Skip links

Privacy Statement

This is the Privacy Statement of the Platform. The Platform is operated by Johan Cruijff ArenA. This Privacy Statement provides information on the processing of personal data of participants of the Platform. Through this Privacy Statement Johan Cruijff ArenA strives to comply with data protection laws. This Privacy Statement may be changed over time. Participants are advised to regularly review the Privacy Statement for possible changes. This Privacy Statement was last changed on 30-06-2020.


1 When is this Privacy Statement applicable?

This Privacy Statement is applicable to the processing of the personal data of participants that have registered on the Platform. The Platform is provided by Johan Cruijff ArenA and aims to facilitate and promote open innovation and collaboration with external partners.


2 Who is the controller of the data?

Johan Cruijff ArenA is the controller for the processing of personal data of the participants of the Platform.


3 For what purpose does Johan Cruijff ArenA process personal data?

3.1 What does this purpose entail?

Johan Cruijff ArenA processes personal data (name and e-mail address) for the purpose of hosting and executing the Platform and facilitate Collaborative Innovation Challenges and for organizing other Collaborative Innovation Challenges. This innovation challenge is hosted by Johan Cruijff ArenA in collaboration with our business partners. To build a long-term relationship with the participants and possibly work together in the future, Johan Cruijff Arena will be sharing your data with the business partners (which will have access to your personal data in the Platform as well) and they may approach participants (via the Platform or directly) to discuss further cooperation based on the solutions generated on the platform or to inform you/the participants about events or related communication that may be of interest during or after the Challenge. Should Johan Cruijff ArenA want to use the personal data for a different purpose, the participant will be asked for prior approval for such other purpose.

3.2 Which personal data are processed for this purpose?

The following personal data are processed in the Platform when registering an account: name, organizaton and e-mail address. When filling out a solution, the following personal data are processed additionally: company/organisation name, country of residence (organisation), city of residence (organisation), founding year, legal entity. A participant may voluntarily opt to upload a photo. This is not a mandatory requirement in order to register. The Platform is also intended to use for communication between the participating partners and the participants and therefore also processes personal data in the context of communication between these parties within the Platform.

3.3 For what period are the personal data retained for this purpose?

Personal data required to create a user account of the platform is retained as long as your account remains active on the platform. If you delete your account or request us to delete your account, your personal data will be deleted as well.

This platform is the basis for open innovation programs. The aim is to build an ecosystem of innovators and partners over the long term. In order to realize this, (your) personal data are processed as long as the platform is active. We will delete personal data 30 days after deactivating of the platform.


4 User ID and Passwords

Participants of the Change the Game Platform have access by registering and signing in with their log on details.


5 Who has access to the data?

The information from participants on the Platform will be visible for all registered participants, users and/or partners of the Platform. The key principle of the platform is to facilitate and promote open innovation and collaboration between Johan Cruijff ArenA and external partners, as well as to stimulate and facilitate the collaboration among partners and participants. During the Challenge new partners may be added.

Johan Cruijff ArenA uses the services of a data processor, a third party that is hosting the Platform. Johan Cruijff ArenA has concluded a data processing agreement with this data processor in accordance with the current data protection regulations and future GDPR regulations, on the basis of which the data processor is obligated to comply with Johan Cruijff ArenA’s instructions, maintain strict confidentiality of the personal data and take appropriate security measures. The data processor will only have access to the data in order to carry out the maintenance and hosting work that Johan Cruijff ArenA requires. Only if Johan Cruijff ArenA is required to do so by law, this personal data will be provided to supervisory agencies, fiscal authorities and investigative agencies. The personal data may be accessed by third party IT vendors who service Johan Cruijff ArenA’s IT systems. Johan Cruijff ArenA requires these companies to adequately safeguard your personal data.


6 Where will the data be stored?

The personal data will be stored on servers within the European Union. No personal data is processed outside the EU,


7 How does Johan Cruijff ArenA secure the data?

Personal data of participants are treated strictly confidential and Johan Cruijff ArenA has taken the appropriate technical and organisational security measures against loss or unlawful processing of this data.


8 Who to address regarding questions?

Questions regarding the processing of personal data on the Platform may be addressed to:

You may also lodge a complaint with a supervisory authority, see


9 How to unsubscribe & enforce your rights

A participant can at any time choose to unsubscribe to the Platform by sending an email to:

The personal data of a participant will no longer be visible for other participants after a participant has unsubscribed.

A participant has the right (among others) to access, certificate and delete their date and can inforce this by sending an email to:


10 Governing Law

This Privacy Statement is governed by and construed in accordance with the laws of The Netherlands. To the maximum extent permitted by the applicable laws, any claim or dispute in relation to or in connection with this Privacy Statement shall be submitted to the exclusive jurisdiction of the courts of The Netherlands.