Your data is yours.
The whole point is that no one gets your phone number. This page explains what we collect, why, how long we keep it, and how to get rid of it.
Data Controller
AUN WE PLAY, S.L.
Plaza Porta Pintada 1, 1st floor
07002 Palma de Mallorca, Illes Balears, Spain
NIF: B88694328 (provisional)
Data protection contact: privacy@aunweplay.com
No Data Protection Officer (DPO) has been appointed, as AUN WE PLAY, S.L. does not meet the thresholds requiring mandatory DPO appointment under GDPR Art. 37. All data protection requests should be directed to privacy@aunweplay.com.
Data We Collect
Data you provide to us:
- Name or username.
- Email address.
- Declared skill level (padel or other sport).
- Match preferences (schedule, area, sport).
- Country of residence.
- Account login credentials.
Data collected automatically:
- App usage data (matches posted, matches joined, platform activity).
- Technical device data (device type, operating system, device identifiers).
- Approximate location data (only if you grant explicit permission), required to display nearby matches.
- IP address and browsing data on the Website.
Data we do NOT collect: AUN — we play is designed to protect your privacy. We do not share or display your phone number or personal contact information with other users.
Purposes of Processing and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Account registration and login management | Performance of a contract (Art. 6.1.b GDPR) |
| Provision of the match coordination service | Performance of a contract (Art. 6.1.b GDPR) |
| Displaying nearby open matches | Legitimate interest / Consent (Art. 6.1.a and 6.1.f GDPR) |
| Service communications and launch notifications | Consent (Art. 6.1.a GDPR) |
| Waitlist management | Consent (Art. 6.1.a GDPR) |
| Service improvement and statistical analysis | Legitimate interest (Art. 6.1.f GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c GDPR) |
Location Data
Approximate location data is used solely to display open matches near you. It is processed in real time and is not stored as a precise location history. You may withdraw consent for location access at any time through your device settings, though this will prevent nearby match discovery from functioning.
Location data is never shared with other users or third parties beyond what is strictly necessary to operate the service.
Calendar access. If you enable calendar sync, the App writes match events to your device's local calendar only. No calendar data is transmitted to or stored on AUN servers. You can revoke calendar access at any time through your device settings.
Automated Preference Signals
AUN — we play uses automated systems to calculate:
- A match reliability preference signal, based on your history of accepting and attending matches.
- A skill preference signal, based on your self-declared level and confirmations from other players and clubs.
These scores affect the frequency with which you receive match notifications and the matches you are shown. You have the right to: (a) request human review of your scores; (b) contest scores you believe are inaccurate; (c) receive an explanation of the factors that influenced your score. Contact privacy@aunweplay.com to exercise these rights.
This processing does not produce legal effects or similarly significant effects within the meaning of GDPR Art. 22. You may deactivate your profile at any time to stop receiving match notifications.
Recipients of Data
AUN WE PLAY, S.L. does not sell or transfer your personal data to third parties for commercial purposes. Data may be shared with:
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) — website hosting and CDN, acting as data processor under GDPR-compliant safeguards and the EU-US Data Privacy Framework.
- Other technology service providers acting as data processors (cloud infrastructure, usage analytics), subject to GDPR-compliant safeguards.
- Competent authorities, where required by law.
Where data is transferred outside the European Economic Area (including to Cloudflare, Inc. in the USA), we ensure appropriate safeguards are in place, including reliance on the EU-US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
Note on web fonts: This website currently loads fonts from Google’s servers (fonts.googleapis.com, fonts.gstatic.com), which transmits your IP address to Google LLC, USA. We are in the process of migrating to self-hosted fonts to eliminate this transfer entirely.
Data Retention
Data will be retained for as long as necessary to fulfil the purposes for which it was collected and, in any case, for the periods required by applicable law. Upon account deletion, data will be erased or anonymised within 30 days, unless we are legally required to retain it.
Your Rights
Under the GDPR and applicable data protection law, you have the right to:
- Access: know what personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of your data.
- Restriction of processing: request limited use of your data.
- Data portability: receive your data in a structured, commonly used, machine-readable format.
- Objection: object to processing based on legitimate interest.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.
- Human review of automated preference signals: contest signals or automated processing that affects you. We will respond within 15 business days.
To exercise any of these rights, contact us at: privacy@aunweplay.com
We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es, or with the supervisory authority of your country of residence.
Account deletion: to exercise your right to erasure, see aunweplay.com/delete-account for step-by-step instructions (in-app and by email).
Minimum Age
AUN — we play is intended for users aged 16 and over. Users resident in Spain may use the service from age 14, in accordance with Spain’s LOPDGDD. Users below the applicable age threshold require verifiable parental or guardian consent.
Access to the App requires creation of an account through an app store (Apple App Store or Google Play), which applies their own age verification controls. Web-based sign-up is subject to the age confirmation provided during registration.
Security
AUN WE PLAY, S.L. implements the necessary technical and organisational measures to ensure the security of your personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the stored data, and the risks to which they are exposed.
Data Breach Notification
In the event of a personal data breach likely to result in a high risk to your rights, AUN WE PLAY, S.L. will notify the AEPD within 72 hours (GDPR Art. 33) and notify affected users without undue delay including a description of the breach and measures taken (GDPR Art. 34). Notifications will be sent to your registered email.
Cookie Policy
This website uses only technically necessary cookies. No advertising or tracking cookies. All fonts are self-hosted — no third-party font services load on any page. Cookie questions: privacy@aunweplay.com.
residents may submit data access or deletion requests to privacy@aunweplay.com pursuant to the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).Club Data Processing
AUN — we play lists clubs based on publicly available information. Legal basis: legitimate interest (GDPR Art. 6.1.f). Clubs can opt out: legal@aunweplay.com — requests processed within 14 days.