Privacy

Policy on the Processing of Personal Data

1. Preamble

Queenballers s.r.o., ID No. 21287368, with its registered office at Opletalova 1284/37, Nové Město, 110 00 Prague 1, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 399543, established under the laws of the Czech Republic (hereinafter referred to as the “Controller”), is engaged in journalistic activities in the field of women’s football and its players, as well as its promotion, primarily through the creation of content on the website www.queenballers.com and related social media accounts (Instagram, Facebook, TikTok, Reddit, X, Youtube and LinkedIn, all under Queenballers.com), which it operates (hereinafter referred to as the “Activities”).

The Controller can be contacted in writing at the registered office address or via email at info@queenballers.com. The contact person is Pavlína Nepokojová, COO of the Controller.

The Company, as the data Controller, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), and Act No. 110/2019 Coll., on the processing of personal data (hereinafter referred to as the “Act”), hereby informs data subjects about the collection, storage, and processing of their personal data.

2. Purpose of processing

In the case of data subjects who have filled out the form on the Controller’s website at https://www.queenballers.com/qb/forms/questionnaire-player-profile, personal data is processed for the purpose of creating a player profile and its publication, resolving the data subject’s request, and further communication with the data subject.
In the case of data subjects who have subscribed to the newsletter and consented to receiving marketing communications, personal data is processed for the purpose of sending the newsletter and marketing communications addressed to the data subject regarding the Controller’s activities, based on the data subject’s own request.
In the case of data subjects who have agreed to collaborate with the Controller as ambassadors or influencers, personal data is processed for the purpose of publishing and disseminating the ambassador’ / influencer’s profile and information about the data subject on the Controller’s website, as well as on its social media platforms, and for other joint collaboration within the women’s football community and the player’s / ambassador’s career.
In the case of data subjects about whom the Controller provides information pursuant to a journalism license under the Article 6 (1) (f) of the GDPR: personal data is processed for journalistic purposes in the field of sports, particularly women’s football.
In the case of data subjects voting in the “La Princesa” poll: personal data is processed for the purpose of verification of voters.

3. Lawfulness of processing

The lawfulness of processing within the meaning of Article 6 of the GDPR is determined by:

When filling out the contact form on the Controller’s website: by granting consent to the processing of their personal data for the purpose of communicating with the Controller and addressing the matter raised by the data subject, in accordance with Article 6(1)(a) of the GDPR. Only persons aged 16 or older are authorized to grant consent. A person under the age of 16 may grant consent only with the consent of the person exercising parental authority.
In the case of data subjects who have subscribed to the newsletter and consented to receiving marketing communications: the data subject’s consent to the processing of their personal data for the purpose of communicating with the Controller and addressing the matter selected by the data subject, in accordance with Article 6(1)(a) of the GDPR.
In the case of data subjects who have agreed to collaborate with the Controller as ambassadors or influencers: by the data subject’s consent to the processing of their personal data for the purpose of communicating with the Controller and addressing the matter selected by the data subject, in accordance with Article 6(1)(a) of the GDPR.
In the case of data subjects about whom the controller provides information pursuant to a journalistic license: in accordance with § 17 of the Act and Article 6(1)(f) of the GDPR. The Controller’s legitimate interest is journalistic activity in the field of sports, particularly women’s football.
In the case of data subjects who have voted in the “La Princesa” poll: by the data subject’s consent to process their personal data for the purpose of verification of their identity and voting in the poll, in accordance with Article 6(1)(a) of the GDPR.

4. Scope of personal data processing

When the contact form on the Controller’s website is filled out: the data is processed to the extent that the data subject voluntarily provided it in the contact form.
Data subjects who have subscribed to the newsletter and consented to receiving marketing communications: to the extent that such information was provided by the data subject, but at a minimum, first and last name, and contact email address.
In the case of data subjects who have agreed to collaborate with the Controller as ambassadors or influencers, to the extent that such information was provided by the data subject.
In the case of personal data processed in accordance with Article 6(1)(f) of the GDPR, the data processed includes, in particular, identification data (first name, last name, date of birth), citizenship, information about the data subject’s professional activities (involvement with a football club or national team, athletic performance), and photographs depicting the data subject’s appearance.
In the case of voting in the “La Princesa” poll: the data processed included data subject’s contact email.

5. Recipients of the personal data

Personal data will be disclosed to:

5.1 visitors of the website www.queenballers.com and related social media accounts to the extent that such information has been published on the website or such account. The Controller hereby informs users that the website and the media accounts are accessible worldwide.
5.2 employees or other persons in a contractual relationship with the Controller who are involved in organizing the activity (in particular, COO, writers, editors, and other persons),
members of the Controller‘s governing body,
website administrators providing IT support under a contractual relationship with the Controller.

6. Processor’s of personal data

The following processors process personal data on behalf of the Controller:

6.1 persons in a contractual relationship with the Controller who are involved in organizing the activity (particularly COO, writers, editors etc.),
website administrators providing IT support under a contractual relationship with the Controller.

7. Processing method

The Controller declares that it complies with all obligations under the GDPR and other applicable laws, processes personal data in a lawful, fair, and transparent manner, to the extent necessary and for the specified purposes, and has implemented appropriate technical and organizational measures to ensure the protection of such personal data.

The Controller is authorized, in particular, to collect personal data, store it on data storage media, disclose it, but only to the persons specified in sections 5 and 6 - modify or alter it (e.g., in the event of a change), search for it, use it, transfer it, again, only to the persons specified in sections 5 and 6, retain it, sort it, or combine it, block, or destroy.

Personal data will be processed using automated, partially automated, or non-automated means, with appropriate technical, organizational, and personnel security measures in place that are commensurate with the nature of the processing.

8. Data subject rights

Data subjects have the following rights:

right of access (Art. 15 GDPR)
right to rectification (Art. 16 GDPR) or erasure „right to be forgotten“(Art. 17 GDPR)
right to restriction to processing (Art. 18 GDPR)
right to data portability (Art. 20 GDPR)
right to object (Art. 21 GDPR)
right not to be subject to a decision based solely on automated processing, including profiling (Art. 22 GDPR)
withdraw consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal (Art. 7 GDPR)
file a complaint with the supervisory authority
exercise other rights set forth in data protection laws.

The Controller hereby informs data subjects for whom the legal basis for processing is their consent that the provision of personal data is voluntary, that the data subject may withdraw their consent to processing at any time, and that they have the right to request information about the processing of their personal data, and that the Controller or processor is required to provide this information without undue delay.

If a data subject believes that their personal data is being processed in violation of their right to privacy or in violation of the law, particularly if the personal data is inaccurate, incorrect, or incomplete, they may request an explanation from the Controller or processor or demand that the resulting situation be remedied, specifically by blocking, correcting, supplementing, or deleting the personal data, by sending their request to the email address: info@queenballers.com.

The Data Protection Officer is Pavlína Nepokojová, email: info@queenballers.com.

A request or complaint from a data subject will be addressed without undue delay, but no later than one month, in accordance with Article 12(4) of the GDPR. If the Controller does not comply with the data subject’s complaint or request, the data subject is entitled to lodge a complaint with the supervisory authority and seek judicial protection.

The data subject may contact the supervisory authority with any complaints. A list of supervisory authorities within the European Union is available here: https://digital-strategy.ec.europa.eu/en/library/list-personal-data-protection-competent-authorities. The Controller is registered under the laws of the Czech Republic. The corresponding supervisory authority is The Office for Personal Data Protection, www.uoou.cz.

9. The period for which the data will be stored

The period for which the data will be stored is:

9.1 Data subjects who filled out the contact form on the Controller’s website: from the moment the consent is given and the data provided until the moment the consent is revoked and duly received by the Controller.

9.2 Data subjects who have subscribed to the newsletter and consented to receiving marketing communications: from the moment the consent is given and the data provided until the moment the consent is revoked and duly received by the Controller.

9.3 In the case of data subjects who have agreed to collaborate with the Controller as ambassadors or influencers: from the moment the consent is given and the data provided until the moment the consent is revoked and duly received by the Controller.

9.4 Personal data of data subjects who voted in the “La Princesa” poll: from the moment the consent is given and the data provided until one year of the announcement of the results of the poll.

9.4 Personal data processed in accordance with Article 6(1)(f) of the GDPR: for the duration of the operation of the website www.queenballers.com and the related social media accounts and Controller’s other activities.

10. Entry into force

This policy entered into force on June 20, 2026.