Privacy Policy

Who we are

MODMS is operated by Alessandro Arbizzani trading as MODMS, ABN 55 307 371 210 (“MODMS”, “we”, “us”). Our contact details are at the end of this policy.

MODMS is a platform that football organisations (such as federations, associations and referee bodies) use to manage match officials: appointments, evaluations, rankings, incident reviews, education and development.

We have committed to handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

Our role and your organisation’s role

Your organisation decides what information about you is entered into MODMS, who in the organisation can see it, and what decisions are made using it. We provide and run the platform for your organisation under a written agreement with them.

This means:

• For most information in MODMS, your organisation is the main point of contact. If you have a question about what was recorded about you or why, start with them.
• We use the information only to provide the service to your organisation and for the limited purposes described below.

Who this policy covers

• Managers, coaches and officials who have a MODMS account.
• Officials and coaches whose details an organisation has entered into MODMS, whether or not they have an account.
• People who submit club feedback or check in to a workshop through a link, without an account.
• People who appear in match footage that an organisation uploads or links to MODMS.

Officials and participants under 18

Match officials can start refereeing from 13, so organisations may record officials, and invite account holders, who are under 18.

• Under 15: an organisation may only record an official under 15, or invite them to create an account, after it has obtained consent from their parent or guardian. The organisation must confirm this to us when adding the official.
• 15 to 17: the organisation is responsible for giving the official notice that MODMS holds their information and for obtaining any consent its own policies require.

We do not use information about people under 18 for marketing, and we do not make it visible to anyone outside their organisation.

What we collect

• Account details: name, email address, phone number, job title, profile photo, and the organisation(s) and role(s) you hold.
• Officiating records: football registration number (for example your Football Australia/FFA number), panel and category, appointments and availability, match reports, scores, rankings, comments and development plans written about you by coaches and managers.
• Incident reviews and footage: incident descriptions, decisions and panel votes, and match video uploaded or linked by your organisation. Footage may show officials, players, team staff and spectators.
• Education activity: quiz answers and results, workshop attendance, self-assessments and video viewing.
• Club feedback: the match, the official(s) concerned, the feedback given, and the name, club and email address of the person submitting it [confirm fields].
• Workshop check-in: [name, email, workshop attended, time of check-in; confirm fields].
• Usage data: the pages you view and key actions you take while signed in, linked to a random account identifier, your organisation and your role. We do not send your name, email address or other contact details to our analytics provider. We also keep technical logs (such as IP address, browser and time of access) for security.

Sensitive information. MODMS is not designed to hold health, criminal record or other sensitive information. Organisations and users must not enter it unless it is directly relevant to officiating (for example, an injury affecting availability) and the person has consented. If it is entered, we protect it in the same way as other records.

We do not collect payment card details from individuals.

How we collect it

• From you, when you sign in, complete your profile, take a quiz, submit a self-assessment or check in to a workshop.
• From your organisation’s managers and coaches, who enter your details, write reports and record decisions.
• From clubs, through feedback links.
• Automatically, when you use the service.

If your organisation entered your details before you had an account, we rely on them to tell you that MODMS holds your information and to point you to this policy.

Why we use it

• To provide the service to your organisation: sign you in, show the right records to the right people, send invitations and notifications, and calculate rankings and statistics.
• To keep the service secure, investigate misuse and meet legal obligations.
• To understand how the product is used and improve it.
• To create de-identified, aggregated statistics about how the service is used and the outcomes it supports (for example, how often reports are completed, or trends in assessment scores across organisations). These statistics do not identify you or your organisation.

We do not sell personal information and we do not use it for advertising.

Automated rankings

MODMS automatically calculates a ranking for each official by combining:

• coaching report scores;
• club feedback;
• Laws of the Game quiz results;
• workshop attendance; and
• the percentage of key match incidents (KMIs) the official got right, as decided by the incident review panel.

Your organisation chooses how much weight each of these carries, and can change the weighting. MODMS applies the weighting your organisation sets; we do not adjust individual scores.

Your organisation decides whether and how rankings are used in appointments, grading, promotion or other decisions. MODMS does not make those decisions. If you want to understand your ranking, the current weighting, or a decision based on it, contact your organisation.

Who can see it

Access is controlled by your organisation and your role:

• Managers see records for their organisation.
• Coaches see what their organisation allows.
• Officials see their own reports and development material once a manager has released it.
• Each organisation’s data is kept separate from every other organisation’s.

We (the MODMS operator) can access data only to provide support, maintain the service, fix problems or meet legal obligations.

We may disclose information if required by law, or to protect someone’s safety.

Service providers

We use the following providers to run MODMS. They process information on our behalf and only to provide their service to us.

Your core records are stored in Australia. Some information is processed overseas by the providers above, mainly in [countries]. We take reasonable steps, including contractual terms, to make sure these providers handle it consistently with the APPs.

Security

• Data is encrypted in transit and at rest.
• Sign-in uses one-time codes or a password.
• Access inside the database is restricted by organisation and role (row-level security).
• Operator access to production data is limited to the operator and logged [confirm].

No system is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will notify the affected organisation(s) without undue delay, and we will notify affected individuals and the Office of the Australian Information Commissioner where the law requires or where we consider it appropriate.

How long we keep it

• While your organisation uses MODMS: records are kept for as long as your organisation needs them, and your organisation can delete or correct them.
• When an account is removed: sign-in access ends immediately. Officiating records written about you remain part of your organisation’s records unless your organisation deletes them.
• When an organisation leaves MODMS: we delete its data within [90] days, after giving the organisation the chance to export it, unless the law requires us to keep it.
• Backups: deleted data is removed from backups within [35] days.
• Club feedback and workshop check-ins from people without accounts: kept for as long as the related organisation’s records.
• Security logs: [90] days.

De-identified, aggregated statistics may be kept after the underlying data is deleted.

Your choices and rights

You can ask for access to, or correction of, personal information about you, or ask for it to be deleted, by contacting your organisation or emailing privacy@modms.io.

Because your organisation controls most records, we will usually work with them to respond. We will respond to you within 30 days. If we cannot do what you ask (for example because a record belongs to your organisation and they need to keep it), we will tell you why.

If you are unhappy with how we have handled your information, contact us first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We will update the date at the top when we change this policy. For significant changes we will tell signed-in users before they take effect.

Contact

Alessandro Arbizzani trading as MODMS
ABN 55 307 371 210
Privacy: privacy@modms.io
Complaints: complaints@modms.io

Parcel Locker 10
OAKLEIGH VIC 3166