CompTeam privacy & data

Gyms (branch admins) are the data controllers for the personal data of their athlete members

we collect your email address, name, and any profile information you provide

delivery address, contact details, tax, and shipping information

We store your subscription status and plan tier.

Analytics cookies are only set after you give consent via the cookie banner.

names, dates of birth, training records, belt history, competition results, and billing mandates

Cloudflare Turnstile performs a security check in that form and may process browser or device signals.

Compteam receives the name, email, phone number, date of birth, and optional message entered in the form

Name, date of birth, email address, postal address, phone number, gender, training history, belt and stripe history, competition results, membership status

payment references (IBAN, SEPA mandate IDs), weight records, photos

cancellation reasons and optional member comments

We use this to operate your account and deliver the service.

Compteam may use the order details Stripe makes available to us to fulfil the order manually, provide support, and keep required accounting records.

Cloudflare Turnstile performs a security check and may process browser or device signals.

We use Google Analytics 4 to understand how visitors use the site.

shares the inquiry with the selected club so it can contact you

Compteam processes member data to provide the core gym management functions: athlete profiles, belt promotions, competition records, membership billing, SEPA mandates, training attendance, and related operations

AI Companion chat — branch staff may query athlete and operational data via an AI assistant.

Weekly emailed club briefing (Blue Belt plan or above) — an automated operational summary is generated for branch administrators.

Platform account data is retained for as long as your account is active.

Analytics data is retained per Google Analytics defaults (14 months).

When the service ends, Compteam follows that instruction and deletes existing copies, unless applicable law requires retention.

for the duration of the Controller's active subscription and for any legally required retention period thereafter

Supabase Database hosting and authentication EU (Frankfurt)

Supabase Inc. EU (Frankfurt, Germany) Database hosting and authentication

Transfers to US sub-processors rely on appropriate safeguards (Standard Contractual Clauses and/or EU-US Data Privacy Framework participation)

Transfers to US sub-processors rely on appropriate safeguards (Standard Contractual Clauses and/or EU-US Data Privacy Framework participation)

Transfers of personal data to US sub-processors (Stripe, Resend, and — where the AI assistant is enabled — Anthropic, Google, or OpenRouter) are governed by the EU–US Data Privacy Framework (DPF)

Standard Contractual Clauses (SCCs) where applicable

Sub-processors Sub-processor Purpose Location Supabase Database hosting and authentication EU (Frankfurt)

See our Data Processing Agreement .

When you delete your account, your personal data is erased, subject to legal retention obligations described below.

Access — request a copy of your personal data

Rectification — correct inaccurate data

Erasure — request deletion of your account and personal data

Portability — export your data in a machine-readable format (available from your profile)

object to direct marketing (LQPD Art. 24(2))

Withdraw consent — withdraw any consent you have given, at any time, without affecting prior processing

Complaint — lodge a complaint with the Andorran supervisory authority

Assist the Controller in fulfilling data subject rights requests (access, rectification, erasure, portability) — tools available in the platform's admin interface

Data export (CSV export from the admin interface)