Privacy Policy

Last updated: July 2026

1. Controller

The operator responsible for this platform is:

Webhunters UG
Neumarkt 7, 49074 Osnabrück, Germany
E-Mail: info@hansecheck.com

For data processed in the context of a specific sports club, the respective Club is the joint controller for data relating to its players. HanseCheck provides the technical platform on the Club's behalf.

2. Data We Collect and Why

A) Contact & Inquiry Form (Landing Page)

When you submit an inquiry via our website, we collect:

Name, email address, phone number — to respond to your inquiry
Club name, number of locations, selected plan, message — to process your request
Hansefit API key, Playtomic Venue ID & Client ID — optionally, to pre-configure your account

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to business inquiries). Data is retained until the inquiry is resolved and deleted thereafter, unless a contract is formed.

B) Player Self-Registration Form

When a player submits the club registration form, we collect:

Full name — to identify the player
Playtomic email address — to match bookings
Hansefit member ID — to verify membership and track check-ins

Legal basis: Art. 6(1)(a) GDPR (explicit consent via checkbox). You may withdraw consent at any time by contacting your Club.

C) Club Staff Accounts

For club operators using the HanseCheck back-office, we store:

Email address and hashed password — for account authentication
Session token — to maintain your login session (stored as an HttpOnly cookie)
Club configuration (SMTP credentials, API keys) — encrypted at rest using AES-256-GCM

Legal basis: Art. 6(1)(b) GDPR (contractual necessity).

3. Cookies & Local Storage

This platform uses:

Session cookie (hansecheck_session) — an HttpOnly, SameSite=Lax cookie that keeps you logged in as a club operator. It is not used for tracking and expires after 30 days.
Language preference (hc_lang) — stored in your browser's localStorage to remember your chosen display language. Contains no personal data.

No third-party tracking cookies or analytics scripts are used.

4. Data Sharing

Player data is shared with:

Hansefit — member IDs are sent to the Hansefit API to verify membership and check-in status
Playtomic — booking data is retrieved from the Playtomic API using the Club's credentials
The Club(s) you are registered with — they can view your registration and check-in data

No data is sold to third parties or used for advertising purposes.

5. Storage & Retention

All data is stored on servers within the European Union. Player data is retained for as long as the registration is active. Inquiry data is deleted after the inquiry is processed. You may request deletion at any time.

6. Your Rights

Under the GDPR, you have the right to access, rectify, delete, and port your personal data, as well as to withdraw consent and lodge a complaint with a supervisory authority (in Germany: the relevant Landesbeauftragter für Datenschutz).

To exercise these rights: contact the Club you registered with, or contact us directly at info@hansecheck.com. Deletion requests are processed within 30 days.

7. Contact

For questions about this privacy policy, contact us at info@hansecheck.com or see our Impressum for full contact details.