GDPR Rights & Data Processing

Future Football Stars is the data controller responsible for processing personal data collected through the Platform located at futurefootballstars4u.com.

For all data protection enquiries, contact our privacy team at: privacy@futurefootballstars4u.com

This page applies to individuals located in the European Economic Area (“EEA”) and the United Kingdom (“UK”) whose personal data we process, and supplements our full Privacy Policy.

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• Right of access (Article 15): obtain confirmation of whether we process data about you and receive a copy of that data, along with information on the purposes, categories, recipients, and retention periods.
• Right to rectification (Article 16): request correction of inaccurate personal data or completion of incomplete personal data.
• Right to erasure (Article 17): request deletion of your personal data where there is no compelling reason for its continued processing (the “right to be forgotten”). This right is subject to legal retention obligations.
• Right to restriction of processing (Article 18): request that we suspend processing of your data in certain circumstances, for example while the accuracy of the data is contested.
• Right to data portability (Article 20): receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and request that we transmit that data to another controller where technically feasible.
• Right to object (Article 21): object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Rights in relation to automated decision-making (Article 22): not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make automated decisions of this kind. See Section 8.

To exercise any of the rights described above, submit a written request by email to: privacy@futurefootballstars4u.com

Your request should include:

• Your full name and the email address associated with your Platform account.
• A clear description of the right you wish to exercise.
• Any information that will help us identify you and process your request efficiently.

We may ask you to verify your identity before processing your request. This is to protect you against unauthorised access to your data.

We will respond to your request within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days; we will inform you of any extension within the initial 30-day period, together with the reasons for the delay.

We will not charge a fee for processing your request unless it is manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or decline to act.

We process personal data under the following legal bases (UK GDPR / EU GDPR Article 6):

Data may be retained beyond these periods where required by applicable law, court order, or regulatory obligation.

The Platform is hosted on servers operated by our infrastructure provider, which may be located inside or outside the EEA. Where we transfer personal data to a country outside the EEA or the UK that does not benefit from an adequacy decision, we implement appropriate transfer safeguards, including:

• Standard Contractual Clauses (“SCCs”) approved by the European Commission for EEA-originating transfers.
• The UK International Data Transfer Addendum (“UK IDTA”) for UK-originating transfers.

YouTube video metadata is processed by Google in accordance with Google’s own privacy framework, adequacy decisions, and SCCs. We do not independently control the transfer of data between your browser and Google’s servers when you interact with YouTube-linked content.

You may request a copy of the applicable transfer mechanism by contacting privacy@futurefootballstars4u.com.

We use the following subprocessors to deliver Platform services. All subprocessors are subject to data processing agreements and are bound to process personal data only on our instructions:

• Cloud Hosting & Database Provider (Hostinger): web hosting and database services. Processes account data, profile data, and server logs under a Data Processing Agreement.
• Cloud Storage Provider (Amazon Web Services S3): storage and delivery of profile photographs uploaded to player profiles. Processes image files under AWS data processing terms.
• Google / YouTube: YouTube Data API v3 for video metadata retrieval; YouTube video delivery infrastructure. Governed by Google’s own privacy policy and data processing terms.
• Transactional email provider: delivery of account notifications, verification emails, and safety communications. Processes email addresses and message content only.

This subprocessor list will be updated when subprocessors are added or removed. We will notify users of material changes to our subprocessor list where required.

Future Football Stars does not make any automated decisions that produce legal or similarly significant effects for Platform users.

Platform features such as trending indicators, leaderboard rankings, or featured player signals are informational signals derived from publicly visible engagement metrics (such as votes, profile views, and community activity). They do not constitute automated decision-making within the meaning of GDPR Article 22 and do not affect scout access or any other significant right or opportunity.

If automated decision-making features are introduced in the future, this section will be updated and users will be informed in accordance with our change notification process.

If you are dissatisfied with our handling of your personal data or with our response to a data subject rights request, you have the right to lodge a complaint with the supervisory authority in your country of residence:

• United Kingdom: Information Commissioner’s Office (ICO) at ico.org.uk
• European Union: the national data protection authority for your EU member state. A full list is available at edpb.europa.eu.

We encourage you to contact us first at privacy@futurefootballstars4u.com so we have the opportunity to address your concern directly.

In the event of a personal data breach, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where the breach is likely to result in a risk to the rights and freedoms of natural persons.
• Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
• Document all breaches internally, including those not reported to a supervisory authority, in accordance with our accountability obligations.

To report a suspected security vulnerability or data breach to us, contact: privacy@futurefootballstars4u.com