Terms for organisers and data processing agreement
These terms are accepted by whoever creates a club or, later, its owner or administrator, on the club's behalf. They include the data processing agreement under article 28 of the GDPR.
1. Who accepts them and what they cover
They are accepted by a person able to bind the club towards [to be completed], the owner of the platform. They cover the use of the platform to organise tournaments and the way the platform handles the data of the people who play in them. They apply together with the terms of use and the privacy policy.
2. The club and its people
The club decides who has access (owners, administrators, staff) and answers for what they do. It must keep access up to date and withdraw it when someone stops helping.
3. What falls to the organiser
The organiser is responsible for its tournaments: for the bases, fees, prizes, calendar and rules of play, for the licences, permits and insurance that apply, and for complying with sports and consumer law. The platform does not collect entry fees from players and is not responsible for what the club offers.
4. Players' data
The club is the controller of its players' data. It must have a lawful basis to handle it, tell players their data is handled for the tournament, ask the guardian's authorisation for players under 18 and use the data only to organise its tournaments. The platform offers tools for this (notices, guardian authorisation, abbreviated names), but using them well is the club's job.
5. Plans and payments
Organisers' use of the platform may be subject to a plan or to publishing credits, depending on whether charging is turned on in this installation. The economic terms in force are those shown when contracting.
6. Data processing: roles and purpose
For the players' data that the club enters or manages, the club is the controller and [to be completed] is the processor. The processing consists of hosting, storing, showing and sending that data so that the club can organise its tournaments, for as long as the club uses the platform.
7. What data and whose
- Data: name, email, phone, playing level, date of birth and guardian details where relevant, results, sanctions and attendance at matches.
- People: players, captains, guardians, referees and club staff.
8. The platform's obligations
The platform undertakes to:
- handle the data only on the club's documented instructions, which are the normal use of the platform's features;
- ensure the confidentiality of those who access the data;
- apply security measures suited to the risk (encryption, access control, backups);
- help the club meet data subjects' rights, through the export, correction and deletion features;
- tell the club without undue delay if it learns of a security breach affecting its data;
- return or delete the data when the relationship ends, at the club's request, and the club can export it first;
- make available to the club the information needed to show compliance and allow reasonable audits.
9. The club's obligations
The club undertakes to give lawful instructions, not to enter data it cannot handle, to keep it accurate and to deal with data subjects who contact it.
10. Sub-processors
The club authorises the platform to use hosting, email, messaging and payment providers, with the same data protection obligations as these. The current list can be requested by writing to [to be completed]; changes will be notified so the club can object.
11. Duration and termination
These terms last as long as the club uses the platform. If the club is closed or deleted, its players' data is deleted or returned as set out above, except what the law requires to be kept and the results that are part of other players' history.
12. Law and contact
They are governed by Spanish law. For any matter, write to [to be completed].