Register your club
In brief. These Terms of Service govern the use of the EvolixSport platform by sports clubs, academies and federations ("Customers") and by the individuals to whom they grant access: coaches, athletes, parents, referees and officials ("Users"). By registering for or using the service, you accept these terms. Customer Data remains the property of the Customer; we process it only in order to provide the service. The DimAI assistant provides general recommendations and does not replace a qualified professional.
The Platform is provided by:
| Legal name | EvolixSport – to be provided in the next update of this document |
|---|---|
| Company registration number | to be provided in the next update of this document |
| Registered address | to be provided in the next update of this document |
| Represented by | to be provided in the next update of this document |
| Privacy e-mail | office@evolixsport.com |
| Support e-mail | info@evolixsport.com |
| Data Protection Officer | not appointed (not mandatory for the operator); requests are handled via the e-mail above |
These terms apply to every access to the Platform. The Customer accepts them upon registration by ticking the corresponding box, and Users accept them upon their first login. A person who registers a Customer represents that they are authorized to represent it and to bind it to these terms. If you do not agree to the terms, do not use the Platform.
Separate written agreements with federations or large organizations take precedence over these terms in the event of a conflict.
Depending on the selected Plan, the Platform includes:
We develop the Platform continuously and may add, change or remove features. Features described as planned or in beta are provided without any guarantee of availability. A material restriction of a feature included in a paid Plan is announced in advance.
The Customer enters data about its athletes, coaches, parents and officials into the Platform and determines the purposes of their processing. The Customer warrants that:
The terms under which we process data as a processor are set out in the Data Protection (GDPR) section and form an integral part of the contract with the Customer.
EvolixSport is currently provided free of charge: newly registered clubs receive trial or free access with the functional limits stated at registration and in the current plan information on the website, and federations and larger organizations receive access under an individual arrangement. The plans and their limits (modules, number of players and coaches, file storage) are described on the website and in the subscription panel and are enforced technically.
The introduction of paid plans will be announced at least 30 days in advance; until then no fees are due and no payment data is collected. Free access does not oblige us to maintain particular features free of charge indefinitely; Section 3 applies to any material restriction.
No fees are currently payable. This Section applies from the moment we introduce paid plans, of which we will notify Customers at least 30 days in advance via the Platform or by e-mail. A Customer who does not wish to move to a paid plan will be able to export its data and terminate the agreement under Section 8 free of charge.
The Platform may not be used for: unlawful purposes; entering data without a legal basis; infringing the rights of third parties; uploading malicious code; attempting unauthorized access, circumventing restrictions or conducting security testing without our written permission; automated data extraction; reselling or granting access to third parties outside the Customer's organization; harassment, discrimination or content unsuitable for children. In the event of a violation, we may restrict or terminate access and notify the competent authorities.
With respect to Customer Data, we act as a processor under Art. 28 GDPR and the Customer acts as controller. The data processing agreement, the list of sub-processors, the technical and organizational measures and the breach procedure are published in the Data Protection (GDPR) section. For our own activities (accounts, invoicing, security, support) we are the controller in accordance with the Privacy Policy. We notify the Customer without undue delay of any security breach affecting its data.
Participation in the partner program (referring new Customers in exchange for a commission) is governed by separate terms accepted upon registration as a partner. Partners do not represent EvolixSport and may not enter into obligations on our behalf.
Athletes, parents and other Users obtain access to the Platform through their club or federation and do not pay any fee to us. If a natural person enters into a paid distance contract with us as a consumer within the meaning of the Bulgarian Consumer Protection Act, they have the right to withdraw within 14 days of its conclusion, unless they have expressly requested that performance begin and have acknowledged that they lose their right of withdrawal upon full performance. Users may also use the European Online Dispute Resolution platform: ec.europa.eu/consumers/odr.
We may amend these terms in the event of changes to the service, the legal framework or the business model. Material changes are announced at least 30 days in advance through the Platform or by email. Continued use after the changes take effect constitutes acceptance of them. A Customer who does not agree may terminate the contract before they take effect.
These terms are governed by Bulgarian law and, for Customers from other countries, to the extent that the mandatory provisions of their own law do not provide otherwise. The parties shall endeavor to settle disputes amicably through negotiation within 30 days. Unresolved disputes are referred to the competent Bulgarian court at the registered office of the operator, unless the law provides for a different jurisdiction for consumers.
If any individual provision is invalid, this does not affect the remaining provisions. These terms, together with the Privacy Policy, the "Data Protection (GDPR)" section and the description of the selected Plan, constitute the entire agreement between the parties with respect to their subject matter. The terms are published in Bulgarian, English, German and Dutch; in the event of a conflict, the Bulgarian version prevails.
EvolixSport: info@evolixsport.com (support), office@evolixsport.com (contracts, personal data).
In brief. EvolixSport is a platform for managing sports clubs and federations. When a club or federation enters data about its athletes, coaches, parents and officials, the organization is the controller of that data and we process it on its behalf (as a processor under Art. 28 GDPR). For our own activities (website, customer accounts, invoicing, security and support) we are the controller. We do not sell personal data, we do not display advertising and we do not use children's data for profiling or advertising. Data is stored in the European Union. The only provider outside the EU is the language model that powers the DimAI assistant, and only text queries are sent to it.
This policy explains how personal data is processed when visiting and using the website evolixsport.com, the Evolix Club platform (https://club.evolixsport.com), Evolix Federation (https://fed.evolixsport.com), the parent portal, the mobile and related interfaces, the application programming interfaces (APIs), the support, payment and communication systems, as well as the artificial intelligence features designated as DimAI.
The policy applies to athletes, including minors, parents and legal representatives, coaches, employees and representatives of clubs and federations, referees and officials, medical and other professionals, website visitors, prospective customers, partners in the partner program and all other users.
Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act and the applicable provisions of the AI Act (Regulation (EU) 2024/1689, the Artificial Intelligence Act).
The controller of personal data for the operation of the website, the registration and management of customer accounts, contracts and subscriptions, payments, security, support, the partner program, marketing and the development of the service is:
| Legal name | EvolixSport – to be provided in the next update of this document |
|---|---|
| Company registration number | to be provided in the next update of this document |
| Registered address | to be provided in the next update of this document |
| Represented by | to be provided in the next update of this document |
| Privacy e-mail | office@evolixsport.com |
| Support e-mail | info@evolixsport.com |
| Data Protection Officer | not appointed (not mandatory for the operator); requests are handled via the e-mail above |
Where a club, academy or federation ("Customer") determines which individuals are registered, which sports, registration, medical, financial or other data is entered and for what purposes it is used, the Customer is the controller and EvolixSport processes the data on its behalf under a contract pursuant to Art. 28 GDPR. The terms of that agreement are published in the Data Protection (GDPR) section.
The Customer is obliged to provide its own information to the data subjects and to ensure an appropriate legal basis, including parental consent where necessary. EvolixSport does not substitute for these obligations. Where EvolixSport determines its own purposes, for example security, invoicing, prevention of abuse or product development, its role is determined separately for the respective activity.
If EvolixSport and a sports organization jointly determine the purposes and essential means of a given processing operation, an arrangement under Art. 26 GDPR is concluded and its essence is made available to the data subjects.
Data is processed lawfully, fairly and transparently; for specific, explicitly stated purposes; to the minimum extent necessary; accurately and kept up to date; for a limited period; with appropriate security; and with documented accountability. The use of data for incompatible purposes, or the entry of sensitive information into an artificial intelligence module without a predetermined legal basis, necessity and safeguards, is not permitted.
Depending on the modules used and on what the Customer has decided to enter, the following categories may be processed:
Data may be provided by the data subject themselves, by a parent or legal representative, by the club, academy or federation (coach, administrator, authorized professional), generated through the use of the platform (results, statistics, logs), received from a connected club or federation system as part of a requested integration, or derived through the analysis of authorized video recordings and statistical data.
Data is not imported from public or third-party sources merely because it is technically accessible. For each source, the lawfulness, quality and right of use are documented.
| Purpose | Legal basis |
|---|---|
| Registration, access and management of a profile and customer account | Art. 6(1)(b) GDPR: contract or steps prior to entering into a contract; for profiles entered by the Customer, the legal basis is determined by the Customer |
| Training sessions, attendance, tournaments, licensing, registration and sports statistics | contract, legal obligation or legitimate interest depending on the specific role; for children, a separate assessment of the best interests of the child is made |
| Physical tests, self-assessments and sports recommendations | contract or legitimate interest; where the information reveals a health condition, explicit consent under Art. 9(2)(a) GDPR, obtained by the Customer |
| Health and medical data (medical certificates, insurance, restrictions) | explicit consent under Art. 9(2)(a) GDPR or another applicable basis under Art. 9(2), determined and documented by the Customer as controller (e.g. compliance with regulatory requirements for admission to competitions) |
| Photos and videos for sports analysis | contract, legitimate interest or consent depending on the context, expectations and risk; for publication for promotional purposes, separate consent |
| DimAI analyses and general recommendations | the legal basis follows the purpose and the input data; artificial intelligence does not constitute an independent legal basis |
| Invoicing and accounting (once paid plans are introduced) | Art. 6(1)(c) GDPR: legal obligation; Art. 6(1)(b): contract |
| Security, prevention of fraud and abuse, protection of rights | Art. 6(1)(f) GDPR: legitimate interest following a balancing test |
| Support and communication | contract, legitimate interest or consent depending on the request |
| Partner program | Art. 6(1)(b) GDPR: contract with the partner |
| Electronic marketing | consent where required by law; existing customers are informed only within the limits permitted by law and with an easy opt-out |
EvolixSport is also designed for sports clubs and academies, which is why the processing of children's data is a foreseeable core activity. Enhanced transparency, data minimization, restricted access and privacy-by-default settings apply.
Photos and video recordings may be processed for sports analysis, tactical preparation, statistics, match reporting, security or communication only if the purpose has been determined in advance and the individuals have been informed. For each feature, the type of recording, the scope, access, retention period, download options and the consequences of refusal are defined.
The video analysis module extracts body key points (pose and movement) from the recording in order to assess technique and load. The automatic extraction of body and movement features is not biometric identification: the system does not aim to uniquely recognize a face and does not compare faces or voices between recordings. If a biometric identification feature is planned in the future, it will not be activated without a separate legal analysis, an impact assessment and an applicable legal basis under Art. 9 GDPR.
Video analysis is performed on our infrastructure in the EU. Video files are not currently sent to external providers. If we activate an external provider for video analysis, it will be added to the list of sub-processors before activation.
Before any direct interaction, the user is clearly informed that they are communicating with an artificial intelligence system and not with a human. DimAI provides general sports, tactical, conditioning and informational recommendations. They do not replace a physician, psychologist, physiotherapist, coach, referee or other qualified person. Content generated by artificial intelligence (for example automatic match reports or articles) is labeled as such where required by the AI Act.
DimAI uses an external language model provided by Groq, Inc. (United States). Only the text data necessary for the specific request is transmitted to the provider: the user's question and sports context, for example the name or initials of an athlete, age group, position, test results, attendance, self-assessments and statistics. In the federation module, names are pseudonymized before transmission. Contact data, payment data, medical documents, photos and videos are not transmitted. Under the provider's applicable terms, requests are not used to train or improve its models and are not retained by it after the request has been processed, except for a short period for security purposes. The current list of providers and transfer mechanisms is set out in Sections 11 and 12.
Before activating a new AI module, we document the exact input and output data, the purpose, the logic of the analysis, the known limitations, the human oversight and the categories of data subjects affected.
Users must not enter medical diagnoses, psychological assessments, identity documents or other sensitive data into DimAI, unless the specific module has been expressly approved for their processing and the interface provides the corresponding information.
DimAI output is treated as supporting information. Decisions concerning health, training load, selection, licensing, disciplinary measures, contracts, participation or exclusion are made by a competent person who can verify the sources and reject the recommendation.
EvolixSport does not use artificial intelligence for emotion recognition, social scoring, manipulative techniques or other prohibited practices under Art. 5 of the AI Act. If a feature falling within the scope of high-risk systems is developed, it will not be released without a new legal and technical assessment.
Artificial intelligence may generate incomplete, inaccurate or inappropriate information. Any user may request human review, contest a result and report a problem at office@evolixsport.com. Material errors and the corrective actions taken are documented.
EvolixSport does not make decisions based solely on automated processing which produce legal effects concerning the data subject or similarly significantly affect them. Sports assessments and DimAI recommendations are subject to meaningful human review by a coach or another competent person. If such decision-making is introduced, the policy will be updated before its activation with information about the logic involved, the significance and the envisaged consequences; the right to human intervention, to express one's point of view and to contest the decision will be guaranteed; and an impact assessment will be carried out.
Access to personal data may be granted to: authorized EvolixSport personnel, only to the extent necessary for maintenance and security; the respective Customer and its authorized users according to their roles; the providers listed below; accountants, lawyers and auditors where necessary; competent authorities where there is a legal basis. A contract under Art. 28 GDPR is in place with each processor, and the use of sub-processors is controlled.
| Sub-processor | Activity | Country | Transfer mechanism |
|---|---|---|---|
| Hetzner Online GmbH | Hosting of the applications and databases, file storage, backups | Germany (EU) | within the EEA – not required |
| Groq, Inc. | Language model for DimAI (chat assistant, analyses and recommendations). Receives text prompts only; data is not used for model training | United States | EU Standard Contractual Clauses (Art. 46 GDPR) and/or EU-US Data Privacy Framework |
Planned sub-processor (not yet active): Stripe Payments Europe, Ltd. (Ireland (EU)) – Processing of online payments and subscriptions. Payment card data is processed by Stripe only. It will be added to the list at least 30 days before activation.
The website loads fonts and libraries from content delivery networks (Google Fonts, jsDelivr, unpkg). When these are loaded, the browser transmits the visitor's IP address to the respective provider. These providers do not receive any other data from us.
The applications, databases, files and backups are stored in a data center in Germany (EU). The only transfer outside the European Economic Area is to the provider of the language model for DimAI in the USA. It is carried out on the basis of the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where the provider is certified, the EU-US Data Privacy Framework, with supplementary measures: transmission of only the necessary text data, pseudonymization, encryption in transit and a contractual prohibition on use for training. Data subjects may request information about, or a copy of, the applicable safeguards at the personal data email address indicated.
Data is not retained for longer than necessary. The specific period depends on the purpose, the contract, legal obligations, limitation periods, anticipated disputes and the Customer's instructions.
| Category | Period / criterion |
|---|---|
| Customer account, profiles and sports data in the modules | for the term of the contract or membership; after termination of the agreement, access is blocked and the data is retained for 90 days for export and restoration, after which it is deleted or anonymized, unless the law requires otherwise |
| Sports history, standings and results | period and legal basis determined by the Customer; archived and public results may be retained in anonymized or aggregated form |
| Children's data | periodic review; deletion or anonymization when the purpose ceases to apply (e.g. leaving the club), unless there is a legal basis for archiving |
| Health data and self-assessments | until the expiry of the document (certificate, insurance policy) or until the purpose determined by the Customer ceases to apply; no longer than the lifetime of the profile |
| Photos and videos for analysis | until deleted by the user or the Customer, but no longer than the lifetime of the profile; extracted features follow the retention period of the recording |
| DimAI conversations and results | for the lifetime of the account, unless deleted earlier by the user; request metadata: 12 months; at the provider: not retained after processing, except for a short period for security purposes in accordance with its terms |
| Financial and accounting records | the statutory accounting and tax retention periods (up to 10 years) |
| Security and access logs | 12 months, unless there is an incident or a legal requirement |
| Support requests | up to 24 months after the request is closed |
| Marketing consent | until withdrawn and for a limited evidentiary period thereafter |
| Data subject requests and breach register | for the period necessary to demonstrate compliance (as a rule, 5 years) |
We implement technical and organizational measures appropriate to the risk, including:
Users are obliged to safeguard their login credentials and to notify us immediately of any suspected abuse at info@evolixsport.com. No internet system can guarantee absolute security. In the event of a security breach, we document the case, assess the risk and, where necessary, notify the Commission for Personal Data Protection (CPDP) within 72 hours of becoming aware of it, the affected Customers without undue delay, and the affected data subjects where there is likely to be a high risk to their rights.
We use only strictly necessary cookies, for which no consent is required. We do not use analytics, advertising or tracking cookies and we do not track users after they log in to the platform.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie (session identifier) | login, session maintenance, protection against cross-site request forgery (CSRF) | up to 30 minutes of inactivity or until the browser is closed |
lang | remembers the language selected by the user | 12 months |
If we introduce optional cookies or analytics technologies in the future, they will be activated only after prior valid consent through a consent panel in which refusing is as easy as accepting, and without loading optional scripts before a choice has been made.
Subject to the conditions of the GDPR, every data subject has the right to information about and access to their data; rectification; erasure; restriction of processing; data portability; objection to processing based on legitimate interest; withdrawal of consent given, without affecting the lawfulness of processing carried out before the withdrawal; safeguards in relation to automated decision-making; and to lodge a complaint with a supervisory authority.
Requests may be submitted to office@evolixsport.com. Registered users may download a copy of their data in a machine-readable format (JSON) and submit an erasure request from their profile in the platform. To protect the data, proportionate verification of identity may be requested. A response is provided without undue delay and, as a rule, within one month; for complex or numerous requests, the period may be extended by a further two months, of which the data subject is informed.
Where EvolixSport processes data solely on the instructions of a Customer, the request is forwarded to the respective controller (the club or federation) within 5 business days, and EvolixSport provides the agreed assistance. The Customer is responsible for the final decision on the request.
A complaint may be lodged with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, cpdp.bg, without prejudice to the right to a judicial remedy. Data subjects in other EU member states may contact the supervisory authority in their place of residence.
Fields required for registration, a contract, licensing, security or a legal obligation are marked as mandatory. Without them, the respective service may not be provided. Data for optional features, marketing or personalization is provided voluntarily, and refusal does not restrict the core service where the data is not necessary for it.
The policy is reviewed whenever there is a change in functionality, AI model, provider, data category, purpose, legal basis, transfer or regulatory requirement. The current version is published with a version number and date. For material changes, appropriate notice is given, in the platform or by email, and, where necessary, renewed consent is requested.
Questions and requests regarding personal data may be addressed to EvolixSport by email at office@evolixsport.com. Technical questions: info@evolixsport.com. Data Protection Officer: not appointed (not mandatory for the operator); requests are handled via the e-mail above.