← Back to home

Privacy Policy

In accordance with the Law of Ukraine "On the Protection of Personal Data" and other regulatory legal acts of Ukraine in the field of personal data protection, and taking into account the requirements of Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") on the protection of natural persons with regard to the processing of personal data (hereinafter — GDPR), Drop Ball LLC informs you of the procedure for processing your personal data.

Who processes your personal data?

Your personal data is processed by Drop Ball LLC (hereinafter — "DropBall"), with its registered office at: Kyiv, Holosiivskyi Avenue 25, apartment 52, 03039, Ukraine, which is the personal data controller within the meaning of the legislation of Ukraine.

DropBall can be contacted regarding the processing of personal data at the email address: privacy@dropball.app.

Who may process personal data on behalf of DropBall?

Personal data may be processed on behalf of DropBall by other parties acting on the basis of contracts and relevant authorisations, in particular:

  • hosting service providers;
  • software providers;
  • electronic communication services and social networks.

Such parties process personal data solely within the defined purposes and in accordance with the requirements of the legislation of Ukraine. A list of such parties may be provided to the User on request.

For what purposes and how is personal data processed?

Users' personal data are processed for the purposes of:

  • providing and ensuring the operation of DropBall services;
  • creating and maintaining the User's account;
  • processing bookings, payments, and other transactions;
  • communicating with the User, including sending messages, notifications, and responses to enquiries;
  • complying with the requirements of the legislation of Ukraine;
  • ensuring security and preventing fraud and abuse;
  • improving the quality of services and the user experience.

Personal data are processed both by automated and non-automated means, in compliance with the principles of lawfulness, good faith, and proportionality.

By accessing, viewing, and/or using the DropBall Website or Application, the User gives their voluntary and informed consent to the processing of their personal data in accordance with this Privacy Policy and confirms that all personal data provided by them are accurate.

What personal data do we collect?

In the course of using the DropBall Website and/or Application, we may collect and process the following categories of Users' personal data:

1. Data provided during registration and use of the account

When creating an account, the User may register using email, telephone number, or third-party authentication services (Apple, Google, Instagram, Facebook).

In this case, we may process the following data:

  • name and/or nickname;
  • email address;
  • telephone number;
  • profile photo (where added by the User).

When making a booking through the DropBall Application, we process information necessary to provide the services, in particular:

  • the date and time of the booking;
  • the chosen location or club;
  • the history of bookings made.

3. Payment information

Payment for services is made directly in the Application using the integrated e-Commerce platform PayLink (https://www.taslink.ua/).

DropBall does not store or process payment card details of Users. We receive solely information about the payment status (successful / unsuccessful) and other technical data necessary to confirm the transaction.

4. Communication data

We may process the User's contact data for the purposes of:

  • sending booking confirmations;
  • sending reminders about upcoming bookings;
  • sending technical messages;
  • sending marketing messages (promotions, news, special offers) subject to the User providing the relevant consent.

Communication may be carried out via:

  • email;
  • SMS messages;
  • push notifications.

5. Technical and analytical data

During use of the Website or Application, the following data may be collected automatically:

  • IP address;
  • device type;
  • operating system;
  • application version;
  • data on interaction with the Application interface.

To analyse and improve the operation of the service, DropBall may use analytics tools, in particular Google Analytics.

6. Data provided when contacting customer support

If the User contacts customer support at help@dropball.app, we may process:

  • the User's contact data;
  • the content of the message;
  • other information voluntarily provided by the User in the course of the enquiry.

Such messages are stored for the purpose of processing requests, improving the quality of service, and resolving disputed situations.

User Rights

The User, as a data subject, has all the rights provided for by the Law of Ukraine "On the Protection of Personal Data" and the GDPR, including the right to:

  • receive information about the sources of collection and the location of their personal data, the purpose of the processing, and the parties to whom such data are transferred;
  • access their personal data processed by DropBall;
  • request the clarification, updating, or correction of their personal data where they are inaccurate or out of date;
  • request the erasure of their personal data in cases provided for by law;
  • request the restriction of the processing of their personal data in cases provided for by law;
  • object to the processing of their personal data, in particular for the purposes of direct marketing;
  • withdraw their consent to the processing of personal data at any time, where the processing is based on consent;
  • lodge a complaint with the competent supervisory authority for personal data protection in the event of a breach of their rights.

To exercise their rights, the User may contact DropBall by sending the relevant request to the email address: privacy@dropball.app.

DropBall reviews Users' enquiries within the time limits and in the manner prescribed by applicable law.

Personal data retention periods

Users' personal data are stored by DropBall for no longer than is necessary to achieve the purposes for which such data were collected and are processed, unless a different retention period is provided for by the applicable legislation of Ukraine or by the terms of the relevant contracts.

In particular:

  • the personal data of the User's account are stored throughout the existence of the account and, after its termination, for the period necessary to comply with legal requirements, settle possible disputes, and protect the legitimate interests of DropBall;
  • data related to bookings and the history of use of DropBall services are stored for the period necessary to provide the services, for accounting, financial reporting, and compliance with legal requirements;
  • data related to payments are stored to the extent necessary to confirm transactions and comply with the requirements of tax and financial legislation; payment card details of Users are not stored by DropBall;
  • technical and analytical data are stored for the period necessary to ensure the stable operation of services, their security, analysis, and improvement of the user experience;
  • personal data provided by the User when contacting customer support are stored for the period necessary to process the enquiry, resolve the issue, and further improve the quality of service.

Once the purposes of processing have been achieved, the personal data are subject to erasure or anonymisation, unless otherwise provided for by the applicable legislation of Ukraine.

Transfer of personal data to third parties and abroad

DropBall may transfer Users' personal data to third parties solely where such transfer is necessary to achieve the purposes of processing personal data set out in this Privacy Policy, as well as in cases provided for by the applicable legislation of Ukraine.

Transfer of personal data to third parties

Users' personal data may be transferred to the following categories of recipients:

  • hosting and cloud service providers;
  • software and technical infrastructure providers;
  • electronic communication services (email, SMS, push notifications);
  • analytics services (in particular Google Analytics);
  • payment providers — solely to the extent necessary to process payments and confirm transactions;
  • state authorities and local self-government bodies — in cases and in the manner provided for by the legislation of Ukraine.

Such third parties process personal data on the basis of relevant contracts and are required to ensure an appropriate level of personal data protection in accordance with legal requirements.

Transfer of personal data abroad

In the course of using DropBall services, Users' personal data may be transferred to the territory of other countries, in particular in connection with the use of cloud services, analytics tools, and electronic communication services.

In such cases, DropBall ensures that the transfer of personal data is carried out in compliance with the requirements of the legislation of Ukraine and the GDPR, in particular by:

  • transferring data to countries that ensure an adequate level of personal data protection;
  • applying appropriate contractual safeguards and standard contractual clauses;
  • taking other measures provided for by applicable law.

DropBall does not transfer Users' personal data to third parties for their independent use for marketing purposes without obtaining the prior consent of the User.

Security measures and protection of personal data

DropBall takes the necessary organisational and technical measures to ensure the protection of Users' personal data against unauthorised access, loss, destruction, alteration, disclosure, or other unlawful processing.

In particular, DropBall applies the following security measures:

  • restricting access to personal data exclusively to authorised employees and contractors who require such data to perform their duties;
  • the use of technical means of information protection, in particular encryption of data during transmission and storage where appropriate;
  • the application of modern authentication tools and access control to information systems;
  • regular updating of software and the implementation of measures to detect and prevent unauthorised access;
  • the use of secure servers and cloud infrastructure that meets generally accepted security standards;
  • internal policies and procedures regarding the processing of personal data, including staff training on personal data protection.

In the event of a personal data breach, DropBall takes the necessary measures to minimise possible adverse consequences and acts in accordance with the requirements of the applicable legislation of Ukraine and the GDPR.

At the same time, the User acknowledges that no method of transmitting data over the Internet or method of electronic storage of information can guarantee absolute security. DropBall makes all reasonable efforts to protect personal data, but cannot guarantee complete security of such data.