FPX ProPDF

Terms and Conditions

Football Path X GmbH

Version 2.0. LAST UPDATED ON OCTOBER 29, 2026. These terms come into effect on October 29, 2026.

This version replaces the Terms and Conditions of 8 December 2025, and every later edit of them, in full.

1. Who you are contracting with

We call ourselves Football Path X or we below. We call you you.

2. What these terms cover

These terms govern the Football Path X apps for iOS and Android (FPX Pro), the web app, the public competition pages and the websites we operate. We call all of that the Platform.

They are split deliberately:

You are a consumer if you are an individual buying for purposes outside your trade, business or profession. You are a business if you are buying for a club, a company, an association, a federation or any other organization, or as a self-employed person acting in that capacity. Austrian consumer protection law, in particular the KSchG and the FAGG, decides which one you are, not what you tick.

You accept these terms when you create an account, again each time you buy something, and again when we ask you to accept a new version under section 22.

3. Definitions

Account is the account you hold on the Platform.

ClubHQ is the paid club management service described in section 13.2.

Competition is a tournament, league or cup created on the Platform, in any of its editions, categories and seasons. Victour is the name of our competition product.

Content is everything on the Platform that belongs to us: the software, design, text, marks, logos and data we produce.

Credit is the balance described in section 13.3.

Organizer is whoever creates a Competition and pays to publish it.

Paid Products are the things described in section 13.

Services are everything the Platform does, paid or free.

Your Content is everything you upload or write: videos, photographs, posts, comments, ratings, messages and the data you enter.

4. Age, and accounts for children

You may hold your own account from the age of digital consent in your country. That is 16 in the European Union and the European Economic Area, and 16 where we cannot tell which country you are in. Elsewhere it is 13, or the higher age your country's law sets. Some roles need more: a coach must be at least 16, and you must be at least 18 to manage a club, to act as a parent or guardian, or to organize a Competition.

Below that age, the account belongs to an adult. A parent or legal guardian can create and hold an account for a child, or a club can create one for a member under section 4.1. The adult who holds the account agrees to these terms for the child, is responsible for everything done on it, including anything bought, and can close it at any time.

If you are old enough to hold your own account but under 18, we ask you to confirm that a parent or guardian agrees before you continue. You may only buy something on the Platform with their consent, and in Austria a contract a minor enters without that consent may not bind them. We may ask for confirmation before we accept a purchase from a minor.

We will close any account we find to be held by someone below the age that applies to them without a parent, guardian or club behind it, and delete the data, unless a parent or guardian takes it over.

4.1 Accounts a club creates for its members

A club can create an account for a player, coach or other member and issue a one-time sign-in for it. The club confirms that it is entitled to do so and, for a child, that a parent or guardian has agreed. The person, or their parent or guardian, can take the account over with their own email address and password, and from then on it is theirs.

5. Your account

You give accurate information when you register and you keep it current. You do not impersonate anyone. You do not open an account under a false identity, and you do not open a second account to get round a suspension.

Your password is yours to keep secret. Tell us at info@footballpathx.com as soon as you think someone else has it, and we will secure the account.

We may ask you to confirm your email address before you can post, comment, chat or buy.

You may not sell, rent, lend or transfer your account.

You can delete your account at any time, yourself, in Settings under Delete account, on the app or the website. It takes effect at once. A parent or guardian can delete the account of a child they created in the same way. You can also ask us at privacy@footballpathx.com and we will delete it, without asking you why. What happens to your data is set out in the Privacy Policy, section 10, and what happens to a subscription is set out in section 16.3.

6. What the Platform does

Most of the Platform is free and stays free: your account, your profile and Football CV, your videos, match and training statistics, joining clubs and competitions, chat and the network. You do not have to pay to be on Football Path X.

What you pay for is publishing a Competition, and running a club on ClubHQ. Section 13 describes both.

We may add, change or withdraw features. If we withdraw something you have paid for before the period you paid for ends, section 16 tells you what you get.

7. Who can see your profile

Your profile is visible to other signed-in users of the Platform. Competition pages can also be seen by anyone with the link, without an account.

If you are under 18, your profile starts private, and so does the profile of a child a parent or guardian creates. A parent or guardian can change that.

You can make your profile private, or public again, in your settings at any time. A private profile does not appear in search or in the player, coach, scout and club lists. The Privacy Policy, section 6, lists which fields are visible and which never are.

Results from a Competition you played in stay on that Competition's page even after you go private, because the Competition is a record of what happened. You can ask us to remove your name from it.

8. Your content, and the licence you give us

Your Content stays yours. We do not claim ownership of anything you upload.

You confirm that you own it or have the rights to it, that everyone identifiable in it has agreed to appear, and that where a child appears their parent or guardian has agreed.

You grant us a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, adapt for format and resolution, publish and display Your Content on the Platform, for as long as you keep it published, so that we can operate the Services. That licence exists so the Platform can show your video to other users. It does not go further than it needs to.

Beyond the Platform, we ask first. We will only use Your Content on our own social media channels, in marketing, or in press material with your separate agreement, which we will ask for each time and which you can refuse or later withdraw. Where you have given us your social handles, we credit and tag you.

When you delete Your Content, or delete your account, the licence ends. Copies already shared by other users, messages you sent to other people, and anything held in a moderation or legal record are the exception, and they are dealt with in the Privacy Policy, section 10.

9. What you may not do

We have no tolerance for the following. Any of it can cost you your account immediately and without warning.

Video must be about football and suitable for a child to watch. Anything featuring drugs, alcohol or adult themes will be removed.

About chat. Everyone on the Platform is expected to keep messages respectful and connected to football. A direct conversation with someone under 18 is only possible within their club, between a child and their parent or guardian, or with Football Path X support. A conversation that no longer meets that rule becomes read only. You can block anyone, and a block stops messages both ways. Report anything that troubles you with the report control in the conversation, and we will look at it.

About moderation. We act on reports. A post that several different people report is hidden automatically. If your content was hidden and you think that was wrong, write to legal@footballpathx.com and a person will review it. We may also check content ourselves, before or after it is published. None of that is an approval, and it is not a guarantee that everything on the Platform is lawful or accurate.

10. Reporting content, and how we handle it

Anyone can report content. Use the report control on the item, or write to legal@footballpathx.com with a link, what is wrong with it and how to reach you.

We are subject to Regulation (EU) 2022/2065, the Digital Services Act, and we handle reports under it:

Copyright. If your work has been published here without permission, write to legal@footballpathx.com with: your signature, electronic is fine; a link to the material; a description of the work and when it was created; your name and contact details; a statement that you are acting in good faith; and a statement, under penalty of perjury, that the information is accurate and that you are the owner or authorised to act for them. We handle these under the Digital Millennium Copyright Act as well as the DSA, and we tell the uploader.

If your content was removed and you think that was wrong, send a counter-notice with your signature, a description of what was removed and where it was, a statement under penalty of perjury that you believe it was removed by mistake, and your contact details. We review every one and restore what should not have been taken down.

Repeat infringers lose their accounts.

11. Suspension and termination

We can suspend or close an account that breaches these terms. For anything short of the list in section 9, we warn you first and give you a chance to put it right. For anything on that list, for illegality, or where there is a risk to a user, we act at once.

When we act, you get the statement of reasons described in section 10, and you can challenge it.

If we close your account for a breach, you do not get a refund of a Competition already published or of a subscription period already started. If we close it for any other reason, or if we stop providing the Services, you get back the unused part of anything you paid.

You can delete your account whenever you like. Sections 8, 12, 17, 18, 19, 20 and 22 survive.

12. Running a Competition: what the organizer is responsible for

This section applies to you if you create a Competition. It sits alongside everything else in these terms, and where the two conflict on a Competition matter, this section wins.

12.1 The Competition is yours, not ours

We give you the software to run a Competition. We do not run it.

You decide the format, the rules, the fixtures, who is admitted, who is excluded, what the eligibility criteria are, and how disputes inside your Competition are settled. You are responsible for the Competition actually happening, for the venues, for the officials, for insurance, for safeguarding at the event, and for any permit or federation sanction it needs.

We are not a party to the relationship between you and the teams, players, parents or clubs who take part. If a Competition is cancelled, abandoned, played badly or never played at all, that is between you and them.

12.2 Fees you charge participants are yours to collect

You can record an entry fee for teams in your Competition, and the Platform will display it and help you track who has paid.

We do not collect that money. It never passes through us. You collect it yourself, by whatever means you arrange with the team. What the Platform shows you is a record you maintain, not a payment we have processed.

That means we are not responsible for collecting it, chasing it, refunding it, or resolving any argument about it, and we take no fee from it. If a team disputes a fee they paid you, they take it up with you.

The only money that passes through us, or through Apple or Google on our behalf, is what you pay for our own Paid Products under section 13.

12.3 Children in your Competition

Most people in a youth Competition are children, and many of them will not hold an account. Registering them puts their data on the Platform.

When you register a player, or upload anything featuring a player, you confirm to us that:

If a parent or guardian withdraws that agreement, tell us at privacy@footballpathx.com and remove the player from your Competition. We will help, and where you do not act we will act ourselves.

You do not use participant data for anything other than running your Competition. You do not sell it, and you do not market to participants outside the Platform without their agreement.

12.4 Who is responsible for participant data

For the decisions you take about your own Competition, you are a controller of that data in your own right, and the obligations of the GDPR fall on you directly, not on us.

For the data you handle through the Platform's own tools, we act as your processor. The terms that govern that are in Annex A, the Data Processing Agreement for Competition Organizers, printed at the end of these terms. It is part of these terms and binds you automatically the moment you create a Competition. It is the written contract Article 28(3) GDPR requires, so neither of us may lawfully process participant data without it.

Section 12 of the Privacy Policy explains the same split from the participant's side.

12.5 Chargebacks and reversals

If you charge back or reverse a payment you made to us, or your bank does it for you, without first raising it with us under section 16, we may suspend the Competition and the account until it is resolved, and we may recover the cost the provider charges us for handling it.

12.6 Larger organizations

Federations, leagues and larger organizations may agree separate written terms with us, including on price, data processing and support. Where we have signed something with you, that document takes precedence over these terms on anything it covers.

13. What you can buy

The price is the one shown to you before you confirm the purchase. We publish our prices in the app and on the website rather than in these terms, and whatever the payment screen shows you before you confirm is what you are charged. A discount or launch offer applies only where the payment screen shows it.

13.1 Competitions (Victour)

You build a Competition for nothing. You pay to publish it and let teams register. You pay per category, and each category after the first is priced as shown at checkout.

13.2 ClubHQ

ClubHQ is a subscription for a club, priced by the number of teams it covers, paid monthly or annually. A ClubHQ subscription belongs to the club, not to the person who paid for it. Section 16.3 sets out how it renews, how it ends and what happens when the person who paid leaves.

13.3 Credit

Credit is a balance in euro held on your account. You receive it when you pay for categories you have not set up yet, and on the website you can also buy it as a top-up.

Credit can only be spent on Paid Products on the Platform. It is not cash, it earns no interest, and it cannot be transferred to another account or paid out, except as follows: credit you bought as a top-up and have not used is refunded to you on request, including when you delete your account. Credit you received as part of a purchase follows that purchase: if the purchase is refunded, the credit is taken back.

13.4 Currency and country

On the website, prices are set per country and per currency by hand. They are not converted from euro at an exchange rate, so the price in one country will not match its neighbour's, and that is deliberate. For Club football, the price is the price for the country the Competition takes place in, not the country you happen to be in. Community competitions and Credit are priced in euro.

In the app, Apple or Google sets the price and the currency for the store country of your Apple or Google account.

13.5 VAT and invoices

For consumers, every price shown includes VAT. There is nothing added at the end.

For businesses buying on the website, VAT is handled according to where you are and the VAT number you give us. Inside the EU and outside Austria, a valid VAT number means the reverse charge applies and we invoice without VAT.

On the website, the invoice or receipt is produced and sent when the payment completes, and ClubHQ invoices are listed in your subscription settings. For purchases in the app, Apple or Google issues the receipt. If you need an invoice again, or need it corrected, write to info@footballpathx.com.

13.6 Paying

In the app, you pay through the Apple App Store or Google Play, using the payment method on your Apple or Google account. Their terms govern the payment itself. Some changes to a ClubHQ subscription that was bought on the website open the website's checkout instead.

On the website, you pay through Stripe or PayPal. Their terms govern the payment itself.

We never see your full card number.

If a payment fails or is reversed, the thing you bought stops working until it is settled.

14. If you are a consumer: your right to withdraw

This section applies only if you are a consumer. If you are buying for a club, a company, an association, a federation, or in any professional capacity, section 15 applies to you instead.

Purchases in the app. When you buy through the App Store or Google Play, Apple or Google handles cancellation and refund requests for that purchase under its own terms. You ask them, through your Apple or Google account. Your rights under the law of your country are not affected.

Purchases on the website are covered by the rest of this section.

Right of withdrawal

You have the right to withdraw from this contract within 14 days without giving any reason.

The withdrawal period expires 14 days from the day the contract was concluded.

To exercise the right of withdrawal you must inform us, Football Path X GmbH, Othmargasse 34/16, 1200 Vienna, Austria, info@footballpathx.com, of your decision to withdraw by an unequivocal statement, for example a letter sent by post or an email. You may use the model form below, but it is not obligatory.

To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.

Effects of withdrawal

If you withdraw from this contract, we shall reimburse to you all payments received from you without undue delay and in any event not later than 14 days from the day on which we are informed about your decision to withdraw. We will carry out such reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise. In no event will you incur any fees as a result of such reimbursement.

Where the right ends early

Your right of withdrawal ends early only where both of the following are true:

  1. you expressly requested that we begin providing the service during the 14 day period, and acknowledged at the same time that you would lose your right of withdrawal once the service was fully performed; and
  2. the service was then fully performed. Publishing your Competition and opening it for team registration is full performance.

If you made that request and we have begun but not finished, and you then withdraw, you pay a proportionate amount for what was supplied up to that point. For a subscription, that is the part of the period up to your withdrawal.

If you did not expressly request it and acknowledge it, your right of withdrawal runs for the full 14 days, whatever else has happened in the meantime.

Model withdrawal form

To Football Path X GmbH, Othmargasse 34/16, 1200 Vienna, Austria, info@footballpathx.com:

I hereby give notice that I withdraw from my contract for the provision of the following service:

Ordered on:

Name of consumer:

Address of consumer:

Signature of consumer (only if this form is notified on paper):

Date:

After the 14 days

Once the withdrawal period has passed, or once it has ended early as described above, payments are final, subject to section 16.

15. If you are a business: no withdrawal right

If you buy as a club, a company, an association, a federation or in any other professional capacity, the statutory right of withdrawal in section 14 does not apply to you. That is the law's position, not a term we impose.

Your payment for a Competition is final when the Competition is published, and your payment for a ClubHQ period is final when the period starts. Section 16 still applies to you.

Where we have agreed separate written terms with you, a Federation quote for instance, those terms take precedence over sections 13 to 16.

16. Refunds, cancellation and things going wrong

16.1 Asking for a refund

You can ask for a refund at any time, whoever you are and whatever you bought. Write to info@footballpathx.com and tell us what happened. We do not require a form and we do not require a reason beyond what went wrong. Refunds on the website are issued by us. Refunds for purchases in the app are issued by Apple or Google, so we will point you to them, and tell them what we know if that helps your request.

We refund where the product did not work. If a fault on our side stopped you getting what you paid for, you get your money back. That covers:

We decide within 14 days of you asking, we tell you the reason either way, and where we agree we pay back within 14 days of deciding, to the method you paid with.

Outside those cases a refund is at our discretion, and we would rather hear from you than not. Asking costs you nothing and does not affect anything else in these terms.

Three things this does not touch, because they are yours by law and not ours to give:

If any of those gives you more than this section does, you get the more generous one.

16.2 What a refund does to a Competition

This is what our system does, and it is not reversible by us afterwards. When a competition payment is refunded in full:

So a refund undoes the purchase. If the Competition has already been played, we cannot restore it by refunding you, and we will discuss the situation with you rather than process it blindly.

16.3 ClubHQ subscriptions

Renewal. A ClubHQ subscription renews automatically at the end of each period, monthly or annually as you chose, for another period of the same length, at the price then shown, until it is cancelled. You can switch automatic renewal off and on again in the subscription settings.

Cancelling. On the website, cancel at least 7 days before the end of a monthly period or 30 days before the end of an annual period to stop the next renewal. A cancellation made later takes effect at the end of the following period. In the app, a subscription is cancelled in your App Store or Google Play account settings, under Apple's or Google's rules and deadlines.

When a subscription ends. It runs to the end of the period already paid for, and the club keeps ClubHQ until then. We do not refund the unused part of a period that has already started, except where section 14 or section 16.1 gives you a refund.

Changing plan. You can change the number of teams. On the website you see before you confirm what you pay now and what you pay from the next renewal. An annual plan cannot be changed to a monthly one during the period. In the app, a change is handled by Apple or Google as a change of subscription.

If a payment fails. We tell you, and the subscription is marked past due while you fix the payment method. If it stays unpaid, we may suspend ClubHQ for the club and then cancel the subscription. Your club's data is not deleted when a subscription is suspended or ends.

When the person who paid leaves. If the person who paid for the subscription, or the club's last administrator, deletes their account, the subscription does not renew. The club keeps ClubHQ to the end of the period already paid for, nothing is refunded, and an administrator who remains can buy a new subscription with their own payment method. A subscription bought in the app is managed by Apple or Google, so it also has to be cancelled there, or the store keeps charging it.

16.4 No trial

We do not currently offer a free trial. If we introduce one we will say so on the payment screen, with its length and what happens at the end, before you sign up for it.

16.5 Chargebacks

If you think a charge is wrong, tell us first. We would rather sort it out than have your bank do it. We are not asking you to give up your right to dispute a payment with your bank or card issuer, and we could not do that even if we wanted to.

17. Our intellectual property

The Platform, its software, design, layout, text, graphics, logos and marks are ours or licensed to us, and they stay that way. Football Path X, FPX Pro, Victour and ClubHQ are our marks.

We give you a limited, personal, non-transferable, revocable licence to use the Platform for what it is for, under these terms. That is all it gives you.

You may not copy, reproduce, distribute, modify, sell, licence or build a derivative of any part of the Platform, and you may not use our data commercially, without our written agreement. Content licensed to us stays with its owner.

18. What we promise, and what we do not

We provide the Platform with reasonable skill and care, and we will make reasonable efforts to keep it available and to fix faults quickly.

We do not promise that it will be uninterrupted, error free, or free of every security risk, and we do not promise that anything on it is accurate, because most of it is put there by other users. Statistics, ratings and profiles are entered by users and organizers and we do not verify them.

Football Path X is a tool. It does not guarantee anyone a trial, a transfer, a contract or a career, and nobody should take a decision about their future on the basis of what it shows without thinking for themselves.

Nothing in this section removes the statutory warranty rights a consumer has under §§922 following of the ABGB and the Consumer Warranty Directive. Those apply whatever this section says.

19. Liability

We are fully liable, without limit, for death or personal injury, for damage caused intentionally or by gross negligence, for anything we have expressly guaranteed, and under the Austrian Product Liability Act. Nothing below cuts that back.

For slight negligence, we are liable only for breach of an obligation that goes to the heart of the contract, and only up to the damage that was foreseeable and typical for a contract of this kind.

Otherwise, and to the extent the law allows, we are not liable for indirect or consequential loss, lost profit, lost opportunity, lost data or lost goodwill.

Where our liability is limited, it is limited to the amount you paid us in the 12 months before the event, or EUR 500 if you paid us nothing.

We are not liable for what other users do, for content they put up, for what happens between you and an organizer, or for third party sites we link to.

If you are a consumer, none of this affects the rights Austrian law gives you and does not let you sign away, in particular under the KSchG.

20. Your responsibility to us

If you are a business, you cover our losses, including reasonable legal costs, arising from your breach of these terms, your content, or your unlawful use of the Platform.

If you are a consumer, this section does not apply. You are liable to us only where Austrian law says you are.

21. Interruptions and events beyond our control

We are not in breach if we cannot perform because of something outside our reasonable control: war, government action, a pandemic, a network or hosting failure, a fire, a flood, a cyberattack or a strike. Our obligations pause while it lasts and resume when it ends.

If it lasts more than 30 days, either of us may end the contract and we refund the unused part of anything you paid.

22. Changes to these terms

We may change these terms when the Platform, the law or our costs change.

For material changes, and for any price increase on a subscription you hold, we notify you by email or in the app at least 30 days before they take effect. If you do not agree, you can delete your account or cancel your subscription before the effective date, and nothing further is charged. When a new version takes effect, the app and the website ask you to accept it before you continue.

Minor changes, such as correcting a typing error, clarifying wording, or naming a new sub-processor, we publish with a new date, without individual notice.

We never apply a change retroactively to something you have already bought.

23. Law, courts and disputes

Governing law. Austrian law, excluding its conflict of law rules and the UN Convention on Contracts for the International Sale of Goods.

If you are a consumer, this choice of law does not deprive you of the protection of the mandatory rules of the country you live in. You can sue us in the courts where you live, and we can only sue you there.

If you are a business, the courts of Vienna, Austria have exclusive jurisdiction, and Austrian law applies without qualification.

Before you go to court. Write to legal@footballpathx.com. Most things are quicker to fix that way.

Out-of-court settlement, for consumers. You can take a dispute to a certified Austrian alternative dispute resolution body, for instance the Internet Ombudsstelle (www.ombudsstelle.at) or Verbraucherschlichtung Austria (www.verbraucherschlichtung.at). We are not obliged to take part in such proceedings, and we are not currently committed to doing so. The European Commission's online dispute resolution platform ceased operating on 20 July 2025 and is no longer available.

24. The rest

No waiver. If we do not enforce something straight away, we have not given it up.

Severability. If a clause is unenforceable, it is replaced by the closest lawful equivalent and the rest stands.

Assignment. We may transfer these terms to a company that acquires our business, and we will tell you if we do. You may not transfer yours without our written agreement.

Whole agreement. These terms, Annex A below where it applies, the Privacy Policy, and any order confirmation are the whole agreement between us on this subject.

Language. These terms are written in English. If we publish a translation and the two differ, the English version governs, except where the law of your country requires otherwise.

Notices in writing. Email and in-app messages count as writing. Keep your email address current, because notices we send to the address on your account are effective even if you no longer read it.

25. Contact

info@footballpathx.com for anything about your account, a purchase or the Services.

legal@footballpathx.com for reports, takedowns, complaints about a moderation decision, and legal notices.

privacy@footballpathx.com for anything about your data.

Football Path X GmbH, Othmargasse 34/16, 1200 Vienna, Austria.

Annex A: Data Processing Agreement for Competition Organizers

Annex to the Football Path X Terms and Conditions. Version 1.1, 29 October 2026.

This Annex forms part of the Terms and Conditions. It binds you automatically when you create a Competition, and it binds us at the same moment. You do not need to sign it separately.

It is the written contract required by Article 28(3) of the GDPR. Without it, neither of us may lawfully process participant data for your Competition, so it exists whether or not either of us finds it interesting.

Where we have signed a separate data processing agreement with you, for instance as part of a federation or ClubHQ arrangement, that signed document governs and this Annex does not apply to you.

1. Who is what

You are the controller for the personal data of people taking part in your Competition, to the extent you decide what happens to it. That means you decide who is invited, which teams are accepted, what the eligibility rules are, what you do with a participant list outside the Platform, and what you send to participants outside the Platform.

We are your processor for the participant data we handle through the Platform's tools on your behalf, in support of the Competition you are running.

We are the controller in our own right, not your processor, for: user accounts and profiles, content users publish, messages between users, the operation and security of the Platform, our own analytics, and payments made to us. Our Privacy Policy governs all of that, and nothing in this Annex makes us your processor for any of it.

Where the same piece of data sits in both categories, for example a player's name appearing both on their own profile and in your Competition, each of us is responsible for our own role in relation to it.

2. What the processing covers

Subject matter. Processing participant data so that you can run your Competition on the Platform.

Duration. From the moment you create a Competition until 30 days after it is completed, cancelled or deleted, or until this Annex ends, whichever is later.

Nature and purpose. Collecting, recording, organising, storing, displaying, transmitting and deleting participant data, in order to register teams and players, produce and publish fixtures, record results and statistics, publish competition pages, and communicate with participants through the Platform.

Types of personal data. Names; dates of birth or age; gender; nationality; squad numbers and playing positions; team and club membership; contact details where you enter them; match data including appearances, goals, assists, cards, minutes and ratings; photographs and video where they are uploaded; and registration and fee status where you record it.

Categories of data subject. Players, including children; coaches and team staff; club and organization representatives; referees and officials; and parents or legal guardians.

3. What we commit to

These are the obligations Article 28(3) requires of a processor, and we accept each of them.

(a) We process only on your documented instructions. Your use of the Platform's features is your instruction, and this Annex together with the Terms is the documented form of it. We follow any additional lawful written instruction you give us, and we may charge for one that requires work beyond the Platform's normal operation. If we think an instruction breaches data protection law, we will tell you and may decline it. Where we are required by EU or member state law to process for another reason, we will tell you before we do, unless that law forbids us from saying so.

(b) Confidentiality. Everyone we allow to process participant data is bound by a written confidentiality obligation or a professional duty of confidence, and that obligation survives them leaving.

(c) Security. We apply the technical and organisational measures required by Article 32, appropriate to the risk. They are described in section 14 of our Privacy Policy and include encryption in transit and at rest, access limited to those who need it and logged, and security rules reviewed before each release.

(d) Sub-processors. You give us general authorisation to engage sub-processors. The current list is the list of processors in section 8 of our Privacy Policy, which is part of this Annex by reference. We impose data protection obligations on each of them no less protective than these, and we remain fully liable to you for their performance. We will give you at least 30 days notice before adding or replacing one, by publishing the updated list and notifying you in the app or by email. If you object on reasonable data protection grounds within those 30 days, we will discuss it with you, and if we cannot resolve it you may end the affected Competition arrangement and we will refund the unused part of what you paid.

(e) We help you answer people. Where a participant exercises a right under Chapter III of the GDPR and it concerns data we process for you, we help you respond, by appropriate technical and organisational measures and as far as is possible. If a participant comes to us directly about your Competition, we will not answer for you: we will tell them to contact you and pass the request on.

(f) We help you with your other obligations. Taking into account what we know and what is available to us, we assist you with security under Article 32, breach notification under Articles 33 and 34, impact assessments under Article 35, and prior consultation under Article 36. We notify you without undue delay after becoming aware of a personal data breach affecting data we process for you, with the information you need to make your own notification.

(g) Deletion or return at the end. When the processing ends, we delete participant data processed on your behalf, or return it to you if you ask before deletion, unless EU or member state law requires us to keep it. Two things survive this, and you should understand them before you start: competition results and match records remain published as the record of a competition other people took part in, and payment records are kept for seven years under §132 BAO. Section 10 of our Privacy Policy explains both.

(h) We let you check. We make available the information you reasonably need to demonstrate compliance with Article 28, and we allow and contribute to audits, including inspections, conducted by you or an auditor you appoint. In practice: ask us in writing, give us 30 days notice, do it no more than once a year unless a breach or a regulator gives you cause, keep it proportionate, and bear your own costs. We may satisfy an audit with a current third party report or certification where one answers your question.

4. What you commit to

You have a lawful basis. You have one for everything you ask us to process, and you can show it.

You have told people. Participants, and the parents or guardians of children, have been given the information Articles 13 and 14 require about what you are doing, before you register them.

Children. Where a participant is below the age in section 4 of the Terms, you have the agreement of a parent or legal guardian to register them and to what will be publicly visible. Section 12.3 of the Terms sets this out in full, and it is the single most important thing on this page, because most people in a youth competition are children and most of them will never have held an account with us.

You keep it to the Competition. You do not use participant data for anything other than running your Competition, you do not sell it, and you do not market to participants outside the Platform without their agreement.

Your instructions are lawful. You are responsible for the lawfulness of what you tell us to do, and you indemnify us against claims arising from an instruction that was not.

5. Transfers

Our primary processing region is europe-west3, Frankfurt, inside the EU. Some sub-processors transfer data to countries outside the EEA, as section 8 of our Privacy Policy sets out, on the basis of the European Commission's Standard Contractual Clauses and, where the recipient is certified, the EU to US Data Privacy Framework. You authorise those transfers by agreeing to this Annex.

6. Liability, and how this fits together

Each of us is liable for our own role. Nothing in this Annex makes us liable for a decision you took as controller, and nothing makes you liable for something we did outside your instructions.

The liability provisions in section 19 of the Terms apply to this Annex. Nothing here limits either of our liability to a data subject or to a supervisory authority under Article 82 GDPR, which is not ours to limit by contract.

If this Annex and the Terms conflict on a data protection matter, this Annex wins. On anything else, the Terms win.

7. Changes

We may update this Annex where the law changes or our processing does, on 30 days notice under section 22 of the Terms. Where a change materially reduces the protection given to participants, you may end the affected Competition arrangement instead of accepting it.

8. Contact

privacy@footballpathx.com for anything under this Annex, including audit requests, sub-processor objections and breach notifications.

Football Path X GmbH, Othmargasse 34/16, 1200 Vienna, Austria. FN 641126 h.