PRIVACY POLICY

Introduction

This document provides you with all necessary information in accordance with Article 13 and 14 of the GDPR.

What might interest you the most

Contact us at support@eversports.com for data protection related issues.

This policy concerns more than one of group of people (data subjects):

• Website Visitors
• Eversports Users
• Business Partners & Clients
• Applicants

Eversports and its subsidiaries are jointly responsible for the processing of your personal data. More on that here.

Details on cookies and other tools used on our websites can be found here.

Table of Contents

Important Definitions

GDPR: The EU General Data Protection Regulation. In this Privacy Statement, terms such as data subject, personal data, processing, controller, processor, and recipient are all used within the meaning of Article 4 GDPR.

Consent: Refers to the legal basis described in Article 6 1. (a), GDPR.

Performance of a Contract and Preparation of a contract at the request of the data subject: Refers to the legal basis described in Article 6 1. (b), GDPR.

Compliance with a legal obligation: Refers to the legal basis described in Article 6 1. (c), GDPR.

(Our) Legitimate Interest: Refers to the legal basis described in Article 6 1. (f), GDPR.

Eversports: Eversport GmbH with its business address at Jakov-Lind-Strasse 13 / Door 6 / 5. Floor, 1020 Vienna, Austria. Also referred to as "We", "Us", and "Our".

Eversports DE: Eversports Germany UG (limited liability company) with its business address at Bremer Heerstraße 117, 26135 Oldenburg, Germany. A subsidiary of Eversports.

Eversports NL: Eversports NL B.V. with its business address at Korte Leidsedwarsstraat 12, 1017 RC Amsterdam, Netherlands. A subsidiary of Eversports.

Eversports Group: Eversports and all its subsidiaries.

Eversports Employees: Employees of either member of the Eversports Group.

Eversports Processors: Processors (as defined in Article 4, GDPR) under contract with Eversports. A list of current Eversports Processors can be found here.

Eversports websites: Websites provided by Eversports, such as www.eversports.com (or country-specific domains such as www.eversports.at and www.eversports.de), and www.eversportsmanager.com

Eversports Platform: The sports search engine and booking platform operated by Eversports online, in its apps and on its websites.

Sports Offerings: Various services in the field of sports and leisure activities as well as sports venues that can be searched, booked and reserved via the Eversports platform.

Users: Persons who have registered online with Eversports in order to use the sports offerings.

Sports Providers: Partner companies delivering the sports offerings through their own sales channels.

Eversports Service: Provision of the Eversports platform and referral of the associated sports offerings to users.

Contact

For data protection related issues contact us at support@eversports.com.

Data Protection Officer

We have appointed a data protection officer. You can contact them as follows: Thorsten Brendel, ViCoTec IT-Sicherheit & Datenschutz GmbH & Co. KG, August-Wilhelm-Kühnholz-Str. 5, 26135 Oldenburg (Germany), Mail: datenschutz@vicotec.de

Your rights as a data subject

You have the right to request information about the personal data concerning you. You can contact us at any time to request such information.

For non-written requests, we kindly ask for your understanding that we may require evidence from you to verify your identity.

Furthermore, you have the right to rectification, erasure, or restriction of processing as permitted by law.

Finally, you have the right to object to processing within the framework of legal requirements.

You also have the right to data portability within the scope of data protection regulations.

Who is responsible for the data processing?

All members of the Eversports Group are "Joint Controllers" concerning the processes described in this privacy policy. That means they are all responsible for how, why and how long your personal data is being processed. To this end, employees of Eversports Group members are assigned to teams that cross over the boundaries of the individual corporate entities. The members have signed a written agreement between them (in accordance with Article 26 GDPR) in order to manage their respective responsibilities. You have the right to address either of the members regarding your data protection concerns, however support@eversports.com is a shared point of contact where your concerns will be directed to the appropriate company and/or department.

The Eversports Group is a "group of undertakings", with Eversports being the "controlling undertaking" as defined in Article 4 (19) and further described in Recital 37 of the GDPR.

Who has access to or receives my data?

Access to your data is handled on a need-to-know basis. This means only those Eversports employees, Eversports processors and/or third parties have access to or receive your personal data for as long as and to the extent that it is necessary for processing which has a legal basis. More details on who these recipients are and what data they receive is listed at the end of each processing activity below.

What exactly is a processor

We commission external service providers to undertake various assignments for us. If one of these assignments involves processing your personal data, any such service provider is a processor within the meaning of the GDPR. We have written agreements with them (in accordance with Article 28 GDPR), which govern the handling of personal data and oblige processors to comply with suitably high security standards. An up-to-date table of all processors for the Eversports Group is available here.

Other Controllers

Some recipients are controllers in their own right regarding data transferred to them, therefore such processing does not constitute commissioned processing. Payment service providers, for example, are controllers in their own right. The sports providers are also controllers in their own right for data transferred to them (e.g. to arrange your booking). What personal information is transferred as well as the sports provider's privacy policy can be viewed before finalizing a booking.

Third Countries

When transferring data to recipients in third countries (countries outside the EU/EEA) there is either an adequacy decision of the EU Commission for the country concerned, or we have signed standard contractual clauses with the recipients in order to guarantee an adequate level of protection for your data.

Links to third party websites

Eversports websites contain links to websites of Sports Providers and others. Eversports is not responsible for the privacy and data protection on these websites. If you click on a link to visit one of these websites, please read the privacy policy provided by the website owner.

Information for Website Visitors

If you visit one of the Eversports websites, the following information is relevant to you.

Note: Eversports websites are hosted on servers in Germany. Our email servers are located within the EU. Further details on information security at Eversports are found here.

Content:

• Visiting
• Getting in touch

Visiting

If you visit one of our websites the following processing happens.

What data we collect:

Visitation Data

• The IP address of the device
• Date and time of your request
• Name of the page you requested
• Whether your request succeeded or not
• Which web browser, operating system and device you used
• Amount of data transmitted
• Country of origin of the request (derived from the first digits of the IP address)

Necessary Cookie Data

Analytics Cookie Data

Advertisement Cookie Data

Error & Crash Report Data

• The IP address of the device
• Your Username (if logged in during incident)
• Date and time of your request
• Requested URL
• Which web browser and operating system you used
• Error Message, Error Codes, Stack Trace

Why and how we use this data:

Purpose: Operating a commercial website.
Legal Basis: Our legitimate interest in operating a commercial website.

• Visitation data is automatically processed by our servers in all ways necessary to deliver you the web page you requested.
• Data of necessary cookies is read from and written to your device to personalize the content you see, e.g. display content on all pages in the language you have chosen.

Purpose: Guaranteeing information security.
Legal Basis: Our legitimate interest in guaranteeing information security.

• Visitation data is logged in our logfiles. These log files are solely accessed in case of a security incident (unauthorized access attempts for example).
• Visitation data is processed, and data of necessary cookies is read from and written to your device for security purposes: Any device calling up one of our websites is automatically reviewed in order to identify and stop potential security incidents happening (a Denial-of-Service attack for example). If a device passes this test, a cookie is stored on it, so that it does not have to be tested again and again with every new visit.

Purpose: Optimizing our online services by identifying and solving technical issues.
Legal Basis: Our legitimate interest in providing a functioning, error free product.

• If an error or crash occurs while using one of our services, a report is created, and the data is used to identify and solve any technical issues that might have caused the problem.

Purpose: Optimizing our services.
Legal Basis: Your consent to Analytics.

• Data gathered through Analytics Cookies help us understand how our visitors interact with and use our websites and services. These cookies and the data they provide are used exclusively for internal research so that we can improve our services. They help us count the number of visitors, where the visitors are coming from, the pages they navigate and how they use them.

Purpose: Personalize advertisements for our own products on third party websites.
Legal Basis: Your consent to Personalized Advertisement.

• Advertisement Cookies and the data they collect are used to provide visitors with relevant ads (for our own products) on third party websites. In order to customize ads to the visitors preferences, these cookies track visitors across our websites and collect information on the pages they browse and the products they look at. Our advertisement partners also track visitors on third party websites in order to display the personalized ads to them.

Note: You are not required to consent to this! If you did, you can withdraw your consent at any time, by reopening the consent options and unchecking boxes. You can find a link to these options at the bottom of every page. Withdrawing your consent does not affect the lawfulness of the processing that was based on your consent before its withdrawal. Not giving your consent or withdrawing your consent will have no impact on your other dealings with Eversports or the sports providers.

More information on cookies and other tools we use is found here.

How we store this data:

• Logfiles are automatically deleted after 30 days.
• Cookies are stored on your device. Information on cookies and their storage duration is available here. You can delete cookies in your browser options at any time. You can withdraw your consent at any time by reopening the cookie options at the bottom of each page and unchecking boxes.
• Data gathered for Analytics is anonymized immediately, and thus, no personal data is stored.
• Advertisement data is deleted when you withdraw your consent.
• Error & Crash Report Data are deleted after 90 days of their creation.

Who receives this data:

• Eversports processors
• Eversports department of information security (logfiles in case of a security incident)
• Eversports product and development department (Error & Crash Report Data)

Third Parties:

• With your consent: Our advertisement partners read and use Advertisement Cookie Data

Getting in Touch

If you contact us via email the following data processing happens.

What data we collect:

• Email data (message, sender, date, time)

Why and how we use this data:

The purpose for processing depends on the content of your message and is (in most cases) customer support or initiation of business.

Purpose: Providing support to customers upon request.
Legal Basis: Our legitimate interest in operating a business.

Purpose: Initiating business at the request of the data subject.
Legal Basis: Preparation of a contract at the request of the data subject.

In either case we relay your email to the appropriate Eversports employee, so that your question, request or other message can be properly handled.

How we store this data:

• In general email data is stored for 12 months after being received.
• If the message is considered a business letter, state law requires us to store it for longer. In Austria this period is 7 years after the end of the year in which the message was received.

Who receives this data:

• Eversports processors
• Eversports employees, where appropriate

Information for Eversports Users

If you have or want to have an Eversports User Account to make use of Eversports Services (by booking a course for example), the following information is relevant to you. Of course, since you (as a User) are also visiting our websites, please read the section "Information for Website Visitors " carefully as well.

Information for App Users: If you are using the Eversports App to access our services, the same information as for website visitors applies, except the fact that no cookies are being used.

Note: The Eversports Platform is hosted on servers in Germany. Further details on information security at Eversports are found here.

Content:

• Creating an Eversports Account
• Your Eversports Profile
• Logging In
• Booking
• Reviewing a Business
• Subscribing to our News and Offers Messages
• The Eversports Family Account

Creating an Eversports Account

You can join the Eversports Platform by creating a user account with your email address and a password (Email Login), or by using one of your existing accounts (e.g. Facebook, Apple, Google) to sign up and login ("Single Sign-On ", "SSO " or also "Social Login"). If you do so, the following data processing happens. For more information on Social Logins at Eversports see the Technical Notes.

What data we collect:

If you use Email Login:

• First and last name
• Email address
• Hash of the Eversports password you choose

If you use Social Login, the provider transfers the following of your data to us:

• First and last name
• Email address
• User ID

The following data is automatically collected:

• Metadata (date and time of account creation, last login, email verification status)

Why and how we use this data:

Purpose: Providing you with an Eversports account
Legal Basis: Performance of a Contract (the user agreement between you and Eversports).

• The data is stored in our database.

Purpose: Guaranteeing information security
Legal Basis: Our legitimate interest in guaranteeing information security.

• A verification email is sent to the provided email address.

How we store this data:

• The data is stored until you delete your account.

Who receives this data:

• Eversports processors
• Eversports Support Team upon your request

Your Eversports Profile

You can add, edit or delete certain information in your Eversports Profile. Furthermore, the name, username, and profile picture (if available) are visible to other users. Here you'll find information on how it is processed.

What data we collect:

• Activities (upcoming and previous bookings)
• Credits (the cards and memberships you have at various sports providers)
• Profil Data (first and last name, birthdate, email address, phone number, postal address)
• Payment Methods
• Favorite sports facilities
• Friend contacts

Further information:

In addition, you can provide additional voluntary information (sports experiences, short bio, favorite sport facilities, upcoming activities). These serve as the basis for creating the detailed profile.

The profile data is grouped into "profile sections" (personal details, sports experiences, upcoming activities, favorite sports facilities).

Additional profile information helps you be discovered by other users who share your interests and allows you to connect with them. However, it is your decision whether to provide personal data in your profile and make it public. You should not add any personally identifiable information to your profile that you do not want to be publicly available.

Furthermore, it is possible to configure "profile views" and limit their visibility to specific user groups, such as the public, private, or friends-only. For each of these profile views, you can determine which profile sections you want to share.

The following information is visible to other users by default and can be restricted in your profile settings:

• Profile picture (if available)
• Name
• Username
• Number of friend contacts

Why and how we use this data:

Purpose: Providing you with the regular functionalities of an Eversports account
Legal Basis: Fulfillment of a contract pursuant to Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR) (the user agreement between you and Eversports),if applicable, your consent pursuant to Art. 6 (1) lit. a of the GDPR.

• Activities and Payment Methods are simply stored for your ease of use.

Purpose: Providing you with the regular functionalities of an Eversports account
Legal Basis: Fulfillment of a contract pursuant to Art. 6 (1) lit. b of the General Data Protection Regulation (GDPR) (the user agreement between you and Eversports),if applicable, your consent pursuant to Art. 6 (1) lit. a of the GDPR.

• Credits are stored in your Eversports Profile for your information. The Sports Provider concerned can access and devalue your credit whenever you decide to use it.
• Some of your Profil Data and Payment Methods are processed when you book a Sports Offering. See Booking below.
• Profile picture, username, and name are automatically visible to other users. The visibility can be reversed in the privacy settings.
• Other users can only see additional personal profile data once you have authorized them to view it.

How we store this data:

• Each activity and your credits are stored in your Profile.
• You can delete Personal Data (except for your email address) and Payment Methods in your Eversports Profile at any time.

Who receives this data:

• Eversports processors

Dauer der Speicherung:

We only store your data for as long as necessary to fulfill the purpose. Additionally, we comply with legal retention periods that must be observed before deleting personal data.

Logging In

Whenever you log into your Eversports Account, the following data processing happens.

What data we collect:

Depending on how you login, the following data is collected:

• Email Login Authentication Data (email address, hashed password)
• Social Login Authentication Data (email address, ID token)

Furthermore, the following data is collected:

• Metadata (date and time of login)

Why and how we use this data:

Purpose: Guaranteeing information security
Legal Basis: Our legitimate interest in guaranteeing information security.

• The Authentication Data is used to authenticate you and grant you access.
• The Metadata is stored in our database in order to identify inactive accounts.

How we store this data:

• Authentication Data is stored until your account is deleted.
• Data entered during Login is not stored.
• Metadata is overwritten at every login and deleted if your account is deleted.

Who receives this data:

• Eversports processors
• Eversports department of information security

Booking

Whenever you use the Eversports Platform to book a Sports Offering (book a course, rent a tennis court, etc.), you enter into a service agreement with the Sports Provider of that offering and the following data processing happens.

What data we collect:

• Booking Details (Sports Provider, type of sport, product, date and time, first time booking (optional))
• Additional Booking Details (product details, additional products)
• Optional Information for Sports Provider
• Payment Confirmation

Why and how we use this data:

Purpose: Enable you to book a Sports Offering
Legal Basis: Performance of a Contract (the service agreement between you and the Sports Provider)

• If you use one of your Payment Methods stored in your Eversports Profile to pay for the service, the necessary payment information is transferred to a payment service provider (a Bank, or PayPal for example). If you use a new payment method, you are redirected to the payment service provider, where you can enter your information directly. If the transaction was successful, we receive a Payment Confirmation from the payment service provider.
• All Booking Details, Optional Information, Payment Confirmation, and some of your Profile Data (e.g. name, email address and phone number. Depends on what information the Sports Provider requires. What data exactly is being transferred is shown during the booking process.) are transmitted to the Sports Provider.
• An activity or an entry to your credits tab is created and stored in your Eversports Profile.

How we store this data:

• Payment Confirmation is stored according to state law.

Who receives data:

• Eversports processors

Third Parties:

• Payment Information: Payment Provider you chose
• Booking Details & Optional Information: Sports Provider you booked

Reviewing a Business

If you review or rate one of our sports providers, the following processing happens:

What data we collect:

Review Data:

• Your written review of the sports provider
• Metadata (date and time of review)
• Data you have previously provided: Profile Data (first name, initial of last name, profile picture)

Rating Data:

• Your rating(s) of the sports provider

Why and how we use this data:

Purpose: Publishing your review
Legal Basis: Consent

• Your Review Data is stored in our database and published on our website.

Note: This means the data is effectively transferred to anybody visiting our website, including parties in non-EU/ECR states. Whether actual personal data is published, meaning you can be identified by someone visiting our website, strongly depends on two factors: who is reading your review and what information you have provided. We (Eversports) can always attribute the review to you personally. Others only see the Review Data which can be anonymous. However, someone who already knows you could for example identify you by your profile picture alone, or by the content of your written review.

• Your Rating Data is stored and used to calculate the average rating from all users concerning a particular sports provider.

Note: You are not required to consent to this! If you did, you can withdraw your consent at any time, by contacting us. Withdrawing your consent does not affect the lawfulness of the processing that was based on your consent before its withdrawal. Not giving your consent or withdrawing your consent will have no impact on your other dealings with Eversports or the sports providers, however, without your consent, your review will not be published.

Purpose: Content-Moderation
Legal Basis: Performance of a contract (the Eversports Terms of Use)

• Your review will be deleted if its content violates the Eversports Terms of Use.

How we store this data:

• Review Data and Rating Data is stored until you withdraw your consent or a sports provider deletes their profile, whichever occurs sooner.

Who receives this data:

• Eversports processors
• Review Data: anybody visiting our website

Subscribing to our News and Offers Messages

If you choose to receive marketing related messages from us (by checking the box during sign up for example) we will send you messages about upcoming offers and events to your email address. At the end of every such email you can find a link to unsubscribe from these messages.

What data we collect:

As User, you have already given us the data we use: your email address and your name.

Why and how we use this data:

Purpose: Advertisement (promoting our own products).
Legal Basis: Consent

• We use your data to regularly send you marketing emails.

Note: You are not required to consent to this! If you did, you can withdraw your consent at any time, by clicking the unsubscribe link you'll find at the end of every marketing email. Withdrawing your consent does not affect the lawfulness of the processing that was based on your consent before its withdrawal. Not giving your consent or withdrawing your consent will have no impact on your other dealings with Eversports or the sports providers.

Who receives this data:

• Eversports processors
• Eversports marketing department

The Eversports Family Account

If you use the Eversports Family Account feature and add members to your account and book sports offerings for them, the following processing happens:

What data we collect:

• Member Data (First Name, Last Name, Birthdate)
• Booking Data (see all data in section Booking)

Note: As stated in the Eversports GTC, if the family member you add is a minor (under 18 years of age) you must be a parent or legal guardian of the child. Otherwise you need the consent of the person you are adding and need to have shown them this privacy policy.

Why and how we use this data:

Purpose: Providing you with the regular functionalities of an Eversports account
Legal Basis: Consent (Yours or that of the added member)

• Member Data of every family member you add is stored in your Eversports Profile.

Note: This consent is not mandatory! It can be withdrawn at any time, by deleting the member from your account. Withdrawing consent does not affect the lawfulness of the processing that was based on that consent before its withdrawal. Not giving consent or withdrawing consent will have no impact on other dealings with Eversports or the sports providers.

Purpose: Enable you to book a Sports Offering
Legal Basis: Performance of a Contract (the service agreement between you and the Sports Provider)

• If you use one of your Payment Methods stored in your Eversports Profile to pay for the service, the necessary payment information is transferred to a payment service provider. If you use a new payment method, you are redirected to the payment service provider, where you can enter your information directly. If the transaction was successful, we receive a Payment Confirmation from the payment service provider.
• All Booking Details, Optional Information, Payment Confirmation, and some of your Profile Data (e.g. name, email address and phone number. Depends on what information the Sports Provider requires. What data exactly is being transferred is shown during the booking process.) and all Member Data are transmitted to the Sports Provider.
• An activity or an entry to your credits tab is created and stored in your Eversports Profile.

How we store this data:

• Member Data is stored until you remove it or your account is deleted.

Who receives this data:

• Eversports processors

Third Parties:

• Payment Information: Payment Provider you chose
• Booking Details, Optional Information & Member Data: Sports Provider you booked

Information for Business Partners & Business Clients

If you are a business partner or business client of Eversports or are an employee of someone that is, the following information is relevant to you. If you visit our websites as well, please read the section "Information for Website Visitors" carefully.

Content:

• Doing Business with Eversports
• Filling out a Form
• Using the Eversports Platform
• Using the Eversports Manager Software
• The Eversports Webshop

Doing Business with Eversports

If you or your employer plans to or has entered a contract with a member of the Eversports Group, several (standard) business procedures involve the processing of personal data, and the following information is relevant to you.

What data we collect:

• Basic Data (name, email address and phone number of contact; company, country, industry)
• Business Correspondence (name, (email / phone / postal) address, message, metadata)
• Other Correspondence (name, (email / phone / postal) address, message, metadata)
• Business Documents (invoices, contracts, payment orders, quotes)

Why and how we use this data:

Purpose: Regular business processing
Legal Basis: Performance or preparation of a contract at the request of the data subject (contract between you and Eversports, or, if you are an employee, your contract of employment)

• The data will be stored and otherwise processed as necessary for the performance or preparation of the contract between you/your employer and Eversports. This includes communication, invoicing and bookkeeping.

How we store this data:

• The data is deleted after 12 months after the last contact and if no other legal basis for further processing exists (like an active contract for example or a legal obligation to retain the data).

Who receives this data:

• Eversports processors
• Eversports employees where appropriate
• Eversports' accountant / tax consultant

Filling out a Form

If you decide to get in touch with us by filling out a form (on one of our websites, the free online demo form for example), the following processing happens.

What data we collect:

• Data you enter into the form (your name and contact information, etc.)
• Date and time of contact

Why and how we use this data:

Purpose: Initiating business at the request of the data subject.
Legal Basis: Preparation of a contract at the request of the data subject.

• The data will be stored.
• The data will be used by our sales department to contact you.

Purpose: Advertisement (promoting our own products).
Legal Basis: Our legitimate interest in doing business with you.

• You will receive marketing emails.

Note: You have the right to object to this processing without providing any explanation. You can object by clicking the link you can find at the end of every email.

How we store this data:

• The data is deleted 30 months after the last contact and if no other legal basis for further processing exists (like an active contract for example).

Who receives this data:

• Eversports processors
• Eversports sales department

Using the Eversports Platform

If you offer your sports offerings on the Eversports Platform the following information is relevant to you.

Note: The data you enter into your Eversports Sports Provider Profile (company name and address, employee names and pictures, etc.) is processed by Eversports on your behalf. Meaning you are the controller and Eversports is the processor (for the process of storing and publishing your Sports Provider Profile data on the Eversports Platform). This processing is covered by the Processing Agreement you signed with Eversports. Other data processing falling under Eversports' responsibility (Eversports is the controller and you are the data subject) is described here:

What data we collect:

Login Data:

• Login Authentication Data (email address, hashed password)
• Metadata (date and time of login)

Review Data:

• Reviews and ratings by Eversports Users associated to your Sports Provider Profile

Why and how we use this data:

Purpose: Publishing user reviews and ratings to improve the overall quality of services offered on the Eversports plattform
Legal Basis: Our legitimate interest in operating an e-commerce platform.

• Reviews and ratings are published on your Sports Provider Profile page.

Purpose: Guaranteeing information security
Legal Basis: Our legitimate interest in guaranteeing information security.

• The Login Authentication Data is used to authenticate you and grant you access.
• The Metadata is stored in log files and used in case of malicious behavior.

How we store this data:

• Authentication Data is stored for the duration of your contract with eversports.
• Data entered during Login is not stored.
• Metadata is overwritten at every login and deleted if your account is deleted.

Who receives data:

• Eversports processors
• Eversports department of information security

Third Parties:

• Review Data: anybody visiting our website

Using the Eversports Manager Software

If you use the Eversports Manager Software in any of its variations, the following information is relevant to you.

Note: The data you enter into the Eversports Manager (client name and contact details, employee schedule, etc.) is processed by Eversports on your behalf. Meaning you are the controller and Eversports is the processor (for the process of storing your client and employee data). This processing is covered by the Processing Agreement you signed with Eversports. Other data processing falling under Eversports' responsibility (Eversports is the controller and you are the data subject) is described here:

What data we collect:

Login Data:

• Login Authentication Data (email address, hashed password)
• Metadata (date and time of login)

Why and how we use this data:

Purpose: Guaranteeing information security
Legal Basis: Our legitimate interest in guaranteeing information security.

• The Login Authentication Data is used to authenticate you and grant you access.
• The Metadata is stored in logfiles and used in case of malicious behavior.

How we store this data:

• Authentication Data is stored for the duration of your contract with eversports.
• Data entered during Login is not stored.
• Metadata is overwritten at every login and deleted if your account is deleted.

Who receives this data:

• Eversports processors
• Eversports department of information security

The Eversports Webshop

Eversports offers a variety of products for business clients via its webshop (shop.eversportsmanager.com). If you shop in our webshop, the following information is relevant to you. Also have a look at the section Doing Business with Eversports above.

What data we collect:

• Delivery details (company name, delivery name and address)
• Email address
• Details of your order (product, amount, price)
• Payment information (depends on the payment method you choose)
• Payment confirmation
• Invoice
• (Optional) Phone number

Why and how we use this data:

Purpose: Fulfilling a sales contract
Legal Basis: Performance of a contract (sales contract between you and Eversports)

• The data will be stored and otherwise processed as necessary in order to deliver the wares you have purchased and for billing purposes. This includes communication as necessary. Delivery details will be transmitted to a delivery service provider.

How we store this data:

• The data is deleted after the contract has been fulfilled and no legal obligations mandate us to retain the data.

Who receives this data:

• Eversports processors
• Eversports employees where appropriate

Third Parties:

• Delivery Details: Delivery service provider
• Payment Information: Payment Provider you chose

Information for Applicants

So, you want to join the Eversports Team! That's great! Here is what you need to know about your data protection.

Content:

• Filling out an Application Form

Filling out an Application Form

If you fill out an application form on one of our websites, the following data processing happens.

What data we collect:

Application Data

• Data you provide with the application form (name, contact information, qualifications, certificates, etc.)

Subsequent Data (should the application process proceed)

• Evaluation of and decision about your application
• Test scores
• Memos and correspondence with or about you

Why and how we use this data:

Purpose: Applicant management
Legal Basis: Preparation of a contract at the request of the data subject.

• Application Data is evaluated by Eversports personnel.
• You are contacted.
• The data is used to form a decision about your application.

Purpose: Application retention
Legal Basis: Consent (while filling out your application you can opt into a prolonged retention period so that we can contact you if a position opens up)

• Your data is stored for two years, and during that time you are informed about new job offerings at Eversports that fit your profile

Note: You are not required to consent to this! If you did, you can withdraw your consent at any time by contacting us. Withdrawing your consent does not affect the lawfulness of the processing that was based on your consent before its withdrawal. Not giving your consent or withdrawing your consent will have no impact on the application you send or any other dealings with Eversports.

How we store this data:

• We retain the data for 6 months after the application process is completed.

Who receives this data:

• Eversports processors
• Eversports HR department
• Other Eversports personnel, where appropriate

Your Rights

As a basic principle, you shall have the rights of access, rectification, erasure, restriction of processing, data portability and objection. To exercise these, you can contact Eversports or any other member of the Eversports Group. Therefore, if you wish to erase/delete your account, simply send an email to support@eversports.com.

Details on your Right to Object: Whenever "Our legitimate interest" is the Legal Basis for processing, you have the right to object to that processing. If the processing activity concerns marketing activities in our legitimate interest you can simply object without any requirements. In any other case we kindly ask you to state the grounds (relating to your particular situation) for your objection.

Details on withdrawing consent: Whenever "Consent" is the legal basis for processing, you have the right to withdraw your consent at any time, with future effect, either by contacting Eversports directly or doing what is described above at each processing activity (clicking a link to unsubscribe from marketing messages for example). Withdrawing your consent does not affect the lawfulness of the processing that was based on your consent before its withdrawal.

In accordance with the GDPR, you have the right not to be subjected to a decision based solely on automated processing, which produces legal effects concerning you or similarly significantly affects you. The Eversports Group does not subject you to such decisions.

If you believe that the processing of your data contravenes data protection law or otherwise infringes your data protection rights, please contact Eversports at support@eversports.com. We always endeavour to resolve your request to your satisfaction. You have the right to contact the supervisory authority at any time and to lodge a complaint. In Austria, this is the Data Protection Authority. A list of the competent supervisory authorities outside Austria is available here.