Club authorisation agreement

Template v0.9 · English reference version. Signing versions: Spanish (es/) and Turkish (tr/). Fill all.

Club Match Authorisation Agreement

Between

(1) Brújula SL,, CIF, operator of Maçoku (macoku.com), represented by, ("Maçoku"); and

(2) *,,, tax/registration no., represented by,, ("the Club*").

1. Purpose

The Club allows Maçoku to receive and analyse video recordings of the Club's matches listed in Annex 1 (or all matches of the teams listed there during the Term), filmed with a fixed camera, in order to produce team-level reports.

2. Permitted uses (tick what applies)

☐ A. Reports for the Club. Analysis to deliver team-level reports to the Club.

☐ B. Service testing and improvement. Use of the videos to test and improve Maçoku's analysis software (for example checking pitch detection and accuracy). Videos used for B are kept no longer than [90 DAYS — TO CONFIRM] and never published.

☐ C. Sample reports. Use of a team-level report (heatmap and figures, no images of people) as a sample on macoku.com or in presentations, naming the Club only if ☐ yes ☐ no.

No other use is permitted. In particular, Maçoku will not publish the videos, show images of players, produce individual player reports, use face recognition, read shirt numbers or names, or sell or share the videos.

3. Club's confirmations

The Club confirms that:

(a) it owns the recordings or is authorised by whoever filmed them;

(b) players, coaches and staff have been informed that matches are filmed and analysed by external services, through registration documents or a notice;

(c) for players under 18, the Club holds the consent of parents or legal guardians, or another valid basis under its registration process, covering filming and analysis by external services (in Spain, in line with Organic Law 1/1982 on image rights and data protection law; in Türkiye, in line with KVKK and the Turkish Civil Code);

(d) it will tell Maçoku within 5 working days if a player, parent or guardian objects, so the relevant video can be removed.

4. Data protection

(a) For use A, Maçoku acts as processor on behalf of the Club, under Annex 2 (art. 28 GDPR / art. 12 KVKK terms). For uses B and C, Maçoku acts as an independent controller under its Privacy Policy.

(b) Maçoku applies the safeguards in its Privacy Policy: EU storage, deletion of videos within 7 days after processing for use A, team-level output only, only anonymised numbers sent to AI providers, no training of third-party AI models.

(c) Each party handles data subject requests it receives and informs the other when needed. Maçoku notifies the Club without undue delay, and within 48 hours, of any personal data breach affecting the Club's videos.

(d) Turkish version only: for transfers of Turkish data subjects' data abroad (Spain/EU), the parties also sign the Board's standard contract under KVKK art. 9 and notify the Authority within 5 business days.

5. Price

☐ The Club receives the reports for use A at no charge during the Term, in exchange for permissions B and/or C.

☐ The Club pays per report, VAT included, through Paddle.

6. Term and ending

This Agreement runs from signature until and renews for one season unless either party gives 30 days' written notice. Either party may end it at any time with 15 days' written notice. On ending, Maçoku deletes all videos and derived data of the Club within 30 days, except team-level sample reports already published under C, which are removed within 30 days if the Club asks.

7. Liability

Each party is liable for its own breaches. Except for intent, gross negligence, data protection breaches caused by a party, or claims by third parties arising from breach of clause 3, each party's liability is limited to [€1,000 / the amount paid in the previous 12 months, whichever is higher — TO CONFIRM].

8. Law and courts

Spanish version: Spanish law; courts of Barcelona. Turkish version: Turkish law; Istanbul (Çağlayan) courts and enforcement offices.

Signatures

For Brújula SL: ________ Name, role, date

For the Club: ________ Name, role, date

Annex 1: Teams and matches

Annex 2: Processor terms (use A)

1. Maçoku processes the videos only on the Club's documented instructions: producing team-level reports.

2. People who process the data are bound by confidentiality.

3. Security: encryption in transit, access control, EU storage, automatic deletion.

4. Subprocessors: those listed in the Maçoku Privacy Policy; the Club authorises them in general and is told 14 days before changes, with a right to object.

5. Maçoku helps the Club answer data subject requests and with any impact analysis.

6. At the end, Maçoku deletes the data and confirms in writing.

7. Maçoku provides the information needed to show compliance with this Annex and allows reasonable checks agreed in advance, at the Club's cost.

8. Data categories: images and movements of players, coaches, referees and spectators; derived anonymous points. Duration: the Term. Nature: automated analysis.