PRIVACY POLICY
Given that the Administrator attaches great importance to respecting the rights of Application Users, with particular emphasis on the right to privacy, the most important information is provided below regarding:
who is the Personal Data Administrator and how to contact them,
how information about Application users is collected, processed and used,
how we protect Users’ privacy using the highest reasonable technical measures,
the legal bases and purposes for processing these data,
which rights Users have in relation to the Company’s processing of personal data.
A User means any person who, via the Application installed on their mobile device (e.g., phone, tablet), uses the functionalities available therein. By installing the Application and registering an Account, the User simultaneously accepts the rules described in this document and in the Terms. If the User does not consent to the rules below, please do not confirm installation of the Application or uninstall it. This document describes the privacy policy of the Teamme Application (hereinafter: Application).
I. Entity responsible for providing services within the Application and the Personal Data Administrator: SPORT-TECH SOLUTIONS sp. z o.o., with registered office in Łódź, ul. Drewnowska 55/1, 91-002 Łódź, KRS 0001132285, NIP 7262708100, REGON 529903014 (hereinafter: Company, Administrator). Contact with the Administrator is possible via:
contact form in the Application and on www.teamme.pl;
e-mail: kontakt@teamme.pl. The Administrator has not appointed a Data Protection Officer.
II. Types of processed personal data, purposes and legal bases for processing Personal data are information about an identified or identifiable natural person (e.g.: first and last name, e-mail address, phone number, IP address). Types of processed data:
first name
last name
e-mail address
phone number
date of birth
geolocation
username
billing data
device IP address
device and browser data
data collected via cookies or similar technologies

data collected using Garmin devices using the Garmin Connect™ integration regarding sports activities and their statistics
Google Calendar data related to viewing and editing its entries
data related to Google Calendar login including: first and last name, gender, profile picture, preferred languages and selected public information, and the e-mail address associated with your Google account.
Purposes and legal bases for processing the above data:
conducting marketing of own products and sending a newsletter based on your consent (legal basis: Art. 6(1)(a) and (f) GDPR);
performance of the contract for electronic services in accordance with the Terms (Art. 6(1)(b) GDPR) or proper handling of any complaint procedure related to the concluded contract (Art. 6(1)(b) and (c) GDPR), and for services related to geolocation (Art. 6(1)(a) GDPR);
fulfillment of obligations related to financial settlements and reporting (legal basis: Art. 6(1)(c) GDPR);
analytical processes aimed at better tailoring services to Users’ needs, general optimization of services and the Application, optimization of solutions used in the Application, building knowledge about Users, financial analysis, etc., carried out as the Administrator’s legitimate interest (legal basis: Art. 6(1)(f) GDPR);
Archival (evidentiary) purposes as the Administrator’s legitimate interest and to secure information in case it is necessary to demonstrate facts for legal purposes (Art. 6(1)(f) GDPR);
We do not disclose or transfer your information to the third parties for purposes other than the ones provided
Your data are encrypted to protect your privacy.Data obtained from Google services, in particular from Google Calendar, are processed solely to enable the Teamme application’s functionality of displaying and synchronizing events with the user’s calendar.
Security procedures are in place to protect the confidentiality of your data.

Data collected using the app will not be transferred to third-party companies or entities. This also applies to data collected from Garmin devices using the Garmin Connect™ integration. None of the indicated data will be transferred to entities providing data processing services using machine learning and artificial intelligence.

The administrator applies appropriate technical and organizational measures to protect processed data, in particular:
encryption of data transmission using HTTPS/TLS,
restricting access to data only to authorized systems,
storing data in a secured server infrastructure,
regular security system updates.
Data obtained from the Google API are not used for advertising purposes nor disclosed to third parties except where required by law.
possible establishment, pursuit or defense of claims as the Administrator’s legitimate interest (legal basis: Art. 6(1)(f) GDPR). The User may withdraw consent to processing personal data at any time, but withdrawal does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.
III. Source of personal data As a rule, most data are obtained by the Administrator directly from the User, who decides to download the Application, register an Account and use the services offered therein. While using the Administrator’s website or the Application, data provided in the registration form and in the User’s account and data concerning activity in the service or application (e.g., interactions with content), as well as data about your device (IP address, data collected using cookies or similar technologies, browser data, ID) are processed.
IV. Storage period Data will be stored for the following periods:
Data related to contract conclusion will be processed for the period during which claims related to that contract may arise — not shorter than the period necessary to perform the contract, fulfill accounting/reporting obligations and for statute of limitations of claims arising from the contract (as a rule up to 6 years from performance of the contract).
Data processed on the basis of consent may be processed lawfully until the consent is withdrawn.
Data processed to fulfill a legal obligation will be processed for the period indicated in applicable law.
Data processed on the basis of legitimate interest will be processed until a justified objection to such processing is submitted or until the Administrator determines that the data have become outdated.
V. Right to object The User has the right to object at any time to processing of personal data based on the Administrator’s legitimate interest. The Administrator will then cease processing for those purposes unless it can demonstrate compelling legitimate grounds that override the interests, rights and freedoms of the User, or the data are necessary for establishment, pursuit or defense of claims.
VI. Recipients of data Personal data may be disclosed to companies with which the Administrator cooperates in its operations, i.e., subprocessors (processors) such as accounting firms, legal firms, IT companies, marketing agencies or other entities, provided they demonstrate a legal basis for such disclosure (e.g., courts, prosecutor’s office, Police, etc.). As a rule, User personal data are not transferred by the Administrator outside the European Economic Area (EEA). Some entities that may receive data are located outside the EEA. The Administrator takes all due steps to ensure transfers are lawful and appropriate safeguards are in place, including the use of standard contractual clauses approved by the European Commission.
Rights of data subjects: Under the GDPR, the User has the right to:
access the data and receive a copy;
rectify (correct) the data;
erase data and restrict processing;
object to processing;
data portability;
lodge a complaint with a supervisory authority.
VII. Information on requirement/voluntariness of providing data Providing data is voluntary but necessary to conclude the contract and for the proper functioning of the Application.
VIII. Automated decision-making Profiling means processing User personal data using them to evaluate certain personal aspects, in particular to analyze or predict aspects concerning economic situation, health, personal preferences, interests, reliability, behavior, location or movements. With respect to the foregoing processing, we do not profile your data.