Privacy policy
Last updated: 23 september 2026
1. Who we are
Aantreden.nl is responsible for the processing of personal data via the Muster platform. Muster is operated from the Netherlands and provided to clubs in the United Kingdom; all data is hosted within the EU.
- Company registration: 42009555
- Email: privacy@aantreden.nl
- Website: https://muster.me.uk
2. What data do we process?
- Name and phone number (WhatsApp)
- Email address (for club administrators)
- Attendance records
- IP address (website visits)
- Payment details (processed by Stripe, not stored by us)
- Contact details of team coaches for tournaments (name, phone number and last-used team name), kept per club for recurring tournament organisation
- For clubs with the Player Analysis add-on: match and training ratings by the coach (scores, no free text), sports statistics (e.g. goals, cards), and internal coach notes (free text, visible only to the club’s coaches/administrators)
3. Purpose and lawful basis
We process personal data under the UK GDPR and the Data Protection Act 2018. The lawful bases we rely on are:
| Purpose | Lawful basis |
|---|---|
| Delivering club communication | Performance of a contract |
| Recording attendance | Legitimate interests |
| Payment processing | Performance of a contract |
| WhatsApp messages | Consent (group member) |
| Tournament organisation (coach contact pool) | Legitimate interests |
| Player Analysis — development score per player | Legitimate interests (player development); only at clubs with this add-on active |
| Player Analysis — sharing development score with parent/player via WhatsApp | Consent (per player, always off by default until the club explicitly enables it) |
| Player Analysis — AI training analysis on coach notes | Legitimate interests (coaching support); coach notes are always processed without player names |
| Player Analysis — scouting (sharing profile with an external party) | Consent (per player, revocable, only after club approval) |
4. Sub-processors
Muster uses the following external parties to deliver the service. A data processing agreement compliant with UK GDPR Article 28 is in place with each sub-processor.
| Party | Purpose | Location | Safeguard |
|---|---|---|---|
| Meta (WhatsApp Business Platform) | Sending and receiving WhatsApp messages | EU / USA (SCCs) | Data processing agreement; Standard Contractual Clauses |
| Stripe | Processing subscription payments | USA / EU (SCCs) | Standard Contractual Clauses; PCI-DSS Level 1 |
| Hosting | Database and file storage | EU | Data processing agreement with the hosting provider |
| AI provider (Anthropic and/or OpenAI, set platform-wide) | Player Analysis — generating training drills from coach notes | USA (SCCs) | Legitimate interests; only anonymised note text (without player names) is sent, and only for clubs with the Player Analysis add-on |
5. Retention periods
User data is kept for as long as the club account is active. After cancellation, data is deleted within 12 months, unless a statutory retention obligation applies.
Team coach contact details in the tournament module are automatically deleted when they haven’t been used for 24 months, and immediately on deletion of the club. The club administrator can also delete this data themselves at any time.
Player Analysis: internal coach notes are kept for as long as the player profile exists. The result of the AI training analysis is overwritten with each new note — no history of earlier analyses is kept.
6. Your rights
Under the UK GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. Where processing is based on consent, you can withdraw it at any time.
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction and to object
- Right to data portability
Send requests to privacy@aantreden.nl. We respond within 30 days.
7. Complaints
You can lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).
8. Cookies
We use functional cookies for session management. Analytics cookies are only placed after your consent.