Privacy Policy

1. Controller

Michel Utke
Web: michelutke.com
Contact: info@teamorg.ch

The content of this website is managed by Michel Utke. The postal address is available on request by email.

2. Scope

• Website: teamorg.ch (information and contact form).
• Web app: app.teamorg.ch (signing in and using teamorg in the browser).
• Mobile apps: the teamorg apps for iOS and Android.

teamorg is a tool for sports clubs: clubs use it to organise their teams, events and attendance. The controller for the data described in this policy is the party named in section 1.

3. Contact form processing (website)

When you use the contact form, we process the data you provide: club name, contact person’s name, email address, optionally the number of members, and your message. The sole purpose is to handle and respond to your enquiry. The legal basis is your consent and/or our legitimate interest in communicating with prospective customers. Providing the data is voluntary; without it we cannot answer your request.

4. Data processed when using the app and web app

• Account: name (display name), email address and password. The password is stored only as a hash, never in plain text.
• Profile: optionally a profile picture.
• Membership: club, teams, subgroups and your role (club manager, coach or player).
• Events: trainings, games and events of your teams (title, time, place, notes).
• Attendance: your confirmations, declines and “unsure” replies with timestamp. A short reason is required for “unsure” and optional for declines. Coaches can add or correct attendance.
• Absences: absences you record (holidays, injury, work, school, travel, other) with a label, period or weekdays and, optionally, the affected body part.
• Notifications: your notification settings, reminders and the messages in the in-app inbox.
• Invitations: the email address of an invited person and the invitation link.
• Technical data: when you access our servers, technically necessary server logs are produced (incl. IP address, time, requested address).

Note on health data: absences such as “injury” (with an optional body part) and reasons given when declining can contain information about your health, which is considered particularly sensitive. Providing it is voluntary. Please keep reasons brief and only state what is needed for planning (e.g. “injured”, no diagnoses). Reasons given for confirmations and declines are visible to the members of your team, and coaches and club managers also see the attendance overview (see section 6).

Data supplied by clubs: club managers can import member lists from the J+S database NDS (last name, first name, date of birth, person number, function) and, using their club’s API key, sync game schedules from Swiss Volley. The club decides which data it supplies.

5. Purposes and legal bases

• Running the app: account, teams, events, confirmations and declines, absences, reminders and billing. The legal basis is performance of the user relationship.
• Security and stability: protection against abuse, error analysis, server logs. The legal basis is our legitimate interest.
• Voluntary information: profile picture, absence reasons and push notifications. The legal basis is your consent, which you can withdraw at any time.
• Legal obligations: e.g. retention obligations for invoice data.

We do not use your data for any other purpose.

6. Who can see which data

• You: all of your own data.
• Members of your teams: names, profile pictures and roles of team members, the team’s events, and the confirmations and declines of team members for those events, including the short reason given.
• Coaches: in addition, create and edit events, view, add and finalise the attendance of the players in their teams, and view the attendance overview of those players.
• Club managers: the members, teams, roles and invitations of their club and the club’s billing; for the teams in their club, the same access as coaches.
• Operator: technical access to the data for operations and support. Support access on behalf of an account is logged.

A club’s data is not visible to other clubs. We do not pass your data on to third parties, except to the service providers listed in section 9.

7. Push notifications

• Push notifications (e.g. an event reminder, a new or changed event) are only sent if you allow them. Your operating system asks you when you first launch the app.
• We use OneSignal (OneSignal Inc., USA) for this. OneSignal receives a device token, technical device and app information, a random identifier of your account and the content of the message (title and text).
• You can turn push notifications off at any time in your device’s system settings or in the app’s notification settings.

The web app does not send push notifications.

8. Payments

• Clubs can subscribe to paid plans. Card payment is offered in the Android app and the web app, not in the iOS app.
• You enter card details directly with Stripe (Stripe Payments Europe, Ltd., Ireland, or Stripe, Inc., USA). They do not reach our servers.
• Stripe receives the billing email address and the club’s name. We store references to Stripe (customer and subscription identifiers), the billing email address, the card brand, the last four digits and expiry date of the card, and the club’s member count for billing.

The legal basis is performance of the contract with the club.

9. Processors & third parties

• Email delivery (Infomaniak Network AG, Switzerland): your request is delivered by email to info@teamorg.ch and stored there.
• App email delivery (Infomaniak Network AG, Switzerland): invitations to teams and clubs are sent by email to the invited address. The address, the inviter’s name, the club or team and the invitation link are transmitted.
• Spam protection (Cloudflare Turnstile, Cloudflare Inc.): a security check runs when the contact form is submitted to prevent abuse. Technical data (incl. IP address, browser info) may be transmitted to Cloudflare.
• Hosting (Hetzner, Germany): the website, web app, server, database and uploaded files (e.g. profile pictures) run on a server at Hetzner in Nuremberg (Germany, EU), producing technically necessary server logs.
• Push notifications (OneSignal Inc., USA): see section 7.
• Payments (Stripe Payments Europe, Ltd., Ireland, and Stripe, Inc., USA): see section 8.
• Game schedule sync (Swiss Volley): only if a club sets up the sync, teamorg retrieves the club’s game schedule from Swiss Volley using the club’s API key.
• Fonts: fonts are served locally from teamorg.ch (self-hosted). No data is transmitted to third parties such as Google Fonts.

10. Disclosure abroad

The email provider Infomaniak processes the data in Switzerland; hosting is provided by Hetzner in Germany (EU). Stripe Payments Europe is based in Ireland (EU). OneSignal, Stripe, Inc. and Cloudflare are based in the USA; data may therefore be transferred to the USA (push data for OneSignal, payment data for Stripe, technical contact form data for Cloudflare). This transfer relies on the Swiss-U.S. Data Privacy Framework or on standard contractual clauses as a safeguard for an adequate level of data protection (Art. 16 revFADP).

11. Cookies and local storage

• Website: one functional cookie (lang) that stores your language choice.
• Web app: one technically necessary session cookie (to_session) that keeps you signed in (30 days, HTTPS only, not readable by scripts).
• Apps: your sign-in and, for offline use, events and replies are stored locally on your device.

These cookies and local data are not used for analytics or advertising.

12. No tracking, no advertising

teamorg uses no analytics or tracking services, no third-party crash reporting and no advertising. We do not sell personal data and do not share it for advertising purposes.

13. Retention and deletion

• Enquiries are kept for as long as needed to process them and to meet legal obligations, then deleted.
• App data is kept as long as your account exists. Messages in the in-app inbox are deleted automatically after 90 days.
• Invoice and payment data is kept for as long as legal retention obligations require.

Deleting your account: in the app, open the “Profile” tab and tap “Delete account”. If you have no team yet, the same function is on the start screen. You then confirm with your password. In the web app, go to app.teamorg.ch/app/profile/delete.

What happens: your attendance replies, absences, notifications and settings, reminders, team, group and club roles and your profile picture are deleted. Your account is anonymised: email address, name and password are replaced, the entry appears as “Gelöschtes Konto” (deleted account), and signing in is no longer possible. The anonymised entry remains because events and logs refer to it. Your email address is also removed from invitations. Existing sessions end immediately. Member lists imported by a club remain with the club.

If you own a club, the club must be transferred or closed first. Write to us at info@teamorg.ch.

14. Children and young people

Clubs also use teamorg for youth teams. Accounts of minors should only be created with the consent of a parent or legal guardian. Clubs that invite young people make sure this consent exists. Parents and guardians can request access to or deletion of the account at any time: info@teamorg.ch.

15. Your rights

Subject to applicable law, you have the right to access, rectify, delete and restrict the processing of your personal data, and to withdraw consent. Contact info@teamorg.ch. The competent authority in Switzerland is the FDPIC.

16. Changes

We may update this privacy policy. The version published on this page applies.