Privacy Policy

1. Data Controller

Sfaira, operating in Athens, Greece, is the Data Controller responsible for your personal information.

2. Data Storage & Infrastructure

Your personal details, email address, transaction history, and match registration records are collected to fulfill our contractual obligation to provide the Sfaira service (GDPR Art. 6(1)(b)). This data is stored securely in our database powered by Supabase, utilizing industry-standard encryption protocols and strict access controls.

3. Location Data

We integrate Mapbox APIs to render soccer pitches on interactive map systems. To center the map viewport, the application may request permission to view your device's location coordinates. This geolocation lookup relies on your explicit consent (GDPR Art. 6(1)(a)), is processed entirely client-side on your device, and is never transmitted to or stored on Sfaira's servers.

4. Data Retention

We retain your personal data only for as long as your account is active or as needed to provide you services, comply with our legal tax obligations, resolve disputes, and enforce our agreements.

5. Your GDPR User Rights

In strict alignment with the EU General Data Protection Regulation (GDPR), you have comprehensive control over your personal data:

• Right of Access: You can request a copy of all information currently associated with your account profile.
• Right of Rectification: You can update or correct your profile fields at any time via the profile edit settings.
• Right to Erasure (Right to be Forgotten): You have the right to request the permanent deletion of your account and all associated ledger records, subject to pending legal or financial obligations.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, request a data export, or initiate complete account deletion, please contact Sfaira privacy support at [Insert Privacy Email Address].