Privacy Policy

1. Who we are and our role

The platform is operated by ClubTide ([to be completed], registration number [to be completed], tax ID [to be completed]), contact: [email protected].

• Controller: for club account and staff user data (name, email, sign-in data), subscription billing data and data collected on this website.
• Processor: for member, family and guardian data entered by clubs. The club is the controller of that data and we process it only on the club's instructions. If you are a member or a parent, please send data requests to your club.

2. Data we process

• Account data: name, email address, password (stored only as a hash), language preference, two-factor settings, and your Google account if you choose Google sign-in.
• Subscription data: chosen plan, payment history, Stripe identifiers, and the card brand and last four digits for display only. Full card details are processed only by Stripe.
• Member data (on behalf of clubs): identification and contact details, family and guardian details, groups, attendance, ranks, invoices and payments, consents and, if the club collects it, health information relevant to training.
• Technical data: IP address, browser type, security and audit logs, strictly necessary cookies.

3. Purposes and legal bases

• Providing the platform and your account (performance of a contract).
• Subscription billing and accounting obligations (contract and legal obligation).
• Platform security, fraud prevention and the audit log (legitimate interests).
• Messages about your account, security and service changes (contract and legitimate interests).
• Member data is processed on the club's behalf, on the legal basis determined by the club.

4. Sub-processors

We use a small number of providers to deliver the service:

• Hetzner Online GmbH (Germany): server and database hosting in the European Union.
• Stripe: payment processing for subscriptions and for members' payments to clubs through the clubs' Stripe accounts.
• Our email delivery provider: sending emails from the platform (notifications, invoices, password resets).
• Google: only if you choose to sign in with your Google account.

5. International transfers

Data is hosted in the European Union. Some providers, such as Stripe or Google, may process data outside the European Economic Area; such transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

6. How long we keep data

• Account data: while the account is active and for a reasonable period after closure.
• Billing data: for the period required by accounting and tax law.
• Member data: according to the club's settings and instructions; the platform provides retention, anonymization and export tools. When our contract with a club ends, its data is deleted or anonymized within a reasonable period.
• Security and audit logs: as long as needed for security and legal compliance.

7. Security

We apply appropriate technical and organizational measures: encrypted connections (HTTPS), separation of data between clubs, role-based access, restricted health data, two-factor sign-in, an audit log and backups.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing and to withdraw consent where processing relies on it. For your account data, email us at [email protected]. For member data, please contact your club; we will help it respond.

You may also lodge a complaint with a data protection authority, such as Romania's ANSPDCP (www.dataprotection.ro) or the authority where you live.

9. Cookies

We only use cookies that are strictly necessary for the platform to work. See our Cookie Policy for details: https://www.clubtide.app/en/cookies.

10. Changes

We may update this policy. The date of the last update is shown at the top of this page, and material changes will be announced in the app or by email.