Back to home

Privacy Policy

Last updated: June 2026

1. Data Controller

The Controller has appointed an internal contact for data protection matters. For any question or request concerning the processing of your personal data, please write to the email address above.

2. Personal Data We Process

In connection with the FutScout services, we process the following categories of personal data:

2.1 Registration and account data

• First name and last name
• Email address
• Username
• Password, stored in encrypted form and not accessible to the Controller

2.2 Data entered by users in the service

• Sports statistics relating to futsal matches, players and teams
• Names and information about players and staff entered by the user
• Logos and images voluntarily uploaded by the user

2.3 Usage and technical data

• IP address and connection data
• Browser and device type
• Access and platform usage logs
• Technical session cookies required for the service to work

2.4 Contact and commercial request data

• First name and last name
• Email address
• Phone number
• Company, club or federation of affiliation
• Role within that company, club or federation
• Category or level of the affiliated club
• Text of the message voluntarily submitted

2.5 Data collected through third-party tools

For campaigns, events, demo requests, surveys or commercial initiatives, we may collect data through forms hosted on Google Forms or through forms and lists managed with Mailchimp. In those cases, we may process the data listed in section 2.4 and the minimum technical information generated by those tools, such as submission date and time, source of the request and marketing consent status.

2.6 Marketing and newsletter data

• First name, last name and email address
• Company or club of affiliation
• Role within the company or club
• Phone number, if provided
• Category of the affiliated club
• Preferences, interactions with communications and subscription or unsubscribe status

3. Purposes and Legal Bases

3.1 Service provision (Article 6(1)(b) GDPR)

Registration data and data entered in the platform are processed to perform the subscription agreement, allow access to the platform and ensure that all features work correctly.

3.2 Compliance with legal obligations (Article 6(1)(c) GDPR)

We may process your data to comply with tax, accounting or regulatory obligations to which we are subject.

3.3 Legitimate interest (Article 6(1)(f) GDPR)

Technical and usage data are processed to ensure platform security, prevent abuse and improve the user experience, based on the Controller's legitimate interest.

3.4 Consent (Article 6(1)(a) GDPR)

For commercial communications, newsletters, demo invitations, promotional content, product updates and marketing initiatives, we process data only with the data subject's explicit consent. Consent may be withdrawn at any time by writing to [email protected] or by using the unsubscribe link included in communications, where available.

3.5 Pre-contractual steps and request management (Article 6(1)(b) GDPR)

Data submitted through contact forms, Google Forms, email or other information request channels are processed to respond to the request, arrange demos, prepare commercial offers or carry out pre-contractual activities requested by the data subject.

4. Data Retention

Personal data are retained for the time strictly necessary for the purposes for which they were collected:

• Account and sports data: for the duration of the subscription agreement and, afterwards, for a maximum of 12 months unless the data subject requests otherwise.
• Usage data and technical logs: for a maximum of 12 months from collection.
• Accounting and tax data: for 10 years in accordance with applicable law.
• Contact requests: for the time needed to handle the request and, where applicable, for the following 12 months.
• Marketing and newsletter data: until consent is withdrawn and in any case for a maximum of 24 months from the last meaningful interaction, unless consent is renewed or different retention obligations apply.

5. Disclosure and Transfers

Personal data are not sold or transferred to third parties for their own commercial purposes. They may, however, be disclosed to:

• Technical service providers, including hosting, cloud infrastructure and transactional email providers, acting as Processors under Article 28 GDPR where applicable.
• Marketing, newsletter and lead collection providers, including Mailchimp and Google Forms/Google Workspace, used to collect commercial requests, manage lists, send communications and track consent, subscription or unsubscribe status.
• Public authorities, where required by law or by order of a judicial authority.

Third-party providers process data according to their contractual terms and security measures. When they act on behalf of the Controller, they are appointed as Processors where required by applicable law. Data are processed mainly within the European Union. If data are transferred to third countries, the transfer will take place in accordance with the safeguards provided by the GDPR, including adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

6. Data Subject Rights

As a data subject, you have the right to:

• Access your personal data (Article 15 GDPR)
• Rectify inaccurate or incomplete data (Article 16 GDPR)
• Erase data in the cases provided by law (Article 17 GDPR)
• Restrict processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing based on legitimate interest (Article 21 GDPR)
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise these rights, send a written request to [email protected]. The Controller will reply within 30 days.

For processing based on consent, including marketing and newsletters, withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Cookies

The website www.futscout.it uses only technical cookies strictly necessary for its operation. No profiling cookies are used on the institutional website unless future integrations require separate consent management.

The FutScout application platform uses session cookies required to keep the user authenticated between pages. These cookies are deleted when the browser is closed or when the session expires.

8. Data Security

The Controller adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or accidental disclosure. Passwords are stored in encrypted form using non-reversible hashing algorithms. Communications between the user's browser and our servers take place over HTTPS.

9. Changes to This Notice

The Controller may update this privacy notice. Changes will be communicated by updating the date at the top of the page. In the event of substantial changes affecting registered users, notice will be sent by email.

10. Jurisdiction

For any dispute relating to the processing of personal data and the application of this notice, the Court of Turin shall have exclusive jurisdiction, except where the GDPR provides otherwise in favour of the data subject.