This would be the corresponding translation of the analysis linked upthread, from
https://reversecodes.wordpress.com/2018/06/12/analizando-la-...:
Leaving aside the first part where they try to justify themselves by talking about economic losses and other stories, in the third paragraph they already begin to say things that do not agree with reality.
This new functionality for fraud detection is enabled in the app since last Friday, June 8, 2018, only for Android system users and nationally*.
They say that the functionality of collecting microphone and location information was enabled on June 8, 2010, so version 6.4.0 released on February 21, 2018 with SHA1 efd50120f73c0d674492126ce9e9198da57c8287 has the ability to collect microphone and location information in exactly the same way as the latest version available. It may have been implemented in an earlier version, it's a matter of looking at it, but with this example it's enough to dismantle that part of the release. Unless the'functionality' they refer to is that of asking permission and not that of'spying on users'.
(....) the microphone will pick up the binary code of audio fragments, with the sole purpose of knowing if you are watching football matches of competitions played by LaLiga teams, but the content of the recording will never be accessed.
There's little to say here, it's obviously outrageous to say that the microphone doesn't record audio clips. It is also contradictory to say that the recording is analyzed (in any way, it will be seen later) and in the following line that the content will never be accessed. What we mean by that is that they record and then immediately delete, because the moment they do anything else about the generated file other than delete it they are already accessing the content.
Now they tell us how they protect the privacy of the user....
LaLiga will only activate the microphone and geopositioning of the mobile device during the time slots of matches in which LaLiga teams compete.
This time slot thing is very relative, if a Spanish team plays in China when it's 5 a.m. here, they can activate the 10 million terminals and record them.
LaLiga does not access the audio fragments picked up by the device's microphone, as they are automatically converted into binary code on the device itself. LaLiga only accesses this binary code, which is irreversible and does not allow you to obtain the audio recording again.
Tjis is wjere the statement loses all credibility it could have. On the one hand, they tell us that La Liga does not access the audios, that they transform them into binary code automatically in the device (obviously, in computing everything is binary data, which does not mean that they are not recording an audio that can be played later) but if we give them the benefit of the doubt, what they are trying to tell us is that they are generating a progressive hash with their application after recording the audio and in the terminal itself? or in other words, do they mean that their application does what Shazam (valued at EUR 400 million) does? But in this case it is much more complex, because Shazam can build a database of songs that are a finite and concrete ensemble; but to recognize that the ambient sound corresponds to a football match in a bar are already big words.
It is quite clear at this point that what they do is that, but obviously they do not do it locally, but they send the recording to another service to identify it and maybe I have searched wrong, but at no point in the general conditions of use and privacy policies of the application I have seen that it is mentioned that the data collected are sent to another company for analysis, really do not know how these issues go at the legal level, but in the legal notice on privacy and cookies makes a mention to
Your personal data will not be transferred to other persons or companies to be used for their own purposes. However, some entities subcontracted by LaLiga may access Personal Data and information as Processors or Sub-processors to provide LaLiga with a necessary service. In particular, LaLiga receives assistance from:
(a) Service Providers. Sometimes, we share your information with our third party service providers, who help us provide our services. Examples of service providers: hosting, metrics and analytics.
That's generic again and in my view leaves the door open for unlimited data traffic, so any company can become a service provider overnight, right?
From this point on, the following points already seem to me to be pure rejoicing of those who have written it and those who have approved it as a serious statement.
(...)
Translated with www.DeepL.com/Translator
--
There's more, and then a technical analysis, thanks JorgeGT!