StreetPlay places great importance on the privacy and protection of the personal data of players, parents and guardians, StreetCoaches, website visitors and other users of our services.
This Privacy Notice explains what personal data StreetPlay collects and processes, why we process this data, the legal basis on which such processing takes place, with whom personal data may be shared, how long we retain personal data and what rights data subjects have under the General Data Protection Regulation (GDPR).
This Privacy Notice applies to the StreetPlay website, future StreetPlay applications, player accounts, matches, activities, events, subscriptions, payments, communications and other digital and physical services provided by StreetPlay.
1Who is responsible for your personal data?
StreetPlay is responsible for the processing of personal data as described in this Privacy Notice.
Organisation: StreetPlay
Country of establishment: The Netherlands
Email: info@streetplay.nl
For questions regarding privacy, personal data or this Privacy Notice, you can contact us at info@streetplay.nl.
2Who does this Privacy Notice apply to?
This Privacy Notice applies, among others, to:
- players and users of StreetPlay;
- parents and legal representatives of minor players;
- visitors to the StreetPlay website;
- users of future StreetPlay applications and digital services;
- participants in matches, training sessions, activities and events;
- individuals who contact StreetPlay;
- holders of free and paid subscriptions;
- StreetCoaches, employees and individuals carrying out work on behalf of StreetPlay;
- collaboration partners and their contact persons;
- individuals appearing in photographs or video footage recorded during StreetPlay activities.
3What personal data do we process?
The personal data processed by StreetPlay depends on how an individual uses our services.
3.1 Account and identification data
When creating and using a StreetPlay account, we may process, among other things:
- first and last name;
- username;
- email address;
- telephone number, where necessary or provided;
- date of birth;
- age and/or age category;
- password in secured/hashed form;
- unique user or account number;
- profile picture, if added;
- account settings;
- preferred language;
- registration date;
- subscription status;
- account status.
StreetPlay does not, in principle, have access to a user's readable/plain-text password.
3.2 Location data
In order to offer and organise suitable matches and activities, we may process location-related data such as:
- postal code;
- city/town of residence;
- region;
- selected playing area;
- preferred locations;
- match and activity locations.
If StreetPlay uses precise GPS location data in the future, this will only be done where necessary for the relevant functionality and, where legally required, after permission has been granted through the relevant device or application.
3.3 Match and player data
When participating in StreetPlay, we may record football-related and participation data.
This may include:
- matches played;
- match history;
- participation;
- attendance;
- match locations;
- team allocations;
- wins;
- draws;
- losses;
- goals;
- assists;
- clean sheets;
- MVP awards or mentions;
- Badges;
- StreetCoins;
- StreetDiamonds;
- player statuses;
- ratings;
- rankings;
- statistics by location;
- overall player rating;
- sanctions or records relating to matters such as no-shows or late arrival.
Assessments may relate, among other things, to Fair Play, communication, discipline, effort and effectiveness during play.
The statistics recorded and the functionalities available may partly depend on the StreetPlay subscription selected.
4Subscriptions, payments and payment data
StreetPlay offers free and paid subscription plans.
Depending on the subscription selected, we may process:
- subscription type;
- subscription status;
- start date;
- renewal date;
- payment status;
- billing information;
- transaction numbers;
- payment dates;
- payment history;
- information regarding upgrades and downgrades;
- cancellations;
- any transition to a Maintenance subscription.
Stripe
StreetPlay uses Stripe as its payment service provider for processing payments and subscriptions.
When a payment is made through Stripe, Stripe processes certain payment and transaction data necessary to execute the payment, prevent fraud and comply with legal obligations.
StreetPlay does not, in principle, receive all complete payment card or bank account details where these are processed directly by Stripe.
For certain processing activities, Stripe may act as an independent data controller, while for other processing activities it may provide services on behalf of StreetPlay.
Stripe's own privacy terms may also apply to processing carried out by Stripe.
5Parent and child data
StreetPlay is available to players from the age of 8.
Because StreetPlay provides services to minors, we pay particular attention to the protection of their personal data.
Where a player is under the age of 16, we may process data relating to a parent or legal representative in order to manage the child's account and participation and, where legally required, to obtain consent.
We may process, among other things:
- name of the parent or legal representative;
- email address;
- relevant contact details;
- relationship to the child;
- linked player account;
- information regarding consent given;
- date and time on which consent was given;
- withdrawn or amended consent;
- the version of the terms or privacy information to which consent or agreement was given;
- information necessary to reasonably verify parental consent.
Where consent is the legal basis for processing and the player cannot independently provide valid consent under applicable law, StreetPlay will request the necessary consent from the parent or legal representative.
StreetPlay may take reasonable measures to verify that consent has actually been provided by a parent or legal representative.
6Contact details and communications
When an individual contacts StreetPlay, we may process, among other things:
- name;
- email address;
- telephone number, if provided;
- subject of the message;
- content of the message;
- date and time of communication;
- any attachments;
- previous relevant correspondence.
7Technical data
When using the StreetPlay website or future digital services, certain technical data may be processed automatically, including:
- IP address;
- device and browser type;
- operating system;
- language settings;
- date and time of visit;
- pages visited;
- session data;
- error messages;
- security logs;
- interactions with the website or app;
- cookie identifiers and similar technical identifiers.
The exact technical service providers will be added to this Privacy Notice and/or the Cookie Policy once they have been definitively identified.
8Why do we process personal data?
StreetPlay may process personal data for purposes including:
- creating and managing accounts;
- identity and age verification where necessary;
- providing and performing StreetPlay services;
- organising football matches and activities;
- matching players with suitable matches and locations;
- assigning players to appropriate age groups;
- recording attendance;
- managing match registrations;
- recording results and performances;
- managing player profiles;
- calculating and displaying statistics;
- managing Badges, ratings and rankings;
- managing StreetCoins and StreetDiamonds;
- managing subscriptions;
- processing and administering payments;
- managing Maintenance subscriptions;
- retaining statistics where an appropriate subscription is active;
- sending necessary service notifications;
- providing information regarding matches and changes;
- customer service;
- responding to questions;
- handling complaints;
- preventing and investigating fraud and misuse;
- enforcing game, conduct and safety rules;
- securing systems and accounts;
- improving our website, app and services;
- analysing the use of our services;
- complying with legal, tax and administrative obligations;
- marketing and promotion where a valid legal basis exists.
9What legal basis do we rely on to process personal data?
StreetPlay only processes personal data where a valid legal basis exists.
9.1 Performance of a contract
We may process personal data where this is necessary to perform a contract with a user or to take steps at the user's request before entering into a contract.
This may, for example, relate to:
- an account;
- subscription;
- match registration;
- participation;
- payment;
- other requested StreetPlay services.
9.2 Legal obligation
StreetPlay may process personal data where we are legally required to do so, for example in connection with tax, administrative or other statutory obligations.
9.3 Legitimate interests
StreetPlay may process personal data where we have a legitimate interest and the interests or fundamental rights and freedoms of the data subject do not override those interests.
This may, for example, relate to:
- security;
- fraud prevention;
- protection of players;
- improvement of our services;
- handling complaints and disputes;
- limited internal analysis;
- protection of StreetPlay and other individuals.
9.4 Consent
Where consent is required, we request it in advance.
This may apply, for example, to:
- certain marketing communications;
- non-essential cookies;
- tracking technologies;
- certain forms of publication of photographs and videos;
- certain processing activities involving minors.
Consent may be withdrawn at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
10Minors and parental consent
StreetPlay seeks to process only the personal data of minors that is necessary for the relevant StreetPlay service.
For players under the age of 16, consent from a parent or legal representative may be required where consent is the legal basis for the relevant processing activity.
Where applicable, StreetPlay may ask the parent or legal representative to declare that they are authorised to act on behalf of the child.
StreetPlay may also record:
- who provided consent;
- when consent was provided;
- what consent was provided for;
- which version of the relevant information was displayed;
- when consent was amended or withdrawn.
Consent for different purposes may be requested separately.
Accepting conditions that are necessary for participation therefore does not automatically mean that consent has been given for matters such as marketing or promotional use of images.
11Photographs, videos and visual material
During matches, training sessions, test matches, events and other StreetPlay activities, photographs, videos and other audiovisual recordings may be made.
Depending on their purpose, these may be used for:
- match recording;
- individual or group highlights;
- StreetPlay profiles;
- website content;
- social media;
- promotional videos;
- advertisements and campaigns;
- event reporting;
- internal evaluation.
Where consent is required for a particular use, StreetPlay will request such consent in advance.
For minors, consent from a parent or legal representative may be required.
Where practically and legally necessary, separate choices may be offered for purposes such as:
- match recording/highlights;
- publication on the StreetPlay platform;
- publication on social media;
- commercial or promotional publication.
Where processing is based on consent, that consent may be withdrawn for future use.
In such cases, StreetPlay will take reasonable measures in relation to material that remains under our control.
It may be technically or practically impossible to completely retrieve material that was lawfully published and has subsequently been copied or shared by third parties.
For specific commercial productions or campaigns, StreetPlay may enter into additional agreements concerning image, portrait and usage rights.
12Player profiles, statistics and rankings
Depending on the subscription, StreetPlay may maintain a player profile containing football-related performance information.
From certain paid subscription levels, more extensive statistics may be recorded.
These may include:
- matches played;
- results;
- goals;
- assists;
- clean sheets;
- MVP awards;
- Badges;
- ratings;
- rankings;
- StreetCoins;
- StreetDiamonds;
- other recorded performances.
StreetPlay determines for each functionality which information is visible to:
- the player;
- parents/legal representatives;
- other registered users;
- StreetCoaches;
- other participants;
- the general public.
We aim to use privacy-friendly default settings, particularly for minor players.
13Subscription termination and Maintenance
When a player terminates a subscription under which extensive player statistics are recorded, StreetPlay may offer the option to switch to a Maintenance subscription.
The Maintenance subscription is intended to retain eligible stored player statistics without maintaining an active match subscription.
The currently intended prices are:
- €2.99 per month; or
- €29.99 per season.
With a Maintenance subscription, eligible statistics may be retained, but the Maintenance subscription itself does not provide a right to participate in StreetPlay matches.
If the player wishes to participate in matches again at a later date, an appropriate active StreetPlay subscription must be purchased.
If a player terminates their regular subscription and does not choose Maintenance, the match statistics linked to the player's profile may be deleted or anonymised after the applicable retention period.
Where appropriate, StreetPlay will inform the player of the consequences before permanent deletion takes place.
Personal data that StreetPlay is legally required or otherwise permitted to retain on another valid GDPR legal basis will not automatically be deleted solely because a subscription has ended.
Termination of a subscription is therefore not the same as submitting a GDPR request for erasure of personal data.
If statistics are permanently deleted, this may affect rankings, player history and eligibility for seasonal prizes for which those statistics are necessary.
14Cookies and similar technologies
StreetPlay may use cookies and similar technologies.
Essential cookies
These may be necessary for:
- security;
- logging in;
- session management;
- essential settings;
- the proper functioning of the website and digital services.
Consent is not always required for strictly necessary cookies.
Analytics cookies
StreetPlay may use analytics technologies to understand how our services are used and to improve them.
Where consent is required, the relevant technology will only be activated after consent has been provided.
Marketing and tracking cookies
Marketing and tracking technologies are only used where a valid legal basis exists and, where required, consent has been obtained.
Non-essential cookies requiring consent must not be activated before the user has made a valid choice.
Users must be able to change their cookie preferences and withdraw consent.
Further information will be included in StreetPlay's separate Cookie Policy.
15With whom do we share personal data?
StreetPlay does not sell personal data as a commodity.
We may share personal data with parties necessary for the provision of our services.
These may include:
- hosting and cloud providers;
- database and infrastructure providers;
- IT and software providers;
- email and communications services;
- payment service providers;
- analytics providers;
- security services;
- accountants and administrative service providers;
- professional legal and business advisers;
- StreetCoaches and authorised employees;
- collaboration partners where this is necessary for a particular activity and a valid legal basis exists.
At present, we know that the following services are used for relevant purposes:
- Stripe — payment processing and subscription payments.
- Zoho Mail — business email communications.
Other technical service providers will be added once the technical inventory has been completed.
Parties processing personal data on behalf of StreetPlay will only be given access to the extent necessary.
Where required by the GDPR, StreetPlay enters into appropriate contractual arrangements, including data processing agreements.
16Transfers outside the EEA
Some external service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred internationally, StreetPlay ensures that a valid transfer mechanism and appropriate safeguards are in place.
Depending on the circumstances, these may include:
- an adequacy decision by the European Commission;
- approved Standard Contractual Clauses;
- additional technical and organisational measures;
- another transfer mechanism permitted by law.
17Retention periods
StreetPlay does not retain personal data for longer than necessary for the purpose for which it was processed, unless a legal obligation or another valid legal basis requires or permits longer retention.
We apply or will establish specific retention periods for individual categories of personal data.
As a general principle:
Account data — For the duration of the active account and thereafter for a limited, predetermined period where necessary for administration, security, fraud prevention and dispute handling.
Player and match data — For as long as necessary for the relevant StreetPlay service, player history, rankings or active subscription. The rules relating to Maintenance and subscription termination described above also apply.
Financial administration — For the period required under applicable tax and administrative laws.
Contact and correspondence — For as long as necessary to deal with the relevant request and for a reasonable period thereafter where required for follow-up or dispute handling.
Technical and security logs — For a limited, predetermined period necessary for security, fraud prevention and investigation of incidents.
Marketing data — Until consent is withdrawn, an objection is made or the data is no longer necessary.
Consent records — For as long as necessary to demonstrate what consent was provided or withdrawn and insofar as this is necessary to comply with our accountability obligations.
Photographs and video material — For as long as the material remains lawfully necessary or relevant for the purpose for which it was created or published, taking into account any withdrawal of consent and other applicable rights.
Before full implementation, StreetPlay will establish concrete internal retention periods wherever possible and apply these periods in practice.
18Security
StreetPlay takes appropriate technical and organisational measures to protect personal data against, among other things:
- loss;
- unauthorised access;
- unauthorised alteration;
- unlawful disclosure;
- destruction;
- misuse.
Depending on the systems used, measures may include:
- access restrictions;
- secure connections;
- encryption;
- password hashing;
- logging;
- backups;
- software updates;
- secure authentication;
- restrictions on employee access rights.
No digital system can guarantee absolute security.
Users are also responsible for keeping their own login credentials confidential.
19Personal data breaches
If a security incident occurs involving personal data, StreetPlay will investigate the incident.
Where legally required, StreetPlay will report a personal data breach to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within the applicable statutory period.
Where a personal data breach is likely to result in a high risk to the rights and freedoms of affected individuals, StreetPlay will also inform those individuals where required by the GDPR.
Where required, StreetPlay maintains an internal record of personal data breaches.
20Your privacy rights
Depending on the circumstances, a data subject may have rights under the GDPR including the right to:
- access personal data;
- rectify inaccurate or incomplete personal data;
- request erasure;
- restrict processing;
- receive eligible personal data in a portable format;
- object to certain processing;
- withdraw previously given consent;
- receive information regarding the processing of personal data;
- receive protection against certain forms of solely automated decision-making.
Privacy requests can be sent to:
StreetPlay may request additional information where reasonably necessary to verify the identity of the person making the request.
We will not request more information than is necessary for this purpose.
StreetPlay will process requests within the applicable statutory time limit.
Exercising GDPR rights is generally free of charge. Statutory exceptions may apply to requests that are manifestly unfounded or excessive.
21Automated processing and profiling
StreetPlay may automatically process data for purposes such as:
- match suggestions;
- age categorisation;
- statistics;
- Badges;
- ratings;
- StreetCoins;
- StreetDiamonds;
- rankings;
- account and subscription functionality.
Insofar as such processing does not result in decisions based solely on automated processing that produce legal effects or similarly significantly affect a user, it does not constitute the specific form of automated decision-making referred to in Article 22 GDPR.
If StreetPlay introduces such decision-making in the future, we will inform affected users and implement the safeguards required by law.
22Marketing communications
StreetPlay may inform users about:
- matches;
- activities;
- events;
- new features;
- subscriptions;
- offers;
- other StreetPlay services.
Necessary service communications, such as a change to a match location, are not the same as marketing communications.
Where consent is required for electronic marketing, it will be requested in advance.
Marketing consent will not automatically be combined with consent or acceptance necessary to use StreetPlay.
Users can unsubscribe using an available unsubscribe mechanism or by contacting info@streetplay.nl.
23Social media
StreetPlay may be active on external social media platforms.
When a user communicates with StreetPlay through a social network or views StreetPlay content, the relevant platform may independently process personal data in accordance with its own terms and privacy policy.
StreetPlay does not have full control over the processing of personal data by such external platforms.
24Third-party links and services
The StreetPlay website, future app or communications may contain links or integrations with third-party websites, apps and services.
Where a third party is independently responsible for processing personal data, that third party's privacy policy will apply.
We therefore recommend that users review the privacy information of external parties.
25Special categories of personal data
StreetPlay does not generally ask users to provide special categories of personal data, such as health information, religious beliefs or other sensitive information, unless this is necessary in a specific situation and legally permitted.
We ask users not to unnecessarily provide such data through public profiles, general contact forms or other general communication channels.
Where StreetPlay needs to process special categories of personal data, this will only take place where a valid legal exception applies and appropriate additional safeguards will be implemented.
26Privacy by design and privacy by default
StreetPlay aims to incorporate data protection into the design of new features, systems and processes.
In doing so, we consider, among other things:
- which personal data is actually necessary;
- data minimisation;
- who needs access;
- how long data should be retained;
- which information should be visible to others;
- security;
- privacy-friendly default settings;
- additional protection for minors.
27Disclosure of personal data required by law
StreetPlay may disclose personal data where legally required or where disclosure is otherwise lawful and necessary.
This may occur, for example, because of:
- a legal obligation;
- a valid request from a competent public authority;
- a court order;
- the necessary protection of legal rights;
- investigation of fraud or serious misuse;
- serious security incidents.
StreetPlay will not disclose more personal data than is necessary.
28Changes to this Privacy Notice
StreetPlay may amend this Privacy Notice when our services, technology, organisation or applicable laws and regulations change.
The most recent version will be published on the StreetPlay website.
The date at the top of this Privacy Notice indicates when it was last updated.
In the event of significant changes, users may additionally be informed through the website, app, email or another appropriate communication method.
Where processing is based on consent and a change requires new consent, StreetPlay will request new consent where necessary.
29Complaints
If you have a question or complaint regarding the processing of personal data, we encourage you to first contact:
We will endeavour to handle questions and complaints carefully.
Data subjects also have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Submitting a complaint to StreetPlay does not restrict this statutory right.