Data Protection & Privacy Notice

Privacy & Data Protection Policy

Compliance with the Swiss Federal Act on Data Protection (FADP / DSG) & European GDPR

AREENA is committed to safeguarding the personal data of sports federations, affiliated clubs, tournament organizers, licensed athletes, and platform users. This policy explains how we collect, process, protect, and store your data.

1. Data Controller & Contact

The data controller responsible for the processing of personal data on this platform within the meaning of the Swiss Data Protection Act (DSG) and applicable European data protection legislation is:

AREENA Platform Operator

Sports Federation Management & Digital Infrastructure

privacy@areena.app • info@areena.app

2. Categories of Data Collected & Processing Purposes

User Accounts & Authentication

Full name, email address, salted password hash, phone number, residential address, email verification status, and timestamp logs for secure authentication and authorization.

Athlete Licensing & Eligibility

Official license identifier, athlete birth date, ELO rating points, club affiliation status, licensing categories, refresher course completion records, and passport/photo verification where mandated by federation bylaws.

Competition & Match Results

Tournament draws, team rosters, match score sheets, courtside live scores, ranking tables, and historical encounter logs published for legitimate sporting and governance interest.

Federation Governance & Audit

Role assignments, audit trail actions (license approvals, role promotions, DAG rule inheritance updates), and OAuth developer API tokens for federation integrations.

3. Legal Basis for Processing

Contractual Fulfillment: Processing required to provide federation membership, licensing, and competition participation.
Legitimate Interests: Maintaining transparent sports results, ELO integrity, and fraud prevention.
Consent: Granted during user registration, profile creation, and cookie preferences.

4. Data Storage & Security

Encryption in Transit: End-to-end TLS 1.3 encryption across all HTTP and WebSockets connections.
Security Controls: Role-based access control (RBAC), multi-tenant association isolation, and parameterized SQL queries.
Server Hosting: Secure data center storage with automated daily backups.

5. Cookies & Local Storage Transparency

AREENA strictly avoids third-party advertising trackers, cross-site profiling cookies, or invasive analytics pixels. We only utilize essential first-party storage strictly necessary for platform functionality:

areena_token

Essential JWT authentication session key for authorized federation requests.

areena_theme

User preference storage for Dark / Light mode UI theme rendering.

areena_locale

Selected multilingual interface language (EN, DE, FR, IT).

6. Your Rights as a Data Subject

Under the Swiss Federal Act on Data Protection (FADP / DSG) and European GDPR, you are entitled to the following statutory rights regarding your personal data:

Right to Access (Art. 25 DSG / Art. 15 GDPR): Request confirmation and a copy of all personal records stored about you.

Right to Rectification (Art. 32 DSG / Art. 16 GDPR): Correct inaccurate, outdated, or incomplete profile and licensing information.

Right to Erasure / Deletion (Art. 32 DSG / Art. 17 GDPR): Request deletion of your user account, subject to statutory retention periods.

Right to Data Portability (Art. 28 DSG / Art. 20 GDPR): Request your data in a structured, commonly used machine-readable format.

To exercise any of these rights, please contact our Data Protection Coordinator via email at privacy@areena.app privacyDoc.contactPromptOr

AREENA Data Protection Standard v0.0.1

Last Updated: August 2026