Privacy Statement Justice for Players Foundation

Versie: 1 August 2025.

1. INTRODUCTION

1.1 In this privacy statement, we explain which personal data we collect, for what purposes we use this data, on what basis we process your personal data, how long we retain your personal data and what your rights are to protect your personal data. We respect your privacy, protect your personal data and act in accordance with the General Data Protection Regulation (hereinafter: “GDPR”) and the GDPR Implementation Act.

1.2 We may amend our privacy statement from time to time. The latest version is always available on the websites justiceforplayers.com and/or register.justiceforplayers.com (hereinafter also referred to as the “websites“). We will endeavour to inform you of any substantial changes.

2. WHO IS THE DATA CONTROLLER?

2.1 Stichting Justice for Players is responsible for the processing of your personal data. Stichting Justice for Players is a foundation established under Dutch law, with its registered office in Utrecht and its place of business at Terweeweg 112 (2341 CW) in Oegstgeest, and registered in the Trade Register of the Chamber of Commerce under number 97483494 (hereinafter also referred to as: “we”, “us” or “our”).

2.2 All questions about the processing of personal data by the Justice for Players Foundation can be sent to [email protected] or by regular mail.

3. WHAT PERSONAL DATA DO WE PROCESS?

We may process the following categories of personal data:

identifying data such as your initials, first name, surname, date of birth, nationality;
place of residence;
contact details such as your postal address, email address and telephone number;
the personal data in documents provided to us to support a claim and/or registration;
data collected through your use of our website, such as your IP address, data about the device you use to visit our websites, the pages you view and other information collected through cookies, and information about the effectiveness of our websites and campaigns;
data about your career and all other personal data that we receive from or about you or that we can obtain ourselves and that we use for the purposes listed below;
Details of your agent and/or manager such as first name, last name, organization, email address, phone number, and description of the relationship.

3.2 You may share special personal data with us, such as data about your health in connection with the period to which the collective action relates. The processing of such data is in principle prohibited under the GDPR, unless there is an exception such as:

you have given your explicit consent to the processing of this data; or
the processing is necessary for the establishment, exercise or defence of legal claims.

3.3 We expressly request that you do not share any special personal data with us that relates to your criminal history.

4. HOW DO WE OBTAIN YOUR PERSONAL DATA?

4.1 We receive most personal data directly from you. This is the case, for example, when you sign up or register via the websites and/or when you contact us via these websites and/or send us an email. We may also consult public sources such as the trade register of the Chamber of Commerce and we may receive data from or request data from other parties with whom we collaborate.

5. FOR WHAT PURPOSES CAN WE PROCESS YOUR PERSONAL DATA AND ON WHAT BASIS?

5.1 We process your personal data for various purposes and on various grounds:

Purpose and basis	Examples
To process your expression of support and/or registration for a specific collective action and/or to contact you about your participation in a future collective action other than the collective action for which you have registered. Basis: performance (pre-contractual phase) of an agreement (Article 6(1)(b) of the GDPR) and legitimate interest in maintaining proper (claim) records (Article 6(1)(f) of the GDPR).	Administering the registration, assessing supporting documents, providing an account environment in which you can upload supporting documents and/or correspond with you about your registration.
To prepare and conduct legal proceedings, including the settlement of your claim, a judicial judgment and/or settlement. Basis: performance (pre-contractual phase) of the agreement (Article 6(1)(b) of the GDPR) as well as legitimate interest in keeping proper (claims) records and legitimate business interests (Article 6(1)(f) of the GDPR).	Conducting settlement negotiations or legal proceedings, corresponding with other parties in the context of proceedings with judicial authorities, opposing parties, insurers, lawyers and advisors, to correspond with you about the progress of the proceedings and/or to keep records.
To ensure that the websites, including your account, function correctly, monitor and improve them. Basis: Legitimate interest of us and visitors to the websites in displaying well-functioning and secure websites (Article 6(1)(f) of the GDPR) and consent to tracking cookies (Article 6(1)(a) of the GDPR).	To display a functioning website, to secure the websites, to secure your account and/or to improve the websites.

To communicate with you.

Basis: Legitimate interest of us and third parties to respond to questions and complaints as effectively as possible (Article 6(1)(f) of the GDPR).

Responding to questions and/or handling complaints.

For internal controls and reports (internal management).

Basis: Our legitimate business interest (Article 6(1)(f) of the GDPR).

Monitoring the progress of the collective procedure.

To develop marketing activities.

Basis: Our legitimate interest (Article 6(1)(f) of the GDPR) in bringing a collective action to the attention of a wide audience and consent for tracking cookies and pixels (Article 6(1)(a) of the GDPR).

Creating target groups on social media and/or via tracking cookies and pixels from social media.

If you would like more information about the legitimate interests, please contact us as described in section 13.

6. AUTOMATED DECISION-MAKING

6.1 We do not use automated decision-making within the meaning of Article 22 of the GDPR. When reviewing your application to participate in a collective procedure, partially automated processes may be used, for example to check whether you have provided all the information necessary to process your participation. Human intervention and manual checks take place at various stages of this process.

6.2 Do you have any questions about the outcome of the assessment process? Section 13 describes how you can contact us.

7. WHO DO WE SHARE PERSONAL DATA WITH?

7.1 We do not disclose your personal data to third parties (i.e. ‘recipients’ within the meaning of privacy legislation) unless this is necessary for the proper performance of the purposes described in this privacy statement, when this is required by law or when you have given your consent. The third parties to whom personal data is made available are obliged to treat your personal data confidentially.

Data controllers in the context of a collective action

7.2 If you have registered for a specific collective action, we may share your personal data with other controllers such as counterparties, lawyers, (legal) advisors, experts, courts or bailiffs to the extent necessary for the purposes set out in this privacy statement in the context of (the preparation and/or handling of) legal proceedings. For example, it may be necessary to share your personal data in evidence with the court and opposing parties. In order to make payments to you, we will share your data with our bank. The basis for this is the performance of the agreement with you. Where possible, we will always pseudonymise, aggregate or anonymise the data. The processing of personal data by third parties is subject to the privacy statement of the party concerned. If you would like more information about third parties with whom we share your personal data, please contact us as described in section 13.

Social media companies

7.3 For the processing of personal data resulting from the selection of relevant target groups and the display of advertisements to the target group, we are jointly responsible with the relevant social media provider. If you do not wish to receive advertisements from us on your social media, you can indicate this to the relevant provider. For the processing of personal data for which we are jointly responsible, you can choose to exercise your rights at as described under 11. We would like to point out that social media companies are independent controllers for other data processing, for example for the use of the relevant platform.

Processors

7.4 We also use the services of external companies, known as processors, who perform specific tasks on our behalf and with whom your personal data may be shared. These service providers process your personal data exclusively on behalf of Stichting Justice for Players. The processing by service providers is subject to a processing agreement, in which it has been agreed that the service provider may only process the personal data on our behalf and not for other purposes. This includes, for example, IT support, hosting, marketing and (financial) administration.

8. HOW LONG WILL YOUR PERSONAL DATA BE STORED?

Your personal data will be retained for as long as necessary for the purposes for which it was collected and to comply with legal retention obligations. The following retention periods apply, among others:

If we can use your personal data for a collective action, we will store it for as long as necessary for the procedure and for two years after the final completion and settlement of the action, we will retain it for as long as necessary for the procedure and for up to seven years after the final completion and settlement of the collective action;\
we will retain the personal data we process when you contact us for as long as necessary to answer your question or request and to finalise it. If we can use the content of your message in legal proceedings, we will retain your message in accordance with the first bullet point for as long as necessary for the proceedings and for up to five years after the final settlement of the legal proceedings;
if you submit a complaint to us, we will delete the personal data processed in connection with this complaint no later than two years after the complaint and/or the resulting legal proceedings have been definitively settled;
personal data that must be retained pursuant to Section 52 of the General Tax Act (AWR) will be retained for seven years from the end of the year in which the data in question loses its current relevance for (tax) business operations in connection with the tax retention obligation imposed on the Foundation pursuant to Section 52(4) of the AWR. This includes data relating to any payment of compensation or damages to you;
information collected using cookies is, in principle, retained for a maximum of six months.

8.2 The specific retention periods mentioned above may be extended if statutory retention obligations apply or become applicable. We may also retain personal data for longer if this is necessary for the resolution of incidents and/or legal disputes (e.g. between you and us).

9. HOW IS YOUR PERSONAL DATA SECURED?

9.1 We have taken appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification of your personal data. We will evaluate our security measures on an ongoing basis to ensure that they continue to provide adequate protection.

9.2 If you have the impression that your data is not secure or there are indications of misuse, please contact us as described in section 13.

10. INTERNATIONAL TRANSFER

10.1 We may transfer personal data to a recipient in a country outside the European Union that offers a lower level of personal data protection than European legislation. In such cases, we will ensure that any such transfer of personal data is in accordance with the applicable laws and regulations, for example by concluding a model contract drawn up and approved by the European Commission for this purpose and assessing whether additional measures are necessary to ensure an adequate level of protection for the personal data. Please do not hesitate to contact us if you would like to receive more information about the appropriate or suitable safeguards in place for the transfer of your personal data outside the European Union or if you would like to receive a copy thereof.

11. WHAT ARE YOU RIGHTS AS A DATA SUBJECT?

11.1 You have a number of rights under the GDPR:

You have the right to access your personal data and additional information about the processing of your personal data, for example, to which (categories of) recipients your personal data has been or will be shared.
You have the right to have incorrect data corrected or incomplete personal data supplemented.
Deletion of your personal data. Under certain circumstances (for example, if the personal data is no longer necessary for the purposes for which it was collected or processed), you have the right to request the deletion of your personal data.
Restriction of the processing of your personal data. In certain situations, you have the right to restrict the processing of your personal data. This means that the processing of your personal data will be temporarily paused. For example, if you dispute the accuracy of the personal data. The processing will then be restricted for a period that allows us to verify the accuracy of the data.

If we process your personal data on the basis of legitimate interest, you have the right to object to the processing of your personal data at any time for reasons related to your particular situation. We will stop processing this data unless we can demonstrate compelling legitimate grounds for the processing that override your interests.
Objection to direct marketing. You may object to the use of your personal data for direct marketing purposes, stating your reasons. We will no longer process your personal data for that purpose.
Data portability. In certain cases, you have the right to receive or transfer your personal data to a third party designated by you in a structured, commonly used and machine-readable format.
Withdrawal of consent. Insofar as the processing is carried out with your consent, you are entitled to withdraw this consent at any time. However, the withdrawal of your consent does not affect the processing of your personal data based on this consent prior to its withdrawal.

11.2 If you wish to exercise any of the above rights, please submit your request to [email protected]. We will respond to your request as soon as possible, but in any case within one (1) month of receiving the request. This period may be extended by two months if necessary. We will inform you within one (1) month of receiving the request if such an extension will take place, stating the reason for the delay.

11.3 Finally, you have the right to lodge a complaint with us at any time, but also with the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority: https ://autoriteitpersoonsgegevens.nl/een-tip-of-klachtindienen-bij-de-ap.

12. DOES THE JUSTICE FOR PLAYERS FOUNDATION USE COOKIES?

13. HOW CAN YOU CONTACT US?

If you would like to know more or have any questions or complaints about the processing of your personal data or suspect misuse, please contact us at [email protected]. ***