The Gymnast Portal / Legal
Last updated: June 2026 (v1.1 draft — profile images)
Agreement between gymnastics clubs and the platform operator regarding personal data processing.
This is a draft policy for development purposes. It must be reviewed and approved by qualified legal counsel before production use.
The gymnastics club ("Controller") determines purposes and means of processing member and athlete personal data.
The platform operator ("Processor") processes data on documented instructions to provide the service.
Processing covers athlete profiles, session logs, attendance, coach notes, welfare records, optional profile images and club branding assets, and related account data for the duration of the club's subscription or use of the service.
Implement appropriate technical and organisational security measures.
Process data only on documented instructions from the Controller.
Assist with data subject requests where applicable.
Notify the Controller of personal data breaches without undue delay.
The Processor uses sub-processors (including cloud hosting providers) listed in the Privacy Policy. The Controller authorises use of such sub-processors for service delivery.
Club administrators accept this agreement on behalf of their organisation before full use of club administration features.
Acceptance is recorded with version, timestamp, and accepting user ID.