Privacy Policy

PRIVACY NOTICE FOR USERS OF THE “PICK-ROLL” PLATFORM/APP

(PRIVACY POLICY)

Dear User,

Your privacy matters to us. In this privacy notice, in accordance with Article 13 of the European Regulation on the Protection of Personal Data (EU Reg. 2016/679 – hereinafter referred to as GDPR), we clearly and transparently explain how we collect, use, protect, and store your personal data, and what rights you can exercise when using our App or the Pick-Roll platform.

Pick-Roll is the first platform in Italy that connects basketball enthusiasts, amateurs, and recreational players, bridging the gap between the physical and digital worlds to allow users to experience sport in all its forms.

You, the USER, by activating the contract between the parties—of which this document is an integral part—consent to the processing of your data for the purposes and by the methods described herein. This notice is always provided when registering an account on the “PICK-ROLL” App, available on third-party stores App Store and Play Store. The policy, along with the ability to review and modify your consents, is always accessible within the App.

This Privacy Policy aims to describe the methods of managing this site in relation to the processing of personal data of users/visitors. It also serves as information pursuant to Article 13 of Legislative Decree 196/03 – Personal Data Protection Code – to those who connect to the “Pick-Roll” site/app and use its related services, ensuring compliance with data protection laws.

WHO IS THE DATA CONTROLLER?

The GDPR defines the Data Controller as “the natural or legal person, public authority, service, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.”

The Data Controller for this site is Pick-Roll S.R.L., headquartered at Via di Settebagni 390, 00139 Rome, reachable at: support@pick-roll.com

The Controller may entrust third parties (individuals or companies) to perform certain data processing activities. These parties must be formally appointed as Data Processors (Art. 28 GDPR) and receive clear, specific instructions on processing while ensuring appropriate security and legality standards.

WHAT ARE PERSONAL DATA?

Personal data refers to information that identifies or can identify a natural person, such as habits, lifestyle, personal relationships, health, financial status, etc.

“Common” personal data includes direct identifiers like full name and images, and indirect identifiers like phone number, tax code, IP address, email, license plate, credit card details.

“Special categories” or “sensitive” data include genetic, biometric, health, sexual life or orientation, racial or ethnic origin, religious or philosophical beliefs, political opinions, and trade union membership.

“Judicial” data refers to criminal convictions, security measures, or status as a suspect or defendant.

Highly sensitive data also includes electronic communications and geolocation data.

WHO DO WE SHARE YOUR DATA WITH?

For processing purposes, your data may be shared with:

• Persons authorized (Art. 29 GDPR) by the Controller, bound by confidentiality;
• Data Processors/Sub-Processors (Art. 28 GDPR), responsible for services such as IT maintenance, sales management, and user support;
• Public bodies or authorities if required by law or legal orders.

An official list of Processors/Sub-Processors is available on request by writing to: support@pick-roll.com

Potential recipients include:

• Consultants, accountants, or legal advisors
• Banks
• Internal staff involved in data processing
• Judicial or administrative authorities
• Service providers supporting user activities

WHAT ARE YOUR RIGHTS AND HOW TO EXERCISE THEM?

Under Articles 15 and following of the GDPR, you have the right to:

• Access, rectify, update, delete, or limit processing of your personal data;
• Object to processing or request portability;
• Confirm whether personal data concerning you exists and receive a copy in intelligible form.

You also have the right to obtain: a) Information on:

• Data origin
• Purpose and method of processing
• Logic of electronic processing
• Identity of the Controller, Processors, and authorized persons

b) Updating, rectification, or integration of your data; c) Deletion, anonymization, or blocking of data processed unlawfully; d) Certification that the operations above were communicated to third parties unless impossible or disproportionate.

e) Object in whole or in part:

• For legitimate reasons
• To marketing or newsletter communications

You can exercise your rights by writing to: support@pick-roll.com. No special format is required. Responses are provided within one month (extendable by two months for complexity).

If unsatisfied, you may lodge a complaint with the Data Protection Authority or appeal to the courts.

DATA PROCESSED BY THE PICK-ROLL APP

Pick-Roll allows users to find public and private basketball courts, challenge others, rate users, and monitor performance.

FALSE STATEMENT DISCLAIMER

As a USER, you guarantee the truthfulness, accuracy, and updating of the personal data provided. The Controller is not liable for false or inaccurate information.

Under Art. 5(1)(d) GDPR, data must be accurate and updated. False information may lead to corrective measures, including service suspension.

WHAT DATA DO WE COLLECT AND USE?

We collect:

• Email, password, name, surname (phone number is optional);
• Geolocation (to locate nearby courts);
• For PREMIUM services: full name, tax code, billing address, credit card/Apple Pay/Google Pay details;
• Data from cookies, navigation, and tracking systems (see Cookie Policy);
• Interaction data from app/site users and support inquiries.

Summary:

• Identity data: name, surname, email, password
• Contact data: optional phone number
• Preferences: city, DOB, gender, role, height, hobbies, favorite brands/NBA team
• Tax/billing data for PREMIUM users
• Navigation data via cookies/tracking systems

WHY DO WE PROCESS YOUR PERSONAL DATA?

Purposes:

• Create and manage user communities
• Improve user experience via analytics and preferences
• Ensure app security and functionality
• Provide access to premium features (with consent)

Processing also serves:

• User/account registration and management (Art. 6(1)(b) GDPR)
• Purchase/subscription handling

Consent is required for:

• Newsletter, promotional communications, data transfers
• Marketing and profiling (to tailor services and offers)

Soft spam (transactional/service-related communications) may be sent without prior consent, under legitimate interest (Art. 130, IV Co, Privacy Code).

Use of Apple ID/Google ID for login implies data sharing per their policies. Users should review their privacy terms.

DATA MONETIZATION

With explicit consent, data may be used for:

• Usage analysis and trends (anonymized data shared with partners)
• Targeted marketing and ads
• Sharing non-identifiable data with sponsors or partners

Data Monetization involves turning data into economic value via analytics or external sharing/sale. GDPR compliance requires:

• Explicit consent
• Transparency
• User control (access, correction, deletion)
• Adequate data protection

DATA PROCESSING PURPOSES BY LEGAL BASIS

Based on contract/legal obligation:

• User registration
• Legal compliance
• External consultants
• Rights protection
• Statistics

Based on consent:

• Marketing/promo/service updates
• Data monetization

All data is processed lawfully, fairly, and transparently.

THIRD-PARTY LINKS AND SOCIAL PLUGINS

Our App may include links/plugins to social media or third-party services. Sharing features (e.g., via “Share” button) may open external apps. We are not responsible for third-party privacy policies.

THIRD-PARTY INTERACTIONS

• Facebook/Instagram/WhatsApp widgets (Meta Platforms, Inc.)
• Adapty.io (for subscription and payment handling)

Data collected: Cookies and usage data.

THIRD-PARTY TERMS

Downloading from App Store/Google Play subjects you to their End-User License Agreements.

DATA SECURITY

We collect minimal, relevant data using manual/electronic tools. Measures are in place to prevent data loss, unauthorized access, or misuse. Users are advised to secure their devices with antivirus and firewalls.

DATA RETENTION

Data is retained for the time necessary to fulfill its purpose:

• Up to 12 months after service termination
• Promotional data: max 2 years, unless unsubscribed
• Based on consent: until revoked

After expiry, data is deleted and rights can no longer be exercised. For details, contact support@pick-roll.com

WHERE IS YOUR DATA PROCESSED?

Data is processed at the Controller’s premises and any authorized location. Transfers outside the EU occur only to countries with adequate protection or per GDPR Art. 49(b). Downloads via Google/Apple stores involve necessary data transfers.

PRIVACY POLICY CHANGES

We reserve the right to update this policy. You will be notified upon updates, and we recommend checking this section regularly.

Privacy Policy last updated: March 24, 2025