Privacy Policy — SetnMatch

This privacy policy applies to the SetnMatch platform („we“, „us“, „our“) and explains how we collect, store, use, and, where applicable, share your data („process“) when you use our services. This includes in particular:

visiting our website or the SetnMatch platform
using our app and its associated features
any other communication with us, e.g. via email or other channels

If you have questions or concerns, this privacy policy helps you understand your rights and options. If you do not agree with our practices, please do not use our services. For inquiries, you can reach us at the contact details provided in the „Contact“ section.

Overview of the main points

Below you will find a concise summary. More detailed information on each point can be found in the corresponding sections below.

What data do we process? Depending on how you use our services, we may process personal data – depending on how you interact with us and which features you use.
Do we process sensitive data? No, we do not process sensitive personal data.
Do we receive data from third parties? No, we do not obtain personal data from third parties.
For what purpose do we process your data? To provide, improve, and manage our services, to communicate with you, to ensure security and fraud prevention, and to comply with legal requirements. With your consent, we may also use your data for other purposes.
When and with whom do we share data? Under the circumstances described in this policy and with the recipients mentioned therein.
How do we protect your data? We use technical and organizational measures to protect your data. However, one hundred percent security for transmission or storage on the internet cannot be guaranteed.
What rights do you have? Depending on where you reside, you have certain rights under applicable data protection law, such as the right to access, correct, or delete your data.
How can you exercise your rights? Most easily by contacting us or using the features in your account settings.

1. What information do we collect?
2. How do we process your data?
3. What legal bases do we rely on?
4. When and with whom do we share data?
4a. Cookies and local storage
5. How long do we store your data?
6. How do we protect your data?
7. What data protection rights do you have?
8. Do-Not-Track signals
9. Changes to this policy
10. Contact
11. How can you view, update, or delete your data?

1. What information do we collect?

We collect personal data that you voluntarily provide to us, as well as certain technical data that is automatically generated when you use our services.

Data you provide

What data we collect depends on the context of your use. This may include: name, email address, phone number, postal address, password, contact preferences, and profile and location information you provide for using SetnMatch.

We do not process sensitive personal data (e.g. health data).

If we offer payment functions in the future, payment data will be processed exclusively by the respective payment service provider. We do not store credit card details or similar payment information on our servers.

All data you provide must be accurate and complete. You should inform us of any changes.

Automatically collected data

When you visit our services, technical data is automatically collected that does not directly reveal your identity but is necessary for operation and security:

Log and usage data: IP address, device information, browser type, timestamps, pages visited, searches, features used, and system and error messages.
Device data: Information about your device (computer, smartphone, tablet), e.g. IP address, device ID, location, browser type, operating system, and provider.
Location data: If you grant access, we use it to provide location-based features (e.g. finding players near you).

2. How do we process your data?

We process your data to provide, improve, and manage our services, to communicate with you, to ensure security and fraud prevention, and to comply with legal obligations. With your consent, we may also use it for other purposes.

Account creation and management: So you can register, sign in, and manage your account.
Service provision: To provide you with the requested SetnMatch features (e.g. matching, leagues, chat).
User-to-user communication: When you use features that allow exchange with other players.
Marketing and advertising: If you have consented, we may send you information about offers and news. You can unsubscribe at any time.
Personalized content: We may use your data to show you relevant content and offers.
Usage analysis: To understand how our services are used and to improve them.
Protection of vital interests: In exceptional cases when necessary to protect individuals.

3. What legal bases do we rely on?

We process personal data only when a legal basis exists. The GDPR requires us to specify these. We rely on:

Consent: When you have given us permission for a specific purpose. You can withdraw consent at any time.
Contract performance: When processing is necessary to provide our services or to prepare a contract.
Legitimate interests: When processing serves our legitimate interests and does not override yours (e.g. improving services, personalized offers).
Legal obligation: When we are legally required to do so (e.g. cooperation with authorities).
Protection of vital interests: In emergencies to protect individuals.

4. When and with whom do we share data?

We share personal data only in the following cases:

Business transfers: In connection with mergers, sales, or acquisitions, data may be transferred to the new legal successor.
Other users: When you share information in public areas of the platform or interact with other users, they may see your data. Similarly, your teammates in a league can see your profile and activities.
Service providers: We use Google Sign-In exclusively for authentication. For sign-in, Google's Terms of Service and Privacy Policy apply (https://policies.google.com/privacy). Your user data (profile, matches, chat) is stored in Firebase Firestore in the EU region (europe-west3 / Frankfurt). Data processing therefore takes place on European servers and is subject to the GDPR.

4a. Cookies and local storage

We use only technically necessary cookies that are required for the operation of the platform (e.g. login status, language setting). These cookies do not require consent under GDPR Art. 6(1)(f). We do not use tracking or marketing cookies. When signing in via Google Sign-In, Google's cookie policies also apply. You can disable cookies in your browser settings; however, this may limit the functionality of the platform.

5. How long do we store your data?

We store your data only as long as necessary for the purposes stated in this policy, unless a longer retention period is required by law. Typically not longer than the duration of your account relationship. When there is no further need, we delete or anonymize the data. If deletion is technically not possible (e.g. in backups), the data is stored securely and excluded from further processing.

6. How do we protect your data?

We use technical and organizational measures to protect your data. However, no transmission or storage on the internet can be guaranteed to be completely secure. We cannot rule out that unauthorized third parties may overcome security measures. Use of our services is therefore at your own risk. We recommend accessing only from a secure environment.

7. What data protection rights do you have?

In regions such as the EEA and Switzerland, you have certain rights under applicable data protection law:

Right to access and a copy of your data
Right to rectification or erasure
Right to restriction of processing
Right to data portability
Right to object to automated decision-making
Right to object to processing

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the data protection authority in your country.

Withdrawal of consent: If we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

Unsubscribe from marketing: You can unsubscribe from marketing emails at any time (e.g. via the unsubscribe link). We may still contact you for service-related purposes.

Account management: You can view and update your data in account settings. To delete your account, use the corresponding option in settings. We may retain certain data for fraud prevention or to comply with legal obligations.

8. Do-Not-Track signals

Many browsers offer a „Do-Not-Track“ feature. There is currently no uniform technical standard for implementation. We do not currently respond to DNT signals. If this changes, we will inform you in an updated version of this policy.

9. Changes to this policy

We may update this privacy policy as needed to reflect changes in the law or our practices. The updated version will be indicated by a new date. For material changes, we will inform you via a notice on the platform or by email. We recommend reading this policy regularly.

10. Contact

For questions about this privacy policy, you can reach us by email or mail:

E-Mail: moesslacherjakob@gmail.com

Jakob Mösslacher
1130 Wien, Österreich

11. How can you view, update, or delete your data?

You have the right to request access to the personal data we store and to have it corrected or deleted. To delete your data, please use the option in user settings or contact us directly.