Effective date: 25 August 2026
EP Sports Management AG ("EP", "we") is a Swiss athlete management agency. This policy explains how we handle personal data in the EP App (iOS and Android) and on the EP Connect platform at ep-connect.ch. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Who is responsible
EP Sports Management AG, Switzerland, is the controller for the data described here. You can reach us at info@ep-management.ch.
Who uses the app
The EP App is not a public service. It is used by athletes under a management agreement with EP, their coaches, and EP staff. An account is created for you as part of that working relationship; there is no self-service registration.
What data we process
- Account data: name, email address, password (stored as a cryptographic hash), role (athlete, coach, manager).
- Athlete profile data: contact details, addresses, date of birth, nationality, passport and travel preferences, clothing sizes, disciplines, photos.
- Competition and schedule data: entries, participations, competition calendars.
- Financial data (athletes and EP staff only): contracts, income and expense records, invoices, balances and payout statements. Coaches never see financial data.
- Travel data: itineraries, bookings, travel documents and boarding passes you or EP upload.
- Communication data: messages, comments and tasks shared with your EP team inside the platform.
- Device data: a push notification token and the device platform, if you enable push notifications.
- Technical logs: standard server logs (IP address, timestamps) kept for security and operations.
Why we process it
- To provide athlete management services under the management agreement: competition planning, travel organisation, partner and contract management, and financial administration.
- To run the app and platform, keep them secure, and fix problems.
- To send push notifications you have opted into, such as entry confirmations or travel updates. You can disable these at any time in the app settings or in your device settings.
Our legal bases are the performance of the management agreement, our legitimate interest in running a secure service, and your consent where we ask for it (for example, push notifications).
Who receives data
We do not sell personal data and we do not use third-party advertising or tracking in the app. Data is shared only with:
- Service providers that host our infrastructure and deliver email.
- Apple, Google and the Expo push service, to deliver push notifications to your device.
- Competition organisers, federations and commercial partners, where this is part of the management services performed for you (for example, submitting a competition entry).
Where data is transferred abroad, we ensure an adequate level of protection in line with the FADP and GDPR.
How long we keep it
We keep personal data for the duration of the management relationship. Afterwards, we retain data only as long as legal obligations require, in particular Swiss commercial record-keeping duties for financial records (up to 10 years), and delete it after that.
Security
All connections are encrypted in transit (TLS). Access to data is restricted by role: athletes see their own data, coaches see their athletes' schedules but no financial information, and EP staff access is limited to what their work requires.
Minors
Where a managed athlete is a minor, the management agreement is concluded with the involvement of their legal guardian, and we rely on that agreement for the processing described here.
Your rights
You can request access to your data, have it corrected or deleted, ask us to restrict processing, object to processing, and receive a copy of data you provided. Contact info@ep-management.ch. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.
Changes
We may update this policy from time to time. The current version is always available at this address.