Privacy policy

Last updated: 29 July 2026

This policy applies to the Paco app and to the club-branded apps operated on the Paco platform (for example, La Salut), as well as to their web version (app.pa-co.app).

1. Data controller

2. What data we process

• Account data: name, email address, profile photo (optional) and club membership number. If you sign in with Google or Apple, we receive the name and email those services provide.
• Sports usage data: court bookings, matches you take part in, results, playing level and how it evolves, and statistics (matches played and won).
• Messages: the messages you write in a match chat, visible to the other participants from the club.
• Notifications: your device token, used to send you push notifications if you enable them.

We do not collect location data, we do not show advertising and we do not sell or share your data with third parties for commercial purposes.

3. What we use it for

• Managing your member account and your access to your club's app.
• Managing court bookings, matches, invitations and results.
• Calculating and displaying your playing level within the club.
• Sending you notifications about your matches and club announcements (you can turn them off on your device).

The legal basis is the performance of the service we provide to you as a club member (Art. 6(1)(b) GDPR) and, for notifications, your consent (Art. 6(1)(a) GDPR).

4. Where the data is stored

We use the Google Firebase platform (Google Cloud) for authentication, the database and notifications. Data is stored on Google servers in the United States, under the safeguards of the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses. Push notifications are delivered through Apple's notification service (APNs).

5. Who has access

• Other members of your club can see your name, photo, level and participation in open matches (this is the app's social function).
• Authorised club staff have access in order to manage members and bookings.
• Our technical providers (Google Firebase, Apple) act as data processors.

6. How long we keep it

For as long as your account is active. If you ask to close your account, we delete your account and your personal data; the club's aggregated sports data (for example, results of matches already played) is kept dissociated from your profile.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You can also lodge a complaint with the Catalan Data Protection Authority (APDCAT) or the Spanish Data Protection Agency (AEPD).

8. Minors

The app is intended for club members. Children under 14 may only use it with the consent of their parents or guardians, managed by the club itself.

9. Website cookies and analytics

This website (pa-co.app) uses Google Analytics 4 (Google Ireland Ltd.) to obtain anonymous browsing statistics and improve the site. Analytics cookies are only enabled if you give your consent in the cookie notice; if you decline, no analytics cookie is set and no data is sent to Google. We apply IP anonymisation and Google's consent mode. Technical cookies that are essential for the website to work do not require consent. The legal basis for analytics processing is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by clearing your browser's browsing data. The controller is Piqture New Media, SLU; for any question about your data you can write to [email protected] (piqture.cat).

10. Changes to this policy

If we change this policy, we will publish it on this page and, if the change is significant, we will let you know in the app.