Privacy policy

This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails.

1 · Who the controller is

LOALVIC SPORTS, S.L. (CIF tax ID B56345127), with registered office at Calle Marqués de Zenete 17, piso 4, puerta 8 · 46007 Valencia (España), which also operates under the brand TNGS Academy. For any question about your data: info@loalvicsports.es or +34 685 89 88 12.

Depending on who uses the app, we have one of these two roles:

• Controllers of the data of our own services (TNGS Academy: technical development training, individual support, high-performance programme and others) and of our staff.
• Processors when a club, or a coach who subscribes to the app for their team, manages its players and families in it. In that case the controller is the club or that coach: they decide what is done with the data and are the ones who handle your rights. We store the data and provide the service in accordance with the contract we have with them, and we do not use it for anything else. If you write to us, we will pass your request on to them.

2 · What data we process

• Account: name, email, telephone, position or role, password (stored in such a way that no one, not even we, can read it) and the date of the last login.
• Player: name, date of birth, club and team, shirt number, position, dominant foot, kit size, federation licence details, attendance at training sessions, squad call-ups, match data, physical assessments, routines, reports and, if uploaded, their photo.
• Family: name, email and telephone of the father, mother or legal guardian.
• Wellbeing and health (specially protected data): sleep, tiredness, discomfort or pain, mood, training load, growth measurements and physiotherapy appointments.
• Images: photos and videos of training sessions and matches for sports analysis.
• Payments: amounts and status of fees. Card or bank account details are processed by Stripe; the app does not store them.
• Staff of LOALVIC SPORTS, S.L.: the data in the employee record (identification, contract, payslips, qualifications and the clearance certificate from the Registro Central de Delincuentes Sexuales (Central Register of Sex Offenders) required by law to work with minors).
• Federation data: for the teams that request it, the app reads from the public website of the Federación de Fútbol de la Comunitat Valenciana (Valencian Football Federation) (its source) the fixtures, results, match reports, squad and the photo on the federation registration card. That photo is seen only by the player and their family.
• Technical data: the data needed for the app to work and be secure (logged-in session, access logs and, if you enable them, the subscription to mobile notifications).

3 · What we use it for and on what legal basis

• Handling a registration request and providing the service contracted (sports tracking, team and club management, communication with the family and notifications): pre-contractual measures and performance of the contract (Article 6(1)(b) GDPR).
• Federation data: the contract with the club or coach who requests the synchronisation and the legitimate interest in organising their team's matches.
• Wellbeing and health: only with the explicit consent requested in the app before starting to record them (Article 9(2)(a) GDPR).
• Images: with the image permission, which is specific and optional. Without it, no photos or videos of the player are uploaded for analysis, except the photo on their federation registration card, which only they and their family see. Nothing is ever published on social media or on the website without asking for a separate permission.
• Invoicing, accounting and staff: compliance with legal obligations and with the employment contract.
• Security of the app and of accounts: our legitimate interest in preventing unauthorised access.

The data marked as mandatory in each form is necessary to provide the service: without it we cannot register you. The health and image permissions are voluntary and do not prevent you from using the rest of the service.

We do not take automated decisions that affect you or carry out commercial profiling, we do not send advertising and we do not sell data.

4 · Minors

If the player is under 14, their data is provided by their father, mother or legal guardian, who gives the health and image permissions and exercises their rights on their behalf (Articles 7 and 12.6 of Organic Law 3/2018 (LOPDGDD)).

From the age of 14, the law states that those permissions are given by the player themselves. That is why, if they have their own account in the app, we ask them for those permissions (wellbeing data and photos or videos), and they can review, change or withdraw them whenever they wish. We also ask their family, who have the duty to look after them (Article 154 of the Spanish Civil Code). If either of them says no to photos and videos, the player is not individually filmed or photographed.

Adult players give their own permissions in the app.

If a minor player has their own account in the app, it is created by their family, who are responsible for its use.

5 · Who sees the data

• The family sees only their player's data, and only what the coaching staff publish.
• The coaching staff of LOALVIC SPORTS, S.L. see the players of the services they run. In a club, each person sees what corresponds to their position: the coach, their team; the club management, the club.
• We do not disclose data to third parties, except where required by law (for example, to the Spanish Tax Agency, Agencia Tributaria).

Providers that process data on our behalf

• Supabase: database and files, in Amazon Web Services data centres in Ireland (EU).
• Vercel (US company): serves the app; the functions that work with the data run in Dublin (EU), although requests may pass through its content delivery network in other countries.
• Resend (US): sending the app's emails.
• Google Cloud (Vertex AI): only if the coaching staff use voice dictation or create an exercise image with artificial intelligence. The audio or text of that moment is sent. The app does not store the audio.
• Stripe: collection of fees by card or direct debit. In addition, for fraud prevention and identity verification of each club's representative, Stripe processes that data as an independent controller, in accordance with its own privacy policy.
• IONOS: the company's email.
• Notification services: in the browser, those of Google, Apple or Mozilla (depending on your phone); in the App Store and Google Play app, Google Firebase Cloud Messaging (and Apple on iPhone). Only if you enable notifications; they receive your phone's notification code and the notification, in order to deliver it.

Data that may leave the European Union

Supabase, Vercel, Resend and Stripe are companies from, or headquartered in, the United States, and some data may be processed in that country (in particular, the emails sent by Resend). Audio, text or images sent to Google Vertex AI are first sent to its data centres in the European Union; only if that service is not available there is its global service used, which may process them in any country where Google has data centres. In all cases this is done with the safeguards of the GDPR: the European Commission's adequacy decision (EU-US Data Privacy Framework), for participating companies, or the standard contractual clauses approved by the Commission. You can ask us for a copy of those safeguards at info@loalvicsports.es.

6 · How long we keep it

For as long as the relationship lasts (the service, the contract with the club or the job). When it ends, we keep it blocked only for the periods set by law to deal with possible claims or inspections (generally 5 years, and up to 6 years for accounting records), after which it is deleted or anonymised. A club's data is returned or deleted as its contract provides. If you withdraw the health or image permission, we delete the data or images recorded under that permission, unless the law requires us to keep them.

7 · Your rights

You can request access to, rectification or erasure of your data, restriction of processing and portability, and you can object, by writing to info@loalvicsports.es with the subject "Data protection". We will reply within one month, which may be extended by a further two months if the request is complex (if so, we will tell you within the first month). If the data belongs to a club, we pass your request on to it and it will reply to you. You can withdraw the health and image permissions at any time, from the app or by email, without affecting what was done before or the rest of the service.

You can also delete your account yourself, from the app or the website: "My account" → "Delete my account" (how it works and what is erased).

If you believe we have not properly handled your rights, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) (aepd.es).

8 · Security

Data travels encrypted, files containing personal data (photos, videos, documents, reports) have no public links and each person can see only what corresponds to them, controlled in the database itself. The only public items are the club crests. If there were a security breach that could pose a risk, we will notify the Agencia Española de Protección de Datos within 72 hours and, if the risk to you is high, we will inform you without delay. If the data belongs to a club, we will inform the club so that it can do so.

9 · Cookies

The app stores in your browser only what is strictly necessary for it to work and your preferences. There is no advertising or analytics. We explain this in the cookie policy.

10 · Changes

If we change this policy significantly, we will announce it in the app. The date above shows the latest revision.