The protection of your personal data is important to us. This Privacy Policy informs you about the nature, scope, and purposes of the processing of your personal data on MatchConnectSports.
1. Data Controller
Data controller under the GDPR:
MatchConnectSports
Email: teammatchconnect@gmail.com
For all data protection inquiries, please contact the email address above.
2. What data do we collect?
We collect and process the following personal data:
Registration data: First name, last name, username, email address, password (stored encrypted), registration timestamp, consent to the privacy policy (with timestamp).
Profile data: Profile picture (optional), biography (optional), sports (optional), club affiliations (optional), date of birth (optional), privacy settings.
Activity data: Team memberships, events and RSVP responses, training plans and exercises, team chat messages, poll results, tasks and lists.
Technical data: IP address, browser type, operating system, and device information collected by our infrastructure providers.
3. Purpose of data processing
Your data is processed for the following purposes:
– Providing and managing your user account
– Enabling platform features (Locker Room, Playbook, Academy, Calendar, Organisations)
– Team communication and notifications
– Displaying user profiles and social features
– Security and abuse prevention
4. Legal basis (Art. 6 GDPR)
The processing of your data is based on the following legal grounds:
Performance of contract (Art. 6(1)(b) GDPR): For providing the core features of the platform (account, Locker Room, Playbook, Academy).
Consent (Art. 6(1)(a) GDPR): For optional features and general use of the platform — you consent upon registration.
5. Data retention
Your data is stored for as long as your account is active. After account deletion, your personal data will be completely removed within 30 days. Technical backups may retain your data for up to 30 additional days before permanent deletion. Statutory retention obligations remain unaffected.
6. Disclosure to third parties
We use the following third-party providers to deliver our services:
Vercel Inc. (701 First Ave., Sunnyvale, CA 94089, USA): Hosting and deployment of the web application. Data transfer to the USA is based on EU Standard Contractual Clauses (SCCs per Art. 46(2)(c) GDPR).
Supabase Inc. (USA): Database hosting, authentication, and file storage. Data transfer to the USA is based on EU Standard Contractual Clauses (SCCs per Art. 46(2)(c) GDPR).
Beyond this, your data will not be shared with third parties unless we are legally required to do so.
7. Your rights as a data subject
You have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): You may request information about the data we hold about you.
Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data.
Right to erasure (Art. 17 GDPR): You may request deletion of your data ("right to be forgotten").
Right to restriction (Art. 18 GDPR): You may request restriction of processing.
Right to data portability (Art. 20 GDPR): You may receive your data in a machine-readable format.
Right to object (Art. 21 GDPR): You may object to the processing of your data.
To exercise your rights, contact: teammatchconnect@gmail.com
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia:
Landesbeauftragte für Datenschutz und Informationsfreiheit NRW (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
9. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy as needed. The current version is always available at /datenschutz. We will notify you by email of any significant changes.