TRANSPARENCY AND DATA PROTECTION
Privacy Policy
Last updated: 2 September 2026
Gaby Reca Elite Hub is a high-performance sports management and monitoring platform for padel academies and players. This document explains transparently which data we collect, on which legal basis we process it, which providers it is shared with and how you can exercise your rights under the EU General Data Protection Regulation (GDPR).
This is a courtesy translation. The Spanish version is the legally binding one; in case of discrepancy, the Spanish text prevails.
Data controller
The data collected through the website and the mobile app is processed by the following controller:
What data we process
Account and profile data
Full name, email address, password (stored using one-way cryptographic hash functions, never in plain text), profile photo, selected language and the club or academies you belong to. Access timestamps are recorded for security audits.
Player profile
Date of birth, sex, nationality, contact phone number, membership or licence number, dominant hand, court position (forehand/backhand side), category, playing level and optional anthropometric parameters (height, weight, reach and body composition).
Sports and training data
Session attendance records, court planning with the Session Builder, technical and tactical evaluations per shot, rating of perceived exertion (RPE), acute/chronic load ratio and methodological notes from the coaching staff.
Health, wellbeing and biometric data (Whoop)
If you voluntarily link a compatible biometric sensor (such as Whoop or Wellbeinn), recovery metrics (Recovery Score), heart rate variability (HRV), resting heart rate, sleep stages and oxygen saturation are synced. Subjective wellbeing questionnaires and physical restrictions reported by medical staff are also recorded.
Physiological and health data is processed exclusively with your explicit consent, given when you connect the device. You can revoke this permission instantly at any time from Settings → Unlink device in the mobile app.
Voice notes and audio processing
Coaches can dictate technical voice notes courtside. The audio is transmitted encrypted to our speech-processing service and is discarded immediately after transcription. Only the resulting structured text is kept in the player’s profile.
Technical device data
Push notification identifier for court reminders and call-ups. The platform does not use advertising identifiers or cross-site tracking for advertising networks.
Purposes of processing and legal bases
- Provision of the AMS SaaS service: Training planning, group management, session creation and sports progress tracking. (Legal basis: performance of the service contract).
- Physical monitoring and fatigue prevention: Recovery analysis and workload calculation to optimise performance and prevent sports injuries. (Legal basis: explicit consent).
- Operational communications and notifications: Call-up notices, court changes and session summaries. (Legal basis: legitimate interest in performing the service; can be disabled by the user).
- Platform security and integrity: Detection of unauthorised access and technical session auditing. (Legal basis: legitimate interest and regulatory compliance).
We do not sell your data: Under no circumstances do we sell, rent or transfer your personal data to advertisers or third parties for advertising purposes.
Data processors and technology providers
We work with leading technology providers bound by strict confidentiality and data processing agreements (DPA):
Any international transfer outside the European Economic Area is formalised under the Standard Contractual Clauses (SCC) approved by the European Commission or adequacy decisions.
Processing of minors’ data
Padel academies routinely work with under-age students. For users under 14, accounts are managed by the academy with the consent of parents or legal guardians. Guardians have the right to supervise, request access to or demand the deletion of their child’s profile at any time.
Data retention periods
Data is kept for as long as the academy or the athlete keeps an active account on the platform. When you request account closure, personally identifiable information is unlinked. Aggregated training histories may be kept in anonymised form so as not to break the integrity of the collective statistics of court groups.
Your rights and how to exercise them
Under European law you can exercise, free of charge, your rights of:
- Access: Know which personal data we process about you.
- Rectification: Correct any inaccurate or incomplete data.
- Erasure (“right to be forgotten”): Request the permanent deletion of your data.
- Objection and restriction: Object to processing or request its temporary restriction.
- Portability: Download a copy of your data in a structured digital format (JSON/CSV).
To exercise any of these rights, email privacidad@gabyrecaelitehub.com stating your request. We will reply within 30 days at most. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).
Account deletion procedure
You can request immediate closure and deletion of your account from the official page gabyrecaelitehub.com/eliminar-cuenta or directly from the settings panel of the mobile app.
Technical and organisational security measures
Gaby Reca Elite Hub applies industry-grade security protocols: encryption in transit with TLS 1.3, database encryption at rest with AES-256, multi-tenant data isolation per academy and role-based access control (RBAC) with strict permissions.
Changes and updates
We reserve the right to update this policy to reflect operational improvements or regulatory changes. In the event of substantial changes, users will be notified through the app or by email before they take effect.