Privacy notice
This notice explains what personal data Pitch to Campus collects, why, how long we keep it and what your rights are. It covers the waitlist on this website, the intake form for signed families and the service itself. Many of our players are under 18, so we have written it for parents and players together.
Last updated: 24 October 2026
Who is responsible
Pitch to Campus is a trade name of Aangenomen24 (Dutch Chamber of Commerce / KvK no. 42201822), run by Ode Fulutudilu. We are the controller of your data under the GDPR. Contact: pitchtpcampus@gmail.com.
What we collect
- Waitlist: your name and email, the player's birth year, country, club and level, whether you are a parent or the player, and your consent.
- Intake form (signed families only): the player's name, date of birth, nationality, country and city, contact details; football details (positions, clubs, level, honours, stats); links to highlight and match video; school, school system, grades summary, English level and test scores; eligibility answers (pro contract, payments beyond expenses, agent); preferences for start date, level, region, study and budget; and the parent or guardian's name and contact details.
- During the service: emails and messages with you, notes from our calls, the player profile and programme list we make, and replies from coaches that you share with us.
- Payments: invoices and payment status. Card and bank details are entered with our payment provider Stripe; we never see your full card number.
We do not ask for health or medical data, passport numbers or passwords. Please do not send them. If you mention an injury in a message, we only use it for the purpose you shared it for.
Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Sending the free guide and telling you when places open (waitlist) | Your consent. You can withdraw it at any time. |
| Answering your questions and preparing an agreement | Steps you asked for before a contract |
| Delivering the service: intake, profile, programme list, coach outreach, follow-up | Performance of our agreement with the parent or guardian (or the adult player) |
| Sending the player's profile to college coaches | Performance of the agreement, and your explicit consent to the transfer outside Europe (see below) |
| Invoices and bookkeeping | Legal obligation (Dutch tax law) |
| Keeping our website and forms secure and spam-free | Our legitimate interest |
Players under 16 (and under 18)
In the Netherlands, a child under 16 cannot give valid consent online for themselves; a parent or guardian must give or approve it. So for a player under 16 the parent or guardian signs up, signs the agreement and fills in or approves the intake form. For a player aged 16 or 17, a parent or guardian still signs the agreement, and the player co-signs the parts about her. We keep data about minors to the minimum we need, and we never publish a player's profile or share it with a coach before the parent (or adult player) has approved it.
Sharing with US colleges (outside Europe)
The point of the service is to put the player in touch with college coaches, mostly in the United States. Sending a profile, video links and contact details to a US college is a transfer of personal data outside the European Economic Area. Most US colleges are not covered by an EU adequacy decision, so US law may not protect the data in the same way as the GDPR. We only make these transfers because you ask us to as part of the service and give your explicit consent (GDPR art. 49(1)(a) and (b)). We only send what a coach needs, only to programmes on the list you approved, and in most cases outreach goes from your own email address. You can stop further sharing at any time; profiles already sent stay with the college under its own privacy policy.
Who else processes the data
We use a small number of providers who process data for us under data processing terms:
- Supabase (database for the waitlist and intake form; servers in Frankfurt, Germany)
- Netlify (website hosting; may log your IP address for security; US company, EU standard contractual clauses / EU-US Data Privacy Framework)
- Stripe (payments and invoices; Stripe Payments Europe, Ireland. For fraud prevention and legal duties Stripe also acts as an independent controller under its own privacy policy)
- Google (email, documents and video calls; EU-US Data Privacy Framework)
We do not sell your data and do not use it for advertising.
Cookies and tracking
This website does not use cookies, analytics or advertising trackers. When you submit a form, your browser sends the form data directly to our database provider.
How long we keep it
- Waitlist: until you ask us to remove you, or at most 24 months after our last contact.
- Intake and client file: until 12 months after the service ends, so we can answer follow-up questions, then deleted.
- Invoices and payment records: 7 years, as Dutch tax law requires.
- Intake forms from families who do not go ahead: deleted within 3 months.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can withdraw consent at any time; this does not affect what we did before. For a player under 16 the parent or guardian exercises these rights; a player aged 16 or over can also contact us herself. Email pitchtpcampus@gmail.com and we will reply within one month. We may ask you to confirm who you are.
Complaints
Please contact us first. You also have the right to complain to a data protection authority: in the Netherlands the Autoriteit Persoonsgegevens; in the UK the ICO; elsewhere the authority in the country where you live.
Security and changes
The public website can only add records to our database, not read them. Access is limited to Ode. We tell you if this notice changes in a way that matters to you.
No automated decision-making or profiling takes place.