Data Privacy Policy Wingfield Box & App (Wingfield Sports Technology Inc.).

"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

"Restriction of processing" means the marking of stored personal data with the aim of limiting their future processing.

"Profiling" means any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

"Pseudonymization" means processing personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures that ensure that the personal data cannot be attributed to an identified or identifiable natural person.

"File system" means any structured collection of personal data accessible according to specified criteria, whether such collection is maintained on a centralized, decentralized, or functional or geographic basis.

"Controller" means a natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data, where the purposes and means of such processing are determined by applicable law, the controller or the specific criteria for its designation may be provided for by applicable law.

"Processor" means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.

"Recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under applicable law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing.

"Third-party" means a natural or legal person, public authority, agency, or other body. other than the data subject, the controller, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

A "Consent" of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

The processing of personal data is only lawful if there is a legal basis for the processing. The legal basis for the processing may include:

We are a wholly-owned subsidiary of Wingfield GmbH, located in Germany (“Parent“), and all personal data we collect is transferred to, stored by, and processed by Parent. The transfer is necessary for the purposes outlined in this privacy policy. At all times, the processing of personal data by Parent will comply with this privacy policy and applicable law.

You can find our app for Android in the Google Play Store and for iOS in the Apple App Store. When you download the Wingfield app, information is transferred to the App Store on the basis of the agreement concluded with the provider, i.e. in particular the user name, e-mail address and customer number of your account, time of download, payment information and the individual device identification number.

When using the Wingfield App, we collect the following data in so-called log files, which are technically necessary for us to offer you the functions of our mobile app and to ensure the stability and security of the app:

This data is not merged with other data sources. The server log files are stored for a maximum of 14 days and then automatically deleted. The legal basis for the processing of the log files is processing is for the protection of the legitimate interests of the controller. We have a legitimate interest in ensuring the functioning, stability, and security of our app by storing log files.

If you want to use the Wingfield App as a player or coach, you need to create a user account. As part of the registration process, we collect the following personal data from you:

We process this data in order to distinguish you from other users and to enable you to use our app and the associated products. On a voluntary basis, you can add the following information to your player profile:

If you subscribe to the paid Pro subscription Wingfield Pro, we do not receive any personal data from you other than the information about the service you used to subscribe. We process this information in order to provide you with the Pro features of the Wingfield app. The legal basis for this is processing for the performance of a contract.

We offer participating court operators and clubs the opportunity to manage user access via a separate platform. For this purpose, employees with the role of administrator (admin) can keep track of the registered “players” and “coaches” at all times. There are two different modes for the overview: open and restricted access mode. In open access mode, all players have access to the Wingfield courts. Meanwhile, in restricted access mode, the admin can customize access specifically for Pro members. The following personal data can be viewed at any time in the user administration:

The legal basis for this processing is performance of a contract.

With the Wingfield Tracking System you can start so-called On-Demand-Matches. An on-demand match is an official match whose result is recognized by the German Tennis Federation ("DTB") and has a corresponding influence on your ranking points. In order to play on-demand matches, you must first verify your data. We will ask you for your DTB ID or your mybigpoint account as part of the verification process. We then transfer the following data to nu Datenautomaten GmbH, Rathausstraße 2, 6900 Bregenz, Austria (hereinafter referred to as "Nu"):

If you have completed an on-demand match, we will transfer the following data to NU:

Nu operates the official ranking database of the DTB and the state tennis associations on behalf of the DTB. The aforementioned data is therefore needed to identify you as a ranked player and to include the match result in your ranking score. Nu will not use the data for any other purpose. The legal basis for the collection and disclosure of the data to Nu is processing for the performance of a contract.

As a player you have the possibility to link your account with the account of your coach. In this case, your coach will receive the following information about you via the Wingfield app:

Optionally, you have the possibility to play in a performance class league (LK league) by registering in the corresponding league list. As soon as enough players in a similar performance class (+/-4) and age have registered, further steps can be taken to organize the LK matches. The players can network with each other using contact requests. If the contact request is accepted, players can continue to communicate outside of the app as they wish.

In the future, we might offer an app-internal chat function that players can use to communicate with each other.

The Wingfield App uses the service "Google Analytics for Firebas" an analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This application uses mobile device identifiers (including Android Advertising ID and Advertising Identifier for iOS, respectively) and cookie-like technologies to run the Google Analytics for Firebase service. Analyzing how our app is used helps us understand which parts of our app are used and how. This enables us to constantly improve our app and its functions and adapt them to changing user behavior.

The information generated by the service about your use of our app is usually transmitted to a Google server in the USA and stored there. However, we use Google Analytics for Firebase with the IP anonymization extension so that your IP address is truncated by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before it is sent to servers in the USA.

However, in exceptional cases, the full IP address may be transmitted to a Google server in the USA and only shortened there. We will also ask for your express consent in this regard. No data collected by cookies will be transferred to the USA without your express consent. You can also opt out of certain Firebase features at any time using the appropriate device settings on mobile devices, such as the advertising settings for mobile devices.

The legal basis for the processing is consent.

You can find more information on data protection in connection with Google Analytics here: https://support.google.com/analytics/answer/6004245?hl =en#zippy=

Our app uses the "Google Sign-In" service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This service enables our users to use the convenient single sign-on procedure. Users can log in to the Wingfield App using their Google login information without having to register. When you use Google login, we receive the following information from Google:

You can remove the link to the Wingfield app at any time in Google's settings. Please note that in this case you will have to register again in the Wingfield App. For more information on data protection at Google, please visit: https://policies.google.com/privacy

Our app also uses the Meta Platforms Inc. 1601 Willow Rd, Menlo Park, CA 94025 („Meta“). . This service enables our users to use the convenient single sign-on procedure. Users can log in to the Wingfield App with their Facebook login data without having to register.

When you use the Facebook login, we receive the following information from Facebook:

In this case, Meta receives information about how you use our app. This information may also be transferred to servers in the U.S.A. The legal basis for the processing is the consent of the user. You can revoke this consent at any time by removing the link to the Wingfield App inside your facebook settings. In order to do this navigate to Menu > Settings > Apps & Website. Please note that in this case you will have to register again in the Wingfield app. For more information on data protection at Facebook, please visit: https://www.facebook.com/about/privacy

Our App continues to use the single sign-on service provided by Apple Inc, Infinite Loop, Cupertino, CA 95014, USA ("Apple"). Users can log in to the Wingfield App using their Apple login details without having to register.

When you use the Apple login, we receive the following information from Apple:

In this case, Apple receives information about how you use our app. This information may also be transferred to servers in the USA. The legal basis for the processing is consent. You can remove the link to the Wingfield app at any time in Apple's settings. Please note that in this case you will have to register again in the Wingfield App. For more information on data protection at Apple, please visit: https://www.apple.com/legal/privacy/de-ww/

We use YouTube as a plug-in. We give you the option of using the button to communicate directly with the provider of the Google plug-in so that you are redirected to our YouTube channel. When you click on the plug-in for the first time, a banner appears stating that if you click again, your personal data will be collected by other trackers and transmitted to Google. This is the so-called two-click solution. Only if you click on the marked field again, thereby activating it, will the plug-in provider Google receive the information that you have accessed the corresponding website of our online offering. This data is stored by Google after transmission.

The Google address is the URL to their privacy policy:

Youtube: Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de.[PK1].

We use LinkedIn as a plug-in. We give you the option of using the button to communicate directly with the provider of the LinkedIn plug-in so that you are redirected to our official LinkedIn page. When you click on the plug-in for the first time, a banner appears with the content that, if you click again, your personal data will be collected by other trackers and transmitted to LinkedIn. This is the so-called two-click solution. Only if you click on the highlighted field again, thereby activating it, will the plug-in provider LinkedIn receive the information that you have accessed the corresponding website of our online offering. This data is stored by LinkedIn after transmission. The legal basis for the processing is consent.

The address of LinkedIn the URL to their privacy policy:

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy policy: https://www.linkedin.com/legal/privacy-policy

Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

We use Facebook as a plug-in. We give you the opportunity to communicate directly with the provider of the Meta plug-in via the button so that you are redirected to our official Facebook page. When you click on the plug-in for the first time, a banner appears stating that if you click again, your personal data will be collected by other trackers and transmitted to Meta. This is the so-called two-click solution. Only if you click on the highlighted field again, thereby activating it, will the plug-in provider Meta receive the information that you have accessed our Facebook page. This data is stored by Meta after transmission. The legal basis for the processing is consent.

Meta's address is the URL to their privacy policy:

Meta Platforms, Inc, Willow Road 1601 94025 Menlo Park, CA, USA

https://de-de.facebook.com/privacy/policy/

Information that you provide during registration and other (voluntary) information that you provide us in your account, we will store as long as you maintain your account with us. You can delete your account at any time. Simply send us an e-mail to app@my-wingfield.com. Your personal data will then be deleted within the statutory period.

If you have collected session data (especially video) together with other playing partners registered at Wingfield, please inform us explicitly by e-mail after deleting your account, stating your Wingfield email address, that all videos associated with this account should be deleted. Thus, your playing partners will no longer have access to the video data. Otherwise, the video data will remain accessible to your playing partners.

If you maintain a Pro Account (see Section 3.4), we will store the aforementioned data for at least the term of your Pro Subscription and beyond, as long as you maintain an account with us. If you delete your account, we will thereafter only store certain data regarding which we have legal (in particular tax law) retention obligations.

Our product offers you a detailed game analysis using smart cameras. Naturally, video images of the playing persons are recorded.

When you register, we will ask for your consent to record video of you for match analysis with the Wingfield Tracking System. The recording starts only when a match is started at the Wingfield Box. The recording ends as soon as the match is finished by a player or automatically after five hours at the latest. The raw video data is only manually reviewed by us to improve our product and for troubleshooting. The creation of your game statistics is fully automated. If you have completed an on-demand match (see section 3.5), we will manually review the raw video data once to ensure that the match was held according to the rules and that the result is valid. If we discover irregularities or have doubts about the compliance of the match, we will create a match report and send it together with the video raw data to the German Tennis Federation e.V., Hallerstr. 89, 20149 Hamburg ("DTB"), so that the DTB can finally decide whether the match will be evaluated. The legal basis for data processing is the consent of the data subject in conjunction with processing for the performance of a contract.

The cameras are oriented so that only the court and the area immediately behind it are filmed. The area behind the court is so far away from the cameras that people in this area are usually not identifiable. The courts where our product is used are marked accordingly with signs, so it is your free decision whether to enter the recording area or not.

When you use the Wingfield Box in conjunction with the Wingfield App, we regularly process the following personal data: Statistics of your games (e.g., number of aces, service errors, double faults, forehand, and backhand winners or faults, and breakpoints won) and account data (username and email address). We store this data for as long as you maintain an account with us. The legal basis processing for the performance of a contract.

The access and storage period of videos and analyses is generally based on the current conditions of the Basic and Pro accounts. In addition, we will only retain raw video data even after an account has been closed if you have played an on-demand match in the six months prior to closing your account, as we are obliged by the DTB to retain this data for six months for security reasons. You can delete your account at any time by sending us your deletion request by e-mail to app@my-wingfield.com.

We offer the option of broadcasting matches live on YouTube via our Wingfield Boxes. Participating court operators can create a streaming key using our internal software solution. This streaming key is necessary so that the live stream can be established on YouTube via the Wingfield Box. After entering this key in the Wingfield Box, the live stream can take place on the court operator's YouTube channel. The legal basis for data processing is the consent of the data subject in conjunction with processing for the performance of a contract. The relevant agreements and consents are obtained from the participating courts.

If the processing of personal data is based on a granted consent, you have the right to revoke the consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of consent until revocation.

You have the right to request confirmation from us as to whether we are processing personal data relating to you. You can request confirmation at any time using the contact details above.

The California Consumer Privacy Act or “CCPA” (Cal. Civ. Code § 1798.100 et. seq.) and similar statutes afford consumers residing in the applicable states certain rights with respect to their personal information (the state privacy statute that applies to you if any, is referred to herein as the “State Privacy Law”). The rights below apply to all United States residents, provided, however, that your State Privacy Law will apply to the extent it affords you rights greater than those provided herein.

We do not sell your personal information.

Subject to certain limitations, you have the right to (1) request to know more about the categories and specific pieces of personal information we collect, use, and disclose about you, (2) request deletion of your personal information, (3) opt out of any sales of your personal information, if we engage in that activity in the future, and (4) not be discriminated against for exercising these rights. You may make these requests by using the contact information in the Contact Us section below. We will verify a webform request by asking you to provide identifying information. We will not discriminate against you if you exercise your rights under a State Privacy Law.

If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. This may include requiring you to verify your identity. If you are an authorized agent seeking to make a request, please email us at: info@my-wingfield.com. We do not knowingly collect Personal Information from persons under the age of 18. Data will not be shared with any third parties for their own marketing purposes.