GYFFS BV · BE0801772603 · Guldensporenlei 25, 2960 Brecht, Belgium. Contact: info@gyffs.be · +32 498 46 78 13.
Privacy questions and requests are currently handled by Yannick. privacy@squadigo.be has been chosen, but receipt and reply have not yet been tested (A13). For now, use info@gyffs.be. No replacement has been confirmed yet.
Who processes your data?
We distinguish between your account service, team administration and history. For clubs and independent teams, privacy roles depend on who determines the purposes and means. GYFFS still needs to finalise these roles, legal bases and arrangements for each processing activity, including the existing pilot teams. An agreement with a viewer does not automatically cover all teammates’ data.
What data do we use?
- account data such as name, email address, a password stored in unreadable form, personal language preference and optional profile photo;
- team and club data, roles, season assignments, guardian relationships and contact details;
- attendance, selections, statistics and activities;
- optional data for external connections, such as date of birth and match sheet data;
- technical security and audit data, such as sessions and relevant error or access logs.
Why do we use this data?
To secure accounts, organise teams, plan activities, manage attendance and selections, show statistics, send invitations and enable optional connections. The club determines which data it needs for its activities.
Who do we share data with?
Only with authorised users within the club or team and necessary service providers. These may include AWS (hosting), Amazon SES (transactional email), Expo (mobile updates), GitHub (development) and — only when a club enables that connection — RBFA and wedstrijdbladen.be. WhatsApp sending is currently disabled; retained old configuration and copies require a separate inventory. Google and Apple receive data when their social sign-in is chosen. We do not sell personal data.
Retention periods and history
Sports values support reviewing your own seasons and comparing with teammates from that time, within access rights. There is no automatic five- or ten-year limit. Meaning and necessary context are preserved. Identifiability, necessity and legal basis are reviewed separately and at least annually; the technical name display does not prove anonymity.
- Individual attendance: up to two calendar years from the activity.
- Players and guests without accounts: name removal after two calendar years without actual participation in that team. Unknown dates require follow-up.
- Permanent account deletion: access ends immediately; linked players are labelled ‘Account deleted’. Technical processing of active account data is completed within seven days at the latest. Retained sports histories may still be identifiable.
- Inactivity: after 24 months of actual non-use, a verifiable warning is followed by a 30-day response period. Unknown legacy activity is not invented. Automatic execution requires explicit migration activation and working warning delivery.
- Temporary data files and links: up to 48 hours. Minimal handling evidence: up to two years after closure.
- Backups: intended rolling retention of up to 30 days. Actual infrastructure rotation and recovery still need to be demonstrated; seven days is not a promise that all backups have been erased.
- Technical console: logs for 14 days; runs and optional activity measurement for 30 days. Production measurement remains disabled without specific review and activation.
Your rights
You can request access, rectification, erasure, restriction, objection or data portability. Contact your club to do so; for data for which Squadigo itself is responsible, use the email address above. You can also lodge a complaint with the Belgian Data Protection Authority.
Security
Squadigo uses measures including encrypted connections, role-based access control, secure session cookies and limited access to personal data. However, no internet service can guarantee absolute security.
Young people and players without accounts
You can have your own account from age 13, with a separate declaration. That declaration does not override a known date of birth indicating an age under 13. You may ask a coach or guardian for help. A child without their own account can be managed by an authorised coach or guardian; the child’s date of birth does not determine the guardian’s age. Were you entered by a coach without an account? You can also ask a question or request access, rectification or erasure yourself, or through an authorised representative, at info@gyffs.be. We verify identity and authority proportionately; do not send a copy of an identity document.
Delete your account or request data
Privacy and data · Delete account is also accessible without an installed app. For ordinary deletion, you reconfirm with your password or a linked provider. The last administrator transfers each affected team or separately confirms team deletion for everyone. An inactive, unresponsive last administrator causes restricted access and follow-up, not automatic team deletion. A rights request when access is lost follows separate controlled verification and must not remain indefinitely blocked by the interface.
Access and export are handled manually in phase 1. A closed request retains minimal evidence, not a full copy of an identity document or export. A privacy notice is not universal consent to all processing.