Privacy Policy

1. Data controller

The controller of personal data is:
Coianiz Cristian
Via Salgaroni 18, Montecchio Precalcino (VI)
Tax code: CNZCST76T22Z133X
Email: info@gkseason.it

2. Data collected

GKSeason collects the following categories of personal data:

• Registration data: first name, last name, email address, password (in encrypted form).
• Profile data: role (coach, staff, goalkeeper), photo, city, postcode, province, approximate geographic coordinates, professional bio, experience and certificates.
• Service usage data: trainings, matches, goalkeeper evaluations, goals, statistics, drills.
• Browsing data: IP address, browser type, pages visited, session duration (via PostHog Analytics).
• Contact data: messages sent through the coach contact form or the Suggestions section (name, email, phone, message).

3. Purposes and legal bases of processing

4. Data retention

Data is kept only for the time strictly necessary for the purposes for which it was collected:

• Account data: for the entire duration of the contractual relationship and for 10 years after termination (tax obligations).
• Analytics data: 12 months from collection.
• Contact messages and suggestions: 2 years from the last exchange.
• Newsletter subscription: until consent is withdrawn (unsubscribe).

5. Data recipients

Personal data may be shared with third-party providers acting as data processors:

• Supabase Inc. (USA) — database and authentication infrastructure, with adequate safeguards under art. 46 GDPR.
• Vercel Inc. (USA) — application hosting and deployment.
• PostHog Inc. (EU) — analytics, with servers in Europe.
• Stripe Inc. (USA) — payment processing, subject to PCI-DSS certification.
• Resend Inc. (USA) — sending transactional and service emails (e.g. notifications, newsletter).
• register.it (Italy) — management of the domain email mailboxes.

Data is not sold or transferred to third parties for marketing purposes.

6. International transfers

Some of the providers listed above are based in the United States. Transfers take place on the basis of the Standard Contractual Clauses (SCC) approved by the European Commission, or under the EU-US Data Privacy Framework where applicable.

7. Rights of the data subject

Under articles 15-22 GDPR, you have the right to:

• Access: obtain confirmation of processing and a copy of the data.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of data when no longer necessary.
• Restriction: request restriction of processing in certain cases.
• Portability: receive the data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to info@gkseason.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Security

We adopt appropriate technical and organisational measures to protect personal data from unauthorised access, loss or alteration: encryption in transit (HTTPS/TLS), passwords hashed with secure algorithms, data access limited to authorised staff, regular backups.

9. Cookies

For detailed information on the cookies used by the site, see our Cookie Policy.

10. Data of minors

The platform is used by coaches and sports clubs who enter the data of their goalkeepers, who are often minors. For this data the coach or club acts as the data controller and GKSeason acts as the data processor on their behalf, under an agreement pursuant to art. 28 GDPR. The coach or club guarantees that, where necessary, they have obtained the consent of the person with parental responsibility (art. 8 GDPR; in Italy the minimum age for direct consent to information-society services is 14). Parents or guardians may exercise the rights under artt. 15-22 GDPR by contacting the coach or club, or by writing to info@gkseason.it.