What information can be found in this policy
- Data Controller and Data Subjects
- Data We Process
- Why We Process Your Data and How
- How We Protect Your Data
- Your Rights
- Right To Access
- Right To Rectification
- Right to Erasure (right to be forgotten)
- Right to Restrict Processing
- Right to object to the processing of your data and rights related to automated decision making
- Right to data portability
- Right to withdraw consent
- Right to Lodge a Complaint
- How Long We Keep Your Data
- Who Else May Access Your Data
- Transfer of Your Data to Third Countries
- where the data is no longer needed for the purposes it was collected,
- where you have withdrawn consent and there is no other lawful basis on which we can continue to process it,
- where you objected to processing and there are no overriding legitimate grounds to continue,
- where the data has been unlawfully processed or
- where the data has to be erased for compliance with a legal obligation.
- If the accuracy of the data is contested – processing may be restricted for the period necessary to allow us to verify its accuracy,
- the processing is unlawful and you request restriction instead of erasure,
- we no longer need the data for the purposes it was collected, but you need it in connection with a legal claim,
- if you objected to the processing of personal data that are processed on the grounds of our legitimate interests, while awaiting verification whether our legitimate interests ground for processing your data overrides interest of your fundamental rights and freedoms.
- Entities who help us to regularly provide, and further develop our services (e.g. analytics, maintenance, marketing, development). They are allowed to process your information as reasonably necessary in order to perform delegated tasks. Please be aware that only we determine the purpose and means of the processing of your data as well as we decide which of your data is going to be processed to perform delegated tasks.
- With public authorities and law enforcement agencies where it is necessary to do so and where we are legally required or permitted to do so.
- Third parties who are granted access to our API, which may show your tips, username, avatar, rating, success of your tip and country
An All Arsenal user (‘you’) may participate in order to share information and opinions on sport matches, search for and post tips, check the match statistics, get reviews of bookmakers, information about free bets, and other topics (‘services’). More about our services is available in our Terms and Conditions. When you use our services many of your information might be shared with us or third parties.
Data Controller and Data Subjects
Data we process
We are processing (or might process) various categories of your data. Below you may find information on which data we process, as well as their categorizations.
Personal Identifiable Information (PII) – When you create your account on All Arsenal, we process your email and username you choose. You may also reveal the information about your birthday, location and gender. You can add to your profile IDs of different chat services you use (Skype ID, MSN Messenger ID etc) or provide a name of a website you own.
Electronic identification data – When you logging in to the All Arsenal we process the IP address of the device you use, the type and version of browser and operating system you use as well as the time of logging in.
Images – you can choose to upload a profile picture, if you wish so. It can be a photo of you, or any other picture you wish to be linked to your account.
Private habits and interests
Preferences – you might add to your profile the information about your favorite team, your interests, or you may describe yourself to other users under ‘about me’ section. You can also choose to receive relevant news and updates from our website administrators.
Since we have integrated social network like and share functionalities, you can like or share articles published on our website with your contacts on various social networks.
Content you create
Apart from the content you generate on All Arsenal by revealing your data, on our website you can send personal messages to other users, or message us using contact form. You can post a new topic or reply to an existing one, give reputation to other users or update your profile status. Whenever you create any of the content listed above, we will store this information about you.
Why we process your data and how
We collect and process data about you when you sign up and use our service. We process your personal data in order to provide our services to you, to improve your experience about our services, to further develop our service, and to secure and maintain regular functioning of All Arsenal. More about purposes for processing your data you may find below.
Personal Identifiable Information (PII) – Your PII that we process when you create the account (email and username) serve to distinguish you from other All Arsenal users. Your email address is required in order to register and we use it to communicate with you regarding any changes to your account or our services, as well as for commercial communication if you agree to receive it. It is up to you to decide whether to reveal your birth date, location or gender, as well as IDs of different chat services you use (Skype ID, Yahoo ID, ICQ number, MSN Messenger ID etc) or provide a URL to your personal blog or website you own. This information might contribute to the personalization of your user account and development of your communication channels with us and other users.
The processing of details about the browser and operating system you use is necessary to ensure the regular provision of our services to you. Also, sometimes we will need this data to solve some technical problems if they emerge.
Images – we might be storing your profile photo, in order to enable you to personalise your profile on our website.
Private habits and interests
Preferences – You might add to your profile the information about your favorite team, interests, and say something about yourself, in order to present yourself to other users in a more detailed manner, and we will store this information on your behalf.
We process the information about topics you follow in order to send you notifications when something new is posted. Information about users you follow allows us to present you more personalised content as well as to provide you quick access to what you find more relevant.
We need to know as well whether you opted in for newsletter, so that we can send you news and updates on a regular basis.
Content you create
You can participate in discussions, by creating new threads and post replies to existing ones. You can update your status or give a reputation. We process this information in order to enable user interaction on our website.
How we protect your data
We do not collect personal data in excessive manner. We only process data that we really need and only for agreed purposes. We are tending to keep your data up to date and to store them securely. We do not process your data for period longer than it is necessary for the purposes for which data is processed.
We use technical and organisational measures in accordance with good industry practice to safeguard your information. Thus, we take appropriate technical and organizational measures to ensure protection of your personal data against accidental or unlawful loss, alteration, steal, unauthorized disclosure or access, unauthorized use and against all other unlawful forms of processing.
We apply different levels of access control to your data. Restriction of access control is based on business needs and security requirements. We ensure you that only appropriately authorized persons have access to your data, whose knowledge and skills about data is necessary to fulfill their obligations arising out of or in connection with the performance of their job.
Right to access
You have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. If you would like to get the confirmation as well as the access to your personal data please contact us via All Arsenal’s contact form.
Right to rectification
You have the right to ask us to delete inaccurate personal data concerning you. Taking into account the purposes of the data processing, you have the right to have incomplete personal data completed.
Right to erasure (right to be forgotten)
In limited circumstances, you will have the right to request that we erase the information we hold about you:
Right to restrict processing
You have the right to seek the restriction of processing of your personal data in the following circumstances:
Right to object to the processing of your data and rights related to automated decision making
You have the right to object our processing of your data on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling. Upon your objection, we will stop processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing which override interests of your fundamental freedoms and rights, or if further processing is necessary for the establishment, exercise or defence of legal claims.
At any time you have the right to object processing your data, including profiling, for direct marketing purposes. Upon your opt-out your personal data will not be longer processed for direct marketing purpose. In regard with automated decision making about you, you may have right to request human intervention.
Right to data portability
Under certain circumstances you have right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format (i.e. in digital form) and you have the right to request the transmission of those data to another entity without hindrance from us, if such transmission is technically feasible.
Right to withdraw consent
If the ground for processing your personal data is your consent, you can withdraw your consent at any time without giving any reason to us, and free of charge. In order to withdraw the consent you should delete your account on All Arsenal.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Please be aware that after withdrawal of the consent we will not be able to process your data and consequently we will not be able to offer our services to you.
Right to lodge a complaint
If you feel that your personal data rights have been breached, you can contact us via All Arsenal’s contact form. Also you have the right to lodge a complaint with your local data protection authority. The relevant data protection authority in EU Member States might be determined either by your place of habitual residence, or the place where the alleged infringement emerged.
As we are established in Denmark you may choose to contact Danish Data Protection Agency – Address: Datatilsynet, Borgergade 28, 5, DK-1300 Copenhagen K; email: firstname.lastname@example.org
How long we keep your data
We keep your data until you delete your account on All Arsenal. When you delete your account we erase your personal data. Please be aware that we will not delete your posts; we will keep these archived so that users can follow the discussion flow.
Who else may access your data
We may share your data with third parties. The third parties are categorized as follows:
Transfer of your data to third countries
We may transfer your personal data outside the European Economic Area in order to provide our services on regularly base and/or to further develop our services. We take all measures in relation to the recipients of your personal data, to ensure an adequate level of protection and appropriate safeguards as defined by the applicable data protection law and particularly GDPR are implemented.
Your personal data might be transferred to the recipient based in country the European Commission considers to have an adequate level of data protection. You may find out more about countries with adequate level of protection here.
If your data is transferred to a recipient based in US, then we aim to transfer your data in the way laid down by Privacy Shield mechanism. More about Privacy Shield mechanism is available here.
We will conclude Data Protection Agreements as necessary with recipients of your data that will include Standard Contractual Clauses issued by the European Commission and that would oblige the data recipient to provide an adequate level of protection and implement appropriate safeguards as defined by the applicable data protection law, and particularly GDPR, with regard to processing your personal data.