KickOff is the data controller for the processing of personal data we collect about you
when you use the KickOff App and participate in activities, events, or programmes
organised by KickOff.
The purpose of this policy is to inform you about how we collect, use, store, and disclose
your personal data in accordance with applicable data protection legislation, including the
GDPR.
1. Data Controller
1.1. KickOff Sports ApS CVR: DK45748421 Registered in Denmark
2. Collection of Personal Data
2.1. KickOff collects information directly from you when you register and use the App, as
well as indirectly in connection with your participation in activities.
3. Categories of Personal Data
3.1. We collect the following categories of information:
1. Identification and Contact Information: Name, email address, telephone
number, and other contact details necessary to create your profile. It is prohibited
to play under a falsified name or address.
2. Transaction Data: Information related to your booked activities and payments
(however, payment card information itself is typically processed by third-party
services and not by KickOff directly).
3. Warning Data (Security and Fraud): Data related to violations of the Code of
Conduct, including misuse of the App, false profile information, or fraud.
4. Special Categories of Data (Health Data): Information about your physical
condition, as you declare that you are physically and medically able to
participate in the activities you sign up for, and that you have not been advised
against this by a health professional.
5. Visual Data and Content: Photos, videos, or audio recordings of you
participating in activities.
4. Purpose and Legal Basis for Processing
4.1. We process your personal data in accordance with the legal bases established in the
GDPR.
1. Administration of Participation: We process your identification data and
transaction data for the purpose of administering your account, handling bookings
and payments, and ensuring you are correctly registered on team lists. This is
necessary to fulfil the contract you enter into with KickOff to provide the services
and activities you have purchased (GDPR Article 6(1)(b)).
2. Service Communication: We process your contact information (phone
number/email) to send you SMS or push notifications. These messages
exclusively relate to your booked activities (e.g., reminders, changes, or
cancellations) and are defined as necessary service messages. The legal basis
for processing is the performance of the contract (GDPR Article 6(1)(b)), as the
communication is essential to deliver the purchased activities.
3. Marketing and Documentation: KickOff collects visual data, including photos,
videos, and audio recordings of you during activities. The purpose is use in
marketing, communication, and documentation without separate compensation.
The legal basis for processing is your consent (GDPR Article 6(1)(a)), which you
provide by accepting the Terms and Conditions of Sale.
4. Assessment of Physical Fitness: You declare that you are physically and
medically able to participate in the activities, and that you have not been advised
against this by a health professional. This information (special categories of data)
is processed based on your consent (GDPR Article 9(2)(a)), as the information is
provided voluntarily and is relevant in connection with your participation in
potentially risky physical activities.
5. Prevention of Fraud and Misuse: We process identification data and warning
data related to violations of the Code of Conduct, including deliberately
dangerous playing behaviour, misuse of the App, false profile information, or
fraud. The processing is based on KickOff's legitimate interest (GDPR Article
6(1)(f)) in ensuring a safe environment, maintaining platform integrity, and
preventing financial loss, which may lead to warnings or exclusion.
5. Disclosure of Personal Data
5.1. We disclose or share your personal data with the following categories of recipients:
1. Facility Owners: We may share necessary information (e.g., name and
attendance status) with the owners of the facilities where the activities take place,
to the extent necessary to conduct the activity.
2. Partners and Specific Processors: We use external suppliers who act as data
processors (e.g., hosting providers, IT support, payment services, SMS services).
These parties process data only according to our instructions and under a written
data processing agreement.
3. Authorities: In case of a serious breach of the Code of Conduct, including illegal
activities, we may disclose information to the police or other relevant authorities in
accordance with legal requirements.
6. Transfer to Third Countries
6.1. KickOff strives to process personal data within the EU/EEA. If data is exceptionally
transferred to third countries (countries outside the EU/EEA), this only occurs in
accordance with applicable legal requirements and only based on the necessary
safeguards (e.g., the EU's standard contractual clauses).
7. Storage and Deletion of Data
7.1. We store your personal data for as long as it is necessary to fulfil the purposes for
which they were collected.
1. Account Data: Stored as long as your profile is active, and then for a period of up
to 5 years for warranty claim purposes and in accordance with the Danish
Bookkeeping Act.
2. Visual Data (Photo/Video): Stored as long as they are deemed relevant for
marketing or documentation purposes, unless you withdraw your consent.
3. Warning Data: Data related to Code of Conduct violations may be stored for a
longer period in order to enforce any permanent exclusion.
8. Your Rights
8.1. As a data subject, you have a number of rights under the GDPR. You can exercise
these rights at any time by contacting KickOff. Your rights are:
1. Right of access: You have the right to access the information we process about
you.
2. Right to rectification: You have the right to have inaccurate personal data
corrected.
3. Right to erasure ("Right to be forgotten"): In certain cases, you have the right
to have information about you erased before the time for our general deletion
occurs.
4. Right to restriction of processing: In certain cases, you have the right to have
the processing of your personal data restricted.
5. Right to data portability: You have the right to receive your personal data in a
structured, commonly used, and machine-readable format, and to have these
transferred to another data controller.
6. Right to object: You have the right to object to our otherwise lawful processing of
your personal data, e.g., against direct marketing.
7. Right to withdraw consent: If our processing is based on your consent (e.g., for
Visual Data and Service Communication), you have the right to withdraw consent.
This does not affect the lawfulness of processing carried out before consent was
withdrawn.
8. Right not to be subject to automated decisions.
9. Choice of Law and Right to Complain
9.1. These terms and the processing of personal data are governed by Danish law.
9.2. You have the right to lodge a complaint with the Danish Data Protection Agency
(Datatilsynet) about our processing of your personal data if you believe that the
processing is contrary to applicable legislation.
Danish Data Protection Agency contact details: Carl Jacobsens Vej 35 2500 Valby
Tel. 33 19 32 00 E-mail: dt@datatilsynet.dk
10. Changes to the Privacy Policy
10.1. KickOff reserves the right to update this Privacy Policy at any time. We will inform
you of material changes via the App or email. Your continued use of the App and
participation in activities after changes means that you accept the revised terms.
