Privacy Policy

The controller of your data is Play 360.

For any privacy question or to exercise your rights, get in touch.

Depending on how you use the service, we may process:

• Registration and account data: athlete name, date of birth, gender, age group, club, guardian name and contacts (email, phone/WhatsApp);
• Payment data: processed securely by a payment provider; we do not store your full card details;
• Images and videos of games and training, including clips and the athlete public page;
• Usage and device data: pages visited, cookie identifiers and analytics data (only with your consent);
• Communications: messages you send us and contact requests.

We process your data for the following purposes, on the following legal bases (Art. 6 GDPR):

• Provide and manage the service (registrations, video analysis, clips, athlete page) — performance of a contract;
• Process payments and meet tax obligations — performance of a contract and legal obligation;
• Publish images, clips and the athlete public page — consent (see section 5);
• Measure and improve the site through analytics — consent;
• Respond to requests and communicate with you — legitimate interest or consent;
• Ensure security and prevent abuse — legitimate interest.

The service often involves data about underage athletes. In Portugal, processing a minor’s data for information society services is lawful from age 13; below that age, it depends on consent from the holders of parental responsibility.

In practice, registering an underage athlete and the related consents (including image) must be given by a holder of parental responsibility. We make reasonable efforts to verify that consent and process only the data we need.

If you become aware that we have collected a minor’s data without proper consent, contact us and we will delete it.

A person’s image — and especially a child’s face — is personal data subject to enhanced protection. Capturing images in a sporting context may be lawful, but publishing an identifiable minor (clips, public page) requires the written, explicit consent of the holders of parental responsibility.

Consent to capture is not consent to publish: these are separate authorizations. You may withdraw consent at any time, after which we stop publishing and remove the related content, without affecting the lawfulness of prior processing.

We do not sell your data. We share it only with providers that help us run the service (subprocessors), under contract and instructions:

• Payment processors;
• Hosting and database providers;
• Analytics tools, only with your consent.

We may also disclose data where required by law or a competent authority.

Some of these providers may process data outside the European Economic Area. In those cases, we ensure appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, so your data stays protected.

We keep data only as long as necessary for the purposes it was collected for, or for periods required by law (e.g. invoicing). When no longer needed, we delete or anonymize it. You can request deletion at any time (see section 9).

Under the GDPR, you have the right to access, rectify and erase your data, to restrict or object to its processing, to request data portability, and to withdraw consent at any time.

To exercise these rights, get in touch. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), at www.cnpd.pt.

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss or disclosure. No system is entirely foolproof, however, so we cannot guarantee absolute security.

We use cookies and similar technologies. Non-essential cookies (such as analytics) are only activated with your consent. Learn more in our Cookie Policy.

We may update this Policy. The last-updated date is shown at the top.

For any question, get in touch.