Who is responsible
Bogdan Vidak, trading as VidakAI is the data controller for personal data processed through vidakai.org. Contact: support@vidakai.org.
What we collect and why
- Account data (name, email, phone, password, language, roles) — to create and secure your account and provide the Service (contract).
- Player and club data (dates of birth, squads, attendance, line-ups, reviews, documents, contracts, kit, fees) — to run club operations (contract and legitimate interests).
- Youth medical and emergency details and parental consents — to keep players safe, only with guardian consent and with restricted access (consent).
- Photos and messages — club communication and player profiles (consent / legitimate interests).
- Device and usage data (IP address, device type, push notification tokens, error logs) — security, fraud prevention, notifications and improving the Service (legitimate interests).
- Support messages — to answer you (legitimate interests).
Who we share it with
- Service providers who host and run the Service (hosting, database, email and push notification delivery, AI translation and assistant features), under contract.
- Paddle, our Merchant of Record, for selling, payments, tax compliance and invoicing.
- Professional advisers (legal, accounting) when needed.
- Authorities or football federations where required by law or registration rules.
We never sell personal data.
International transfers
Some providers may process data outside the EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.
How long we keep it
We keep data while your account or club membership is active and as long as needed for legal, safeguarding and accounting obligations, then delete or anonymise it.
Your rights
Under the GDPR you can request access, correction, deletion, restriction, portability, object to processing, and withdraw consent at any time. Email support@vidakai.org; we respond within one month. You can also complain to Malta's Information and Data Protection Commissioner (idpc.org.mt).
Security
We use encryption in transit, strict role-based access controls, and separate protected storage for youth medical data.
Cookies
We use only essential storage needed to keep you signed in and remember your language. We do not use advertising cookies.
