Privacy policy
How the personal data of club administrators, club contacts, players added by their club and website visitors is handled, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection law. Last updated: 2026-10.
Who is responsible for your data
It depends on who you are. If you are a player at a club, your club is the data controller: it added you and decides what your data is used for; PRODUCCIONES LO NUNCA VISTO, S.L.U. acts as processor on the club's behalf, under the data processing agreement the club accepted when it signed up (Annex I of the Terms of service), and only processes your data to provide the service following the club's instructions. If you are a club administrator or contact, a website visitor, or you contact us for support, the controller is PRODUCCIONES LO NUNCA VISTO, S.L.U., tax ID B84242858, Calle Cercedilla 7, Local 2, 28400 Collado Villalba (Madrid), Spain; data protection email: info@lonuncavisto.biz. We have not appointed a Data Protection Officer, as our activity does not require one; that email address handles any query about your data.
What data we process and where it comes from
For a player: name, email and, if the club provides it, phone number; this data comes from your club, not from you (Article 14 GDPR), and we tell you so in the invitation email. After that you generate yourself: registrations, availability, match results, reschedule requests, ranking position and, if you opt in, permission to share your phone with your opponent. For an administrator or contact: name, email, club phone number and the billing data required to invoice the club (legal name, tax ID, address, billing email). Technical and security data: IP address and date on sign-in attempts and on the record of relevant actions; we do not store browser or device details. Emails sent by the platform are logged (recipient, subject, date, delivery) so they can be retried. Payment data (card or account details) never reaches our servers: it is collected and held by Stripe; we only store customer and subscription identifiers and the payment status. We do not process special categories of data or location data, and we make no automated decisions with legal effects: match scheduling organises the calendar, it does not evaluate people.
Purpose of processing
To run the club's league (registrations, groups, match scheduling, results, standings and rankings) and email players about what affects them; if you opt in on your profile, to give your opponent in each match a WhatsApp link with your phone number (off by default, withdrawable at any time); to sign up, verify, invoice and support clubs; to keep the service secure; and to comply with legal obligations. We do not use your data for advertising, we do not build profiles, and we never sell or share it with third parties.
Legal basis
For players, the relationship with your club (performance of that relationship, or the club's legitimate interest in organising its sporting activity); sharing your phone number over WhatsApp relies solely on your consent, which you can withdraw without affecting the rest. For clubs and administrators, performance of the service contract and compliance with billing obligations. For security and the action log, our legitimate interest in protecting the service. If you are under 14, your club may only add you with the authorisation of whoever holds parental responsibility over you.
Who has access to your data
Your club: its administrators see the data of their players; your opponents see your name and, only if you authorised it, a WhatsApp link, never the number on screen. PRODUCCIONES LO NUNCA VISTO, S.L.U., as processor or controller depending on the case, and its authorised staff; the platform operator may access a club administrator's account for support, always logged, visible to the club and expiring after 60 minutes. Providers that process data on our behalf: Stripe Payments Europe, Ltd. (Ireland) and its parent Stripe, Inc. (United States), only for the club's billing data; an SMTP email provider once one is contracted. The platform's hosting is run directly by PRODUCCIONES LO NUNCA VISTO, S.L.U., with no additional third party involved. Also, public authorities where required by law.
Transfers outside the European Economic Area
Our servers are located in the European Union. The only international transfer is the club's billing data to Stripe, Inc. (United States), covered by the EU-US data protection adequacy framework and, in addition, standard contractual clauses. If a club is based outside the EEA, its administrators access the platform from their own country, but the data remains hosted and processed in the EU.
Retention period
A player's data is kept while they remain a member of a club on the platform; if their club removes them, or they request it from their profile and the club acts on it (or, if it does not, after 30 days), their identifying data is irreversibly anonymised and their historical sporting results are kept without being linkable to them. A club's data is kept while it is active; once closed, it is kept for 90 days in case of reactivation and then deleted or anonymised; billing data is kept in Stripe for 6 years under commercial and tax obligations. Sign-in attempts are deleted after 24 hours; the sent-email log is anonymised after 12 months; the log of relevant actions is anonymised after 3 years. Backups, taken daily with restricted access, are kept for 30 days: a deleted item may remain in them for up to that long.
Your rights
You have the right to access your data, have it corrected, have it erased, restrict or object to its processing, obtain portability, and withdraw any consent you gave, without retroactive effect. From "My profile" you can correct your data, turn phone sharing on or off, download your data and request deletion of your account; a deletion request reaches your club and, if it is not acted on within 30 days, we carry it out ourselves. In writing, you can contact info@lonuncavisto.biz stating which right you are exercising; we respond within one month at most, extendable by two further months in complex cases. If you believe we have not properly handled your rights, you may complain to the Spanish Data Protection Agency (www.aepd.es) or to your own country's authority if you live elsewhere in the EEA.
How we protect your data
Encrypted connections, passwords stored with strong hashing, cross-club isolation verified by automated tests, restricted server access, a log of sensitive actions, daily backups with restricted access, and regular updates. If a security breach affecting your data were to occur, we would notify your club without undue delay, and you directly when the law requires it.
Data processors
See "Who has access to your data" above: Stripe for billing and, in the future, whichever email provider is contracted. Hosting is run directly by the operator, with no additional external provider.
Changes to this policy
Any change will be published here with its date. If a change affects how we handle your data, we will show it to you in the application the next time you sign in.