Privacy Policy

This Privacy Policy explains how personal data is collected, used, and protected when you use Boiskowo (the "Service"), available at boiskowo.io. We are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Polish law.

1. Data Controller

The controller of your personal data is Radosław Filip, sole proprietorship (jednoosobowa działalność gospodarcza), NIP 6842509693, REGON 180956693. For any privacy-related matter you can contact us at kontakt@boiskowo.io.

2. What data we collect and its sources

• Account data you provide when registering: email address, display name, a securely hashed password, account creation date, and email-verification status.
• Reviews you post: the author name you provide, the rating, the review text, an optional child age group, and the submission date.
• Academy directory data: names, addresses, phone numbers, and email addresses of football academies, obtained from public external sources (the PZPN football-school certification programme and OpenStreetMap). See section 4.
• Technical data: IP address, an approximate country derived from a content-delivery-network header (used only to choose the interface language), and basic server logs needed to operate and secure the Service.

3. Purposes and legal bases

• Providing the Service — creating and managing your account, publishing your reviews: performance of a contract (GDPR art. 6(1)(b)).
• Operating a public directory of football academies, ensuring security, and preventing abuse: our legitimate interests (GDPR art. 6(1)(f)).
• Sending transactional emails such as email verification: performance of a contract and our legitimate interest in securing accounts.

4. Academy listings and third-party data

The academy directory is compiled in part from publicly available sources — the PZPN football-school certification programme and OpenStreetMap. This may include business contact details (such as an academy's email or address) that can constitute personal data. We process it on the basis of our legitimate interest in maintaining a useful, public sports directory. If you are connected with a listed academy and wish to have an entry corrected or removed, contact us at kontakt@boiskowo.io; academies can also claim and manage their own listing.

5. Sub-processors

We rely on the following service providers who process data on our behalf:

• Resend — delivery of transactional (verification) emails.
• Amazon Web Services (AWS) — hosting and infrastructure.

6. International transfers

Our infrastructure is hosted in the European Union (AWS, Frankfurt region). Some sub-processors (for example our email provider) may process data in the United States; where that happens, transfers are safeguarded by appropriate mechanisms such as the European Commission's Standard Contractual Clauses.

7. Data retention

We keep account data for as long as your account exists and delete it after account closure, unless a longer period is required by law. Reviews remain published while they are part of the Service. Technical logs are kept only for a short period needed for security and diagnostics.

8. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy;
• rectify inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at kontakt@boiskowo.io. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, PUODO).

9. Cookies

We use only functional cookies necessary for the Service to work: a cookie that remembers your chosen language (NEXT_LOCALE) and a session/token cookie that keeps you signed in. We do not use analytics or advertising cookies or third-party trackers, so no cookie consent banner is required.

10. Children

The Service is intended for adults. Accounts must be created by adults, and reviews are written by parents or guardians. A review may indicate a child's age group, which is provided by the adult author; we do not knowingly collect other personal data of children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be communicated through the Service.

12. Contact

For any questions about this policy or your personal data, contact us at kontakt@boiskowo.io.