YouCoach

GDPR overview

GDPR is addressed explicitly but modestly. The privacy policy states it was updated to align with the European regulation, lists the rights under articles 15, 16, 17, 18, 20 and 21, names YouCoach S.r.l. as controller with a postal address, telephone number and email, and gives a retention schedule. The contact form carries an article 13 notice citing Regulation 2016/679, and the terms commit the sharing of minors' photographs and data to GDPR and national law. Being established in Italy, the company needs no article 27 representative and names none. What is missing is equally clear: no effective date on the policy, no named data protection officer, no data processing agreement, no published subprocessor list, and no security certification such as ISO 27001 or SOC 2 is claimed anywhere on the site.

Who owns the data?

YouCoach S.r.l., at Via Roma 44 in Monselice (PD), Italy, names itself the controller responsible for protecting and processing personal data, reachable at info@youcoach.com or +39 0429 1961410. Users keep access to their own records through the "My profile" area and may request access, rectification, erasure, restriction, objection, portability or withdrawal of consent, and may complain to a supervisory authority. The company may share data with service providers it states are established inside the European Union, and will name them in a complete list only on written request. Nothing in the published terms transfers ownership of user-entered content to the vendor.

Reuse rights

The published documents draw a clear line between what users may do with their own data and what they may do with YouCoach's content. Data a coach enters into the web application, teams, sessions, players, assessments and videos, remains theirs to consult, correct, export as PDF and share with staff and players inside the platform; no clause claims ownership of it. The vendor's own material is treated the opposite way. Paid content may be used only privately, in digital form, on the single device it was downloaded to; it may not be resold, reprinted, modified or reproduced beyond strictly personal printing, and no economic exploitation rights are acquired. The wider terms also forbid reselling the services or using the site for business or promotional purposes without prior written authorisation. Where minors' photographs or sensitive data are involved, users must hold signed parental or guardian consent before entering or sharing anything.

Data retention & training

Hosting summary

The published information is thin. The privacy policy states that personal data is stored in a database on servers licensed to YouCoach, without naming a country, a region or a hosting provider. The only geographical commitment is indirect: service providers with whom data may be shared are stated to be established within the territory of the European Union, and a complete list of them is available on written request rather than published. There is no mention of transfers outside the European Economic Area and no standard contractual clauses are referenced. The controller itself is Italian, so the applicable jurisdiction is Italy and, through it, EU law; the terms confirm disputes are settled under the law of the member state in which the site is based. As a technical observation rather than a vendor statement, the domain's public IP address resolves to OVH infrastructure located in Frankfurt, Germany, which is consistent with European hosting but is not itself a declaration by the publisher.