Registry and Privacy Statement
This is a registry and data protection statement in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). It also addresses applicable United States state privacy laws, including the California Consumer Privacy Act (CCPA), where relevant. Prepared on 25.05.2018. Last modified: 13th of August 2025.
1. Registrar
Subsoccer Oy, Melkonkatu 24, 00210 Helsinki, Finland
ilkka.mattila@subsoccer.com
2. Contact person responsible for the register
Ilkka Mattila, ilkka.mattila@subsoccer.com
3. Name of the registry
Employee Register and Company Customer Register
4. Legal basis and purpose of the processing of personal data
The legal basis for the processing of personal data under the EU General Data Protection Regulation (GDPR) is:
-
the consent of the data subject (documented, voluntary, individualized, informed, and unambiguous)
-
the performance of a contract where the data subject is a party
-
the legitimate interest of the controller (e.g., customer relationship, employment relationship, membership)
For U.S. residents, we process personal data in accordance with applicable U.S. state privacy laws, such as the CCPA, where those laws apply.
The purpose of the processing of personal data is to communicate with customers, maintain and manage customer relations, conduct marketing activities, and handle matters related to the management of the employment relationship.
The data is not used for automated decision-making or profiling.
5. Information content of the register
The information stored in the register may include:
-
person’s name, position, company/organization
-
contact information (phone number, e-mail address, postal address)
-
website addresses, IP address of the network connection
-
IDs/profiles in social media services
-
information about subscribed services and their changes
-
billing information
-
records of communications with the customer
-
other information related to the customer relationship and the services ordered
We retain personal data only for as long as is necessary for the purposes described in this Privacy Statement, unless a longer retention period is required by law.
6. Regular sources of information
The information stored in the register is obtained from the customer through, for example:
-
messages sent via web forms, e-mail, telephone, or social media services
-
contracts and agreements
-
customer meetings and other situations in which the customer provides information
7. Regular transfers of data and transfers of data outside the EU or the EEA
The information is not regularly disclosed to other parties. The information may be published only to the extent agreed with the customer.
We may transfer personal data outside the EU or the EEA when necessary for the purposes described in this statement. In such cases, we ensure appropriate safeguards are in place, such as the use of the European Commission’s Standard Contractual Clauses.
8. Merchant of Record
For purchases of Subsoccer products in the U.S., the Merchant of Record is eBrands Global Oy, which is the contractual seller and responsible for processing your payment. eBrands Global Oy also acts as a data controller for transactions made via the U.S. online store and processes your personal information in compliance with GDPR and, where applicable, U.S. state privacy laws. The name “eBrands Global Oy” will appear on your payment statement.
Merchant of Record details:
eBrands Global Oy
Pieni Roobertinkatu 9, 00130 Helsinki, Finland
Business ID: 3181726-7
Email: subsoccer@ebrandsglobal.com