Privacy Policy

SportsFINDR is an online marketplace on which athletes can independently find, compare and book sports instructors. SportsFINDR is the data controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data via the platform.

SportsFINDR — Dutch Chamber of Commerce (KvK) 42118211 — info@sports-findr.com

Account data

• Name, e-mail address, telephone number, password (encrypted), profile photo (optional).

Booking data

• Booked activities, sport, location, date and time, level/experience, booking history.

Payment data

• Transaction data and payment status. Full payment details (such as card numbers) are processed by our payment service provider and are not stored by SportsFINDR.

Instructor data (additional)

• Business details, Chamber of Commerce number, VAT number, bank account number (IBAN), certifications, diplomas, permits, proof of insurance and — in the context of verification — a copy of an identity document.

Communication and reviews

• Messages via the platform, contact with our customer service and posted reviews.

Technical data

• IP address, device and browser data, log files and usage data of the platform. See also our Cookie Policy.

Health data

We do not actively request health data. If you share health information yourself in communication with an instructor (for example about an injury), we process it exclusively to facilitate the communication. Where possible, share health information directly with your instructor.

Performance of the agreement (Art. 6(1)(b) GDPR)

• Creating and managing your account;
• facilitating bookings between athletes and instructors;
• facilitating payments and payouts;
• communication via the platform and customer service.

Legal obligation (Art. 6(1)(c) GDPR)

• Tax and administrative retention obligations;
• obligations arising from laws and regulations for platforms, including reporting obligations such as DAC7 for instructor income.

Legitimate interest (Art. 6(1)(f) GDPR)

• Securing the platform and preventing fraud and misuse;
• improving the platform and our services;
• displaying and managing reviews;
• verification of instructor profiles.

Consent (Art. 6(1)(a) GDPR)

• Newsletters and marketing communications;
• non-essential cookies (see the Cookie Policy).

Consent given can be withdrawn at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

We never sell your personal data. We share data exclusively to the extent necessary with:

• Instructors and athletes respectively: in the event of a booking, the other party receives the data necessary for the performance of the activity (such as name, contact details and booking details);
• Sharetribe: the technical infrastructure on which our marketplace platform runs;
• Payment service provider: for processing payments and payouts;
• Hosting, e-mail and analytics service providers;
• Government authorities: where we are legally obliged to do so (such as the Dutch Tax Administration in the context of DAC7).

We conclude data processing agreements with processors in accordance with the GDPR.

If service providers process data outside the European Economic Area, we ensure appropriate safeguards, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the standard contractual clauses of the European Commission.

• Account data: as long as your account is active, and up to 12 months after deletion of your account, unless longer retention is legally required.
• Booking and payment data: 7 years, in accordance with the Dutch tax retention obligation.
• Copy of identity document (instructor verification): exclusively for as long as necessary for verification, after which it is deleted or anonymised.
• Communication and customer service files: 2 years after resolution.
• Reviews: as long as the associated instructor profile is active, unless removed earlier.

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted connections (TLS), encrypted storage of passwords, need-based access restrictions and careful selection of processors.

Under the GDPR, you have the following rights:

• Right of access to the personal data we process about you;
• right to rectification of inaccurate or incomplete data;
• right to erasure ('right to be forgotten');
• right to restriction of processing;
• right to data portability;
• right to object to processing based on legitimate interest and to direct marketing;
• right to withdraw consent given.

You can exercise these rights by contacting us at info@sports-findr.com. We will respond within one month. To prevent misuse, we may ask you to prove your identity.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl).

Persons under the age of 18 may only use SportsFINDR with the consent of a parent or legal representative. We do not knowingly collect data from minors without such consent. If you suspect that this has nevertheless happened, please contact us so that we can delete the data.

SportsFINDR does not use automated decision-making with legal effects or similarly significant effects for users.

We may amend this privacy policy from time to time. The most recent version is always available on the platform. In the event of material changes, we will inform users with an account by e-mail or via the platform.

Questions about privacy? Contact us at info@sports-findr.com.