Privacy Policy

1. Who we are

This privacy policy applies to the EPO Observer mobile application (iOS and Android), published by the Hellenic Football Federation (Ελληνική Ποδοσφαιρική Ομοσπονδία, “EPO”). The app is distributed exclusively to observers accredited by EPO for the purpose of recording live match events (kick-off, half-time, second half, full-time, goals).

Data controller: Hellenic Football Federation (EPO), Park Goudi, 15122 Marousi, Athens, Greece — contact: privacy@eposervices.gr.

2. Data we collect

The app is designed to collect the minimum personal data required to operate. Specifically:

• Email address — used only to send a one-time 6-digit login PIN and to identify your observer account.
• Observer account ID and role — returned by the EPO platform after sign-in and stored locally on the device to keep you signed in.
• Match events you submit — kick-off timestamp, half-time timestamp, second-half start, full-time timestamp, and goal events per team. These are attributed to your observer account on the EPO platform.
• Server URL (advanced) — stored locally so the app remembers which EPO server it is talking to.

We do not collect: your name, phone number, address, contacts, photos, health, financial data, precise or approximate location, device advertising identifiers (IDFA / GAID), crash telemetry, or any browsing or usage analytics.

3. How we use your data

• To authenticate you as an accredited observer (email + PIN, JWT session token).
• To attribute match events you record to your observer account on the EPO platform.
• To display only the matches to which you have been assigned.

We do not use your data for advertising, profiling, automated decision-making or tracking across other apps and websites.

4. Legal basis (GDPR)

Processing is based on:

• Performance of a task carried out in the context of EPO’s official duties as the national football governing body (Art. 6(1)(e) GDPR).
• Legitimate interests in maintaining accurate match records and observer accountability (Art. 6(1)(f) GDPR).

5. Data sharing

Data is transmitted directly from the app to the EPO platform at livescore-admin.eposervices.gr. We do not share your data with third parties, ad networks, analytics providers or data brokers. Aggregated match results may appear on public EPO channels (e.g. livescore.eposervices.gr) but never identify you personally.

Emails containing the login PIN are delivered via SendGrid (Twilio Inc.), acting as a data processor on behalf of EPO under a signed Data Processing Agreement.

6. International transfers

The EPO platform is hosted within the European Economic Area (EEA). The email delivery processor may transfer data to the United States under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

7. Retention

• Login PINs expire after 10 minutes and are deleted immediately after successful verification.
• Session tokens (JWT) expire after 7 days.
• Match events are retained for as long as EPO retains official match records (currently indefinitely, as part of federation archives).
• Local device data (token, user, server URL) is cleared when you sign out or uninstall the app.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request erasure of data that is no longer necessary (subject to federation archival obligations).
• Restrict or object to processing.
• Data portability.
• Lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

To exercise these rights, contact privacy@eposervices.gr.

9. Security

All traffic between the app and the EPO platform is encrypted with TLS 1.2 or later. Session tokens are stored using the operating system’s secure local storage (iOS Keychain / Android AsyncStorage on encrypted storage). The app does not embed any third-party analytics, advertising or tracking SDKs.

10. Children

The app is intended for use by adult accredited observers only and is not directed at children under 16.

11. Changes

We may update this policy from time to time. The “Last updated” date above will change accordingly. Material changes will be communicated in-app or by email.

12. Contact

Questions? Email privacy@eposervices.gr or visit our support page.

Πολιτική Απορρήτου (σύνοψη στα Ελληνικά)

Η εφαρμογή EPO Observer συλλέγει μόνο τα ελάχιστα δεδομένα που χρειάζονται για τη λειτουργία της: email για login, observer account ID, και τα events αγώνα που καταγράφετε (σέντρα, ημίχρονο, β΄ ημίχρονο, τέλος, γκολ). Δεν συλλέγουμε τοποθεσία, επαφές, φωτο­γρα­φίες, διαφημιστικά IDs ή analytics. Τα δεδομένα αποθηκεύονται στην πλατφόρμα της ΕΠΟ (livescore-admin.eposervices.gr) και δεν μοιράζονται με τρίτους πέραν του παρόχου email (SendGrid) για την αποστολή του PIN. Έχετε όλα τα δικαιώματα του GDPR (πρόσβαση, διόρθωση, διαγραφή, φορητότητα, καταγγελία στην ΑΠΔΠΧ). Επικοινωνία: privacy@eposervices.gr.