Privacy policy

Controller: Polina Iegorova · Tax ID ESY1895507E · Registered address Carrer des Frares 28, 07701 Maó, Menorca, Spain · Email hola@rematch.es.

This policy explains what data we collect when you use the website, create an account or come and train, what we use it for, and what you can do about it.

Account data: name, email address, password (encrypted) and, if you upload one, your profile photo.

Activity data: training and matches booked, attendance, cancellations, credits bought and used.

Cash payment data: if you choose to pay at the pitch, we keep the amount, the bundle you chose, who took the money and when. It is the club's record of its takings and also your proof that you paid.

Your member code: a permanent code of your own that identifies your account when you show it at the pitch, both to get into a session and to pay cash. No other member can read it, and neither can the staff: it is only resolved at the moment somebody scans it. You can replace it whenever you like from your profile, and the old one stops working immediately.

If you ever lose the right to book without paying in advance, we keep the date, the reason and who made the decision, so we can explain it to you and so it can be reviewed.

Ratings and notes from whoever runs the session: a score and comments on how you are getting on, if you take part in the tracking.

Images and video: photos and footage taken during training and matches.

Technical data: IP address, device and browser type, and pages visited.

If you voluntarily tell us about an injury or a physical condition, we treat it as sensitive information. Only the person running the session you come to sees it — the coach, or the host at a friendly match — and only to adapt the session and to know what to do if something happens. You are not obliged to tell us.

Managing your account, your bookings and your credits — legal basis: performance of the contract.

Taking payment and issuing invoices — legal basis: performance of the contract and legal obligation.

Telling you about changes to a session you have booked — legal basis: performance of the contract.

Sending you news and offers by email — legal basis: your consent. You can unsubscribe from any email.

Keeping the website working and secure — legal basis: legitimate interest.

Deciding who may hold a place without paying for it in advance, and withdrawing that from anyone who confirms and does not turn up or arrives without the money — legal basis: our legitimate interest in booked places being used and in being paid what was agreed.

Publishing photos and video for promotional purposes — legal basis: your consent, as explained below.

We film and photograph training and matches and use that material to promote REMATCH on our website, social media, advertising and other channels of our own. Your image is personal data and its promotional use is based on your consent, which you give by accepting the terms when you create your account.

You can withdraw that consent whenever you like, without having to explain yourself: tell us before a session and we will take it into account when filming and editing, or write to hola@rematch.es to have a specific image taken down.

Withdrawing consent does not affect the lawfulness of previous use, nor material already published and shared before you told us, which in some cases may be technically impossible to retrieve.

Separately from that, at the end of some sessions we take a team photo. We show that photo to the people who played that session, who can save it and share it on their own account, and it disappears from the app 24 hours later. If you would rather not be in it, say so to whoever is taking it.

We will never use your image to sell it to third parties or pass it to other brands without asking you separately.

Other people taking part may also film on their own account. That content is their responsibility, not ours, although the same rules of conduct apply during the session.

We work with providers who process data on our behalf: payment gateway Stripe Payments Europe, Ltd. (Ireland); database, authentication and image storage Supabase, Inc. (United States); web hosting Vercel, Inc. (United States); email Hostinger, UAB (Lithuania); and notification email delivery Resend (United States).

Bookings are handled on our own platform. No third party is involved in that process.

Other people in your city with a REMATCH account can see your name and profile photo in three places: the list of who is coming to a session, your city table — which also shows how much your rating has gone up, your MVPs and how many sessions you have done — and the team photo of sessions you come to. They never see your email, what you have paid or the score you hold.

There is one exception, and it is deliberate: whoever runs a session you have booked — the coach, or the host at a friendly match — does see your phone number, your emergency contact and whatever you wrote in your health notes, and only for the people signed up to that session of theirs. It is there so somebody can act on the pitch: knowing you are asthmatic is no use if there is no way to reach anyone. If you would rather not give it, leaving the phone field empty does not stop you booking.

We use Vercel Web Analytics, from Vercel, Inc., to see how many visits each page gets. It sets no cookies, builds no profile of you and does not follow you across other sites. Addresses that carry a code inside them — your member code, or a pass — are expressly excluded and are never sent.

We use no other analytics, and no third-party advertising or tracking tools.

Each has signed the corresponding data processing agreement and may only use the data to provide the service to us.

We may also disclose data where a law requires us to.

Some providers may be outside the European Economic Area. In that case we make sure there is an adequacy decision or standard contractual clauses approved by the European Commission.

Account data: for as long as your account is open and 5 years afterwards, the general limitation period for personal actions under article 1964 of the Spanish Civil Code.

Billing: 6 years, the period for keeping accounting records required by article 30 of the Spanish Commercial Code.

Promotional images and video: for as long as the material is still in use or until you withdraw your consent.

A session's team photo: 24 hours. After that it is deleted, though anyone who saved it to their phone keeps their copy.

Marketing emails: until you unsubscribe.

You can ask us to give you access to your data, correct it, delete it, restrict its processing, object to it and request its portability. You can also withdraw your consent at any time.

Write to hola@rematch.es saying what you want. We will reply within one month at the latest.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

We use technical cookies that are necessary for the website to work and to keep you signed in.

If we use analytics or advertising cookies, we will ask your permission with a notice before installing them, and you can change your mind whenever you like.

If we change something important, we will tell you by email or with a notice on the website. The version in force is always the one published here, with its update date.