Privacy & Child Protection
These policies apply to every account on the CMD platform, and to every player, parent, coach, school, academy, club and federation we work with.
Privacy Policy
Who we are
CMD ECOSYSTEM 360° operates this platform for federations, schools, academies, clubs, coaches, players and parents. We are the controller of the personal data described here and we answer questions at cmd@cmdecosystem360.com.
What we collect
Account data: your name, email address, chosen role and password (stored only as a secure hash by our authentication provider).
Sporting data: date of birth, category, position, club or school, training results, drills, exams, goals, assists and physical measurements recorded by your coach.
Minor data: for anyone under 18, the name and email of a parent or guardian, their consent, and a birth certificate image or PDF used to confirm the age.
Why we use it
To create and secure your account, to produce the CMD Passport and performance reports for you and your club, to verify ages and categories, to keep minors safe, and to meet our legal obligations. We rely on your consent, on the performance of our agreement with you, and on our legitimate interest in running a safe academy programme.
Who can see it
Your own data is visible to you, and to the coaches and administrators of the club, academy or school you are attached to. Federations receive aggregated performance data for their territory.
Birth certificates are visible to CMD administrators only, and are used only to verify age.
We never sell personal data and we do not share it with advertisers.
How it is stored and protected
Data is stored on access-controlled infrastructure. Uploaded identity documents are kept in private storage and opened only through short-lived signed links. Access to player records is limited by role, and every administrative action is attributable to an account.
How long we keep it
Birth certificates are deleted once the age is verified and the registration is approved, and in any case no later than twelve months after upload. Account and sporting data are kept while the player is registered with a CMD programme, then archived or deleted on request.
Your rights
You may ask for a copy of your data, correct it, delete it, withdraw consent or object to processing by writing to cmd@cmdecosystem360.com. For a player under 18, these requests are made by the parent or guardian. You may also complain to your local data protection authority.
Cookies and measurement
We use only the cookies needed to keep you signed in and to remember your language. We measure aggregate usage to improve the platform; we do not use advertising cookies.
Child Protection Policy
Zero tolerance
CMD ECOSYSTEM 360° has zero tolerance for any form of abuse, harassment, neglect or exploitation of children. Any concern is treated as urgent, whether it happens at a session, online, or in private messages between an adult and a child.
Consent from a parent or guardian
No account for anyone under 18 is activated without the name, email and explicit consent of a parent or legal guardian, recorded with the date and time. We also require a birth certificate to confirm the age. A consent can be withdrawn at any time, and the account is then suspended.
Minimal data about children
We collect only what training and safeguarding require. Birth certificates are used solely to verify age, never for marketing, and are deleted after verification. A child's photo is published only with separate parental authorisation.
Contact between adults and children
Coaches communicate with players through the platform's channels and with a parent copied for anyone under 18. Private one-to-one messaging between an adult coach and a minor outside these channels is not permitted. Training sessions with minors take place in open view and, where possible, with a second adult present.
Adults working with children
Coaches and staff working with minors must hold a valid CMD certification, provide an up-to-date police or criminal record check, and accept this policy in writing. Access is revoked immediately if a check expires or a concern is raised.
Reporting a concern
Anyone — child, parent, coach or bystander — can report a concern to cmd@cmdecosystem360.com, or to the CMD node director for their country. Reports are handled confidentially by the safeguarding lead, acted on within 48 hours, and referred to the competent authorities where the law requires it. A child who reports a concern will never be blamed or penalised.
Images, video and results
Photographs and videos of minors taken during CMD activities are used only with parental authorisation and never with identifying details alongside them. Leaderboards for minors show first name and passport id only.
Contact
Questions, data requests and safeguarding reports: cmd@cmdecosystem360.com.