1. GENERAL INFORMATION
1.1. This Privacy Notice applies to the processing of personal data on the Wellif.ai platform where the platform is used by legal entities (sports clubs or other organisations) on the basis of a contract.
1.2. The owner and technical operator of the platform is:
SIA Wellif.ai
Registration No. 40203549389
Registered office: Kungu iela 30/34-7, Liepāja, LV-3401
(hereinafter – Wellif.ai).
1.3. With regard to personal data entered by Clients, Wellif.ai acts as a PERSONAL DATA PROCESSOR, not as a data controller, within the meaning of the GDPR.
2. DATA CONTROLLER
2.1. The data controller is the respective organisation that uses the Wellif.ai platform (hereinafter – the Client).
2.2. The Client determines:
- the purposes of personal data processing;
- the categories and scope of personal data to be processed;
- the categories of data subjects;
- data retention periods;
- the lawful basis for the processing of personal data.
2.3. Questions regarding the processing of personal data, access to data, rectification, erasure, or the exercise of other data subject rights must be addressed to the respective Client as the data controller.
3. TYPE OF PROCESSING AND CATEGORIES OF DATA
3.1. Wellif.ai provides a technical platform for the entry, storage and structuring of personal data and for access management.
3.2. The following personal data may be processed on the platform (depending on the Client’s activities):
- identification data;
- contact information;
- sports, training or rehabilitation data;
- health data (special categories of personal data), where entered by the Client.
3.3. Wellif.ai does not use personal data entered by the Client for its own independent purposes and does not process such data beyond what is necessary to provide the service specified in the contract.
4. LAWFUL BASIS
4.1. The lawful basis for the processing of personal data is determined by the Client as the data controller.
4.2. Wellif.ai processes personal data only in accordance with the concluded service agreement and the Client’s documented instructions.
5. DATA STORAGE AND SECURITY
5.1. Personal data is stored in cloud infrastructure located within the European Union.
5.2. Wellif.ai implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, loss or destruction.
5.3. Upon termination of the service agreement, personal data is deleted or returned to the Client within the period specified in the contract, unless the Client has provided different instructions.
6. DATA SUBJECT RIGHTS
6.1. A data subject has the right to access, rectify or erase their personal data, or restrict its processing, by contacting the Client as the data controller.
6.2. Where the Client has enabled the relevant functionality, the data subject may be able to exercise some of their rights through the self-service portal on the Wellif.ai platform. The Client is responsible for the availability and scope of the specific functionality.
6.3. If a data subject considers that the processing of personal data does not comply with applicable laws and regulations, they have the right to contact the data controller or the competent supervisory authority.
7. CHANGES TO THIS NOTICE
7.1. Wellif.ai has the right to update this Privacy Notice by publishing the current version on its website or platform.