Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") governs the processing of Personal Data by SportMeet Oy ("Sportii", "the Company", "we", "us", or "our") in connection with the use of the sportii.app platform, subdomains, and associated services (the "Services"). We are committed to maintaining the confidentiality, integrity, and security of Personal Data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject").
• "Processing" means any operation performed on Personal Data, such as collection, storage, use, or disclosure.
• "Controller" refers to SportMeet Oy, which determines the purposes and means of processing Personal Data.

3. Categories of Personal Data Collected

We collect and process the following categories of Personal Data:

• Identification Data: Name, email address, phone number, and date of birth.
• Account Credentials: Authentication tokens and account identifiers.
• Transaction Data: Payment history, booking details, and wallet balance (processed via third-party processors).
• Technical Data: IP address, browser type, device identifiers, and usage logs.
• Multimedia Content: Photographs and video captured during Activities (see Terms for details).

4. Legal Bases for Processing

In accordance with Article 6 of the GDPR, we process Personal Data based on the following legal grounds:

• Contractual Necessity: To provide the Services and fulfill our obligations under the Terms.
• Legal Obligation: To comply with tax, accounting, and regulatory requirements.
• Legitimate Interests: To improve our platform, ensure security, and conduct marketing activities, provided such interests are not overridden by your rights.
• Consent: Where you have explicitly provided consent for specific processing activities (e.g., promotional communications).

5. Data Sharing and Disclosure

We do not sell Personal Data. We may disclose data to:

• Service Providers: Hosting (Vercel), Authentication (Supabase), Payments (Stripe), and Analytics providers.
• Platform Hosts: Independent organizers who require participant lists for safety and operational purposes.
• Legal Authorities: When required by law or to protect our legal rights.

6. International Data Transfers

Personal Data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure such transfers are protected by Standard Contractual Clauses (SCCs) or other adequacy mechanisms approved by the European Commission.

7. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account and as required to satisfy legal or reporting requirements.

8. Security of Personal Data

We implement appropriate technical and organizational measures (e.g., encryption, access controls) to protect Personal Data against unauthorized access, loss, or alteration.

9. Rights of the Data Subject

Under the GDPR, you have the following rights:

• Right of Access: Obtain confirmation of processing and a copy of your data.
• Right to Rectification: Request correction of inaccurate Personal Data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of data where certain conditions are met.
• Right to Restriction: Request limitation of processing in specific circumstances.
• Right to Data Portability: Receive data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.

To exercise these rights, please contact our Data Protection Office at the email provided below.

10. California Privacy Rights (CCPA/CPRA)

Pursuant to the California Consumer Privacy Act (CCPA), California residents have the right to:

• Know the categories and specific pieces of Personal Data collected.
• Request deletion of Personal Data.
• Opt-out of any "Sale" or "Sharing" of Personal Data (Note: Sportii does not sell Personal Data).
• Be free from discrimination for exercising these rights.

11. Third-Party Links

Our Services may contain links to third-party websites. This Policy does not apply to such external platforms, and we encourage you to review their respective privacy notices.

12. Amendments to this Policy

We reserve the right to amend this Policy at any time. Significant changes will be notified via our platform or through direct communication.

13. Contact Information