PRIVACY POLICY

“S4S User” Mobile Application and “Stats4sport” Platform

1. GENERAL PROVISIONS

1.1. This Privacy Policy explains how Stats4sport Aps filialas (hereinafter – the Seller, the Data Processor, and in certain cases the Data Controller) and organisations engaged in non-formal activities (hereinafter – the Organisations, acting as Data Controllers) process the personal data of users of the “S4S User” mobile application and the related “Stats4sport” platform (hereinafter – the Buyers, Users, or Data Subjects).

1.2. When processing personal data, the Seller and the Organisations comply with:

• Regulation (EU) 2016/679 (GDPR);
• the Law on Legal Protection of Personal Data of the Republic of Lithuania;
• other applicable legal acts.

1.3. By using the “S4S User” mobile application and/or the “Stats4sport” platform, the User confirms that they have read, understood and agree to this Privacy Policy.

2. DEFINITIONS

2.1. Seller / Data Processor – Stats4sport Aps filialas, legal entity code 304086416, registered address: Elbingo g. 55-1, LT-06285 Vilnius, email: ds@stats4sport.com.

2.2. “S4S User” Mobile Application – an application that allows Users to log in to the Organisation whose services they use.

2.3. “Stats4sport” Platform – the administrative platform used by Organisations where Users’ personal data are processed.

2.4. Organisation (Data Controller) – any organisation engaged in non-formal activities that uses Stats4sport services and processes personal data of its members.

2.5. Data Subject – any natural person using the Organisation’s services and the “S4S User” application.

2.6. Other terms have meanings defined in GDPR.

3. CATEGORIES OF PERSONAL DATA AND PURPOSES OF PROCESSING

3.1. Only personal data necessary for the functioning of the Organisation, User identification, communication and service provision are processed.

3.2. Main purposes of processing:

• organising and carrying out activities;
• identification and administration of members;
• communication with Users (messages, updates, notifications);
• provision of services, payment administration;
• ensuring technical access and security;
• fraud prevention and service quality improvement.

3.3. Personal data processed may include:

• name and surname;
• email address;
• password;
• profile picture;
• child’s name, surname, date of birth;
• optional medical or health information;
• communication data;
• device analytics data;
• payment history;
• IP address, device identifiers;
• application usage data.

3.4. Data about underage children are provided only by parents/guardians or coaches.

3.5. By providing medical data, parents confirm their legal right to do so.

4. LEGAL GROUNDS FOR PROCESSING

4.1. Personal data are processed on the following bases:

• Contract performance – providing services, account access, payments;
• Legitimate interest – ensuring service quality and security;
• Legal obligation – accounting, tax compliance;
• Consent – for specific data when required.

5. DISCLOSURE OF PERSONAL DATA

5.1. Data may be transferred to the following partners:

UAB BLUE EMI LT – authorised payment partner.

UAB Paysera LT – licensed payment institution.

5.2. These partners may act as Data Processors or independent Data Controllers.

5.3. Data may also be disclosed:

• to authorities when required by law;
• when necessary to fulfil contractual obligations.

6. DATA RETENTION AND DELETION

6.1. Data are retained only as long as necessary.

6.2. Data on the platform are generally stored for the duration of the contract and up to 10 years.

6.3. Data are deleted when:

• the Organisation stops using the service (within 40 days);
• legal retention expires;
• deletion is requested and no other grounds apply.

6.4. After subscription expiration, access may be restricted.

7. LOGIN DATA AND SECURITY

7.1. Users must keep login credentials secure.

7.2. If credentials are compromised, the Organisation must be informed.

7.3. The Seller applies appropriate technical and organisational measures to protect data.

8. RIGHTS OF THE DATA SUBJECT

8.1. Users have the right to:

• access data;
• rectify data;
• request deletion;
• restrict processing;
• data portability;
• withdraw consent;
• submit complaints to authorities.

8.2. Matters related to Organisation services must be resolved with the Organisation.

9. FINAL PROVISIONS

9.1. The Privacy Policy may be updated. The newest version is always published.

9.2. Continued use of the application means acceptance of updates.