Privacy policy

What we collect, why, and for how long

Registering for a showcase

• Data: first name, last name, date of birth, email, phone, chosen showcase; for a minor player, the name, email and relationship of their legal guardian; your contact choices (email, WhatsApp).
• Why: to organize your participation, contact you about your showcase, and set up your order.
• Legal basis: performance of the contract you enter into with us (article 6.1.b of the GDPR).
• Duration: for the length of the relationship, then 3 years after our last exchange.

Your player profile and its presentation to universities

• Data: position, foot, height, weight, club, level, academic background, English and Spanish level, preferences (countries, start date, budget, importance of the scholarship), answers to your personal questionnaire; on the day of the showcase, the filmed game, your clips, your physical test results and your running data (GPS sensor); the level assessment made by our team.
• Why: to build your profile, show it to the college programs that have access to your showcase, calculate your fit with their needs, and allow contact to be made. This is the very purpose of the service.
• Legal basis: performance of the contract (article 6.1.b). For a minor player, their legal guardian confirms the registration and authorizes the filming and the sending of the profile.
• Duration: the online period provided by your pack (1 year for the Outsider Pack), then deletion of the profile and videos, unless you ask us to extend it.

We do not seek any health data and take no body composition measurements. Please do not include any in the free-text fields. The only exception is the medical certificate you choose to send us in the event of an injury or inability to attend (article 11 of the Terms and Conditions of Sale). It is only viewed by the team handling your file, is never passed on to universities, and is deleted as soon as your request for a postponement or refund has been processed.

Players who have already played at a high level (Outsider Pro Pack)

• Data: the information in your application (identity, club, competition, video links and files, message), our decision to approve or reject it and the reason, then your full profile as above.
• Legal basis: pre-contractual measures taken at your request, then performance of the contract (article 6.1.b).
• Duration: if rejected, 1 year after our answer; if approved, the online period of the profile (2 years), then deletion.

Payments and orders

• Data: order contents, amount, email, payment reference and status. Your bank details are entered on Stripe's page and never pass through our servers.
• Why: to collect payment, confirm your order, keep our accounts, and prove your acceptance of the terms of sale.
• Legal basis: performance of the contract (article 6.1.b) and our accounting obligations (article 6.1.c).
• Duration: 10 years for accounting records (article L.123-22 of the French Commercial Code).

Proof of your agreements

• Data: the version of the text accepted (terms of sale, authorizations), who accepted it and when.
• Legal basis: our obligation to be able to prove these agreements (article 6.1.c) and our legitimate interest in defending ourselves in the event of a dispute (article 6.1.f).
• Duration: 5 years after the end of the relationship (ordinary limitation period).

Coaches' area and recruiting needs

• Data: for college coaches, name, title, email, optional phone, university, level, team, recruiting criteria; for accounts, email, university and password (stored in hashed form, never readable, including by us); activity on the platform (shortlists, contact requests).
• Why: to offer coaches players who match their criteria, open and secure their access, and follow up on their requests.
• Legal basis: pre-contractual measures and the contract (article 6.1.b), and our legitimate interest in developing our relationships with college programs (article 6.1.f).
• Duration: 3 years after our last exchange; an account inactive for 3 years is deleted.

Contact form

• Data: email, message and, if you provide it, your name.
• Why: to reply to you, and only that.
• Legal basis: pre-contractual measures (article 6.1.b) or, for a simple question, our legitimate interest in replying to you (article 6.1.f).
• Duration: 3 years after our last exchange.

"Get notified of upcoming showcases" alert

• Data: your email address and the website language.
• Legal basis: your consent (article 6.1.a), which you can withdraw at any time via the unsubscribe link or by writing to us.
• Duration: until you unsubscribe, and at most 3 years without any interaction on your part.

The profile Scan

Answers to the Scan (declared age, level, ambitions, grade average, languages, preferred country) are recorded with no name, no email and no contact details, with a simple technical identifier randomly generated in your browser. We use them only to improve our recommendations, statistically.

Automatic matching with universities

We automatically calculate a fit score between your profile and the needs expressed by each college program, to show it the profiles that match it first. This calculation makes no decision on your behalf: it only ranks, every university can view all the profiles from the showcase, and the choice to contact you remains a person's. You can ask us how your score was calculated.

Who has access to your data

• The OUTSIDER team, only for the purposes of the service.
• The college programs that have access to your showcase, only for your player profile. They see your profile, but not the notes or shortlists of other universities.
• Our technical service providers, acting on our instructions:
  • Vercel Inc. (United States): website hosting, run in its Paris region (EU);
  • Supabase Inc. (United States): database and video storage, Paris region (EU);
  • Stripe: online payment;
  • Google (Gmail): sending and receiving our emails from outsider.showcases@gmail.com;
  • Resend (European Union): sending our automatic emails (confirmations, validation links) from contact@mail.outsiderx.fr;
  • YouTube (Google): streaming game videos on the platform;
  • the photographers and videographers working at the showcases;
  • Trickin Sport: GPS sensors worn during the showcase.

Your data is never sold and is not used for any advertising.

Transfers outside the European Union

Sending your profile to universities in the United States, Canada and Mexico is the very purpose of the service. It is a transfer of data outside the European Union, to countries whose level of protection is not recognised as equivalent to Europe's for these universities. It is based on your explicit consent (article 49.1.a of the GDPR), collected through a dedicated checkbox at registration and given by your legal representative if you are a minor. The risks are: no adequacy decision and no appropriate safeguards, possible access to the data by the authorities of the country, and fewer rights than in Europe. You can withdraw this consent at any time by writing to outsider.showcases@gmail.com: your profile is then no longer sent. The list of universities with access to your showcase is provided on simple request to the same address.

Vercel, Stripe and Google are certified under the EU-US Data Privacy Framework. Supabase covers any transfers it makes with the European Commission's standard contractual clauses.

Minor players

The website is aimed at players aged 16 and over. For a minor player, registration is only valid once confirmed by their legal guardian, who accepts the terms of sale and authorizes the filming and the sending of the profile. The legal guardian may exercise all the rights below on the child's behalf.

The security of your data

Database access restricted by strict rules (data can only be read by our servers and our team, never from a public page), password-protected coaches' area, hashed passwords, videos stored in a private space, small team, website and database hosted in the European Union (the game videos shown on the platform go through YouTube, see above).

Your rights

You may at any time request access to your data, its rectification, its erasure, the restriction of its processing, its portability, and object to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time.

Write to us at outsider.showcases@gmail.com. We reply within one month. We will only ask you for proof of identity in case of reasonable doubt.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr) in France, or with the Data Protection Authority (autoriteprotectiondonnees.be) in Belgium.

Cookies

See the cookies and local storage page.