Overview
This policy explains which personal data are processed when you use EZCO.GG (the “website”), for what purposes and on what legal basis, and which rights you have. In short: the website has no user accounts, no advertising and no tracking or analytics tools. Your favourites and settings stay on your device.
Controller and contact
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Alexander Rick
Bergstraße 5, 56812 Cochem, Germany
Email: admin@ezco.gg
For all questions about data protection and to exercise your rights, please write to admin@ezco.gg.
Hosting and server logs (Cloudflare)
The website runs on the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers, Durable Objects and Cache). Whenever you open a page, your browser connects to a Cloudflare server close to you. To deliver the page and protect the service, Cloudflare necessarily processes your IP address, the date and time of the request, the requested address (URL), the referring page, your browser and operating system (user agent), your language settings and the status of the response.
Cloudflare derives your approximate country and time zone from the IP address. We use this information only to suggest popular competitions for your region, to show kick-off times in your time zone and to fill in the “Region” line in the footer. We do not store it in a profile and we do not determine your location more precisely.
Cloudflare also uses connection data to detect and block attacks, such as denial-of-service attacks or malicious bots. Our technical logs (Cloudflare Workers Logs) contain request metadata and error messages and may contain the IP address; they are deleted automatically after no more than 7 days. Security reports that your browser sends when it blocks content on our pages (Content Security Policy reports) contain only the page concerned and the blocked address. We do not store IP addresses in our own databases. Cloudflare's own processing of security and network data is described in Cloudflare's privacy policy.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering the website securely, reliably and quickly. Cloudflare acts as our processor under a data processing agreement (Art. 28 GDPR).
Storage on your device
The website saves a few settings in your browser's local storage (localStorage and sessionStorage): your theme, the teams and matches you follow, pinned competitions and your recent searches. These entries stay on your device and are not sent to us automatically. When the website loads data for followed teams or pinned competitions, the request contains only the identifiers of those teams or competitions, not who you are. Details are in our Cookie Policy.
Legal basis: storing and reading these entries is strictly necessary to provide the functions you request (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG); any further processing is based on Art. 6(1)(f) GDPR. You can delete the entries at any time in your browser.
Live updates and search
While a page is open, your browser requests current scores from our servers every few seconds; the updates pause while the tab is in the background. These requests contain no identifier beyond the technical connection data described above.
Search terms you enter are sent to our server to find teams, competitions and players. We do not store search terms together with your IP address or any other identifier. Results are kept in a cache for a short time so that identical searches can be answered faster. If a player is not yet in our index, the search term – without any information about you – may be forwarded to our data provider Sportmonks. Your recent searches are saved only on your device.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the functions you use.
Logos and images
Team, competition and country logos are supplied by our data provider Sportmonks. Depending on the technical setup, they may be delivered via our own servers or directly from our data provider's content delivery network (currently cdn.sportmonks.com). In the latter case, your browser connects to that server, which necessarily receives your IP address, the time of the request, the address of the image and your user agent; our referrer policy limits the information about the referring page to our domain name.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in showing recognisable logos quickly. Sportmonks processes these connection data under its own responsibility; further information is available in Sportmonks' privacy policy.
Football data about players and officials
Our pages show the names, positions and match events (such as goals, cards and substitutions) of players, coaches and referees as supplied by Sportmonks. We process these publicly available sports data on the basis of Art. 6(1)(f) GDPR; our legitimate interest, and that of the public, lies in sports reporting and information. The persons concerned may object at any time (see “Your rights”).
Links to social networks
We link to our profiles on Instagram, TikTok, X, YouTube and Reddit. These are plain links: no content from these networks is embedded and no data are sent to them when you load our pages. Only when you click a link does the network's website open and process your data under its own responsibility.
What we do not use
We do not use analytics or tracking tools, advertising networks, social media plugins, externally hosted fonts (our fonts are served from our own servers) or third-party cookies. We do not sell personal data, we do not share them for advertising purposes and we do not create user profiles.
Contacting us
If you contact us by email, we process your email address, your message and any other information you provide in order to answer your request (Art. 6(1)(f) GDPR; Art. 6(1)(b) GDPR if your request relates to a contract). Our email provider Namecheap, Inc. (Private Email) acts as our processor. We delete these data once your request has been dealt with, unless statutory retention obligations apply (Art. 6(1)(c) GDPR).
Recipients
- Cloudflare, Inc. (USA) – hosting, content delivery and security; processor.
- Sportmonks (Netherlands) – football data and logos; independent controller for the delivery of logos from its content delivery network.
- Namecheap, Inc. (Private Email) – email; processor.
- Public authorities, where we are legally obliged to disclose data.
Transfers to third countries
Cloudflare is based in the USA and operates servers worldwide; your requests are usually answered by a server close to you. Cloudflare is certified under the EU-U.S. Data Privacy Framework, including its UK Extension and the Swiss-U.S. Data Privacy Framework. Transfers to the USA are therefore based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, Cloudflare has agreed to the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which also cover transfers to other third countries.
Retention
- Technical logs: deleted automatically after no more than 7 days.
- Cached pages and search results: overwritten automatically after minutes to hours; they contain no personal data about you.
- Storage on your device: kept until you delete it; recent searches are limited to the last six; session entries are deleted when you close the tab.
- Emails: until your request has been dealt with, then deleted, unless statutory retention periods apply (up to 6 or 10 years for business correspondence under German commercial and tax law).
Your rights
Under the GDPR you have the following rights with regard to your personal data:
- Access to the data we process about you (Art. 15 GDPR).
- Rectification of inaccurate data (Art. 16 GDPR).
- Erasure of your data (Art. 17 GDPR).
- Restriction of processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Objection: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
- Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR).
- Complaint to a supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz); you may also contact any other supervisory authority.
To exercise your rights, write to admin@ezco.gg. As there are no user accounts and we store no identifiers, we can usually not assign data on our servers to you. You can view and delete the data stored on your device yourself at any time.
No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Obligation to provide data
You are not obliged to provide any personal data. Without the technical connection data, however, the website cannot be delivered to you.
Children
The website is aimed at a general audience. We do not knowingly collect personal data from children; as there are no accounts or forms, we do not collect any information beyond the technical data described above.
Visitors from the United Kingdom
For visitors from the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply. You have the rights described above and can lodge a complaint with the Information Commissioner's Office (ICO, ico.org.uk). Transfers to the USA are based on the UK Extension to the EU-U.S. Data Privacy Framework.
Residents of California (CCPA/CPRA)
Insofar as the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies: in the past 12 months we have collected the following categories of personal information, directly from your device: identifiers (IP address), internet or other electronic network activity information (pages requested, browser data) and an approximate location (country) derived from the IP address. We use them only to deliver and secure the website. We do not sell or share personal information, including for cross-context behavioural advertising, and we do not use or disclose sensitive personal information. Retention periods are listed under “Retention”.
You have the right to know which personal information we collect and how we use it, the right to deletion and correction, the right to opt out of sale or sharing (which does not take place) and the right not to be discriminated against for exercising your rights. Send requests to admin@ezco.gg; we will verify them appropriately. We honour Global Privacy Control signals.
Users in Brazil (LGPD)
For users in Brazil, the Lei Geral de Proteção de Dados Pessoais (LGPD, Law No. 13,709/2018) also applies. We process data on the basis of our legitimate interests (Art. 7, IX LGPD) and to comply with legal obligations (Art. 7, II LGPD). Under Art. 18 LGPD you have, in particular, the right to confirmation of the processing, access, correction, anonymisation, blocking or deletion, portability, information about the entities with which data are shared, and revocation of consent. You can contact us at admin@ezco.gg and lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD). Transfers to other countries take place on the basis of the safeguards provided for in Art. 33 LGPD.
Changes to this policy
We update this policy when our website or the legal situation changes, for example before we introduce new functions. The current version is always available on this page; the date at the top shows the last change.