Security and GDPR
Your club's and your customers' data, under control.
This is what we do today to protect it, explained plainly and with links to the legal documents.
What we do
Six concrete things.
-
Everyone sees what they should
Each person has a role in each club and only accesses what that role allows. Passwords are stored hashed, never in plain text.
-
Each club in its own place
A club's data is kept separate from every other club's: nobody from another club can see it.
-
Activity log
The club owner can check who did what and when. Security events are logged too.
-
Your data is yours
Each person can export their data and ask for their account to be deleted. When the contract ends you have 30 days to export and the data is deleted after 90 days. The invoices we issue to you are kept for 6 years as required by law.
-
Card payments
Card details are processed by Stripe and Redsys. Pranarp Club does not store them, and your gateway credentials are stored encrypted.
-
Where it is hosted
The application and database are on IONOS SE, location: EU (Germany / Spain).
Documents
The legal documents, one click away.
Read them before you decide: they are the same ones you accept when you start.
Demo
Want to see how permissions work?
We show you in a demo with real roles from your club.