Data processing agreement

Draft version 0.1. This text is a draft, awaiting review by a lawyer and the details of the company that will publish Tactyko. It will be replaced before launch.

Roles

The club is the controller of its players' and staff's data. The publisher of Tactyko acts as a processor within the meaning of Article 28 GDPR: it processes this data only on the club's instructions, to provide the service.

Processor's commitments

• process data only to provide the service;
• ensure the confidentiality of the people who have access to it;
• implement appropriate security measures (strict separation between clubs, encrypted connections, two-factor authentication for administrators, access log);
• help the club respond to people's requests (access, rectification, erasure);
• report any data breach without undue delay;
• delete or return the data at the end of the contract.

Sub-processors

Hosting: o2switch (France). Email delivery: [to be completed].

Data processed

Staff identity and contact details; players' identity, date of birth, licence number, position and teams; sporting activity. No health data.