The application is now available for selected users!
Appendix - List of external tools
The administrator of your personal data is Jędrzej Buliński, Strzyżawa 8D, 86-070 Dąbrowa Chełmińska, NIP: 5542986448, REGON: 386435434. Where we use phrases such as "we", "our", etc. in the Privacy Policy, we mean the indicated entity.
In relation to social media profiles related to our application, in accordance with the case law of the Court of Justice of the European Union, we are a joint controller of personal data together with the provider of the social media service on which the profile operates.
Details regarding the processing of personal data by individual social networking service providers we use can be found here:
As part of the implementation of the personal data protection system in our organization, we have decided not to appoint a personal data protection officer due to the fact that in our situation it is not mandatory.
In matters related to personal data protection and broadly understood privacy, you can contact us at the e-mail address [email protected]. In the field of social media, you can also contact directly the administrators of the social networking sites in which we run our profiles.
| Purpose of processing | Discussion of the purpose of processing | Legal basis |
|---|---|---|
| Establishing and maintaining a user account | Registering a user account requires providing the data necessary for this purpose, as specified in the registration form.When editing your account details, you can provide further details, in accordance with the options available within your account.In addition, our system used to manage user accounts stores your IP address that you used to register your user account.Data is processed for the purpose of providing you with the user account service. After deletion of the user account, the data is archived for the purpose of determining, pursuing or defending claims related to the user account service. | Article 6, paragraph 1, letter b of the GDPR |
| Fulfilling the challenge | When entering a challenge, you must provide the information necessary to complete it.Providing data is a condition for placing an order.Additionally, the system saves your IP address.The data is processed for the purpose of conducting the challenge. After conducting the challenge, the data is archived for the purpose of any determination, pursuit or defense of claims related to the contract. | Article 6 paragraph 1 letter b GDPR, Article 6 paragraph 1 letter f GDPR |
| Complaint handling | If you submit a complaint, you provide the personal data contained in the complaint.Providing data is a condition for submitting a complaint.Data is processed for the purpose of handling the complaint process. After such a process is completed, the data is archived for the purpose of determining, pursuing or defending claims related to handling the complaint process . | Art. 6 section 1 letter c GDPR, art. 6 section 1 letter b GDPR |
| Contact and correspondence management | By contacting us via available means of communication, e.g. e-mail, social media, you naturally provide your personal data contained in the content of the correspondence.Providing data is a condition for establishing contact.In addition, the communication system saves your IP address that you used to send the message.Data is processed for the purpose of communication, which is our legitimate interest. After the communication is completed, the data is archived for the purpose of determining, pursuing or defending claims related to the communication. | Article 6, paragraph 1, letter f of the GDPR |
| Fulfillment of tax and accounting obligations | In connection with the performance of the contract, we also fulfill various tax and accounting obligations, in particular in the form of issuing an invoice, including the invoice in our accounting documentation, storing documentation, etc.To issue an invoice, we process, among others, data such as name and surname, company name, business address, and Tax Identification Number.Providing data required by tax law is necessary to fulfill the indicated obligations. | Article 6, paragraph 1, letter c of the GDPR in connection with the relevant provisions of tax law |
| Creating an archive | For the purposes of our activities, we can create archives: both in traditional and digital form. The archives contain personal data that we have processed in connection with you, and their scope may vary depending on what data has been provided to us and what scope of data is justified from an archival perspective. In this case, we rely on our legitimate interest in organizing and arranging personal data carriers. | Article 6, paragraph 1, letter f of the GDPR |
| Defending, establishing or pursuing claims | Using our application may give rise to certain claims on our or your side in the future. We are therefore entitled to process personal data for the purpose of defending, establishing or pursuing claims. For this purpose, we may process any personal data that is related to a given claim, therefore their scope may vary depending on what the claim concerns. In this case, we rely in this respect on our legitimate interest in protecting our interests. | Article 6, paragraph 1, letter f of the GDPR |
| Creating audiences for advertising | Your e-mail address stored in our database may be sent to a specific advertising system (e.g. Facebook Ads, LinkedIN Ads) in order to create a group of advertising recipients using that e-mail address.When using this feature, the email address is hashed before being sent to your system to create a recipient group.The email address will be used in the matching process conducted by the advertising system in question.The advertising system does not share your email address with third parties or other advertisers and deletes your email address immediately after the matching process is complete.The advertising system implements processes and procedures to ensure the confidentiality and security of the e-mail address sent to it and the set of user identifiers constituting the group of recipients created using the e-mail address, among others, through the use of technical and physical security measures.Creating a group of advertising recipients using your e-mail address constitutes our legitimate interest, which in this case is the achievement of our marketing goals. | Article 6, paragraph 1, letter f of the GDPR |
| Social media support | If you follow our social media profiles or interact with our content on social media, we naturally see your data that is publicly available on your social media profile. We process this data solely within the social media and solely for the purpose of operating the social media, which is our legitimate interest.If you contact us via private message, you naturally provide us with your personal data contained in the content of the correspondence, in particular your image and name and surname. In this case, your data is processed for the purpose of contacting you, and the basis for processing is our legitimate interest.It may happen that we are the party initiating contact with you via social media in order to offer cooperation, then your data will be processed for the purpose of searching for potential contractors, offering and establishing cooperation, which is our legitimate interest.Messages sent to us via social media are automatically archived using tools available within each social networking site and are available to us until you delete them. You can view all messages exchanged with us in the private messages tab.Your use of social networking sites is subject to the terms and conditions and privacy policies of the administrators of those sites, and those administrators provide you with services electronically, completely independently of us. | Article 6, paragraph 1, letter f of the GDPR |
| Analysis and statistics | We conduct analytical and statistical activities using tools provided by external suppliers. As part of the analytical tools, we only have access to Anonymous Information. We base the processing of this information on a legitimate interest, which consists in creating, viewing and analyzing statistics related to user activity in the application in order to draw conclusions that will allow for the subsequent optimization of our activities.From the tools level we only have access to a set of statistics and information not assigned to specific people.For detailed information about tools from third-party providers, please see the section on tools we use. | Article 6, paragraph 1, letter f of the GDPR |
| Own Marketing | We conduct marketing activities using tools provided by external suppliers. As part of marketing tools, we only have access to Anonymous Information. We base the processing of this information on a legitimate interest, which consists in conducting marketing activities, including targeting advertisements within external systems for the purposes of marketing our own products and services. From the level of the tools, we only have access to a set of statistics and information not assigned to specific individuals.For detailed information about tools from third-party providers, please see the section on tools we use. | Article 6, paragraph 1, letter f of the GDPR |
| Fulfillment of obligations related to the protection of personal data | As a data controller, we are obliged to fulfil our obligations related to the protection of personal data. In this respect, we may process your personal data to the extent necessary to fulfil these obligations (e.g. when processing your request regarding your personal data). The scope of the data depends on what data we need to fulfil the obligation and prove compliance with the GDPR. In addition, in this case, we also rely on our legitimate interest, which consists in securing the data necessary to demonstrate accountability. | Article 6 paragraph 1 letter c of the GDPR in conjunction with other relevant provisions of the GDPR, Article 6 paragraph 1 letter f of the GDPR |
Within each of the purposes described above, we may process a different scope of data – such as is necessary to achieve a specific purpose. The data includes information such as:
We use tools that collect a range of information about you related to your use of our application. This includes, in particular, the following information:
This information is referred to in this Privacy Policy as “Anonymous Information.”
Anonymous Information itself does not, in our opinion, constitute personal data, as it does not allow us to identify you and we do not compare it with the typical personal data we collect about you. However, taking into account the strict case law of the Court of Justice of the European Union and the divided opinions among lawyers, out of caution, in case Anonymous Information is assigned the nature of personal data, we have also included in the Privacy Policy detailed explanations regarding the processing of this information.
We are unable to provide you with access to Anonymous Information about you because we are unable to assign any Anonymous Information to any specific user. From the level of tools collecting Anonymous Information, we only have access to a set of statistics and information not assigned to specific individuals.
Processing of Anonymous Information allows us to provide you with the ability to use the functionalities available in the application. In addition, Anonymous Information is used for analytical, statistical and marketing purposes, such as setting and targeting advertisements.
Anonymous Information is also processed by tool providers under the terms of their terms and conditions and privacy policies. It may be used by these providers to provide and improve services, manage them, develop new services, measure the effectiveness of advertising, protect against fraud and abuse, and personalize content and advertising displayed on individual services, websites and applications. You can find detailed information about this in the section dedicated to the tools we use.
In most cases, you provide them to us yourself. For example, this happens when you register a user account, submit a complaint, contact us, or use the functionalities available in our application or on external services (e.g. social media).
Additionally, data regarding activity, activity time, distance covered, calories burned, CO2 saved, elevation covered, heart rate during activity, geolocation from activity may come from external applications such as Strava or FitBit , provided that you agreed to this when creating an account in the Rivals application.
In addition, some information about you may be automatically collected by the tools we use. Detailed information about external tools can be found in the appendix to the Privacy Policy.
We care about the security of your personal data. We have analyzed the risks associated with individual processes of processing your data, and then implemented appropriate security measures and personal data protection. We constantly monitor the state of technical infrastructure, train staff, look at the procedures used, and introduce necessary improvements.
We process your personal data for as long as it is justified within the scope of the given purpose of processing personal data, therefore the processing periods vary depending on the purpose. Please note that the termination of the processing of your data within the scope of one purpose does not necessarily have to lead to the complete deletion or destruction of your personal data, because the same set of data may be processed within the scope of another purpose, for the period indicated for it. The complete deletion or destruction of data takes place when we have completed the implementation of all purposes and in other cases indicated in the GDPR.
The retention periods are indicated in the table below.
| The purpose of data processing | Data storage period |
|---|---|
| User account | Until the user account is deleted |
| Creating and implementing challenges | Until the challenge is over |
| Complaints | Until the complaint is resolved. |
| Tax and accounting obligations | For the period required by law. |
| Archives | Until the information loses its usefulness. |
| Determination, defense, and pursuit of claims | Until the limitation period for claims expires. |
| Advertising audiences | Until the information loses its usefulness or you object to its processing |
| Social media | For as long as the information is available on the social networking site |
| Analysis and statistics | Until the information loses its usefulness or you object to its processing |
| Own Marketing | Until the information loses its usefulness or you object to its processing |
| Contact and correspondence | As long as there is contact between us |
| Additional tools | Until the information loses its usefulness or you object to its processing |
| Obligations regarding the protection of personal data | Until the limitation period for our liability as a personal data controller expires |
External service providers involved in the processing of your personal data are indicated in the table below.
Processor The purpose of cooperation with the processor Hosting provider Storing data on the server Invoicing/Accounting System Provider Issuing invoices and accounting documents Cloud Service Provider Google services Accounting office Bookkeeping Sentry Application Error Analysis
Yes, part of the processing of your personal data may involve their transfer to third countries.
We transfer your personal data to third countries in connection with the use of tools that use resources located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of protection of personal data through appropriate compliance mechanisms provided for by the GDPR, in particular through the use of standard contractual clauses.
Currently, your personal data is transferred to third countries in connection with our use of the following solutions:
| Type of solution | Solution Provider | Third country |
|---|---|---|
| Payment system | Stripe | USA |
| Cloud | USA |
In addition, Anonymous Information collected in connection with the use of the tools indicated in the annex to this privacy policy may be transferred to third countries, in particular the USA.
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects for you or significantly affect you in a similar way. Yes, we use tools that allow us to take certain actions depending on the information collected through tracking mechanisms, but we believe that these actions do not have a significant impact on you because they do not differentiate your situation as a customer, do not affect the terms of a contract you may enter into, etc.
By using certain tools, we can, for example, target personalised advertisements to you based on your previous actions on a given website or suggest products that may interest you.
The GDPR grants you the following potential rights in relation to the processing of your personal data:
The principles related to the implementation of the above-mentioned rights are described in detail in Articles 16–21 of the GDPR. We encourage you to familiarize yourself with these provisions. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and will not apply to you in relation to all activities of processing your personal data.
We would like to emphasize that you always have one of the rights indicated above: if you believe that we have violated the provisions on personal data protection when processing your personal data, you have the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office).
Our application, like almost all others, uses cookies and other similar technologies, such as tracking codes or pixels, conversion APIs, etc.
Using cookies or other similar technologies, certain information is collected and then used for various purposes, starting from ensuring the correct operation of individual functions of the Application, through the analysis of user behavior on the website, ending with the sending of targeted advertising.
If you want to learn more about cookies and other similar technologies, you can read these materials, for example:
We use cookies or other similar technologies based on your consent, except when cookies or other similar technologies are necessary for the proper provision of services to you.
Cookies or other similar technologies that are not necessary for the proper provision of services remain blocked until you express your consent to their use. During your first visit to our website, you are displayed a message asking for your consent along with the possibility of managing cookies or other similar technologies, i.e. deciding which cookies or other similar technologies you agree to and which you want to block.
Yes, you can manage cookie or similar technology settings within the application.
Cookies or other similar technologies are used to ensure the proper functioning of individual mechanisms of our websites, such as remembering the contents of the shopping cart for a specified period of time after adding selected products to it, maintaining the session after logging in, correctly sending forms visible on the pages, embedding video or audio players, operation of the comment system, social plugins, etc.
In addition, cookies or other similar technologies are used to conduct statistical, analytical and marketing activities.
Cookies also store information about your cookie settings defined by you via the privacy mechanism operating on our website.
Some cookies or other similar technologies are associated with external tools that we use, and the providers of those tools may have access to information collected through those cookies or other similar technologies. Details about external tools can be found in the appendix to the Privacy Policy.
A list of tools that require the use of cookies or other similar technologies, as well as a detailed description of these tools, can be found in the appendix to the Privacy Policy.
Yes, we use external tools that involve collecting information about your activities on our sites. These tools are described in detail in the appendix to the Privacy Policy.
Yes, we use external tools that allow us to direct advertising to specific target groups defined based on various criteria such as age, gender, interests, profession, work, and previous activities on our sites. These tools are described in detail in the appendix to this Privacy Policy.
The answer to this question is found in many places in this Privacy Policy when describing specific tools, behavioral advertising, etc. However, for your convenience, we have gathered this information in one place again. Below you will find a list of options for managing your privacy.
As you can see, the subject of personal data processing, use of cookies and management of privacy in general is quite complicated. We have made every effort to ensure that this document provides you with the most far-reaching knowledge on issues important to you. If anything is unclear to you, you want to learn more or simply talk about your privacy, write to us at [email protected].
Yes, we may modify this Privacy Policy, in particular due to technological changes and changes in legal regulations. If you have a user account or subscribe to the newsletter, you will receive a message about each change to the Privacy Policy. All archived versions of the Privacy Policy are linked below.
Privacy policy effective from April 7, 2025