Privacy Policy
Last updated: [DATE]
2.1Data Controller
[PFA/SRL name], Tax ID (CUI) [tax code], contact for personal data matters: [email].
2.2What Data We Collect
- Account data: name/username, email, password (encrypted).
- Technical data: IP address, device/browser type, cookies.
- Payment data (when payments are active): processed by an external payment provider and not stored directly by us.
- Usage data: predictions viewed, history of interactions with the account.
2.3Purposes of Processing
Creating and managing your account; providing subscriptions; invoicing; account-related communications; improving the platform; complying with legal obligations.
2.4Legal Basis
Performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c)), legitimate interest in security and fraud prevention, and consent for non-essential cookies and marketing.
2.5Who We Share Data With
- Technical providers: hosting, payment processing (once activated), sports data/odds providers (e.g., sports data APIs), and AI infrastructure providers used to generate predictions.
- Each third-party provider processes data only under a data processing agreement (DPA) and only for the purposes necessary to provide the service.
2.6Transfers Outside the EU/EEA
If some providers (hosting, AI services) have servers outside the EU/EEA, transfers are carried out with appropriate safeguards (e.g., EU standard contractual clauses).
2.7Retention Period
Account data is retained for as long as the account is active, plus the subsequent statutory tax archiving period (if invoicing applies). Cookie durations are displayed in the consent banner.
2.8Your Rights
Access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with ANSPDCP (the National Supervisory Authority for Personal Data Processing — dataprotection.ro). Requests should be sent to [email].
2.9Cookies
The website uses strictly necessary cookies (account functionality) and, optionally, analytics/marketing cookies — activated only with your consent, given through a cookie banner with a genuine option to refuse.
2.10Security
We apply reasonable technical and organizational measures (password encryption, restricted access) to protect data.