Privacy Policy

S&C Holding GmbH ("we", "us", "SoloCoach") operates the SoloCoach application and website (www.solocoach.io). This Privacy Policy explains how we collect, use and protect personal data.

1. Data Controller

S&C Holding GmbH
Halbgasse 1a, 1070 Vienna, Austria
Email: hello@solocoach.io
VAT ID: ATU70341613
Managing Director: Mag. Markus Höfinger

2. Data we collect

2.1 Waitlist & contact data

• Email address
• Sport category (optional, for classification)
• Consent to receive launch updates

2.2 Feedback

• Free-text messages you submit via the feedback form
• Optional email address for follow-up

2.3 Usage data

• Device information, browser type
• IP address (truncated where possible)
• Pages visited, time on page
• Interactions with the website

3. How we use your data

3.1 Service delivery

• Managing the waitlist and sending launch updates
• Responding to requests and feedback
• Sending transactional emails (e.g. confirmations)

3.2 Service improvement

• Analysing aggregated usage patterns
• Product development and feature prioritisation

3.3 Marketing and analytics

• Understanding user behaviour on the website
• Measuring the reach of the waitlist campaign

4. Legal basis for processing (Art. 6 GDPR)

We process your personal data only on the basis of one of the following legal grounds under Art. 6(1) GDPR:

• Consent (Art. 6(1)(a) GDPR): Waitlist sign-up, launch updates via email, optional analytics cookies. You can withdraw consent at any time.
• Contract performance (Art. 6(1)(b) GDPR): Providing the service (coach account, booking management, payment processing), sending transactional emails (booking confirmation, cancellation, invoice).
• Legal obligation (Art. 6(1)(c) GDPR): Retention of tax-relevant data pursuant to § 132 BAO (Austrian Federal Tax Code) — invoices kept for 7 years — and fulfilling disclosure obligations to authorities.
• Legitimate interest (Art. 6(1)(f) GDPR): IT security (server logs, abuse prevention), pseudonymous traffic analytics (Plausible), service improvement through aggregated usage patterns, direct contact of existing customers regarding similar services. You can object to processing based on legitimate interest at any time (§ 8 of this policy).

5. Data sharing

5.1 What we never share

• Individual waitlist entries with third parties outside our processors
• Identifiable personal data for third-party advertising

5.2 Aggregated data

We may publish aggregated, anonymised statistics (e.g. "X percent of the waitlist are tennis coaches") that do not allow identification of any individual.

5.3 Processors

We use the following providers:

Data Processing Agreements (DPAs) are in place or being concluded with all of our processors. For details on a specific provider, contact us at hello@solocoach.io.

6. Data security

6.1 Encryption

• All data is encrypted in transit (TLS/SSL)
• Backups are stored encrypted

6.2 Access control

• Only authorised personnel can access systems
• Role-based access controls
• Regular security reviews

7. Retention

• Active waitlist entries: retained as long as consent stands
• Opt-out / deletion: data deleted within 30 days
• Aggregated analytics: may be retained indefinitely (anonymised)

8. Your rights (GDPR)

Under the General Data Protection Regulation you have the right to:

• Access: request a copy of your data
• Rectification: correct inaccurate data
• Erasure: delete your data
• Portability: export your data
• Restriction: limit how we process your data
• Objection: object to certain processing
• Withdraw consent: at any time

To exercise these rights, contact us at hello@solocoach.io.

9. Cookies

We use cookies for:

• Core website functionality (required)
• Analytics (optional)
• Preferences (optional)

You can manage cookie preferences in your browser settings and disable non-essential cookies there.

10. Children

SoloCoach is not intended for users under 16 years of age. We do not knowingly collect data from children under 16.

11. International transfers

Some of our processors are located outside the EU (USA). We ensure appropriate safeguards through:

• EU-U.S. Data Privacy Framework (DPF) — current adequacy basis for US transfers since July 2023
• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Adequacy decisions where applicable

A transparent provider list with region, data type and DPA link is available at /eu-privacy.

12. Changes to this policy

We may update this Privacy Policy. Significant changes will be communicated via email or in-app notification.

13. Contact

For privacy-related inquiries:

S&C Holding GmbH
Halbgasse 1a, 1070 Vienna, Austria
Email: hello@solocoach.io

You may also lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at