Privacy Policy

This Privacy Policy explains how SportsPay ("we", "us", "our") collects, uses and shares personal data when you use SportsPay through our mobile applications, websites or any related service. SportsPay is operated by 1SENSE SINGLE P.C., the data controller responsible for your personal data under Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.

1. Who we are

1SENSE SINGLE P.C.
224 Syggrou Avenue, Athens, Greece
VAT (ΑΦΜ): EL801053830
Contact: support@sportspay.gr

2. Our role, and the federation's role

For payment-processing data, SportsPay acts as data controller for the limited data it processes to facilitate and record payments. The sport federation you are paying is a separate controller of the membership and registry data it holds about you; its own privacy policy governs that data. Where we process data strictly on a federation's behalf and instructions, we do so as its processor under a written data-processing agreement.

3. What we collect

We collect only the data needed to process a payment and meet our legal obligations:

• Payment-related information: the federation, the item or fee you are paying, the amount, and your unique payer/athlete identifier as supplied by the federation.
• Email address (optional): only if you choose to receive a payment receipt by email.
• Payment outcome: status and identifiers returned by the Payment Provider once the transaction completes.
• Technical data: limited technical and diagnostic data (e.g. app version, device type, error logs) needed to keep the service working and secure.

We do not collect or store your card details. Card data is handled exclusively by the licensed credit institution that processes payments (see section 5).

Some data exists only on your device (e.g. your preferred language, your stored email, a short history of completed payments) and is never transmitted to us.

4. Why we collect it

We process your data to complete the payment you initiated; issue payment receipts; meet our legal obligations under Greek tax and electronic-receipt law; prevent fraud and reconcile transactions; and keep the service secure.

The legal bases are: performance of a contract (Art. 6(1)(b) GDPR), compliance with a legal obligation (Art. 6(1)(c)), our legitimate interests in security and fraud prevention (Art. 6(1)(f)), and your consent for optional items such as receipt-by-email (Art. 6(1)(a)).

5. Who we share it with

We share the minimum data necessary with:

• Viva.com — the licensed credit institution that processes the payment.
• The Greek tax authority (AADE), as required by Greek e-receipt legislation.
• The sport federation whose membership, fee or event you are paying — so it can update its own records.
• Hosting and IT providers who operate the platform on our behalf, under data-processing agreements.

We do not sell your personal data and do not share it for marketing.

6. International transfers

We process data within the EU/EEA wherever possible. If a provider processes data outside the EEA, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How long we keep it

Payment and receipt data is retained for the period required by Greek tax and accounting law (currently a minimum of five years). Technical logs are kept for a short period for security and troubleshooting. After the applicable period we delete or anonymise the data.

8. Cookies (website)

The SportsPay marketing website uses only strictly necessary cookies required for the site to function. If we introduce analytics or other non-essential cookies, we will request your consent first through a cookie banner.

9. Security

We use encryption in transit and apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. Card data never reaches our systems.

10. Your rights

Under the GDPR you have the right to access, correct, erase, restrict or object to processing, to data portability, and to withdraw any consent you previously gave. To exercise any of these rights, contact support@sportspay.gr.

You may also lodge a complaint with the Hellenic Data Protection Authority (HDPA), www.dpa.gr. For data held by a federation about your membership, you may also contact that federation directly.

11. Changes

We may update this policy from time to time. The date at the top reflects the latest version. Material changes will be communicated through the app or website.

12. Contact

1SENSE SINGLE P.C.
224 Syggrou Avenue, Athens, Greece
VAT (ΑΦΜ): EL801053830
Email: support@sportspay.gr