GDPR in Ireland: your data
The short version. The General Data Protection Regulation (GDPR) gives you rights over information about you. This page explains, in plain words, who is responsible for your data in Hashmark, how to use your rights, and who to turn to in Ireland. What we keep, why and for how long is in our privacy policy.
Who is responsible for your data
| Information | Controller | Who to write to first |
|---|---|---|
| Your account (email, name, sign-in), billing, the usehashmark.com website | Vantry LLC, which runs Hashmark | Hashmark: support@usehashmark.com |
| What your team or club records about you: roster, attendance, injuries and absences, wellness, testing, licence and medical certificate, dues, trips, photos and videos, messages, club email | Your club or team. Hashmark is only its processor (section 14 of the terms). | Your club office or your coaches. If you write to us, we pass your request on and help them answer. |
Vantry LLC, 2524 Van Beek Road, Green Bay, WI 54311, USA. Data protection contact: support@usehashmark.com, with "GDPR" in the subject line. We answer in English or French.
Your rights and how to use them
| Right | What it means | How to use it |
|---|---|---|
| Access | Know what information we hold about you and get a copy | Write to us. For your team's or club's records, also ask your club office. |
| Rectification | Have wrong or incomplete information corrected | Your name: in Hashmark, Settings, Account settings. Anything else: your coaches, your club office, or us. |
| Erasure | Have your information deleted | Delete your account yourself in Hashmark (Settings, Account settings, Delete my account). Records the club must keep (for example its accounts) stay with the club, no longer linked to your account. |
| Restriction | Have the use of your data paused while something is checked | Write to us. |
| Portability | Get your data in a reusable format | A coach can export a full copy of the playbook at any time. For your other data, write to us. |
| Objection | Refuse a use based on our legitimate interests | Write to us. Website visits are counted only if you accepted (Cookie settings button at the bottom of the website). |
| Withdraw consent | Take back an agreement you gave | Image rights: change your answer on the club's form. A parent's OK: the link in the email the parent received. Notifications: your phone's settings. Shared plays: stop sharing the play. |
We answer within one month, free of charge. We may ask you to confirm who you are, for example by writing from your account's email address. We make no automated decisions that significantly affect you, and we do no advertising profiling.
Health data
Injuries and absences, wellness check-ins and medical certificates are health data, which the GDPR protects more strongly (Article 9). Your club or team decides to record them, to organize practices and games and to follow its federation's rules; only the roles that need them see them. Hashmark keeps them only to provide the service to your club, never uses them for anything else and never shows them to other clubs. Wellness check-ins are only for adult players who agree themselves; only the head coach and one named trainer see the answers, which are kept for 90 days.
Young players and the age of consent
In Ireland, the age of digital consent is 16 (Data Protection Act 2018, section 31): under 16, a parent must give or approve consent to an online service. In Hashmark there is no account before 13, and anyone aged 13 to 15 needs the OK of a parent or guardian, which we ask for by email. The parent can take the OK back at any time with the link in that email, which deletes the account. For photos and videos of a player under 18, a linked parent answers the club's image rights form.
The national law in Ireland
The GDPR is supplemented by the Data Protection Act 2018, which also set up the Data Protection Commission.
- Hashmark's database is hosted in Ireland, but Vantry LLC has no establishment in Ireland or elsewhere in the EU, so you can complain to the Data Protection Commission like any other Irish resident.
Where your data goes
Hashmark's database is hosted in Ireland (European Union); the clubs' photos are stored in the European Union and their videos in Slovenia (European Union). Some providers (email sending, payments, notifications) may process data in the United States; those transfers are covered by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. The full list of providers is in the privacy policy. We never sell or rent personal data.
Security and breaches
Everything travels encrypted (HTTPS), and people see only their own teams and, within a team, only what their role allows. If a data breach puts you at risk, we tell the competent data protection authority within 72 hours and inform you and your club, as the law requires.
Complaints: the Data Protection Commission
If you think your rights are not respected, write to us first: most questions are settled quickly. You can also complain at any time to the data protection authority of the EU country where you live or work, or where the problem happened.
| Authority | Data Protection Commission (DPC) |
|---|---|
| Postal address | Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland |
| Website | dataprotection.ie |
| Complaints | Online form: forms.dataprotection.ie/contact |
Other countries: see GDPR by country.