)(a) |
| Personalised advertising | Technical data, activity shared with ad partners | Consent — Art. 6(1)(a) |
| Demonstrating the consents given | IP address, browser, date | Legal obligation — Art. 6(1)(c) with Art. 7(1) |
4. Who sees your data
Your name, points and your predictions for revealed rounds are visible to other players in the overall standings and in the groups you belong to. Predictions for a round that has not kicked off are shown to nobody but you.
Your email and phone are never shown to other users.
Match results come from football-data.org. No personal data of yours is sent to them.
If you turn on ad tracking, our advertising partners may process technical data about you. With tracking off, you still see ads, but they are chosen by the page rather than by you.
5. How long we keep it
- Account data — for as long as your account exists.
- Consent records — up to 3 years after they are superseded by a newer decision.
- Predictions and points — these stay in the standings after your account is deleted, but in anonymised form, with no link to you.
6. Your rights
- Access and portability (Art. 15 and 20) — download a copy of all your data from My data.
- Rectification (Art. 16) — change your profile details at any time.
- Erasure (Art. 17) — we erase your identity; see the note below.
- Withdrawal of consent (Art. 7(3)) — one switch, at any time.
- Objection and restriction (Art. 18 and 21) — write to the address above.
- Complaint — to the Bulgarian Commission for Personal Data Protection (CPDP), Sofia, 2 Prof. Tsvetan Lazarov Blvd, cpdp.bg, or to your own supervisory authority.
7. What deletion actually does
Your name, email and phone are erased permanently, your account is closed and your group memberships end. Your predictions remain, but are no longer connected to you — they appear as "Deleted user".
The reason is that every other player's standing was calculated against the field that actually took part in the round. Removing one participant retroactively would change results already published for people who never asked for anything to be deleted. After erasure the remaining records are not personal data, because nothing in them leads back to you.
8. Changes
For a material change we raise the policy version and ask you to accept it again on your next visit. Your consent history stays visible in My data.