OPNPlay Privacy Notice

At OPNPlay, we prioritise your privacy and serve as the controller of any personal data we gather about you. This notice outlines our usage of your personal data.

How We Use Your Personal Data

In order to provide services to your employer, we need to collect personal information about you. Our services focus on digital team communication, planning, coordination, logistics, training, and recovery management. We collect data from you, your employer, and third-party software providers used by your employer through integrations (such as GPS performance stats). This data compiles into a digital athlete passport to improve athlete management and data accuracy. While we may access certain personal information about you, we securely store it in an encrypted database and pseudonymise it, meaning we apply a code and remove your name and contact details to prevent direct identification by third parties.

OPNPlay collects your name, contact details, and information about your location, performance, health, recovery, medical notes, and messaging history. This information comes from you, your employer, or third-party software applications currently used by your employer. Our lawful basis for using your data is tied to fulfilling our contract with your employer and our legitimate interests to maintain accurate performance and health data as part of our service provision to your employer.

Who We Share Your Personal Data With

We share your personal data with your employer and our employees as needed to deliver services. Additionally, we share data with our IT service providers (e.g., for cloud hosting), business partners assisting in service delivery, professional advisors, and legal authorities if required. If either we or your employer decide to share your data with a third party through our platform, it will only happen with your consent. All personal data is stored within the UK or the EU.

In the event of a business or asset sale, we may share your data with the prospective buyer, adhering to this privacy policy's terms.

Data Retention

We will delete your contact details 12 months after your account becomes inactive. We retain other personal data for the duration of our agreement with your employer and for six years thereafter.

Your Rights

You have specific rights concerning your personal data, including:

• Inform, Access, and Correction: Right to be informed about data processing, access your personal data, and request corrections or updates if inaccurate.
• Data Deletion: Request the removal of your personal data from our systems.
• Restriction: Request restricted processing of your data while concerns are investigated.
• Consent Withdrawal: Withdraw consent for data processing at any time by contacting us.
• Objection: Object to further processing of your personal data.

Complaints

If you believe your data protection rights have been violated, you may file a complaint with the relevant supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO).

We respect your data control preferences and will address your requests promptly per relevant laws. For questions or to exercise your rights, please contact us at [email protected].

General

We may update this Privacy Notice occasionally to reflect changes in practices or legal requirements.

For any privacy concerns, reach out to us at [email protected].