Privacy policy

1. Who is responsible?

This privacy policy describes how Tulip Digital - Duijster, Binningerstrasse 46, 4123 Allschwil, Switzerland ("Tulip Digital", "we", "us") processes personal data in connection with the SportClubEvo marketing website and the SportClubEvo club-management SaaS platform (together, the "Services").

SportClubEvo is a product of Tulip Digital. Contact for privacy matters: hello@tulip-digital.ch.

2. Controller and processor roles (clubs and members)

SportClubEvo is a multi-tenant system used by sports clubs and similar organisations. Depending on the data and context, roles under applicable data protection law may differ.

For account, contract, billing and platform administration data relating to the club as our customer, Tulip Digital generally acts as controller.

For personal data about club members, players, guardians, trainers and other individuals that the club enters into SportClubEvo to run its operations, the club is typically the controller and Tulip Digital typically processes such data on the club's instructions as a processor — unless mandatory law assigns a different role.

Clubs remain responsible for providing appropriate privacy information to their members and for having a lawful basis to use SportClubEvo for that data.

3. Categories of personal data

• Identity and contact data (e.g. name, email address, telephone where provided)
• Account and authentication data (credentials, session identifiers, roles and permissions)
• Club and tenant configuration (organisation name, settings, teams, schedules, operational content)
• Member, player, trainer and guardian records entered by the club
• Data relating to minors where clubs manage youth teams or registrations
• Billing and subscription data (plan, invoices, payment status, billing correspondence)
• Communications (support requests, transactional emails, billing email processing)
• Technical data (IP address, device/browser type, application logs, security events)
• Integration data exchanged with connected services (e.g. federation or club systems, weather feeds for displays)
• Cookies and similar technologies strictly necessary for authentication and session management
• Local storage entries for UI preferences where used

4. Purposes of processing

• Providing, operating and improving the Services
• Account and contract administration, including onboarding
• Club administration features requested by the customer organisation
• Billing, invoicing, payment reconciliation and related audit logging
• Transactional and service-related communication
• Authentication, access control and security monitoring
• Hosting, backup, troubleshooting and service reliability
• Operating integrations requested by the club or required for product features
• Compliance with legal obligations and enforcement of our terms

5. Children and minors

Clubs may process personal data about children and young people (for example team lists, guardians, medical or eligibility information where configured). Such processing is initiated by the club. Tulip Digital provides the technical platform and processes data according to the club's use of the product and our agreement with the club.

Where we become aware that personal data in the Services was provided without appropriate authority, we may take reasonable steps to assist the club or restrict processing as required.

6. Legal bases

We process personal data where necessary to perform our contract with the club, where required by law, where necessary for our legitimate interests in operating a secure SaaS product (balanced against data subject rights), or where the club or user has consented where consent is the appropriate basis.

Mandatory rights under applicable data protection law remain unaffected.

7. Hosting, infrastructure and subprocessors

We use reputable infrastructure and service providers to host and operate SportClubEvo. Depending on configuration, this may include:

• Cloud hosting and deployment (e.g. Vercel)
• Managed PostgreSQL database services (e.g. Neon)
• Transactional email delivery (e.g. Resend)
• Email processing for billing workflows (SMTP/IMAP as configured)
• Payment-related server-side reads where Stripe or similar is configured for limited operational purposes
• Third-party integrations enabled by the club (e.g. SFV / ClubCorner, MeteoSwiss for InfoBoard weather)

8. International transfers

Some providers may process data in Switzerland, the European Economic Area or other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

9. Cookies, sessions and local storage

The Services use cookies and similar technologies that are necessary for authentication, security and session management (for example NextAuth/JWT session cookies). We do not use a separate marketing cookie banner solely for these strictly necessary technologies.

The application may store UI preferences in local storage on your device. You can clear this via your browser settings.

10. Retention

We retain personal data only as long as needed for the purposes above, including statutory retention periods for accounting and tax records, security logs, and the duration of the club's subscription and reasonable post-termination periods for backups and disputes.

Clubs can export or delete certain data through product features where available; residual backups may persist for a limited technical period.

11. Security

We implement technical and organisational measures appropriate to a modern SaaS product, including access controls, encryption in transit, and logging for security and billing audit purposes. No method of transmission or storage is completely secure.

12. Your rights

Depending on applicable law, individuals may have rights to access, rectify, delete, restrict or object to processing, and to data portability. Requests relating to data controlled by a club should normally be directed to that club; we will assist clubs as processor where appropriate.

Contact: hello@tulip-digital.ch. You may also have the right to lodge a complaint with a supervisory authority.

13. This marketing website

When you visit sportclubevo.com, we process technical access data and any information you submit via contact forms. This site does not require a club account. Analytics, if used, will be described in an updated notice when enabled.

14. Changes

We may update this policy to reflect product, legal or organisational changes. Material changes will be published on this page with an updated date.