Privacy Policy

This text is a reference template and must be validated by a lawyer before final publication.

1. Who we are

This is a translation for convenience. The Portuguese version is the legally binding one.

ProClub is the controller responsible for processing the personal data of website and platform users, for the purposes described in this policy. Contact: contact@proclub.dev.

2. What data we process

Contact form data: name, role at the club, email, phone, club, country/city and your message.

Platform usage data: user accounts, athlete and member data entered by the club, activity logs and communications.

Payment data: processed by the payment provider; ProClub does not store full card numbers.

Cookies and local storage: see the Cookie Policy.

3. What we use the data for

Responding to requests for demonstrations and information (legal basis: taking pre-contractual steps at the request of the data subject).

Operating the platform in service of the club (legal basis: performance of the contract with the club).

Essential service communications (security, operational notices) (legal basis: legitimate interests or contract).

Marketing communications, only with consent (legal basis: consent, revocable at any time via the link included in each email).

4. Minors

The platform is intended for sports clubs, whose members may be minors. Data of minors is processed by the club, as data controller, with ProClub acting only as processor.

Parent/guardian access: restricted to their own children's data, by system design. A minor's enrolment depends on authorization from their parent/guardian, collected by the club.

5. Sharing and sub-processors

ProClub uses infrastructure and service providers (hosting, database, transactional emails, payments) that act as sub-processors, subject to contractual obligations equivalent to those of this agreement.

We do not sell personal data. We do not share data with third parties for advertising purposes in the current phase of the platform.

6. International transfers

When the service relies on providers outside the European Economic Area, appropriate safeguards apply (standard contractual clauses or equivalent mechanisms).

7. Retention

Lead contact data: kept for up to 24 months after the last contact, unless deletion is requested.

Platform data: kept for the duration of the contract with the club and deleted or anonymized within the agreed timeframes after termination.

Security logs: retained for the legally applicable period.

8. Data subject rights

You may exercise the rights of access, rectification, erasure, restriction, portability and objection, as well as lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).

To exercise these rights, contact contact@proclub.dev. If the request concerns data processed by the club (athletes, members), it may be forwarded to the club concerned.

9. Security

We apply appropriate technical and organizational measures: encryption in transit, role-based access control verified at the database level, audit logs and data minimization.