Privacy Policy

1. Introduction

Welcome to the CourtON Manager platform. Your privacy is paramount to us. This Privacy Policy describes how your personal information is collected, used, and shared when you use the services provided by your Padel Club ("the Club") via the Courton software platform.

2. Data Roles & Platform Provider

It is important to distinguish the roles of the parties involved in your data processing:

• Data Controller: The Padel Club where you make bookings is the legal Data Controller. They decide why and how your data is processed.
• Data Processor: Courton (the platform provider) acts as the Data Processor on behalf of the Club. Courton provides the technical infrastructure to manage bookings, payments, and member records.

3. Information We Collect

Through the Courton platform, the following types of data may be collected:

• Identity & Contact: Name, email address, phone number, and account credentials.
• Booking Data: History of reservations, matches participated in, and service selections.
• Financial Data: Secure processing of payments. Note that full credit card details are handled by our PCI-DSS compliant payment provider, iyzico, and are not stored directly on Courton servers.
• Technical Data: IP address, browser type, and device information used for security and platform optimization.

4. Legal Basis for Processing

We process your data based on several legal grounds:

• Contractual Necessity: To fulfill your booking requests and provide access to the platform.
• Legitimate Interests: To improve our services, ensure platform security, and manage club operations.
• Consent: Where you have opted-in to receive marketing communications or newsletters.

5. Data Sharing & Third Parties

We do not sell your data. We share information only with:

• Courton Infrastructure: To facilitate the core functionality of the management system.
• Payment Providers (iyzico): To safely handle financial transactions.
• Cloud Providers: Secure hosting services (Google Cloud/Firebase) located in the EU.

6. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law (e.g., for tax and accounting purposes).

7. Account & Data Deletion

There are two ways to delete your account and personal data:

• In the app: Profile → Settings → Delete Account → confirm. Access to your account is revoked immediately, active sessions are invalidated, and the account can no longer sign in.
• By email: send an account deletion request from your registered email address to [email protected]. Requests are completed within 30 days.
• Data deleted: your profile information (name, email address, phone number, profile photo), notification preferences and device push token are removed from the service; the account is permanently closed and your membership ends.
• Data retained: payment, invoicing and booking transaction records are kept for the statutory retention period required by tax and commercial law (VUK/TTK). These records are used only to meet legal obligations and are outside the scope of your request.
• If you hold a club membership, the Club is the data controller for its own membership records; you may also need to contact the Club directly.

8. Your Rights (GDPR Compliance)

As a user, you have the following rights regarding your data:

• Access: Request a copy of the data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data (subject to legal obligations).
• Portability: Request transfer of your data to another service.

To exercise these rights, please contact the Club management or email [email protected].

9. Security Measures

Courton implements industry-standard security measures, including SSL/TLS encryption for data transmission and restricted access protocols, to protect your personal information from unauthorized access or disclosure.

10. Limitation of Liability

To the maximum extent permitted by law, Courton's total aggregate liability arising from the use of the platform shall be limited to the refund of the amounts actually paid by the User to Courton in connection with the relevant transaction. Courton cannot be held liable for any damage or loss other than the refund of the payments it has received. This limitation does not affect Courton's obligations as a data controller/processor under the KVKK and GDPR, or any mandatory legal provisions.

11. Contact Information

For questions regarding this policy or the platform's data practices, you can reach out to: