1. Controller

The controller responsible for data processing on this platform is:

playvolley.net
Berlin, Germany
Email: privacy@playvolley.net

playvolley.net is operated by an individual (Einzelunternehmer) and is not yet registered as a legal entity. The operator is personally responsible for all data processing described in this policy.

2. What data we collect and why

2.1 Account registration

When you create an account we collect your name, email address, and a password. This data is necessary to create and secure your account and to communicate with you about the service.

2.2 Profile information

You may provide additional profile information including your city or district, postal code, date of birth, volleyball position, playing level, and years of experience. This information helps other users and teams find suitable players, partners, and teammates. You choose what optional profile information to provide.

2.3 Team and club memberships

When you join a team, apply to a tryout, or associate with a club, we store those memberships and application records. This is necessary for the core functionality of the platform: connecting players with teams and organising volleyball activities.

2.4 Messages

Messages you send to other users through the platform are stored so that both parties can read and refer back to their conversations. Message content is only visible to the sender and recipient(s).

2.5 Events and partner search

If you host an event or use the partner-finding feature, we store the details you provide (such as event date, location, and description) so that other users can discover and respond to your listings.

2.6 Authentication cookies

We use session cookies set by our authentication provider (Supabase Auth) to keep you signed in. These cookies are strictly necessary for the functioning of the service and do not track you for advertising or analytics purposes. No third-party analytics or tracking tools are currently in use on the platform.

3. Legal basis for processing (GDPR Art. 6)

We process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): Processing your account data, profile information, team memberships, messages, and event listings is necessary to provide the service you signed up for, namely connecting volleyball players with teams, events, and partners in Berlin.
• Legitimate interest (Art. 6(1)(f) GDPR): We use strictly necessary authentication cookies to maintain your session. Our legitimate interest is providing a secure, functional service. These cookies do not impact your privacy beyond what is necessary for the service to work.
• Legal obligation (Art. 6(1)(c) GDPR): In certain cases we may be required to retain or disclose data to comply with legal obligations under German or EU law.

4. Data processor: Supabase

We use Supabase, Inc. (San Francisco, USA) as our backend service provider for authentication and database hosting. Supabase acts as a data processor on our behalf under a Data Processing Agreement (DPA). Supabase processes your data in accordance with their Privacy Policy and DPA.

Because Supabase is based in the United States, your data may be transferred outside the European Economic Area (EEA). This transfer is safeguarded by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs) as provided by Supabase. You can request a copy of the applicable safeguards by contacting us at the email address above.

AI-assisted search: Anthropic

For the AI-assisted search ("Ask") we use Anthropic PBC as a data processor. Only the search text you enter is sent to Anthropic to convert it into structured search filters. No other personal data (such as name, email or location) is transferred. Results are AI-assisted and may be incomplete or imperfect.

5. Data retention

We retain your personal data for as long as your account is active and you continue to use the service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain records (for example, for tax or legal compliance purposes).

Messages you sent to other users may be retained in the recipient's conversation history even after your account is deleted, but your name and profile information will be removed or replaced with a placeholder.

6. Your rights under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access (Art. 15): You may request confirmation of whether we process your personal data and, if so, receive a copy of that data.
• Right to rectification (Art. 16): You may request correction of inaccurate personal data. You can also update most of your information directly through your profile settings.
• Right to erasure (Art. 17): You may request deletion of your personal data. You can also delete your account at any time through the platform, which will trigger deletion of your data as described in Section 5.
• Right to restriction of processing (Art. 18): You may request that we restrict processing of your data in certain circumstances, for example while we verify the accuracy of your data following a rectification request.
• Right to data portability (Art. 20): You may request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format (such as JSON or CSV).
• Right to object (Art. 21): You may object to processing of your data that is based on our legitimate interests. We will stop processing unless we demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact us at privacy@playvolley.net. We will respond to your request within 30 days.

7. Right to lodge a complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219
10969 Berlin
Germany
Phone: +49 30 13889-0
Website: www.datenschutz-berlin.de

8. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify registered users by email or through a notice on the platform. The Last updated date at the top of this page indicates when the policy was last revised.