doHockey Privacy Statement

1. Who is responsible?

Data Controller: Waedo (doHockey)
Contact is strictly via the contact form (see chapter 10).

2. What data does doHockey process?

We process personal data when you:

a) Create an account or use the service

• Account and contact data: name, email address (and possibly role/club linkage, such as coach/manager).
• User settings: preferences and configurations within the app.

b) Visit the website or application

• Technical data: IP address, device and browser information, error messages/logs (for security and diagnostics).
• Usage data (functional): which pages/features are used to improve stability and user-friendliness (preferably aggregated).

c) Contact us

• Data you provide yourself via the contact form, such as name, email address, and the content of your question or request.

We do not actively request sensitive personal data (such as medical data). If you still share such information in a message, we only use it to handle your question and delete it wherever possible.

3. Purposes and legal grounds

We process personal data solely for the functioning, security, and improvement of doHockey. doHockey is non-commercial, and we do not use personal data for marketing purposes.

1. Service provision / execution of agreementcreating an account, logging in, storing data, and providing functionality.Legal ground: execution of agreement.
2. Support and communicationresponding to questions, support requests, and service messages.Legal ground: execution of agreement and/or legitimate interest (user support).
3. Reliability and securitypreventing and investigating abuse, malfunctions, and security incidents.Legal ground: legitimate interest (security) and where relevant legal obligation.
4. Improvement of doHockeyanalysis of usage (preferably aggregated) and processing feedback to improve features.Legal ground: legitimate interest (product improvement).

4. No provision to third parties

We do not provide personal data to third parties. This means among other things:

• no selling or renting of data;
• no exchange with sponsors, associations, or other organizations;
• no marketing parties, ad networks, or data brokers;
• no use of personal data for commercial or marketing purposes.

For doHockey to work technically, we use infrastructure and hosting within Europe. These parties process data exclusively on our behalf and may not use that data for their own purposes:

• Database: Supabase on a dedicated server in Germany (EU).
• Hosting/Delivery: Cloudflare within Europe.

All data remains within Europe. We do not transfer personal data to countries outside the EEA.

5. Retention periods

We do not retain personal data longer than necessary for the purposes in this statement, unless we are required to keep data longer to comply with legal obligations.

As a guideline, we use:

• Account data (such as name/email): as long as your account is active. Upon termination, we delete or anonymize it within 90 days, unless longer retention is required for legal obligations or disputes.
• Messages via contact form / support requests: up to 24 months after completion.
• Technical logs (security/diagnostics): generally 180 days, unless longer is needed for incident investigation.
• Aggregated statistics (non-traceable): can be retained longer as they no longer qualify as personal data.

You can ask us to delete your data. If deletion is not (yet) possible due to legal obligations or necessary security purposes, we limit its use as much as possible.

6. Security

We take appropriate technical and organizational measures to secure your data against loss, unauthorized use, unauthorized access, or alteration.

Encrypted storage of sensitive information

To protect sensitive information, we store specific data encrypted:

• Evaluations: evaluation data given by coaches to players is stored fully encrypted.
• Team data: team names and official KNHB numbers are stored encrypted.
• Player names: when manually managed, names are also stored encrypted.

What does this mean for you?

This encryption happens in the background. As an authorized user of your club, you have access via the secure environment. To unauthorized parties and in the event of a potential data breach, this data remains fundamentally unreadable.

Other data

For login and linking between clubs/teams, user profiles (such as name and email address) and coach data are required unencrypted. These are protected with strict access controls.

7. Your rights

You have the right to:

• obtain insight into your personal data;
• have data corrected;
• have data deleted (where possible);
• have processing restricted;
• object to processing based on legitimate interest;
• transfer data (data portability), where applicable.

In addition, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies and similar techniques

doHockey does not use cookies for tracking, marketing, or advertising purposes.

We may use functional cookies or similar techniques that are necessary for the site/app to work effectively (e.g., for sessions/login or preferences). These are not used to track you across other websites.

9. Nature of the service and limitation of liability

doHockey is an experimental and non-commercial application developed as a project with the utilization of AI. The use of doHockey is entirely at your own risk.

Although we do our best to carefully develop and secure doHockey, no rights can be derived from the operation, results, availability, or the accuracy and completeness of data (displayed or stored by the application).

All feedback and input are appreciated. At the same time, no structural support, service levels, or guarantees can be offered as you might expect from commercial software providers.

10. Contact

For questions about this privacy statement or to exercise your rights, you can contact us via the contact form within doHockey (or on the doHockey website).

11. Changes to this privacy statement

This privacy statement may be amended without prior notice in the event of changes in doHockey, our services, or relevant laws and regulations. We advise you to consult this statement regularly. The most current version is always available on this page.