1. Data controller
The controller of your personal data is the PadelStatsIQ operator. To exercise your rights or for any privacy inquiry, you can write to noreply@padelstats.local.
2. What data we collect
We process the following categories of data:
- Identification data: email, first name, last name, date of birth.
- Account data: password stored as a bcrypt hash (never in clear text), creation and last access dates, role (user/admin), account status.
- Data generated by using the app: matches you create, players you register, points and actions of each match, computed statistics, matches publicly shared (via link).
- Technical data: pseudonymized IP address (stored as a hash, not in clear text), browser, operating system, audit events (logins, status changes).
3. Purposes and legal bases of processing
- Service operation (authentication, displaying your matches, computing statistics): legal basis performance of a contract (GDPR Art. 6.1.b).
- Email verification and password recovery: legal basis performance of a contract (GDPR Art. 6.1.b).
- Product improvement (aggregated and anonymized usage analysis): legal basis legitimate interest (GDPR Art. 6.1.f). We process pseudonymized metrics to identify failures and prioritize new features.
- Commercial communications (notices about new features, surveys, use of aggregated/anonymized data for commercial purposes): legal basis legitimate interest and information declared in the terms. We never transfer your personal identity to third parties for advertising purposes.
- Legal compliance and auditing (access logging, administrative actions, retention of security events): legal basis legal obligation (GDPR Art. 6.1.c) and legitimate interest in the security of processing (GDPR Art. 32).
You can object to processing based on legitimate interest by writing to noreply@padelstats.local. We will evaluate your request on a case-by-case basis.
4. Disclosure of data to third parties
Your data is stored on our own infrastructure. We use the following providers strictly necessary to provide the service:
- SMTP service to send verification emails, password recovery emails and service notices. Only the recipient email and message content are transmitted.
We do not transfer your identifiable personal data to third parties for advertising or marketing purposes. The aggregated/anonymized data we may use for commercial purposes (usage reports, padel practice statistics) does not allow you to be individually identified.
5. Retention periods
- While your account is active, we keep your personal data to provide the service.
- If you delete your account (soft delete), your identity is anonymized immediately (internal email rename) and your access is blocked. The matches and players you created are kept in anonymized form due to legitimate interest in preserving the statistical integrity of other users' history.
- If you request complete deletion via noreply@padelstats.local, we manually perform a full purge (matches, players, logs) within a reasonable time frame.
- Audit logs are kept according to the service's technical retention policy (internal recommendation: 12 months for authentication events, indefinitely for critical administrative actions).
6. Your rights
As the data subject, you have the right to:
- Access (GDPR Art. 15): know what data of yours we process.
- Rectification (Art. 16): correct inaccurate data. Edit directly from
/profile. - Erasure (Art. 17): delete your account. Do it from
/profileor request full purge to noreply@padelstats.local. - Objection (Art. 21): object to processing based on legitimate interest. Write to noreply@padelstats.local.
- Portability (Art. 20): receive your data in a structured, machine-readable format. Self-service coming soon; in the meantime, request it by writing to noreply@padelstats.local.
- Restriction of processing (Art. 18) and right not to be subject to automated decisions (Art. 22): contact us to exercise them.
- Complaint to the Spanish Data Protection Agency (aepd.es) if you consider that the processing does not comply with the regulations.
8. Changes to the policy
This policy may be updated. The date of the version in force appears above. When the change is material, we will ask you to accept the new version before continuing to use the Application.
9. Contact
To exercise any right or resolve doubts: noreply@padelstats.local.
Notice on language version. This English text is a convenience translation. The Spanish version is the original and legally binding text. In case of discrepancy between the Spanish and English versions, the Spanish version prevails. You can read the Spanish version by switching the language to Español from the language selector in the application header.
