1. General Information
This Privacy Policy defines the rules for processing and protecting personal data provided by users in connection with the use of the TRAthletic platform (app.trathletic.pl).
The data controller is TR ATHLETIC SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Zawiła 61, 30-390 Kraków, Poland.
Contact the controller:
• Email: robert@trathletic.pl
• Phone: +48 698 376 508
2. Types of Processed Data
The following categories of data are processed within the platform:
• Contact data: first name, last name, email address, phone number
• Health and physique data: information about ailments, training goals, weight, height, age, physical activity level (provided voluntarily in the intake form)
• Daily monitoring data: sleep, weight, calories, wellbeing, pain, physical activity
• Technical data: IP address, browser type, operating system
3. Purposes and Legal Bases for Processing
Intake form and daily monitoring:
• Purpose: Delivery of training services, monitoring client progress
• Legal basis: Consent (Art. 6(1)(a) GDPR) and performance of a contract (Art. 6(1)(b) GDPR)
• Health data: Art. 9(2)(a) GDPR (explicit consent)
Communication (email/SMS notifications):
• Purpose: Monitoring reminders, information about training plans and diets
• Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
Marketing communication:
• Purpose: Sending information about services and promotions
• Legal basis: Consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time
4. Data Retention Period
• Client data: for the duration of the cooperation, and then in accordance with legal requirements
• Form data: until the purpose is fulfilled, no longer than 3 years from the last contact
• Technical data: up to 12 months from collection
5. Sharing of Personal Data
Personal data may be shared with:
• Technical service providers: OVH (server hosting)
• Communication service providers: Brevo (email and SMS delivery)
• Trainers assigned to the client within the platform
• Public authorities: only on the basis of applicable legal provisions
6. Rights of Data Subjects
You have the following rights:
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
To exercise your rights, please contact: robert@trathletic.pl
7. Data Security
Appropriate technical and organizational measures are applied:
• Encryption of data transmission (HTTPS protocol)
• Secure data storage on servers with appropriate safeguards
• Access to data limited to authorized persons only
• Hashing of user passwords
8. Changes to the Privacy Policy
The controller reserves the right to make changes to this Privacy Policy. Any changes will be communicated by publishing an updated version on the platform.
9. Right to Complain
If you believe that the processing of personal data violates GDPR provisions, you have the right to file a complaint with the supervisory authority:
Urząd Ochrony Danych Osobowych (Polish Data Protection Authority)
ul. Stawki 2, 00-193 Warszawa, Poland
Email: kancelaria@uodo.gov.pl
Phone: +48 22 860 70 86