Data processingterms.
This document is the processing agreement required by Article 28 GDPR. It applies to player data entered into PlayerTrackr by a club or coach.
1. Roles
The club or coach using the service is the controller. PlayerTrackr is the processor, under Article 28 GDPR.
2. Subject matter
Hosting and making available the individual player stats entered by the controller, for as long as they use the service.
3. Data and data subjects
Player names and identifiers, game stats, minutes, multi-season history. The data subjects are the team's players, mostly minors. No health data is processed.
4. Instructions
PlayerTrackr processes this data only on the controller's documented instructions; use of the service constitutes those instructions. We make no independent use of it.
5. Confidentiality and security
Access limited to authorised, confidentiality-bound personnel. Encryption in transit, authenticated access, backups.
6. Sub-processors
The controller authorises Supabase for data hosting and OVH SAS for website hosting. Any addition is notified, and the controller may object.
7. Assistance
PlayerTrackr assists the controller in responding to data subject requests and notifies them without undue delay of any breach affecting their data.
8. End of processing
On termination, data is returned or deleted at the controller's choice. Deletion on request at any time.
9. Documentation
PlayerTrackr makes available the information needed to demonstrate compliance with these obligations.