Privacy Policy — Football Super League

1. Data controller

The data controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Enfinity One SIA
Celtnieku iela 15/17
3406 Liepaja
Latvia
Email: contact@football-superleague.com

2. General information

We only process personal data of our users to the extent necessary to provide a functioning website and our content and services. Processing generally only takes place with the user's prior consent or on the basis of a contract or pre-contractual measures (Art. 6(1)(a), (b) GDPR).

3. Registration and user account

When you register with Football Super League, we collect the following data:

First and last name
Nickname (publicly visible display name)
Email address
Password (stored only as a hash, never in plain text)
IP address at the time of registration
Optional: address, postal code, city — if you choose to provide them
Optional: a profile picture, if you upload one

This data is required to provide you with a user account that lets you submit tips, form groups, and play quizzes. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

4. Newsletter

If you opt in to the newsletter during registration, we use your email address to inform you about news relating to Football Super League. You can withdraw this consent at any time by contacting us at the email address above. The legal basis is Art. 6(1)(a) GDPR.

5. Tips, groups, and quizzes

Your submitted tips, quiz results, and membership in tipping groups are stored to provide the corresponding features (e.g. leaderboards and point totals). Tipping groups are private and only accessible via an invite code; they are not publicly listed.

6. Cookies and sessions

We use a technically necessary session cookie to keep you logged in during your visit. If you select "stay logged in" when logging in, a longer-lived cookie is set. These cookies are strictly necessary for the operation of the website; consent is not required for them.

7. Recipients and processors

Match data (leagues, clubs, schedules, tables) is sourced from football-data.org. No personal data of our users is transmitted to football-data.org.

For sending transactional emails (e.g. registration confirmation, password reset) and for hosting this website, we use service providers acting as data processors under Art. 28 GDPR, who are contractually bound to comply with data protection requirements.

8. Retention period

We retain personal data only for as long as necessary to provide our services or as required by law. After your user account is deleted, your data is erased unless we are legally required to retain it.

9. Your rights

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR), e.g. the Latvian Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority of your country of residence

To exercise these rights, you can contact us at any time at the email address above.

10. Data security

We use technical and organisational security measures to protect your data against loss, misuse, and unauthorised access, including encrypted transmission (TLS/HTTPS) and secure storage of your password as a hash value.

11. Changes to this privacy policy

We reserve the right to amend this privacy policy to reflect changes in the law or in our services. The current version is always available on this page.

12. Contact

If you have questions about data protection, you can reach us at contact@football-superleague.com.