Privacy Policy
1. Data Controller
The data controller is Martin Skála, ID: 01105256, Pod Lány 446, Janovice nad Úhlavou, 340 21.
2. What Data Do We Process?
Mandatory data:
- First and last name
- Email address
Optional data (if provided by the user):
- Profile photo
- Links to social networks
- Information about yourself
- Home location (basecamp), used to find events near you
3. Purpose of Processing
Your data is processed for the following purposes:
- Providing the Application services.
- Managing your user account.
- Sending important notifications related to the Application (e.g., changes in terms).
4. Legal Basis for Processing
Processing of personal data is based on:
- Contractual performance: We provide the service based on your registration.
- Consent: Processing optional data that you voluntarily provide.
5. Data Retention
We retain your data for as long as you use the Application and for 3 years thereafter for the purposes of protecting rights and legal claims, unless you request deletion of your account sooner (see section 6).
6. Account Deletion
You may request deletion of your account at any time directly in the application (Settings → Delete account) or by email at the address given in section 10.
How deletion works:
- Your account is deactivated immediately upon request — it is hidden from other users, cannot be used, and receives no notifications.
- For 30 days you may sign in and cancel the request; no other activity is possible during this period. This protects you against accidental or unauthorised deletion.
- After 30 days the account is irreversibly anonymised. The request is therefore completed within one month, in accordance with Art. 12(3) GDPR.
What is removed: first and last name, email address, sign-in credentials, profile photo, information about yourself, social network links, gender, home locations (basecamps), your list of friends and followed users, selected activities, notifications, and records of sent emails.
What is retained: the events you created or attended, including their results, scores, times and comments. These records also belong to the other participants, and deleting them would interfere with their data. After anonymisation they are fully detached from your person and shown as “Deleted user” — they are therefore no longer personal data within the meaning of Recital 26 GDPR. The legal basis for retaining them is Art. 17(3)(e) GDPR (establishment and defence of legal claims) and Art. 89 GDPR (statistical purposes).
Consents you have given (the record of when and to which version of the documents you agreed) are retained after anonymisation, because under Art. 7(1) GDPR we must be able to demonstrate that consent was given. These records no longer contain any data by which you could be identified.
7. Your Rights
You have the right to:
- Access your personal data.
- Correct inaccurate data.
- Delete your data ("right to be forgotten") — see section 6.
- Restrict the processing of your data.
- Transfer your data to another controller.
- Lodge a complaint with the Office for Personal Data Protection.
8. Data Sharing
We do not share your data with third parties except where required by law or necessary for the operation of the Application. We use Google Firebase for authentication and notifications; when your account is deleted, the corresponding record in that service is deleted as well.
9. Data Security
Your data is protected using technical and organizational measures against unauthorized access, loss, or misuse.
10. Contact
If you have any questions regarding data protection, please contact us at: info@seventyy.cz.