Privacy Policy

The controller of your personal data is Tomasz Kandula, ul. Marcelińska 94, 60-324 Poznań, Poland. You can contact us at contact@tomkandula.com. We have not appointed a Data Protection Officer; privacy requests go to the e-mail address above.

You have the right to complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

We collect only the data we need to run the service:

• Account data: first name, last name, e-mail address, password hash, language, country code, avatar, and — if you sign in with Google — your Google account identifier, name and e-mail address.
• Content you provide: posts, likes, comments, chat messages, team and player details, matches, field locations, descriptions, photos and other files you add to the service.
• Notification data: your notification preferences and the push-notification token Apple (APNs) or Google (FCM) generates for your device, used only to deliver the notifications you have chosen to receive.
• Technical data: IP address, request time, device and app version, and error details in server logs.

We do not ask for special-category data, we do not use advertising trackers, and we do not use analytics services on the website or in the app today. If we ever introduce optional statistics, we will update this policy and ask for your consent first.

• To provide and secure your account and the service — performance of a contract (Art. 6(1)(b) GDPR).
• To publish content you choose to post and show it to the community you share it with — contract and our legitimate interests in operating the service.
• To send transactional messages you request, such as account activation and password reset — contract.
• To deliver match, chat and team notifications you have opted in to — contract and, where required, consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the app settings.
• To keep logs, prevent abuse and secure the service — our legitimate interests (Art. 6(1)(f) GDPR).
• To comply with legal obligations and defend legal claims — legal obligation and legitimate interests.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before it.

We do not sell your personal data and we do not share it for third-party marketing. We use service providers that process data on our behalf under contracts requiring appropriate security and confidentiality:

• Microsoft Azure — hosting, file storage and infrastructure.
• Our e-mail delivery provider — transactional e-mail only.
• Google — optional sign in with Google. We receive your e-mail address, name and Google account identifier; Google processes the sign-in under its own privacy policy.
• Apple and Google — app distribution through the App Store and Google Play, and push-notification delivery.
• weatherapi.com — the weather API supplying the match-day forecasts. Requests generally do not identify you to us.
• Map service — displays the fields on the map inside the app. Requests are generally made without identifying you to us.

We also disclose data where required by law, to establish or defend legal claims, or where you ask us to.

Our providers may process data outside the European Economic Area. Where they do, we use an appropriate transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses, together with additional safeguards where required. You can ask us for more information using the contact address above.

• Account data: until you delete your account, then up to 30 days in backups.
• Push-notification tokens: until they are invalidated by the device or you turn notifications off.
• Content and chat messages: until you delete them or we remove them under the terms.
• Server logs: up to 90 days.

Records we must keep by law, such as accounting records for any future paid services: the statutory period, usually five to six years. When a retention period ends, we delete or anonymise the data; afterwards we can no longer provide access to it.

The soccerhub.online website sets no cookies and loads no third-party resources. In the app we use only browser/device storage that is strictly necessary to keep you signed in and remember your settings. Future optional features, if they involve consent, will be turned on by you first.

Under the GDPR, you have the right to:

• access your personal data and receive a copy of it;
• correct inaccurate or incomplete data;
• delete your data;
• restrict how we process your data;
• object to processing based on our legitimate interests;
• receive your data in a structured, commonly used, machine-readable format;
• withdraw consent at any time.

To exercise a right, e-mail contact@tomkandula.com. We may ask you to verify your identity. We respond within one month; for complex requests we may extend that period by up to two months and will tell you if we do.

You also have the right to complain to UODO, using the details in the "Who we are" section.

We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and we do not use it for cross-context behavioural advertising. California residents may still contact us to request access to, correction of, or deletion of their personal information, and we will not discriminate against you for exercising these rights.

We protect data with administrative, technical and physical safeguards, including encryption in transit, access controls and secure storage. No transmission over the internet is completely secure. If we become aware of a breach that is likely to result in a risk to your rights, we will notify you and the supervisory authority as required by law.

The service is not intended for children under 16, and we do not knowingly collect their personal data. If you believe that a child has provided us with personal data, please contact us and we will delete it.

The service contains links to sites and services that we do not own or control. We are not responsible for their privacy practices. Their own privacy policies apply.

We may update this policy. We will post the new version with an effective date here, and, for material changes, notify registered users by e-mail or in the app before the change takes effect. Continued use of the service after the effective date means that you accept the updated policy.

If you have questions about this policy or want to exercise your rights, e-mail contact@tomkandula.com.