Privacy policy

Who is responsible

Asociación Cultural de Futbolistas Veteranos de Ourense, C.I.F. G32242414, Rúa do Orcellón, 29, sótano, 32004 Ourense. Email: asociacion@veteranosdeourense.com.

What data we process and why

• Players: first name and surnames, team, matches played, goals, cards and suspensions, to run the competition and publish results, standings and statistics. Your team provides them when you register.
• ID number (DNI) and date of birth of players and referees: for the association's records and to check the competition's requirements. They are never published; only administrators see them.
• Referees, delegates and administrators: name, nickname and phone number, to give access to the app and organise the matches. The referee's nickname on their matches and the delegate's name on their team's page are public; only administrators see the phone number.
• Match reports: the photo of each match's report (names, signatures and remarks), to record the result. Only signed-in users can see it.
• Sign-in: your phone number and a log of sign-in attempts with your encoded IP address, to send you the code by SMS and prevent abuse.
• Visits: page-view statistics, aggregated and without cookies.
• Assistant: the questions you type, to answer you. Of the first question of each conversation we keep only the text, for 12 months, without the IP or anything that identifies who asked, to learn what people ask; the association can delete one if you ask.

Legal basis

• Running the competition and managing the registered teams: your relationship with the association when you register (art. 6.1.b GDPR).
• Publishing results, goalscorers, cards and suspensions: our legitimate interest in a transparent competition (art. 6.1.f). You can object by writing to us.
• Sign-in security and abuse prevention: legitimate interest (art. 6.1.f).

How long we keep it

• Data on players, referees and delegates: while they take part in the competition and, afterwards, the record of results and statistics from past seasons.
• Confirmed match reports: with no time limit, as the league's record (seen only by signed-in users).
• The change log: until the end of the season plus one year.
• Draft match reports: deleted when you leave without confirming (any leftovers, within a day).
• Imported files: 90 days.
• PDFs generated and shared by link: 90 days.
• Sign-in attempts: 30 days; the encoded IP, 24 hours.
• Sessions: expire after 90 days without use.
• First questions to the assistant: 12 months.

Who we share it with

We don't sell or hand over your data. These providers process it on the association's behalf:

• Google (Firebase Authentication and reCAPTCHA): verifying your phone number by SMS.
• Anthropic (Claude Haiku): reading match reports, squads and documents, the public assistant and the admins' assistant.
• Google (Gemini API, free tier): only if the association chooses it, questions to the public assistant, scanned public documents and match report photos may be processed here, also outside the EU, and Google may use them to improve its models. The assistant only uses public data; don't type personal data in your questions.
• Vercel: hosting of the website, files and visit statistics (servers in Frankfurt and Paris).
• Neon: database (servers in Frankfurt).

Transfers outside the EU

Google, Anthropic and Vercel are US companies. Vercel and Neon store the data on servers in the European Union; the AI (Anthropic and the Gemini API) may process it outside the EU. These transfers rely on the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.

Your rights

You can ask for access to, rectification, erasure, restriction of processing and portability of your data, or object to its processing, by writing to asociacion@veteranosdeourense.com and saying who you are. We will reply within one month at most. If you think we haven't handled your request properly, you can complain to the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.

If you ask for a copy of your data, we email you a file with everything we keep about you.

If a player with matches played asks for their data to be erased, we delete their name, DNI, date of birth and number, and their results (goals, cards, matches) stay under "Xogador #<number>", so the standings don't change.

Cookies and storage on your device

We only use technical and preference cookies, which don't need consent: the session of users who sign in (afvo_session, afvo_signed_in), the language (NEXT_LOCALE), the light or dark theme (theme), your favourite team (fav_team) and the state of the side menu (veteranos_sidebar). Your browser also keeps your name and role while you are signed in. The sign-in screen loads Google reCAPTCHA to prevent abuse when the SMS is sent. We don't use advertising or tracking cookies.

Changes

If we change this policy, we will publish the new version here with its date.