Data Processing Agreement
This data processing agreement (“Data Processing Agreement”) supplements and forms part of the Terms between Coach Amigo B.V. (“Coach Amigo“, Processor) and the Organisation purchasing the Service (“Organisation“, Controller), together the “Parties”.
This Data Processing Agreement applies to the extent Coach Amigo processes personal data on behalf of the Organisation in connection with the Service, within the meaning of Article 28 of the General Data Protection Regulation (“GDPR”).
Article 1 – Definitions
Terms such as “personal data”, “processing”, “controller”, “processor”, “data subject”, “personal data breach” and “sub-processor” have the meaning given to them by the GDPR.
Article 2 – Subject matter, duration and purpose of the processing
- Coach Amigo processes personal data solely for the purpose of providing the Service to the Organisation: team management, match preparation, training registration, attendance registration, playing time and performance registration, team page, and livestreaming.
- This Data Processing Agreement applies for the duration of the agreement between the Organisation and Coach Amigo (the quote and/or Terms), including any renewals, and ends automatically upon termination thereof.
- Coach Amigo does not process personal data for its own purposes, unless an independent legal basis exists for doing so (for example for its own account management or product improvement at an aggregated/anonymised level) and this is described in Coach Amigo’s Privacy Policy.
Article 3 – Nature of the processing, categories of data subjects and data
- Categories of data subjects: players (who may be minors), coaches, trainers, team managers, and – where applicable – parents/guardians and fans added to the Service by the Organisation or its coaches.
- Categories of personal data: name, date of birth/age category, team composition, contact details of coaches/team managers (where entered), attendance data, playing time and performance data, and – where used by the Organisation – footage from livestreaming.
- Coach Amigo does not process special categories of personal data (such as health data) unless the Organisation or its users enter this themselves; in that case the Organisation is responsible for the lawfulness thereof.
Article 4 – Instructions
- Coach Amigo processes personal data solely on the basis of documented instructions from the Organisation, which includes use of the Service in accordance with the functionality described on the Website, unless a legal obligation requires Coach Amigo to process the data.
- If Coach Amigo believes an instruction infringes the GDPR or other applicable data protection law, it will inform the Organisation before carrying out the instruction.
Article 5 – Confidentiality
Coach Amigo ensures that persons processing personal data under its authority are bound by an appropriate confidentiality obligation.
Article 6 – Security
- Coach Amigo implements appropriate technical and organisational measures to secure personal data against loss or unlawful processing, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, and the risks to data subjects.
- Coach Amigo applies, among others, the following measures: encryption of personal data in transit and at rest; role-based access control; logging of access to and changes in personal data; periodic backups; and periodic review and updating of these security measures.
Article 7 – Engaging sub-processors
- The Organisation hereby gives Coach Amigo general authorisation to engage sub-processors (for example hosting providers, email service providers or payment processors), provided Coach Amigo imposes the same (or equivalent) obligations on those sub-processors as set out in this Data Processing Agreement.
- Coach Amigo maintains an up-to-date overview of engaged sub-processors. This overview is available upon request via support@coachamigo.com. Coach Amigo will inform the Organisation of intended changes to this list; the Organisation may raise a reasoned objection to a new sub-processor within 14 days of notification.
- At present, Coach Amigo uses the following sub-processors (to the extent applicable to the processing under this Data Processing Agreement):
- DigitalOcean / Cloudways – hosting and infrastructure (website and Apps), data hosted within the EU. WordPress itself is not a separate sub-processor here: it is self-hosted software running on this infrastructure.
- Brevo – sending of transactional and/or marketing email, EU-based.
- Google (Google Analytics and Firebase) – insights/statistics on use of the website and the Apps, and (via Firebase) potentially crash reporting and push notifications. Google LLC is a US company; this processing therefore falls under Article 11 (transfers outside the EEA) and is carried out under the EU Standard Contractual Clauses (2021/914) as adopted by the European Commission, supplemented by technical and organisational measures to ensure an adequate level of protection. Coach Amigo has accepted Google’s Data Processing Terms, which include the 2021 SCCs. The Organisation is responsible for obtaining any required explicit consent from data subjects (e.g., for Google Analytics) prior to enabling such processing. Firebase Analytics and Firebase Crashlytics are described in the Data & Privacy Policy.
- Mollie – payment processing, Dutch/EU-based.
Article 8 – Assistance with data subject rights
Coach Amigo will, insofar as reasonably possible, assist the Organisation in handling requests from data subjects to exercise their rights under the GDPR (such as access, rectification, erasure or data portability). If Coach Amigo itself receives such a request relating to data it processes on behalf of the Organisation, it will refer the data subject to the Organisation and inform the Organisation of this without delay.
Article 9 – Personal data breach notification
- Coach Amigo will inform the Organisation without undue delay, and in any event within 48 hours of becoming aware of it, of any personal data breach affecting the data it processes on behalf of the Organisation.
- Coach Amigo will provide the information reasonably available to enable the Organisation to comply with its own notification obligation(s) towards the Dutch Data Protection Authority and/or data subjects.
- The Organisation remains responsible for notifying the breach to the Dutch Data Protection Authority and/or data subjects, where required.
Article 10 – Audit and inspection
Coach Amigo will, upon request, make available to the Organisation the information reasonably necessary to demonstrate compliance with this Data Processing Agreement, and will cooperate with reasonable inspections or audits, provided these are announced in writing with reasonable notice and carried out in a manner that does not unreasonably burden Coach Amigo’s operations or the confidentiality of other customers’ data.
Article 11 – Transfers outside the EEA
To the extent Coach Amigo or a sub-processor it engages transfers personal data to a country outside the European Economic Area, Coach Amigo will ensure this is done on the basis of an adequate level of protection, such as an adequacy decision of the European Commission or the EU Standard Contractual Clauses (2021/914).
Article 12 – Liability
The limitation of liability set out in the Terms (section “Limitation On Types Of Damages/Limitation Of Liability”, as supplemented for Organisations) applies correspondingly to this Data Processing Agreement, without prejudice to each Party’s mandatory liability towards data subjects under Article 82 GDPR.
Article 13 – Duration, termination, return and deletion
- This Data Processing Agreement ends automatically upon termination of the underlying agreement between the Organisation and Coach Amigo.
- After the Service ends, Coach Amigo will, at the Organisation’s choice, delete all personal data it processes on behalf of the Organisation, or return it to the Organisation, and will delete existing copies – unless and to the extent Coach Amigo is required by applicable law to retain the data for longer (for example statutory tax retention obligations).
Article 14 – Governing law and disputes
This Data Processing Agreement is governed by the same law and subject to the same competent court as set out in the Terms (Dutch law, competent court of Rotterdam).
Coach Amigo may assign its rights and obligations under this Data Processing Agreement to a third party that takes over the underlying agreement with the Organisation (for example in connection with a sale or transfer of (part of) Coach Amigo’s business), in the same manner as permitted under the Terms.
This Data Processing Agreement was last revised on July 2nd, 2026.