Data processing agreement

1. Subject of the processing

When an account is created on AthleteHub.pro, a Data Processing Agreement is formed. The User (Coach) entrusts the Provider (Karol Żołnowski Przygotowanie Motoryczne) with the processing of their athletes’ personal data so that the application can operate and its features can be provided. In this relationship the User is the Data Controller and the Provider is the Processor.

2. Scope and nature of the processed data

Processing covers athlete data: first name, last name, age, weight, training statistics, measurement results (including biomechanical measurements) and training programmes. Given the nature of the application, some of this data may constitute data concerning health or physical fitness.

3. Duties and representations of the parties

3.1. The Controller represents that they have a full legal right (including the consents of athletes or their legal guardians) to enter the entrusted data into AthleteHub.pro.

3.2. The Processor undertakes to process the entrusted data solely to deliver the SaaS Service and to implement appropriate technical security measures (including secure databases based on Supabase and encrypted communication).

3.3. The Processor notifies the Controller without undue delay of any detected breach of the entrusted data.

4. Further processing (sub-processing)

The Controller gives general authorisation for the Processor to use sub-processors necessary for the platform to operate, namely the database provider (Supabase) and the email delivery system (Resend). The Processor guarantees that those parties provide a level of protection that meets GDPR requirements.

5. Duration and deletion of data

The agreement is concluded for the duration of the subscription. After the subscription is cancelled and the User’s account is blocked (end of off-boarding), the Provider permanently deletes the entrusted athlete data from its servers.