Last updated: 26 August 2026

Privacy Policy

How ProSportStaff processes personal data under the GDPR (Regulation (EU) 2016/679) and Romanian law.

This policy explains what we collect, why, for how long, and what rights you have. For cookies see also the Cookie Policy.

1. What data we process

Depending on how you use the platform, we may process:

  • Identity and contact data (name, email, phone, organisation)
  • Profile and career data (sport, role, licences, CV, media, availability)
  • Account and technical data (login, IP, device, security logs)
  • Communications (messages, contact forms, newsletter preferences)
  • Billing data when paid features are used

2. Purposes and legal bases

We process data to operate accounts and profiles, match talent with clubs/agencies, send transactional emails, improve security, comply with law, and — with consent — send newsletters or marketing.

  • Contract / pre-contract (Art. 6(1)(b) GDPR) — account and core services
  • Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, product improvement
  • Consent (Art. 6(1)(a)) — newsletter, optional cookies/analytics
  • Legal obligation (Art. 6(1)(c)) — accounting, regulatory requests

3. Recipients and processors

Data may be shared with other users as part of the marketplace (e.g. public profiles, messages you send), and with processors such as hosting, email (Brevo), analytics (if enabled) and security tooling, under contracts that require appropriate safeguards.

We do not sell personal data.

4. Transfers outside the EEA

If a processor transfers data outside the EEA, we rely on adequacy decisions or standard contractual clauses and additional measures where required.

5. Retention

We keep data only as long as needed for the purposes above: active accounts while the relationship lasts; legal/accounting records for the periods required by law; support tickets and logs for limited periods; newsletter until you unsubscribe.

6. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.

You may also lodge a complaint with the Romanian DPA (ANSPDCP).

7. Security

We apply technical and organisational measures appropriate to the risk (access control, encrypted transport, file scanning for uploads such as CVs, monitoring). No method is 100% secure; please use a strong password.

8. Children

The platform is intended for professionals and adults. Profiles involving minors must be managed by a parent/guardian or authorised representative in line with applicable law.

Privacy Policy | ProSportStaff