GDPR Compliance
Last updated: January 2025
1. Our Commitment to GDPR
Orange Ball United Athletes is committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws, including Dutch data protection legislation.
2. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right to Access: Request access to your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Request transfer of your data in a structured format
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing
- Right to Lodge a Complaint: File a complaint with the supervisory authority
3. Legal Basis for Processing
We process your personal data based on:
- Your explicit consent for marketing communications and optional services
- Contractual necessity for order processing and service delivery
- Legitimate interests for website analytics, fraud prevention, and security
- Legal obligations for tax, accounting, and regulatory compliance purposes
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations (typically 7 years for financial records), and resolve disputes. After this period, personal data will be securely deleted or anonymized.
5. International Transfers
If we transfer your personal data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission, or other legally approved transfer mechanisms.
6. Data Protection Officer
For any GDPR-related inquiries, please contact us at connect@orange-athletes.com.
7. Exercising Your Rights
To exercise any of your GDPR rights, please submit a request to connect@orange-athletes.com. We will respond within one month of receiving your request (extendable by two additional months for complex requests). We may request additional information to verify your identity.
8. Supervisory Authority
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch DPA):
www.autoriteitpersoonsgegevens.nl