Last update: 15/05/2026
DPS and Privacy
DPS and Privacy
Preliminary information document on security, personal data and platform privacy management.
Operational draft to be validated with the company legal/privacy advisor.
Controller
The data controller is Galefy srl, Via Gaetano Donizetti, 59, 06132 Perugia (PG), VAT/P.I. 03947740548, SDI M5UXCR1.
Purposes
Data is processed to create and manage accounts, sports profiles, teams, competitions, schedules, results, technical security, support and administrative duties.
Data categories
Processed data may include identity data, contact data, technical credentials, declared sports data, teams, competitions, results, technical logs and language preferences.
Legal basis
Legal bases to validate include performance of the requested service, legal obligations, consent where needed and legitimate interest for security and abuse prevention.
Security
Technical and organisational measures include hashed passwords, protected sessions, reserved access, limited public areas, backups and database access control.
User rights
Users may request access, rectification, erasure, restriction, portability and objection where provided by applicable law.
Processors and providers
Technical suppliers or hosting providers may process data as external processors under GDPR-consistent agreements and instructions.
Retention
Data is kept for the time needed for operational purposes, legal obligations and platform protection. Specific periods will be set in the final policy.