YOUTOPIA Privacy and Data Use Policy
Youtopia Sports attaches paramount importance to the protection and security of your personal data.

The purpose of this privacy policy is to provide you with clear, accessible and transparent information about how your personal data is processed, whether provided directly by you or collected when you browse our website (https://www.youtopia-sports.com) and our application (hereinafter the "Site"). It also explains any transfers of this data to third parties, as well as your rights and choices for managing your personal information and protecting your privacy. The Site is published by YOUTOPIA SPORTS, registered with the Crossroads Bank for Enterprises under number 1015.462.514, whose registered office is located at the following address: Boulevard du Roi Albert II 4, 1000 Brussels. When communicating with Youtopia Sports, you may be required to provide personal data (hereinafter referred to as "the Data"), which will then be processed by Youtopia Sports. Youtopia Sports acts as the controller of personal data collected via the Website, in accordance with the regulations in force, in particular Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
I / Purpose of the privacy policy
This privacy policy has been established to inform users of the Website, owned and managed by Youtopia Sports, of the following:
- The personal data collected by the Website;
- The use made of this data;
- Access to and security of this data;
- The rights of users of the Website;
- The policy relating to the use of cookies.

This privacy policy operates in parallel with the Website's terms and conditions. As such, personal data is defined as any information that directly or indirectly identifies a natural person, such as a surname, first name, email address, profile photo, user ID, IP address, geolocation or application usage preferences.

In the context of Youtopia Sports, this includes, in particular, the information provided during registration (surname, first name, email address), scores and activities in the games, as well as data related to winnings and rewards.
II / Applicable laws
This privacy policy is subject to the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016) and any Belgian law, present or future, that derives from it and/or deals with privacy and data protection.
In accordance with this, personal data is:
- processed lawfully and transparently;
- collected for specified, explicit and legitimate purposes, and will not be further processed in amanner incompatible with those purposes. In accordance with Article 89(1) of the GDPR, the storage and processing of such data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered incompatible with the initial purposes;
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- accurate and, where necessary, kept up to date. Every reasonable step shall be taken to ensure that data which are inaccurate, having regard to the purposes for which they are processed, are rectified;
- kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
- processed in a manner that ensures their security, including protection against unauthorised or unlawful processing, accidental loss or destruction, whether accidental or deliberate.
 
In addition, the legal bases on which Youtopia Sports relies for the processing of personal data are as follows:
- Data processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
- Processing is necessary for compliance with a legal obligation to which the controller, Youtopia Sports, is subject.
- Processing is necessary to protect the vital interests of any natural person.
- Processing is necessary for the performance of a task carried out in the public interest by Youtopia Sports
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests, freedoms or fundamental rights of the data subject.
- The data subject has consented to the processing of the data for one or more specific purposes.
The processing of the data collected is only lawful if at least one of the following conditions is met:
- Performance of a contract: the processing of your data is necessary for the performance of the contract concluded between you and Youtopia Sports when you create an account on the Website and accept the Youtopia Sports Terms and Conditions (in particular with regard to account management, access to the application, management of winnings and notifications related to the operation of the application);
- Legitimate interest: Youtopia Sports also processes user data on the basis of a legitimate interest (such as fraud prevention, security and statistical analysis), proportionate to the user's rights, in order to offer its services, ensure the proper functioning of the services and improve the services offered to meet the needs of users.
- Consent: Youtopia Sports processes data following your express consent. This is the case for specific purposes, for example to offer general or personalised offers and marketing communications, as well as to share data with partners, by sending newsletters, text messages, emails and letters based on the user's consent. Users have the right to withdraw their consent at any time by changing the option in their personal account or by sending a request to the email address info@youtopia-sports.com.
- Compliance with legal obligations: Youtopia Sports may process data in order to comply with its legal obligations;
III / Why we collect data and on what occasions
Youtopia Sports collects and processes your data for the following purposes:
1. Creation and management of user accounts
- To enable registration, login and user profile management.

2. Access to the application's features
- To enable the use of the various features of Youtopia Sports: games, quizzes, challenges, interactive map, rewards shop.

3. Tracking activities and progress
- Track user participation, record earnings, manage purchases.

4. Rewards and partnership management
- Handle reward logistics (shipping, delivery, tracking) and ensure compliance with partner terms and conditions.

5. Continuous improvement of the user experience
- Analyse app usage to offer a more fluid, personalised and efficient experience.

6. Security and fraud prevention
- Detect fraudulent behaviour, secure data, and guarantee the integrity of games and rewards.

7. Anonymous statistics and analyses
- Compile aggregated and anonymised usage statistics.

8. Communication with users
- Send notifications, newsletters or information about updates, events or new features.

9. Compliance with legal obligations
- Comply with applicable laws and regulations.

10. Sharing with application partners (if applicable)
- With the user's explicit consent, certain data may be shared with partners for rewards management or marketing purposes.
More specifically, Youtopia Sports may collect data during/from:
- Creating a user account: to enable identification, login and account management.
- Making a purchase in the shop: to manage purchase history, coin balance and orders.
- Contacting support or sending a message via the application: to respond to requests, questions or complaints.
V / Processing & sharing of personal data
Personal data collected on the Website is only collected and processed for the purposes specified in this privacy policy and/or on the relevant pages of the Website.

The personal data we collect will not be used for any other purpose. Personal data is processed by Youtopia Sports staff. We ensure that only authorised persons within Youtopia Sports can access your personal data when necessary for the purposes of managing the commercial relationship or its legal obligations.
We may also share your personal data with the following recipients, within the limits necessary for the operation of Youtopia Sports and in accordance with the GDPR:
- Technical service providers
     - Hosting (e.g. Microsoft Azure), maintenance, security and analytics (e.g. Google Analytics) providers.
- Commercial partners
    - Sponsors and partner teams, in the context of sponsored rewards and activations.
- Subcontractors and the Youtopia team
  - Authorised internal members and/or external service providers (non-exhaustive list: support, sending rewards, development).
- Competent administrative or judicial authorities:
    - If Youtopia Sports is required to do so by law;
    - If the information is required for any legal proceedings;
    - In order to protect the rights and interests of Youtopia Sports.
VI / Storage and protection of personal data
Youtopia Sports does not retain personal data for longer than is necessary to fulfil the purposes for which it is collected:
- User account:
     - Data retained for as long as the account is active. Deleted or anonymised when the user account is deleted.
- Application usage data:
     - Anonymised after account deletion for aggregate statistics.
- Order-related data:
     - Retained for between 5 and 10 years in accordance with accounting/tax obligations.
- Location data:
     - Used temporarily to validate presence in a playing area.

In order to protect this data, Youtopia Sport implements appropriate technical and organisational measures to ensure the security, confidentiality and integrity of the data:
- Encryption of sensitive data (passwords stored in encrypted form);
- Secure hosting on Microsoft Azure, compliant with the GDPR;
- Restricted access to data, limited to authorised persons under confidentiality agreements;
- Internal procedures: incident management, regular backups, system monitoring.
VII / User rights
In accordance with Chapter 3, Articles 12-23 of the GDPR, users of the Website have the following rights with regard to their personal data:
- Right of access: the right to obtain confirmation that data concerning him or her is or is not being processed and to have access to his or her data as well as to the information mentioned in Article 15 of the GDPR.

- Right to rectification: the right to have inaccurate data rectified without delay and to have incomplete data completed, in accordance with Article 16 of the GDPR.

- Right to erasure: the right to request that their data be deleted as soon as possible. Youtopia Sports will therefore be obliged to erase this data in accordance with Article 17 of the GDPR, for the reasons set out, and in particular when the user withdraws their consent. This obligation does not apply if the processing of the data is necessary to comply with a legal obligation under European law or regulations, or for the establishment, exercise or defence of legal claims.

- Right to restriction of processing: the right to obtain restriction of the processing of one's data when, among other things, the data is inaccurate, when its processing is unlawful, when Youtopia Sports no longer needs it but the user does for the establishment, exercise or defence of legal claims.

- Right to data portability and transfer: the right to request to obtain, transmit or transfer one's data in a structured format to another data controller, without Youtopia Sports being able to object, in accordance with Article 20 of the GDPR.

- Right to object to processing: the right to object at any time to the processing of one's data, necessary for the performance of a task carried out in the public interest or necessary for the purposes of the legitimate interests pursued by Youtopia Sports, or those processed for marketing purposes.
To exercise any of your rights, access your data, modify it or delete it in any way, you can contact us directly by email at info@youtopia-sports.com, or by post at: Boulevard du Roi Albert II 4, 1000 Brussels, Belgium

In accordance with the legal provisions on data protection, you may also contact our Data Protection Officer (DPO): Diederik Bots, info@youtopia-sports.com, Boulevard du Roi Albert II 4, 1000 Brussels, Belgium

You also have the right to lodge a complaint with the competent data protection authority: (Belgium) Data Protection Authority / Rue de la Presse 35, 1000 Brussels /+32 (0)2 274 48 00 / contact@apd-gba.be
VIII / Cookie policy
A cookie is a file stored on a user's hard drive when they browse a website. This cookie provides more information about the user's browsing habits in order to offer them a better user experience.
The https://www.youtopia-sports.com website uses the following cookies:
- _ga_STE516Z3CC: This cookie is used by Google Analytics to maintain the session status.

- _ga: This cookie is associated with Google Universal Analytics, a major update to Google's most commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a customer ID. It is included in every page request on a site and is used to calculate visitor, session and campaign data for site analytics reports.

- _cfuvid: This cookie is used to track users from session to session in order to optimise their experience by maintaining session consistency and providing personalised services.

In accordance with the GDPR, you can choose to be notified each time a cookie is created, or you can disable the transmission of cookies by the site entirely.
IX / Changes to the privacy policy
In order to comply with the law or to reflect any changes in our personal data management process, this privacy policy may be changed and amended regularly. Users are advised to check this policy regularly to keep themselves informed of our policy regarding the collection and processing of personal data.
X / Contact
For any questions or requests regarding your personal data:
📧 info@youtopia-sports.com