1. Who the controller is
The controller of your account data is Antonio Liso, antonio.liso@arubapec.it ("Easy2Match", "we"). For any privacy question or to exercise your rights, write to privacy@easy2match.it.
This notice covers the Easy2Match app (iOS and Android), the easy2match.it website and the panel clubs use to manage the app.
2. The clubs' role
Sports clubs use Easy2Match to manage members, courts, matches and competitions. That is why your data has two different controllers:
1.Your account data (sign-up, profile, matches, chat, notifications, settings) is processed by Easy2Match as controller.
2.The data of your relationship with a club (membership and identity check, medical certificate, liability waiver, bookings, payments, wallet, orders, and the club's leagues, tournaments and events) has the club as its controller. Easy2Match processes it on the club's behalf, as processor (Art. 28 GDPR), under an agreement with the club and only to provide the service to it.
For club data you can contact the club or us: if you write to us, we forward the request to the club and help it respond.
3. What data we process
1.Account: first name, last name, email, phone number, date of birth, gender, profile photo, nickname, language. If you sign in with Apple or Google, we receive an identifier and your email from them (with Apple, a hidden address if you choose one).
2.Playing profile: category and level, points, answers to the initial questionnaire, preferences and playing style (hand, side), availability and, if you turn it on, your public profile.
3.Activity in the app: matches you create or play, results, invitations, friends and blocked players, the fair-play and level ratings you give and receive, reports, chat messages, comments and likes on club posts, notifications, and which sponsor banners you saw or tapped on Home (once a day per banner).
4.Club data: club memberships, the photo of your identity document for verification, your medical certificate and its expiry date, your acceptance of the liability waiver, bookings, payments, wallet balance and transactions, orders, entries in leagues, tournaments and events.
5.Consents: which documents you accepted (Terms, privacy notice, liability waiver, promotional communications), which version, when, from which IP address and from which app or browser.
6.Technical data: the push notification token, device model and operating system, app version, error reports and server logs.
7.Privacy requests: requests for a copy of your data or for its deletion, and their outcome.
The medical certificate is health data (Art. 9 GDPR): you upload it only if one of your clubs asks for it, and only the authorised admins of the clubs you belong to can see it.
4. Where the data comes from
1.From you, when you sign up and use the app.
2.From your club, if it created your account or registered you as a guest (name, email, phone), or if it imported its members from Playtomic (name, email, phone, date of birth, gender, level, wallet balance).
3.From other players: the results, ratings, reports and messages that concern you.
4.From Apple or Google, if you use them to sign in.
5. Why we process data and on what basis
1.Providing the app: account, matches, bookings, chat, notifications, leagues and tournaments. Basis: performance of the contract you accept with the Terms (Art. 6(1)(b) GDPR).
2.Matching players of a similar level: working out category and points, suggesting matches and partners. Basis: performance of the contract (Art. 6(1)(b)), because this is the service the app offers.
3.Security and proper use of the app: preventing abuse and unauthorised access, handling reports and blocks, fixing errors. Basis: our legitimate interest (Art. 6(1)(f)).
4.Proving consents and answering privacy requests. Basis: a legal obligation (Art. 6(1)(c), Arts. 7 and 12–22 GDPR).
5.Sending you promotional communications, only if you agree. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
6.Measuring sponsor banners: counting how many people see and tap the sponsor banners on Home, to give sponsors overall figures. Basis: our legitimate interest (Art. 6(1)(f)) in funding the app through sponsorships. You can object at any time by writing to privacy@easy2match.it.
For club data (§2), the purposes and the legal basis are set by the club, as its controller.
6. Category, points and suggestions
The app works out your category and points from match results, and how reliable your level is from other players' answers. Your fair-play score comes from their ratings. These values decide which matches and partners we suggest to you and which matches you can join when they are open only to some categories.
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). If you think your category is wrong, you can ask your club to review it or to certify your level.
7. Phone permissions
The app asks for a permission only when it needs it; you can refuse or revoke it in your phone's settings.
1.Camera and photos: for your profile photo, the photo of your identity document and your medical certificate. Images reach our servers only when you send them.
2.Contacts: only to save to your address book a contact another player shared with you in chat. The app reads the address book on your phone to avoid creating a duplicate; nothing from your address book reaches our servers.
3.Calendar: to save matches to the calendar you choose. The app reads only the list of calendars and sends nothing to our servers.
4.Notifications: to tell you about invitations, matches and messages. The device's notification token is saved on our servers.
The app does not use your location.
8. Who we share data with
1.Your clubs: authorised admins see your profile and the data of your relationship with the club (§2). They see the photo of your identity document through a temporary link, covered by a security watermark.
2.Other players: your name, photo, category and points in matches, rankings and the clubs you share; your public profile, if you turn it on; the messages you write in chat. In a "blind match" names stay hidden until the end.
3.Our providers, listed below.
4.Public authorities, only when the law requires it.
Our providers process data on our behalf, as processors, and only for their task:
1.Supabase Inc. (USA): database, sign-in and file storage, on servers in Ireland (EU).
2.Vercel Inc. (USA): hosts the website and the clubs' panel.
3.Functional Software Inc. (Sentry, USA): error reports, stored in the EU (Germany).
4.650 Industries Inc. (Expo, USA): sending push notifications and app updates; notifications go through Apple and Google.
5.Aruba S.p.A. (Italy): sending service emails.
If you sign in with Apple or Google, or open a club's map (Apple Maps on iOS, Google Maps on Android), those services process your data as independent controllers, under their own privacy notices. We do not sell your data. The sponsor banners on Home are the same for everyone and are not chosen based on your data; we give sponsors only overall figures, never data that identifies you.
9. Transfers outside the European Union
The app's database and files are in the EU (Ireland). Some of the providers in §8 are based in the United States and also process data from there: Vercel for the website and panel pages, Expo for notifications, Supabase and Sentry for technical support. The transfer relies on the EU–US adequacy decision (EU-US Data Privacy Framework) for certified providers, or on the European Commission's standard contractual clauses (Art. 46 GDPR).
10. How long we keep data
1.Account: as long as it is active. If you ask us to delete it, we anonymise it within a month: we delete your name, contact details, photos, preferences, availability, friends and blocks, notifications, documents and certificates, and disable sign-in. Matches, results, payments, reports and messages remain without your name ("Deleted user"), because they are part of other players' history and of the club's records.
2.Identity document: deleted 30 days after the club approves or rejects the verification. You can delete it earlier from your profile.
3.Medical certificate: the file is deleted 30 days after it expires, or 30 days after upload if the club rejects it. The expiry date and the outcome of the check remain.
4.Replaced files: a document or certificate replaced by a new one is deleted within two days.
5.Notifications: deleted after 45 days. Notices that serve as a receipt or an outcome (payments, wallet, identity, level and medical certificate checks, club announcements) remain as long as the account does.
6.Consents and privacy requests: for the whole life of the account and up to 10 years after it, as proof.
7.Club data (bookings, payments, wallet, orders): for the period set by the club.
8.Error reports and server logs: 90 days at most.
9.Sponsor banners seen and tapped: 12 months.
11. Cookies and data stored on your device
The website uses only the technical cookies it needs to work, which do not require your consent:
1.sb-…-auth-token: keeps you signed in to the clubs' panel and to restricted pages. Lasts until you sign out, 400 days at most.
2.NEXT_LOCALE: remembers the website's language. Deleted when you close the browser.
3.e2m_active_club_id: remembers which club an admin is managing. Deleted when you close the browser.
4.sidebar:state: remembers whether the panel's side menu is open. Lasts 7 days.
5.e2m_cookie_consent: remembers your cookie choice. Lasts 180 days, then we ask you again.
Only with your consent ("Error diagnostics"), when an error occurs the website sends Sentry a recording of the preceding seconds, with text and images masked, to help us reproduce the problem; to do so it stores an identifier in the browser tab's storage. Regular error reports use no cookies and do not contain your name or email. You can change your choice at any time from "Cookie preferences", at the bottom of every page.
The app does not use cookies. On your phone it stores the sign-in session in the device's secure storage, and the language, the theme and a copy of recent data so that it opens faster. Neither the website nor the app uses advertising or marketing cookies or tools.
12. Promotional communications
We send you Easy2Match news and offers only if you agree, with the optional box at sign-up or with "News and offers" in Settings → Privacy and data, where you can also withdraw your consent at any time. Service notices (invitations, confirmations, match reminders) do not depend on this choice.
13. Minors
The app is for people aged 14 and over. If you are between 14 and 18, use it with the permission of a parent or guardian. If we find that an account belongs to someone under 14, we delete it; a parent can ask us to do so by writing to privacy@easy2match.it.
14. Your rights
You can ask us at any time to:
1.access your data and receive a copy of it (Art. 15 GDPR);
2.correct it (Art. 16); you can correct much of it yourself from your profile;
3.erase it (Art. 17);
4.restrict its processing (Art. 18);
5.receive it in a machine-readable format and pass it on to another service (Art. 20);
6.object to processing based on our legitimate interest (Art. 21);
7.withdraw a consent you gave, without affecting the processing carried out before (Art. 7(3)).
From the app: Settings → Privacy and data → "Get a copy of my data" or "Delete account". Or write to privacy@easy2match.it. We reply within a month; for complex requests the deadline can be extended by two further months, and in that case we tell you. We may ask you to confirm your identity. The copy of your data is a JSON file, which we send to your account's email address.
15. Complaints
If you believe the processing breaks the law, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).
16. Changes to this notice
Every version of this notice has a number and a date. If we change it substantially, the app tells you and asks you to read it before continuing.
17. Contacts
Privacy and requests about your data: privacy@easy2match.it. Help with the app: support@easy2match.it.