Privacy Policy

1. Operator and contact details

Sport Atlas is operated by Matteo Mosele, the data controller responsible for the personal data described in this notice.

Operator / data controller

Matteo Mosele

Italian VAT number

P.IVA 14807020962

Business contact address

Via Andrea Solari, 20144 Milano (MI), Italy

Country of establishment

Italy

Privacy / service contact

hello@sportatlasjobs.com

For privacy questions, rights requests or service enquiries, contact hello@sportatlasjobs.com.

2. Scope and information used

This notice covers the Sport Atlas website and requested Job Alerts. Employer and recruitment websites linked from listings operate separately and have their own privacy notices. Applications are made at those destinations; Sport Atlas does not provide an application or CV-upload form in the current service.

• Browsing and search: search words and selected filters are used to return listings. Searches appear in website URLs and may therefore be processed by hosting infrastructure. Avoid entering sensitive or identifying information in a search.
• Job Alerts: your email address, including a standardized version used to recognise the same address; selected search words, filters and preferences; whether the alert is pending, active or unsubscribed; and related timestamps.
• Confirmation and delivery: confirmation and unsubscribe tokens or equivalent identifiers, confirmation expiry, delivery status, message references and limited information needed to troubleshoot delivery and prevent duplicate emails. The stored confirmation record uses a protected hash rather than the original token.
• Communications: messages and contact details you send to hello@sportatlasjobs.com, used to respond to your enquiry or rights request.
• Technical data: website requests involve IP addresses, requested URLs, timestamps and browser/request information. Hosting and security services may record request/security logs. We also process delivery metadata, timing, error categories and technical identifiers needed to operate, secure and troubleshoot the service.
• Privacy choice: a first-party browser preference records only the consent version, analytics choice and time of that choice. It contains no email or tracking identifier.
• Optional analytics: only after you grant analytics consent, Google Analytics receives page and interaction measurements with associated technical/browser data and analytics cookie identifiers. Our analytics events exclude raw search words, email addresses, alert/subscriber identifiers, tokens, URL fragments and full external Apply URLs.

Job information is indexed from public employer career sources and may include recruitment contact information supplied in those listings.

3. Job Alerts are a requested service

An email address is necessary to receive an alert, but is not required simply to browse jobs. Creating an alert requests a confirmation email; new-job emails start only after confirmation. These are transactional notifications for the requested alert, not consent to newsletters or promotional email.

The confirmation link expires after 24 hours. Once confirmed, matching new-job notifications may be sent and the stored confirmation hash and expiry are cleared. Unsubscribing through the link in an alert stops future new-job emails for that alert. It does not unsubscribe other separately requested alerts, erase your email or delete the alert history. A message already handed to the delivery provider may still arrive.

Analytics consent is independent. You can reject or withdraw analytics and still create, confirm and unsubscribe from Job Alerts.

4. Purposes and legal bases

• Requested services — Article 6(1)(b) GDPR: processing necessary to provide a service you request, such as returning search results, setting up, confirming and delivering Job Alerts, and handling related service enquiries.
• Optional analytics — Article 6(1)(a) GDPR: your consent to analytics. Browsing alone is not consent, and you may withdraw it at any time.
• Security and reliability — Article 6(1)(f) GDPR: our legitimate interests in proportionate security, abuse prevention and operational reliability, including troubleshooting and preventing duplicate deliveries, where those interests are not overridden by your rights and freedoms.
• Legal requirements — Article 6(1)(c) GDPR: processing required to comply with an applicable legal obligation, including handling data-protection rights requests where required by law.

5. Service providers and recipients

• Vercel: Website hosting and delivery, including handling website requests and forwarding Job Alert requests to the backend.
• Render: Backend/API hosting and scheduled operational jobs, including Job Alert processing and data retention.
• Supabase: Database hosting for job information, subscriber email addresses, alert preferences and operational records.
• Brevo: Transactional email and Job Alert delivery; receives the recipient email and message content, including confirmation or unsubscribe links.
• Google Analytics / Google: Optional website analytics after analytics consent, including measurement data and associated technical information.

Brevo receives the content needed to deliver requested emails, including confirmation/unsubscribe links and an alert summary. Our email requests opt out of contact-pixel tracking. HTML email may load the Sport Atlas logo from our website host, potentially through your mail provider’s image proxy.

These services process information for the functions described above. Data may also be disclosed where required by an applicable legal obligation.

6. Retention and deletion

Automated retention is operational. The periods below determine when records become eligible for deletion or minimisation. Eligible records are processed on the next successful scheduled cleanup, rather than at the exact instant a period ends.

• Unconfirmed requests: an unconfirmed alert becomes eligible for deletion 30 days after its latest confirmation link expires. The normal link validity is 24 hours, separate from this retention window. A renewed request gets a new expiry. Legacy records without an expiry use their last-update time as the fallback staleness point.
• Unsubscribed alerts: an alert becomes eligible 90 days after unsubscribe (or its last-update time if a legacy unsubscribe timestamp is missing). Unsubscribe stops future new-job emails for that alert; it is not immediate erasure.
• Email address: your email and its standardized version are deleted once no remaining alert needs them. Another active alert, a pending request within its retention period, or a more recent unsubscribe protects that shared email record. Email records with no remaining alerts are removed.
• Delivery records: records become eligible for deletion 180 days after creation. More recent delivery records can remain after an alert is deleted, but their link to your alert and email is removed, together with provider references and error text. They are removed when their own retention period ends. Sport Atlas does not create an email-body archive.
• Active alerts and duplicate prevention: information needed for an active alert is retained. A minimal delivery record may be retained beyond 180 days while it is still needed to prevent duplicate emails for that alert; provider references and error text are removed after that threshold. The minimal record becomes eligible for deletion once it is no longer needed for that purpose.

A full deletion request, after verification of your identity and its scope, stops and removes all alerts associated with the requested email address, including active alerts. Limited delivery evidence disconnected from your alert and email may remain until its own retention period ends. We do not replace your email with a hash or other encoded identity to keep a substitute subscriber record.

These periods cover Sport Atlas alert records, not deletion of past emails from your inbox or all copies held by service providers. Hosting logs and backups, email-delivery services and analytics have their own retention settings and deletion processes. We retain communications only as long as needed to handle the enquiry and any applicable legal obligations. The browser privacy choice is valid for 180 days and is discarded on the next check after expiry; see the Cookie Policy for storage details.

7. International data transfers

Depending on the provider and service, personal data may be processed outside the European Economic Area (EEA). Where this occurs, transfers are subject to applicable GDPR transfer requirements. Appropriate arrangements may include adequacy decisions where applicable, Standard Contractual Clauses where applicable, or other legally recognised safeguards. Processing locations and the applicable arrangements depend on the service and recipient; not every provider necessarily transfers every user’s data outside the EEA.

You can contact hello@sportatlasjobs.com for information about applicable transfer safeguards, including how to obtain a copy where available.

8. Your choices and rights

Use Cookie settings in the footer to review or withdraw analytics consent at any time. Withdrawal stops our future analytics events and attempts to remove accessible GA cookies; it cannot undo data already transmitted. See the Cookie Policy.

Where applicable law provides them, rights may include access, correction, erasure, restriction, portability and objection. Consent can be withdrawn without changing the lawfulness of earlier consent-based processing. You may complain to the competent data-protection supervisory authority, including where the GDPR permits this in your habitual residence, workplace or place of an alleged infringement.

Send rights requests to hello@sportatlasjobs.com. We may ask for information reasonably necessary to verify your identity and clarify the request, including whether all active alerts should stop. Cookie settings are not a request to delete Job Alert data; unsubscribe is not deletion.

9. Automated matching and age considerations

Automated search, classification and filter matching select jobs to display or include in alerts. Sport Atlas does not score applicants or make employment decisions about you. Employers make their own recruitment decisions.

Sport Atlas is not intentionally designed or marketed specifically to children.

10. Changes to this notice

We may update this notice as the service or applicable requirements change. The effective date and last-update date are shown above. Material changes will be communicated as required by law, and a new analytics choice will be requested where fresh consent is required.