In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), we hereby inform you that:

Data Controller

The data controller for the personal data of individuals registering with the Strava sports club “CloudsOnMars Family & Friends” is Clouds On Mars sp. z o.o., with its registered office in Warsaw (02-703) at Bukowińska 22 / 13B Street, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division, under KRS No.: 0000670382, NIP: 5213773786, REGON: 36688372800000, hereinafter also referred to as the “Controller” or the “Company.”

You may contact the Controller by writing to the address of the Controller’s registered office indicated above or via email at: info@CloudsOnMars.com

Source and Scope of Processed Personal Data

Your personal data was obtained by Clouds on Mars Sp. z o.o. directly from you through your registration with the club.

Clouds on Mars Sp. z o.o., as the Controller, will process your personal data — in particular: the email address you provided and your Strava username—the data (i.e., your Strava username) is also visible to other club members.

Data Protection Officer (DPO)

The data controller has appointed a Data Protection Officer (DPO), whom you may contact regarding any matter related to the processing of personal data, in particular by writing to IOD@cloudsonmars.com.

Purposes and Legal Bases for Processing Personal Data

Your personal data will be processed:

a. For club registration, the collection of statistical data, and the electronic distribution of the sports club’s newsletter (information about the club’s activities—statistics, comparisons of your performance relative to other Users, and updates on the number of trees planted)—based on consent (Article 6(1)(a) of the GDPR).

b. for the purpose of potentially establishing or pursuing claims or defending against claims—the legal basis for processing is the legitimate interest pursued by Clouds on Mars Sp. z o.o. (Article 6(1)(f) of the GDPR); consisting of enabling the Company to establish, pursue, or defend against claims.

Recipients of Personal Data

Your personal data may be transferred to IT service providers.

These entities process data based on a contract with the controller and exclusively in accordance with the controller’s instructions. In cases provided for by law, personal data may be transferred to entities that gain access to personal data based on generally applicable legal provisions (e.g., during tax audits or inspections by other authorized authorities).

Please also note that STRAVA is a separate data controller—responsible for activities conducted within its own application. Detailed information regarding the rules for processing personal data is available at: https://www.strava.com/legal/privacy

Period of Personal Data Processing

Your personal data will be processed for the duration of your club membership (or until you submit a request to have your data deleted). This period may be extended if it is necessary for Clouds on Mars Sp. z o.o. to determine, pursue or defend against claims.

Your Rights Regarding the Processing of Personal Data

Subject to the terms of the GDPR and the limitations set forth therein, you have the right to:

a. request that the controller grant you access to your personal data, rectify or update it, erase it, or restrict the processing of your personal data,

b. object to the processing of your personal data if we process your data based on our legitimate interest,

c. transfers your personal data,

d. withdraws your consent to the processing of your personal data,

e. file a complaint with the President of the Personal Data Protection Office (https://uodo.gov.pl).

To exercise the above-mentioned rights, please contact the Data Protection Officer at IOD@cloudsonmars.com.

No automated decision-making, including profiling, will take place in connection with the processing of your personal data.