Privacy Policy of GoKrew App

§1. General provisions

This document is the Privacy Policy (hereinafter: “Privacy Policy”) and constitutes as a supplement to the Terms of Use (hereinafter: “Terms of Use”) available at ultrakrew.pl/aplikacja as well as defines and determines the amount, scope, type and method of processing the User’s (hereinafter: “User”) data collected by the “GoKrew” mobile app (hereinafter „App”) available on devices operated by iOS or Android operating system, offered by Ultrakrew Association (hereinafter „Ultrakrew”) KRS 0000700359, street Gen. Kazimierza Sosnkowskiego 1C apt. 8, 80-041 Gdańsk, Poland.
Under the Privacy Policy, as User is referred every person using the App.
Ultrakrew is the administrator of every data described in the Privacy Policy, unless specified otherwise by the Privacy Policy.
User’s acceptance of the Privacy Policy is required to use the App accordingly with the Terms of Service.
Ultrakrew stores part of the data in the Database (hereinafter: “Database”) and in Firebase Database (hereinafter: “Firebase Database”). Scope and method of the processing is specified by the Privacy Policy.
Data specified by the Privacy Policy as “linked up with User’s account” enable User’s identification by this data.
Data is not used in marketing or advertising profiling purposes. This provision does not apply to data collected automatically.

§2. Data collected automatically

Ultrakrew automatically collects statistical data to in particular improve the operation of the App, error detection, demography analysis, app usage analysis (hereinafter: “data collected automatically”) and anonymises it with available technology ensuring that an individual User cannot be identified by this data by Ultrakrew.
Collection of data collected automatically takes place via Google Analytics tool, owned by Google LLC and operated under separate terms of use and privacy policy (policies.google.com/privacy), Google Play tool owned by Google LLC and operated under the same terms of use and privacy policy, as well as AppleStore owned by Apple Inc. operated by separate terms of use and privacy policy (www.apple.com/legal/privacy) and Ultrakrew based on the regulations of Privacy Policy.
Data collected automatically can by processed outside of the European Economic Area.
Ultrakrew does not share nor sell data collected automatically to third parties however reserves the right to create or generate via beforenamed services aggregated reports based on data collected automatically.
Data collected automatically is also processed before creating an account in the App. Data collected automatically is not linked up with User’s account.
User is not able to not provide data collected automatically. Ultrakrew processes this type of data since installation of the App.
Data collected automatically contains anonymous information about User’s behavior, in particular: visited pages within the App, time of service usage, approximate User’s location, User’s device language, sex, age, scope of service usage by the User.
New kinds of data collected automatically may be added by Ultrakrew in the future without the necessity of changing the Terms of Use or Privacy Policy, if it does not violate the rule of data’s anonymity.

§3. Personal data

As User’s personal data (hereinafter: „personal data”) is considered: name, email address, unique internal User’s identification number, sex, date of birth.
Ultrakrew does not process any personal data without User’s consent. By consent is considered accepting the Terms of Service and the Privacy Policy while creating an account.
Providing personal data is necessary to create account in the App and for further usage of the App
User’s personal data can be processed by Ultrakrew to provide functionalities in the App as well as in case of User winning the internal contest in the App.
Ultrakrew does not sell, share nor compromises in any other way User’s personal data to third parties.
In order to delete personal data, one must follow the account deletion procedure specified in the Privacy Policy and Terms and Conditions.

§4. Health data

As health data (hereinafter: “health data”) is considered: blood pressure, pulse, blood hemoglobin level, cholesterol level divided into cholesterol HDL, LDL and triglycerides. Health data always stays private and is used to calculate in-app health norms.
Health data is stored only on User’s device. Ultrakrew and any third parties do not have access to health data.
The norms used by the App to calculate estimated User’s health state are available in the App. To calculate those health data is used. All calculations happen on User’s device.
Health data is subject to special protection to ensure its privacy.
In order to delete health data, one must follow the account deletion procedure specified in the Privacy Policy and Terms and Conditions.
Health data is linked up with User’s account.

§5. Location data

The App, under User’s consent, collects the geographical location data (hereinafter: “location data”) and saves it on User’s device. Some of location data, which does not allow to precisely locate the User (hereinafter: “approximate location data”) is sent to the Database and processed by Ultrakrew afterwards. Precise location data (hereinafter: “precise location data”) are not processed by Ultrakrew nor any third party and stay on User’s device.
As precise location data is considered: geographical coordinates of User’s location, map-path of the route User travelled during a workout, altitude, pace in specific locations, and accuracy of GPS signal.
As approximate location data is considered: name of voivodeship, state or region, name of city or county and name of country. In big cities neighborhood can also be stored.
User can terminate the consent to collect location data at any time by switching off location services on User’s device. It does not affect the status nor state of the data collected beforehand.
In order to delete location data, one must follow the account deletion procedure specified in the Privacy Policy and Terms and Conditions.
Location data data is linked up with User’s account.

§6. Data collected during a workout

As part of the services offered by the App User can start a workout. Data collected during that activity (hereinafter: “data collected during a workout”) are saved on User’s device and then sent and stored in the Database.
As data collected during workout is considered: individual internal User’s id, workout name, date of start and end of workout, duration, approximate location data, precise location data, average pace referred to entirety of the workout, distance travelled.
In the Database Ultrakrew stores all data collected during workout except precise location data.
Additionally, distance travelled by the User during workout is anonymously added to the sum of all kilometers travelled by all Users stored in the Database as well as to the sum of all kilometers travelled by employees of a partner company, if User is an employee of that company. Distance cannot be removed during the process of account deletion.
In order to delete data collected during a workout, one must follow the account deletion procedure specified in the Privacy Policy and Terms and Conditions.
Data collected during a workout is linked up with User’s account.

§7. Data collected in the background

The App collects location data in background only after User’s consent since the beginning of a workout and until the end of that workout, and never beyond this period.
Data collection in the background is considered as collection of data when App is running but not actively used i.e. when User is using another application on their device after starting and before ending a workout or when they are not using the phone without turning it off completely.
The App does not collect any other type of data in background.

§8. Data collected while adding a blood donation

User is entitled to add their blood donating history by providing in-app necessary data to create a blood donation entry (hereinafter: “data collected while adding a blood donation”) consisting of date of a donation, duration of a disqualification period, quantity of donated blood, blood donation center, type of donation and a note. Data collected while adding a blood donation is saved on User’s device and then sent to Database, where it is stored. Ultrakrew does not process data beyond the processing necessary to provide services.
The User may provide data collected while adding a blood donation partially.
If Ultrakrew will process in the future the data collected while adding a blood donations in an additional way, not resulting from the processing necessary to provide services; this will apply to the data for the processing of which the User has consciously consented.
In order to delete data collected while adding a blood donation, one must follow the account deletion procedure specified in the Privacy Policy and Terms and Conditions.
Data collected while adding a blood donation is linked up with User’s account.

§9. Processing data outside the European Economic Area

Ultrakrew processes entirety of stored in the Database data in Republic of Poland.
Data collected automatically can be processed outside of the European Economic Area (hereinafter: “EEA”) in accordance to policies of the companies specified in §2 of Privacy Policy.
Data collected by older versions of the App which are stored in Firebase Database and may be processed outside of the EEA. New versions of the App do not save any new data in Firebase Database, but get access to the data already stored there. If necessary, data stored in Firebase Database is transported to the Database. Scope and method of processing and storing data in Firebase Database is defined in the terms of use and privacy policy of Google LLC, being the owner of brand Firebase, available under firebase.google.com/terms.
The App can be downloaded only inside of the EEA, but the User may use it outside of the EEA. It does not change in any way the place of storing the data in the Database.

§10. Rights and obligations of the User

User has the right to access their personal data, data collected during a workout, health data and data collected while adding a blood donation through the App.
User may modify or supplement personal data (excluding individual internal User’s identification number), health data and data collected while adding a blood donation. User is not able to modify or supplement data collected during a workout.
User may delete any collected data: personal data, health data, data collected while adding a blood donation and data collected during a workout apart from the sum of kilometers added to mutual distance of all users; at any time by deleting the account in the App in a way described in the Terms of Use.
In case of deleting personal data and data collected during a workout, User loses right to use the App.
User has the right not to accept any changes in the Terms of Use and in Privacy Policy, if any occurs, however is obliged to remove the App from their device as well as to delete the account in the way described in Terms of Use.
After deleting the account, retrieving the removed data is not possible.
User has the right to apply for a copy of collected data in the manner specified in §12 of the Privacy Policy.

§11. Right and obligations of Ultrakrew

Ultrakrew undertakes to process the User’s data with caution and respect for the User’s privacy, solely in accordance with the terms of the Privacy Policy and Terms of Service, in particular taking into account the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 2016, No. 119, p. 1, as amended) and the Ustawa z dnia 18 lipca 2002 r. o świadczeniu usług drogą elektroniczną (t.j. Dz. U. z 2024 r. poz. 1513 z późn. zm.).
Ultrakrew guarantees to make every effort to make data in the Database unavailable to unauthorised third parties.
Data in the Database and in the Firebase Database will be stored until User decides to delete it or Ultrakrew decides of its removal with prior notice for the User. The procedure od such removal is described by the Terms of Service.
Ultrakrew has the right to share data collected during workout without individual User’s id to promote the App.
Ultrakrew undertakes to respond to the User’s request for a copy of the data in a format that allows for retention without undue delay, within the timeframe and manner specified in §12 of the Privacy Policy.

§12. A copy of the collected data

A copy of the collected data (hereinafter: “copy of the collected data”) is understood as a copy of personal data, data collected while adding a donation, data collected during a workout, excluding precise location data, in a format that allows retention.
A request for a copy of the collected data may only be submitted electronically by sending correspondence to the email address gokrew@ultrakrew.pl. The request must be sent from the email address associated with the account in the App and must express the desire to receive all data collected by Ultrakrew linked up to the account registered under that specific email address. No special formal format for the message is required.
Requests sent from email addresses that are not associated with any account in the application or requests asking for a copy of data from another account will not be considered.
In response to a correctly submitted request, Ultrakrew will send a copy of the collected data in a format that allows for reading and retention within 14 business days, indicating in the response the date and time the data copy was generated, along with a disclaimer of liability for the data provided in the email message by Ultrakrew.
Data stored in the Database or Firebase Database remains protected, but Ultrakrew is not responsible for how it is secured, processed, and stored by the email service provider or the recipient of the email containing the data copy.

§13. Final provisions

For any matters related to the processing of their data by Ultrakrew, the User may contact the administrator, Ultrakrew. The preferred method of contact is electronic correspondence sent to the email address gokrew@ultrakrew.pl.
The User has the right to submit a complaint if they believe that their data has been processed in a manner inconsistent with the provisions of the Privacy Policy, following the standard complaint procedure defined in the Terms of Service.
In the event of discrepancies between language versions of the Privacy Policy, the Polish version shall be considered binding.