Privacy Policy � JustBallpark

This Privacy Policy describes how personal data is processed in connection with the provision of the JustBallpark software, operated by Ralf Allroggen, including subscription and account data, and how user-entered content is handled within the technical infrastructure.

1. Scope and Role

JustBallpark provides a specialized technical infrastructure for baseball-related data. JustBallpark acts as the controller only for personal data required to operate the service (such as account, billing, and access data) JustBallpark processes User Content on behalf of the Administrator. JustBallpark determines only the technical means necessary to provide and operate the service and does not independently determine the purposes of the User Content. The provider acts as a specialized technical infrastructure service. While the software provides the structure for baseball-related data, the Administrator remains the legal controller of all entered information Provider Role: The provider acts as a technical infrastructure service. Account Data: We process personal data (e.g., email, billing information) necessary to maintain the subscription and provide access. User Content: All data entered regarding teams, players, or games is managed by the user. The user remains the legal controller of this data.

2. Responsibility for Third-Party Data

Admin Responsibility: Users who upload information about third parties (e.g., players) warrant that they have the necessary legal authority and consents (e.g., parental consent for minors). Minors: The service is not intended for children under the age of 13 (USA). Responsibility for the lawfulness of processing minor-related data lies solely with the organizing user/Admin.

3. Technical Processing and AI

The software utilizes AI interfaces to analyze the specific data provided by the user. These analyses are technical functions of the specialized tool, triggered and controlled by the user's input Anonymization: To ensure data parsimony, personal identifiers (such as names) are designed to be replaced as part of the standard processing flow by system-internal IDs before transmission to AI interfaces. Processing: The analysis is conducted based on these identifiers to prevent the creation of identifiable personal profiles within the external AI environment.

4. Data Location and International Transfer

U.S. Hosting: As a fundamental system requirement for the performance and scalability of the service, all data is stored and processed on servers located in the United States. Consent: By using the service, users acknowledge that their data will be processed in a third country with a different level of data protection.

5. Third-Party Disclosure

No Sale of Data: We do not sell personal data as defined under applicable data protection laws for advertising or marketing purposes. Service Providers: To provide our services and process transactions, we share necessary data with the following service providers including, but not limited to: Microsoft Azure: Infrastructure, secure data storage, and server hosting. OpenRouter: Interface for AI-based statistical analysis (using anonymized System-IDs). FastSpring: Payment processing and order fulfillment. Changes: We reserve the right to update or change our service providers at any time to ensure the best performance and security of our services. The current list of key providers is maintained in this policy.

6. Data Retention

Subscription Period: Data is stored for the duration of the active subscription. Account Deletion:Upon termination of the account, account data and User Content may be deleted. Certain data may be retained where required or permitted for operational, legal, tax, billing, security, backup, or legitimate business purposes.

7. Regional Rights (CCPA / GDPR)

Users may have specific rights to access, correct, or delete their personal account data depending on their jurisdiction. Requests regarding player-specific data are to be directed exclusively to the respective team administrator. As a technical infrastructure provider, JustBallpark does not independently determine or modify User Content as part of normal service operations, except where required by applicable law.

8. Your Privacy Choices & Data Control

Marketing Emails: You may opt out of promotional emails via the unsubscribe link. Administrative communications (e.g., billing, service updates) will continue regardless. Data Updates: You can update your account information directly in your settings. For requests concerning User Content (Player stats/names), please contact your Team Admin, as they maintain control over this data. Deletion: You may request account deletion. Please note that we may retain residual copies of your data in our encrypted backups for a limited time as required by law or for legitimate business purposes (e.g., tax records). Security: We use encryption to protect your data during transit and at rest. However, no method of transmission over the internet is 100% secure.

9. State-Specific & International Notices

U.S. Residents: Residents of states like California (CCPA/CPRA), Virginia, or Colorado have the right to request access to and deletion of their personal information. Since we anonymize player data via System-IDs, we do not "sell" or "share" personal player data for targeted advertising. International: The technical infrastructure of the service is operated on servers located in the United States. By using the software, you consent to the transfer and processing of your data in the U.S., which may have different data protection laws than your home country.

Annex A: International Data Protection Notice (Non-U.S. Users)

This section applies to users accessing the services from outside the United States (including UK, and other international jurisdictions). Roles and Responsibilities Under applicable data protection laws (such as GDPR), JustBallpark provides a specialized environment for Baseball statistics. With respect to User Content entered, managed, or published by Administrators, JustBallpark does not independently determine the purposes or legal permissibility of that content.

Roles and Responsibilities

The Administrator acts as the Controller and is responsible for the lawfulness of the data they enter. For personal subscription and account data, JustBallpark acts as the Controller.

Legal Basis for Processing

Legal Basis for Processing is conducted based on the performance of the contract with you.

Mandatory U.S. Data Transfer

A fundamental and non-negotiable characteristic of the service is that all data storage and processing occur on servers located in the United States. Consent: By using the service and activating the software, you expressly acknowledge and consent to the transfer of your data to the USA, which may have a different level of data protection than your home country. Infrastructure: We utilize global providers (e.g., Microsoft Azure, FastSpring). Their respective terms and privacy standards apply to the data they handle.

Data Subject Rights

Account Data: For requests regarding your subscription account, contact JustBallpark. User Content (Player Data): Requests regarding player statistics, names, or other content must be directed exclusively to the respective Administrator. As JustBallpark anonymizes player data via System-IDs for AI processing and acts only as a technical host, JustBallpark does not independently manage or identify individuals within User Content unless required by mandatory law.

10. Additional Notice for Processing Potentially Subject to German / EU Data Protection Law

Effective as of: June 2026
Last updated: June 2, 2026

11.For operator-controlled website data, account/access data, country-code statistics, and demonstration or documentation data processed by the operator, the controller is:

Ralf Allroggen
Friedrich-von-Spee-Str. 11
33098 Paderborn
Germany
Email: clubhouse@justballpark.com

12. Scope and Purpose of the Website

This website is used to present sports-related information, in particular game statistics and scorecards from the field of baseball.

This website is intended exclusively for users outside the European Union, the European Economic Area (EEA), and Switzerland. Use by persons who have their habitual residence in the European Union, the European Economic Area (EEA), or Switzerland is not permitted.

This additional notice is provided as a precautionary German / EU data protection notice because the operator is based in Germany.

13. What Data Is Processed?

Baseball statistical data is processed and displayed on the website. This particularly includes game statistics, scorecards, game results, game progressions, team assignments, and performance-related baseball statistics.

The data displayed on the website from the German 1st and 2nd Baseball Bundesliga is processed by the operator as its own demonstration, documentation, and statistical data. To the extent that this data contains personal player information or enables a personal reference, it originates from publicly accessible scorecards, game reports, or comparable publicly accessible sources.

The displayed data from the German 1st and 2nd Baseball Bundesliga is searchable and can be statistically evaluated. Statistical results can be generated from this processed data and made available for download. The processing is carried out exclusively for the documentation, presentation, and statistical evaluation of publicly accessible baseball games, scorecards, and sporting results of the German 1st and 2nd Baseball Bundesliga.

The web application may be used by users outside the European Union, the European Economic Area (EEA), and Switzerland to enter, process, and publish their own baseball data. Such use is carried out by the respective users on their own responsibility within the scope of the software functionality provided.

The software and the website are not intended for the market of the European Union, the European Economic Area (EEA), or Switzerland. Use, installation, or provision of the software by persons or organizations with their registered office or habitual residence in the European Union, the European Economic Area (EEA), or Switzerland is not permitted.

Users of the software are not authorized to store, process, or display data of players who have their habitual residence in the European Union, the European Economic Area (EEA), or Switzerland.

When the website is accessed, the IP address is processed temporarily for technical reasons to the extent necessary to provide the website. The operator does not permanently store the IP address.

For statistical purposes, the operator stores only the country of origin of the access.

To determine the country of origin, the IP address is temporarily transmitted to an IP geolocation service. The operator does not store the IP address in this context, but only the two-letter country code, for example DE, US, or FR.

Country determination takes place only when a league is accessed or when the statistics area is opened. Further clicks within the same use are logged only with the country code already determined.

Cookies, tracking tools, analytics services, and social media integrations are not used. No profiling takes place.

14. Legal Basis

The temporary technical processing of access data is carried out on the basis of Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable, and error-free provision of the website.

The storage of the country of origin is also carried out on the basis of Art. 6(1)(f) GDPR. The legitimate interest lies in the simple statistical evaluation of the regional reach of the website. No personal evaluation takes place.

To the extent that baseball statistical data from the German 1st and 2nd Baseball Bundesliga has a personal reference, the processing is carried out on the basis of Art. 6(1)(f) GDPR. The legitimate interest lies in the documentation, presentation, and statistical evaluation of publicly accessible sporting results, scorecards, and game progressions.

15. Hosting and Technical Service Providers

The website is provided via Microsoft Azure. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

To the extent that IONOS SE is used for this website, this is done for domain administration and DNS services. The provider is IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany.

An IP geolocation service may be used for the technical determination of the country of origin. In this process, the IP address is used exclusively to derive the country code. The operator does not store the IP address.

The service providers mentioned may process technical data to the extent necessary for the provision, operation, security, and error analysis of the website.

Application data is processed via Microsoft Azure. To the extent that a transfer of personal data to the USA cannot be excluded, this is carried out on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, the EU-U.S. Data Privacy Framework for certified recipients.

16. Storage Period

The country of origin of the access is stored for statistical purposes for as long as this is necessary for evaluating the regional reach of the website.

Technical access data is not permanently stored by the operator.

Temporary technical processing by hosting providers may take place to the extent necessary for the operation, security, and error analysis of the website.

Sports-related information and statistics are stored for as long as the website is operated or for as long as there is a legitimate interest in presenting the sporting results.

17. Recipients of the Data

Personal data is not disclosed by the operator to third parties, except to the extent necessary for the technical operation of the website or where there is a legal obligation.

Technical service providers may obtain access to technical data within the scope of hosting to the extent necessary for operation, security, and error analysis.

18. Data Subject Rights

To the extent that personal data is processed, data subjects have the following rights under the GDPR:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to object pursuant to Art. 21 GDPR
Right to lodge a complaint with a data protection supervisory authority

Competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestrasse 2-4
40213 Duesseldorf
Germany
Website: www.ldi.nrw.de

19. No Cookies, No Tracking

This website does not use cookies, tracking, analytics tools, or social media integrations.

No personal reach measurement, user tracking, or profiling takes place.

20. Changes to This Additional Notice

This additional German / EU data protection notice may be amended if technical, legal, or organizational changes occur.