Privacy Policy

Inspirium d.o.o., Zdravka Lozančića 4, Zaprešić, Croatia (OIB 41389379264), operates the SportyPlus platform (“SportyPlus”, “we”, “us”). This policy explains what we do, as data controller, with personal data relating to the platform account layer — your login, your cross-club profile, and your relationship with us directly — as well as this website. General contact: info@sporty.plus. Data protection contact: privacy@sporty.plus.

If you are a member of a sports club that uses SportyPlus, most of the data about your membership, bookings, medical documents, and any court video is processed by SportyPlus on that club's behalf, with the club as data controller. That data is covered by your club's own privacy policy, not this one — check with your club directly. This policy covers what SportyPlus decides on its own: your account, this website, and how we run the platform generally. See our Terms of Service for the fuller explanation of this split, and our Data Processing Agreement with clubs for how we handle club-controlled data as processor.

We do not collect payment card numbers directly — payments are handled by our payment processors (Stripe, Revolut), who return only a reference token to us.

Membership records, booking history, medical documents, court or facility video, and physical access logs (where a club enables smart-lock integration) are processed by SportyPlus as processor, on the instructions of the club you belong to. We do not decide why that data is collected or how long a club keeps it — the club does, subject to our Data Processing Agreement's security and retention commitments. Questions about that data should go to the relevant club first; see Your rights below for how we assist if you contact us directly.

As controller, we share platform-account data with:

• Stripe — to bill Club Accounts for platform subscriptions and fees (US; transferred under Standard Contractual Clauses).
• Google — if you choose to sign in with a Google account (US; covered by Google's Standard Contractual Clauses).
• Mailgun / AWS SES — to send account and service emails (Standard Contractual Clauses apply where relevant).

As processor, on a club's instructions, SportyPlus also uses DigitalOcean (video and media storage) and, where a club enables them, DUPR (rating sync) and Salto / Shelly Cloud (smart-lock access). These process club-controlled data under our Data Processing Agreement, not under this policy.

We may also disclose data where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets, in which case we will tell you before your data becomes subject to a different privacy policy.

Where a recipient above is outside the EEA, the transfer is covered by Standard Contractual Clauses or another valid GDPR Chapter V mechanism. You can request a copy of the relevant safeguard from privacy@sporty.plus.

SportyPlus and this website use cookies and similar technologies. Strictly necessary cookies keep you logged in, remember your selected language, and support secure sign-in (including Google/OAuth) — these do not require consent and cannot be switched off. This website also uses Google Tag Manager and the Meta (Facebook) Pixel for analytics and advertising measurement, which only load and set cookies after you consent via the cookie banner shown on your first visit. You can accept, reject, or change your choice at any time using the “Cookie settings” link in the footer. Contact privacy@sporty.plus with any questions about the cookies we use.

We do not currently send marketing emails. You may receive account and service emails necessary to operate your account (for example, security notices or billing for a Club Account), and a reply to any demo or contact request you submit through this website. If we start sending marketing communications in the future, we will provide an opt-out and update this policy before doing so.

You must be at least 16 years old to hold a SportyPlus User Account directly; a parent or legal guardian must register on behalf of anyone younger. See our Terms of Service for detail.

We keep account data for as long as your User Account is active, and for a limited period after deletion to handle disputes, comply with law, and prevent fraud. Club Account billing and invoice records are kept for at least 10 years as required by Croatian accounting and tax law. You can request deletion of your own account at any time by emailing info@sporty.plus.

Under GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. To exercise these rights over platform-account data, contact privacy@sporty.plus — we will respond within the timeframes GDPR requires.

If your request concerns data controlled by a specific club — your membership, bookings, medical documents, or video — we will help you identify and reach the right club, and act on the club's instructions as processor. If you hold accounts at multiple clubs, resolving a request to the right club(s) is handled manually by our support team today rather than by automated tooling, so it may take longer than a single-club request.

You also have the right to lodge a complaint with a supervisory authority. In Croatia, that is the Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia (azop.hr).

We apply technical and organizational measures appropriate to the data we control directly, including encryption in transit, access controls, and confidentiality obligations on our personnel. No system is completely secure; if we become aware of a breach affecting your data, we will notify you and the relevant authority as required by law.

We maintain pages and profiles on third-party social media and messaging platforms, including Facebook, Instagram, X, LinkedIn, WhatsApp, and Viber, to share news and interact with our community. If you interact with us there — by following, commenting, messaging, or otherwise — that platform processes your personal data under its own privacy policy, not this one, and any data you see or provide through that platform's interface (such as your public profile, messages, or comment history) is controlled by that platform. We do not control, and are not responsible for, how a social media or messaging platform collects, uses, or protects your data. Check the relevant platform's own terms of service and privacy policy for more information.

We may update this policy from time to time. We will give at least 30 days' notice of material changes through the platform or by email before they take effect.

Inspirium d.o.o.
Zdravka Lozančića 4, Zaprešić, Croatia
OIB: 41389379264
General contact: info@sporty.plus
Data protection contact: privacy@sporty.plus