YOUR DATA.
YOUR SAFETY.

1. Data controller

The controller of your personal data is RS SKALA s.r.o., ID 23027495, with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno, Section C, Insert 144050, the operator of the Match Moments app and website (“we”). For questions about personal data processing contact us at info@matchmoments.video.

This policy applies to users of the app, visitors to matchmoments.video and people who contact us. The position of people captured in video recordings is explained in Article 4.

2. What data we process

We process the following personal data:

• Registration data – name, email address and password, which we store only as a cryptographic hash
• Data from signing in with Google, Apple or Hockeybook – account identifier, email, name and possibly a profile picture
• Data about organisations and teams – names, logos, locations and the names and emails of admins
• Match data – teams, score, time, venue, notes, types of recorded moments and the emails of timekeepers assigned to the match
• Recordings and clips you make, including audio, thumbnails and descriptions, and camera data (label, position and the phone's battery status)
• Technical data – device and system type, app version, language and network connection data
• Data from the Hockeybook connection – user, organisation and match identifiers, if you use the connection
• Website data – IP address and request data in server logs, and the data you enter in the contact form (name, email, subject and message)

Providing an email and password, or signing in with Google, Apple or Hockeybook, is necessary to create an account – without them the app cannot be used.

3. Purposes and legal bases

We process data only for the following purposes and on the following legal bases (Art. 6(1) GDPR):

• Operating the account and the app – recording, storing, processing and playing recordings, managing organisations, teams and admins, public sharing according to your settings and the Hockeybook connection: performance of a contract (point b)
• Security, prevention of abuse and enforcement of the terms of use, in particular the sports-recordings-only rule, including content moderation and handling notices: legitimate interest (point f) and compliance with obligations under the Digital Services Act (point c)
• Handling enquiries from the contact form and by email: legitimate interest in communicating with you (point f)
• Operating and securing the website, including server logs: legitimate interest (point f)
• Establishing and defending legal claims and cooperating with authorities: legitimate interest (point f) and compliance with a legal obligation (point c)

We do not use data for marketing, we do not sell it and we do not carry out automated decision-making or profiling with legal or similarly significant effects. Only uploaded logos are checked automatically (Article 4); all other measures are decided by a person.

4. Recordings and the people in them

Recordings and clips are made by users – clubs, teams, organisers, coaches or parents. The app is intended exclusively for sports recordings; we delete other content (Terms of Use, Article 3).

The user, or the organisation they record for, is responsible for having a legal basis for recording and publishing players, referees, spectators and other people (for example consent or competition rules) and for informing these people – with regard to the recordings they are the controller. We store and process the recordings on their instructions as a processor. Recordings of minors require particular care.

Clips are visible only to the organisation's admins until they turn on public sharing for the match. Publicly shared clips are available to anyone with the link and are also shown in the league catalogue on this website; sharing can be turned off at any time. Uploaded logos are checked by an automatic inappropriate-content classifier directly on our server.

If you appear in a recording and do not agree with its processing or publication, contact the organisation that recorded the match or us directly at info@matchmoments.video. We will resolve the request with the organisation and make any unlawfully processed or published recording unavailable or delete it without undue delay.

5. Recipients and transfers of data

We do not sell your data or pass it to third parties for marketing purposes. Recipients of data may be:

• the hosting provider that operates our servers in a data centre in Brno (as a processor)
• Google and Apple, if you sign in with their account – they receive information about the sign-in and process data as independent controllers under their own policies
• Hockeybook, also operated by RS SKALA s.r.o. – if you use the connection, the match, team, clip and camera data it needs are exchanged between the apps
• content delivery networks – the website loads fonts from the Google Fonts service, and the web version of the app loads a video processing library from the unpkg.com network when recording in the browser; their operators see your IP address and may process it outside the EU, in particular in the USA
• anyone with the link, if you turn on public sharing for a match
• public authorities, where required by law

Apart from these cases we do not transfer data outside the European Union. Transfers to the USA in the case of Google and Apple services are based on the European Commission's adequacy decision (EU–US Data Privacy Framework).

6. Storage and security

We store data on servers in the Czech Republic (a data centre in Brno). Until they are uploaded to the server, or depending on your settings, recordings are also stored on your device.

• Communication between the app and the servers is encrypted using TLS
• Passwords are stored only as a cryptographic hash, never in readable form
• Only authorised persons have access to the servers and databases, protected by cryptographic keys
• In the event of a security breach we proceed in accordance with the GDPR, including notifying the Czech Office for Personal Data Protection and the people affected where required

7. Retention period

We keep account data for as long as the account exists; after the account is deleted we remove it within 30 days.

We keep recordings and clips until you or an admin of the organisation delete them. Deleted matches and clips first go to the bin, from which they can be restored; permanent deletion also removes the files. When your account is deleted, your matches and clips are deleted too; if a match is managed by another admin of the organisation, it remains in the organisation without any link to you. We delete content that breaches the terms of use without undue delay.

We keep contact form messages and email correspondence for as long as necessary to handle the enquiry, for no longer than 1 year. We keep server logs only as long as necessary to ensure security and solve technical problems. We keep data longer only if we need it to protect legal claims or are required to do so by law.

8. Cookies and device storage

The website and the web app use only technically necessary cookies that remember your chosen language. The app stores the login token, settings and recordings not yet uploaded in the browser's or device's storage. The app does not work without this data, which is why we do not need your consent for it. We do not use any analytics or advertising cookies or other tracking tools.

9. Your rights

Under the GDPR you have the following rights:

• Right of access – you can request a copy of your personal data
• Right to rectification – you can correct inaccurate or incomplete data
• Right to erasure – you can request deletion of your account and related data (see the Delete account page)
• Right to restriction of processing
• Right to data portability – you can request an export of your data in a machine-readable format
• Right to object to processing based on our legitimate interest
• Right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz) or another supervisory authority in the EU, in particular in your country of residence

You can exercise your rights by email at info@matchmoments.video. We will handle your request free of charge within one month at the latest.

10. Changes to this policy

We may update this policy from time to time. We will inform you of significant changes in the app or by email. The current version is always available on this page.