Privacy policy

 

We have developed this Privacy policy to inform you about the way we process personal data collected in the fulfilment of the gpexe system’s usage contract.

1. Identity and contact details of the personal data controller
Personal data collected by gpexe is processed by Exelio S.r.l., located in Via Tavagnacco n. 83 in Udine, Italy, that may be contacted at the email address info@exelio.eu.

2. Categories of personal data processed, purposes, basis
a. Personal data collected when a gpexe account is created
The sports entity signing the contract for the use of the gpexe system authorises some of the training staff members to create gpexe accounts. The authorised training staff member is asked to provide his name and email address. It is possible to provide only a first name or a pseudonym, instead of the full name, if desired.
Exelio requires the email address of the authorised training staff member because it is needed to access the gpexe account, together with the chosen password. The basis of the request for the email address of the authorised athletic trainer is Exelio’s need to fulfil the contract with the sports entity and to ensure the safety of the authorised training staff’s account, as well as the sports entity’s and players’ data.
Exelio also uses the provided email to send newsletters for its marketing interests.
It is possible to unsubscribe at any time by clicking the unsubscribing link at the bottom of all newsletters.

b. Personal data collected through the contact form
When using the contact form, the user is asked to provide: type of institution, the name of institution, first name, last name, email address, telephone number, country.
It is possible to provide only the first name or a pseudonym, instead of the full name, if desired.
The user is free to provide an email address and/or a phone number.
This data is needed in order to be contacted.
Exelio uses the email provided also to send newsletters for its marketing interests.
It is possible to unsubscribe at any time by clicking the unsubscribing link at the bottom of all newsletters.

c. Personal data collected through email contact
When the user decides to send a request via email, Exelio uses the sending email in order to reply.
Exelio uses the email provided also to send newsletters for its marketing interests.
It is possible to unsubscribe at any time by clicking the unsubscribing link at the bottom of all newsletters.

d. Players’ personal data processed while synchronising the gpexe device
Gpexe devices are inserted in a special vest and measure the athletic performances of the players that choose to wear them.
The measurement of the players’ athletic performances is made possible through the gpexe device by collecting data as the position on the playing field, speed, direction, time and date of recording and sending the data to the gpexe cloud.
Collecting the mentioned data is needed for the functioning of the gpexe system. Without this data, the system cannot work.
The aggregate data collected in this manner is processed by the software of the gpexe web app to measure the players’ athletic performances. The web app allows visualizing the current and past players’ athletic data in order to ascertain evolutions in their performances.
The web app is accessible only to the training staff members authorized by the sports entity which has an interest in knowing how to enhance the athletic characteristics of its players.
This data is processed in order to fulfil contracts for the gpexe system’s use and collected if and when the players consent to wear the vests in which the gpexe device is inserted.
This data may be accessed by Exelio for its need to fulfil its contractual obligation towards the sports entity to guarantee the full functionality of the gpexe system.
This data is furthermore stored by gpexe, in an anonymous form, for statistical purposes.

3. The recipients of the personal data
a Training staff authorised by the sport entity
Players’ data are intended for the contracting sports entity in the persons of its authorised training staff.
The authorised training staff has access to current and past data concerning the players of their own sports entity only.

b Other services providers
Exelio uses third parties cloud services, such as Amazon, MailChimp and FattureInCloud.
Exelio uses MailChimp in order to store users’ emails and send them newsletters.
FattureInCloud is used to store data concerning Exelio customers in an organised manner.
Amazon is used to make the data processed by the gpexe system accessible to authorised parties, wherever they are located.

c Other disclosures
Exelio may disclose personal data to comply with legal obligations, to defend its rights in court and to prevent the commission of crimes.
Exelio may transfer the user’s personal data in case of mergers, acquisitions or similar operations, provided that data is treated for the same purposes, intended to the same recipients, with the same limits.

4. Data retention period
Exelio will store personal data described in the previous section 2. paragraph a) for the activation period of the gpexe account only.

Exelio will store personal data described in the previous section 2. paragraph d) for 10 years from their acquisition and will be available in the following forms:
– in case of purchase contracts, data collected within the previous 5 years will be available through the app. For the remaining storing period data will only be available in text form.
– in case of rental contracts, data collected within the previous 5 years will be available through the app if the request is made during the validity period of the rent contract. Data will only be available in text form when requested outside of the validity period of the rent contract and in any case after 5 years of data acquisition and for the remaining storing period.

For statistical purposes, personal data will be stored beyond that period in an anonymous form.

Furthermore, in “rights of the data subject” it is possible to read a description concerning the right to erasure.

5. Privacy policy updates
Exelio reserves the right to occasionally update this privacy statement in relation to improvements in offers and technological and regulatory developments.
Exelio will provide notice to the users if these changes are material and, when required by applicable law, Exelio will ask for users’ consent. This notice will be provided by email or by posting notice of the changes on the website.

6. Minors
Exelio’s products are not meant for individuals under the age of 16.
Use by individuals under the age of 16 is permitted only by presenting prior express authorisation by the holder of parental responsibility.
If Exelio recognises that it has inadvertently collected the personal data from users under the age of 16 without the proper authorisation, it will take the necessary measures to delete such information as soon as possible.
If you are aware of the use of gpexe products by a user under the age of 16 without the mentioned authorisation, please contact us at info@exelio.eu.

7. Rights of the data subjects
Pursuant to the General Data Protection Regulation (GDPR), the data subject has the right to request Exelio the access, amendment, erasure, portability, limitation of processing, the right to oppose the processing of own personal data and the right to file a complaint with the competent authority.
To exercise the mentioned rights please contact Exelio, at any moment and free of charge, at info@exelio.eu.