Privacy Policy

    Last updated: April 1, 2026

    1. Introduction & Controller Information

    This Privacy Policy explains how Revel ("we", "us", "our", or the "Platform"), operated by Revel Sports, CIF: B22561344, C/Pare Lluis Navarro 259, 1, 46011 Valencia, Spain, processes your personal data when you use our website, mobile application, and related services (collectively, the "Services").

    Revel acts as the Data Controller for personal data processed through the Platform in connection with account management, platform functionality, and related operations. For questions regarding data protection, please contact us at hello@revel.cool.

    2. Roles & Responsibilities

    Revel operates as a technology marketplace connecting users with independent third-party event organizers, clubs, and training providers. It is critical to understand the following distinction:

    2.1 Revel as Independent Data Controller

    Revel is an independent Data Controller with respect to all personal data processed for platform-related purposes, including account creation, platform analytics, user support, and transactional communications.

    2.2 Event Organizers as Independent Data Controllers

    When you register for an event, training, or activity through Revel, the organizer or club responsible for that event acts as an independent Data Controller for any personal data they receive and process in connection with your participation. Revel is not responsible for, and has no control over, how organizers process your personal data. There is no joint controllership between Revel and event organizers unless explicitly stated in a separate written agreement.

    We strongly recommend that you review the privacy policy of each organizer before registering for their events.

    3. Data We Collect

    3.1 Account Data

    Name, email address, encrypted password, and profile information you provide during registration.

    3.2 Profile Data

    Optional public information you choose to display on your profile, such as a profile picture, bio, sport preferences, location, and skill level.

    3.3 Event Registration Data

    Information related to event registrations, including event details, registration timestamps, team assignments, and any additional data required by the event organizer.

    3.4 Communication Data

    Messages, inquiries, and other communications you send through the Platform or to our support channels.

    3.5 Usage Data

    Information about how you interact with the Platform, including pages visited, features used, search queries, click patterns, and session duration.

    3.6 Device & Technical Data

    IP address, browser type and version, operating system, device identifiers, screen resolution, language preferences, and referring URLs.

    3.7 Authentication Data

    Passwords are stored using industry-standard encryption (hashing with salt). If you authenticate via third-party login providers (e.g., Google, Apple), we receive limited profile information as authorized by you through those providers.

    4. Purpose of Processing

    We process your personal data for the following purposes:

    • Account creation and management: To create, maintain, and secure your user account.
    • Event registration and coordination: To facilitate your registration for events and share necessary data with the relevant organizer.
    • Platform functionality: To provide, maintain, and improve the Services, including search, recommendations, and user experience features.
    • Transactional communications: To send you registration confirmations, account notifications, and service-related emails.
    • Marketing communications: With your explicit consent, to send promotional content about the Platform and related services. You may withdraw consent at any time.
    • Analytics and improvement: To analyze usage patterns and improve the Platform's features, performance, and content.
    • Security and fraud prevention: To detect, prevent, and address fraud, abuse, security incidents, and technical issues.

    5. Legal Basis for Processing (GDPR)

    We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

    • Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary to fulfill our contractual obligations to you, such as account management and event registration.
    • Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent, such as for marketing communications or non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
    • Legitimate interest (Art. 6(1)(f) GDPR): Processing necessary for our legitimate interests, including platform security, fraud prevention, analytics, and platform integrity, provided these interests are not overridden by your fundamental rights and freedoms.
    • Legal obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with applicable legal requirements, such as tax and accounting obligations.

    6. Data Sharing

    6.1 Sharing with Event Organizers

    When you register for an event, certain personal data (typically your name, email address, and registration details) is shared with the respective event organizer to facilitate your participation. Once shared, the organizer acts as an independent Data Controller for that data. Revel does not control how organizers use your data after it has been shared.

    6.2 Third-Party Service Providers (Processors)

    We engage trusted third-party service providers who process data on our behalf for purposes such as hosting infrastructure, email delivery, analytics, and customer support. These providers are bound by Data Processing Agreements (DPAs) and are contractually obligated to process data only in accordance with our instructions and applicable data protection law.

    6.3 Legal Requirements

    We may disclose personal data if required to do so by law, regulation, legal process, or enforceable governmental request.

    7. International Data Transfers

    Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA) where our service providers operate. In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on an adequacy decision, to provide an adequate level of data protection in compliance with the GDPR.

    8. Data Retention

    We retain your personal data in accordance with the following principles:

    • Account data: Retained for the duration of your account and deleted upon account deletion, subject to legal retention obligations.
    • Legal obligations: Certain data may be retained for longer periods as required by applicable tax, commercial, or regulatory laws (typically up to 10 years).
    • Security logs: Retained for a limited duration (typically up to 12 months) for security monitoring, fraud detection, and incident investigation purposes.
    • Marketing consent records: Retained for as long as required to demonstrate compliance with consent requirements.

    9. Your Rights Under the GDPR

    As a data subject under the GDPR, you have the following rights:

    • Right of access (Art. 15): You may request confirmation of whether we process your personal data and obtain a copy of such data.
    • Right to rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
    • Right to erasure (Art. 17): You may request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
    • Right to restriction (Art. 18): You may request restriction of processing under certain conditions.
    • Right to data portability (Art. 20): You may request to receive your data in a structured, commonly used, and machine-readable format.
    • Right to object (Art. 21): You may object to processing based on legitimate interests, including profiling.
    • Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw consent at any time.
    • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

    To exercise any of these rights, please contact us at hello@revel.cool. We will respond to your request within one month, as required by law.

    10. Account Deletion & Data Portability

    You may delete your account at any time through your account settings or by contacting us at hello@revel.cool. Upon account deletion:

    • Your personal data will be permanently deleted from our active systems within 30 days.
    • Certain data may be retained in encrypted backups for a limited period and in compliance with legal retention obligations.
    • Data previously shared with event organizers is under the control of those organizers and is not affected by account deletion on Revel.

    You may also request a complete export of your personal data in a machine-readable format (e.g., JSON or CSV) before or after initiating account deletion.

    11. Cookies & Tracking Technologies

    Revel uses cookies and similar tracking technologies to provide, secure, and improve the Platform.

    11.1 Essential Cookies

    Strictly necessary cookies that are required for the Platform to function (e.g., authentication, session management, security). These cookies do not require consent.

    11.2 Non-Essential Cookies

    Analytics, performance, and marketing cookies are only set with your prior explicit consent, provided through our cookie consent mechanism (cookie banner). You may modify your cookie preferences at any time.

    For more detailed information, please refer to our Cookie Policy (if applicable).

    12. Security Measures

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

    • Encryption of data in transit (TLS/SSL) and at rest.
    • Access controls and role-based permissions for internal systems.
    • Regular security assessments and monitoring.
    • Secure hosting infrastructure with reputable cloud service providers.
    • Employee confidentiality obligations and data protection training.

    13. Profile Visibility & Public Data

    Certain information on your user profile may be visible to other registered users and event organizers, including your name, profile picture, and sport preferences. You can control the visibility of optional profile information through your account settings. Please be aware that any information you choose to make publicly visible may be accessed by other users of the Platform.

    14. Third-Party Links & External Services

    The Platform may contain links to third-party websites, services, or applications, including those operated by event organizers. Revel is not responsible for the privacy practices, content, or data processing activities of any third-party websites or services. We encourage you to review the privacy policies of any third-party services before providing your personal data.

    15. Children's Data

    Revel is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have inadvertently collected personal data from a child under 16, we will take prompt steps to delete such data. If you believe that a child under 16 has provided personal data to us, please contact us at hello@revel.cool.

    16. Liability Limitation

    Revel operates exclusively as a technology platform and marketplace. Revel does not organize, manage, supervise, or conduct any events, trainings, or activities listed on the Platform. All events are organized and operated solely by independent third-party organizers and clubs.

    Revel does not verify, endorse, or guarantee the identity, qualifications, or practices of any event organizer. Revel shall not be held liable for any actions, omissions, data processing practices, or conduct of third-party organizers, including but not limited to their handling of your personal data.

    17. Changes to This Privacy Policy

    We reserve the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to you via email or through a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Platform after any changes constitutes acceptance of the updated Privacy Policy.

    18. Governing Law & Jurisdiction

    This Privacy Policy and any disputes arising from or in connection with it shall be governed by and construed in accordance with the laws of the Federal Republic of Germany and applicable European Union law, including the GDPR. The competent courts in Germany shall have jurisdiction, without prejudice to any mandatory consumer protection provisions that may apply in your country of residence.

    19. Contact Information

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

    • Email: hello@revel.cool
    • Company: Revel Sports
    • CIF: B22561344
    • Address: C/Pare Lluis Navarro 259, 1, 46011 Valencia, Spain