Privacy Policy
Last updated: 28 febbraio 2026
1. Data Controller
The data controller for personal data is PadelMatch, reachable at the following email address info@padelmatch.it.
2. Data Collected
PadelMatch collects the following categories of personal data:
- Registration data: first name, last name, email address, phone number
- Profile data: skill level, sporting preferences
- Usage data: matches created, participations, match history
- Technical data: IP address, browser type, device used
- Geolocation data: approximate location (only upon explicit consent, to search for nearby centres)
- Aggregate browsing data: pages visited, referrer, country of origin — anonymous and aggregate data, without personal identification
3. Purposes and Legal Basis
Personal data is processed for the following purposes:
- Service delivery (legal basis: performance of contract) — account management, creation and participation in matches, service-related communications
- Security (legal basis: legitimate interest) — prevention of fraud and abuse, platform protection
- WhatsApp communications (legal basis: consent) — match notifications, invitations and updates via WhatsApp
- Statistical analysis (legal basis: legitimate interest) — aggregate and anonymous analysis of platform usage to improve the Service
4. Recipients of Data
Personal data may be shared with:
- Amazon Web Services (AWS) — hosting and cloud infrastructure (servers in the EU, region eu-west-1)
- AWS Cognito — authentication service
- Google Maps API — address autocomplete for sports centres
- Sports centre managers — managers may view data of players registered for matches at their centre
- Plausible Analytics — GDPR-compliant web analytics service with servers in the EU. It does not collect personal data, does not use cookies, and does not track users across sites
We do not sell or transfer personal data to third parties for marketing purposes.
5. International Transfers
Data is stored on AWS servers in the EU region (Ireland, eu-west-1). Certain sub-processors (e.g. Google Maps API) may process data outside the European Economic Area, on the basis of standard contractual clauses approved by the European Commission or adequacy decisions.
6. Retention Period
Personal data is retained for the time necessary for the stated purposes:
- Account data: until the account is deleted by the user
- Match history: until the account is deleted
- Technical data (logs): maximum 90 days
7. Data Subject Rights
In accordance with the GDPR, you have the right to:
- Access — obtain a copy of your personal data
- Rectification — correct inaccurate or incomplete data
- Erasure — request the deletion of your data
- Restriction — restrict processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdrawal of consent — withdraw consent at any time
To exercise these rights, contact us at info@padelmatch.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
8. Cookies
PadelMatch uses exclusively technical cookies strictly necessary for the operation of the Service. These cookies do not require prior consent under applicable law.
| Cookie | Purpose | Duration |
|---|---|---|
next-auth.session-token | Authentication session | 30 days |
next-auth.csrf-token | CSRF protection | Session |
next-auth.callback-url | Redirect after authentication | Session |
For usage statistics we rely on Plausible Analytics, a service that does not use cookies and collects only aggregate and anonymous data. No prior consent is therefore required for statistical analysis.
9. Changes to this Privacy Policy
We reserve the right to update this policy. In the event of significant changes, users will be notified via the platform. The date of the last update is indicated at the top of this page.