Arivette

Privacy Policy

Last updated: 3 July 2026

This Privacy Policy explains how Arivette ("Arivette", "we", "us") collects, uses and protects personal data when you use our platform for managing and running sports clubs (the "Service"). We are committed to protecting your privacy and to handling personal data in line with the EU General Data Protection Regulation (GDPR) and applicable local law.

1. Who is responsible for your data

Arivette provides the Service to sports clubs. Each club acts as the data controller for the personal data of its members, and Arivette acts as a processor on the club's behalf. Where Arivette determines the purposes of processing (for example, operating the platform and its accounts), Arivette acts as controller. You can contact us at any time at admin@arivette.cat.

2. Information we collect

  • Account data: name, email address, password (stored only as a secure hash) and, optionally, phone number and profile photo.
  • Club data: the sporting and organisational information you or your club add, such as categories, teams, events, attendance, performance, surveys, media and messages.
  • Data about minors: where a club manages under-age athletes, limited data is processed under the responsibility of the club and the athlete's legal guardian.
  • Technical data: basic logs needed for security, auditing and to keep the Service running.

3. How we use your data

  • To provide and maintain the Service and your account.
  • To enable club communication (news, notifications, messages) and day-to-day management.
  • To keep the Service secure and to maintain the audit trail of sensitive actions.
  • To comply with our legal obligations.

4. Legal bases

We process personal data on the basis of the performance of a contract (providing the Service), our legitimate interests (securing and improving the Service), your consent (for example, image use), and compliance with legal obligations.

5. Sharing and processors

We do not sell personal data. We share data only with service providers that help us run the Service (such as hosting and transactional email), under appropriate data-processing agreements, and where required by law. Data belonging to one club is isolated from other clubs.

6. Data retention

We keep personal data for as long as your account or your club's account is active, and thereafter only as long as needed for legal, accounting or security purposes. Audit records are kept on an append-only basis according to the club's retention policy.

7. Children and minors

The Service is used by clubs that may manage under-age athletes. Sensitive actions relating to a minor are approved by the minor's legal guardian, and data about minors is subject to additional access restrictions and auditing.

8. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict and object to the processing of your personal data, and to data portability. To exercise these rights, contact your club or us at admin@arivette.cat. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We use encryption in transit, access controls based on roles and club isolation, and auditing of sensitive actions. No system is completely secure, but we take reasonable measures to protect your data.

10. Cookies and local storage

We use only the storage strictly necessary to keep you signed in and to remember basic preferences (such as language and view mode). We do not use advertising or third-party tracking cookies.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated date.

12. Contact

For any question about this policy or your personal data, contact us at admin@arivette.cat.