01Upravljavec
Upravljavec osebnih podatkov je Sport2GO, [naziv pravne osebe in naslov — dopolni pred objavo]. Za vsa vprašanja o zasebnosti smo dosegljivi na info@sport2go.app.
02Katere podatke obdelujemo
- Račun in profil: ime in priimek, e-naslov, telefonska številka, datum rojstva, spol, profilna slika, nastavitev jezika.
- Ekipna dejavnost: članstva v ekipah in sezonah, termini, prijave in odjave na termine, rezultati, statistika, lestvice ter zbirateljski elementi (značke, nalepke).
- Evidenca stroškov: zneski, dodeljeni stroški terminov in oznake plačil, ki jih vodi organizator ekipe. Sport2GO ne obdeluje kartičnih plačil in ne hrani podatkov o plačilnih sredstvih.
- Sporočila: vsebina ekipnega klepeta.
- Tehnični podatki: sejni piškotki za prijavo in osnovni strežniški dnevniki, potrebni za delovanje in varnost.
03Nameni in pravne podlage
Podatke obdelujemo za zagotavljanje storitve — organizacijo ekip, terminov, udeležbe, statistike in obveščanja (izvajanje pogodbe, čl. 6(1)(b) GDPR), za pošiljanje transakcijskih e-sporočil, kot so vabila, prijavne kode in opomniki (izvajanje pogodbe oz. zakoniti interes), ter za napovedi udeležbe z umetno inteligenco (zakoniti interes, čl. 6(1)(f) GDPR). Avtomatiziranega odločanja s pravnimi učinki ni.
04Prijava z Googlom in Google Koledar
Pri prijavi z Google računom od Googla prejmemo tvoje ime, e-naslov in sliko profila. Če se odločiš povezati Google Koledar (dovoljenje obsega calendar.events), Sport2GO v tvoj primarni koledar vpisuje, posodablja in briše izključno vnose za termine tvojih ekip. Drugih dogodkov v tvojem koledarju ne beremo, ne shranjujemo in ne delimo.
Dostopne žetone hranimo v naši podatkovni bazi in jih uporabljamo samo za opisano sinhronizacijo. Povezavo lahko kadar koli prekineš v aplikaciji (Profil) ali prekličeš na myaccount.google.com/permissions. Ob prekinitvi izbrišemo žetone in evidenco sinhronizacije; že vpisani vnosi v tvojem koledarju ostanejo, dokler jih ne izbrišeš sam.
Uporaba in prenos informacij, prejetih prek Googlovih API-jev, sta skladna s politiko Google API Services User Data Policy, vključno z zahtevami omejene uporabe (Limited Use).
05Napovedi udeležbe (UI)
Za oceno pričakovane udeležbe na terminu pošljemo Googlovemu API-ju Gemini zgodovino prijav in imena igralcev ekipe. Rezultat je ekipna napoved, vidna organizatorjem; ne uporablja se za odločanje s pravnimi učinki za posameznika.
06Obdelovalci in prenosi
Pri zagotavljanju storitve uporabljamo pogodbene obdelovalce: Convex (podatkovna baza in zaledje), Vercel (gostovanje), Google (prijava, Koledar, Zemljevidi, Gemini) in Resend (e-pošta). Nekateri obdelovalci podatke obdelujejo v ZDA; prenosi temeljijo na standardnih pogodbenih klavzulah EU oziroma okviru EU-U.S. Data Privacy Framework.
07Deljenje podatkov
Podatkov ne prodajamo in jih ne uporabljamo za oglaševanje. Vsebina ekipe (imena, udeležba, statistika, nalepke) je vidna soigralcem in organizatorjem. Če organizator deli javno povezavo do albuma, je vsebina albuma vidna vsakomur s to povezavo.
08Piškotki
Uporabljamo samo nujne sejne piškotke za prijavo. Nastavitev jezika se hrani v lokalni shrambi brskalnika. Oglaševalskih ali analitičnih sledilnikov ne uporabljamo.
09Hramba in izbris
Podatke hranimo, dokler imaš račun oziroma dokler je to potrebno za zgoraj navedene namene. Izbris računa ali posameznih podatkov lahko zahtevaš na info@sport2go.app.
10Tvoje pravice
Po GDPR imaš pravico do dostopa, popravka, izbrisa, omejitve obdelave, prenosljivosti in ugovora. Pritožbo lahko vložiš pri Informacijskem pooblaščencu RS (www.ip-rs.si). Storitev ni namenjena osebam, mlajšim od 15 let, brez soglasja staršev ali skrbnikov.
11Spremembe
Spremembe te politike objavimo na tej strani; datum zadnje posodobitve je naveden zgoraj.
Privacy Policy
01Controller
The data controller is Sport2GO, [legal entity name and address — fill in before publishing]. For any privacy questions contact info@sport2go.app.
02Data we process
- Account and profile: name, email address, phone number, date of birth, gender, profile photo, language preference.
- Team activity: team and season memberships, events, RSVPs and attendance, results, statistics, leaderboards and collectible elements (badges, stickers).
- Cost records: amounts, per-event assigned costs and paid markers kept by the team organizer. Sport2GO does not process card payments and stores no payment instrument data.
- Messages: team chat content.
- Technical data: session cookies for sign-in and basic server logs needed for operation and security.
03Purposes and legal bases
We process data to provide the service — organizing teams, events, attendance, statistics and notifications (performance of a contract, Art. 6(1)(b) GDPR), to send transactional email such as invitations, sign-in codes and reminders (contract or legitimate interest), and to generate AI attendance forecasts (legitimate interest, Art. 6(1)(f) GDPR). There is no automated decision-making with legal effects.
04Google sign-in and Google Calendar
When you sign in with Google we receive your name, email address and profile picture. If you choose to connect Google Calendar (the calendar.events scope), Sport2GO creates, updates and deletes only the entries for your teams’ events in your primary calendar. We do not read, store or share any other events in your calendar.
Access tokens are stored in our database and used solely for the synchronization described above. You can disconnect at any time in the app (Profile) or revoke access at myaccount.google.com/permissions. On disconnect we delete the tokens and the sync records; entries already written to your calendar remain until you delete them.
Sport2GO’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
05AI attendance forecasts
To estimate expected attendance for an event we send the team’s RSVP history and player names to Google’s Gemini API. The result is a team-level forecast shown to organizers; it is not used for decisions with legal effects on individuals.
06Processors and transfers
We use contracted processors to run the service: Convex (database and backend), Vercel (hosting), Google (sign-in, Calendar, Maps, Gemini) and Resend (email). Some processors process data in the United States; transfers rely on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
07Sharing
We do not sell personal data and we do not use it for advertising. Team content (names, attendance, statistics, stickers) is visible to your teammates and organizers. If an organizer shares a public album link, the album content is visible to anyone with that link.
08Cookies
We use only strictly necessary session cookies for sign-in. Your language preference is kept in the browser’s local storage. We use no advertising or analytics trackers.
09Retention and deletion
We keep data for as long as you have an account or as needed for the purposes above. You can request deletion of your account or specific data at info@sport2go.app.
10Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection. You may lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si). The service is not intended for children under 15 without parental or guardian consent.
11Changes
Changes to this policy are published on this page; the date of the last update is shown above.