Celia de Santos Pedrazuela (Gymnassy), self-employed
Tax ID (NIF): 02561996A
Address: Calle Conciliación, 4, 28041 Madrid (Spain)
Email: info@gymnassy.com
Gymnassy is the controller of the data in club, judge and organiser accounts. With regard to the data that a club enters about its gymnasts or groups (name, category, results and similar), Gymnassy acts as a data processor: it processes them only on the instructions of the club, which decides what data it provides and is responsible for having the necessary legal basis with respect to the people concerned or their legal representatives.
Clubs: club name, person in charge, email address and login credentials.
Gymnasts: first name and surname, club, category, apparatus, participation in competitions and sporting results.
Judges: name, email address and federation licence where applicable.
Organisers: identification and login data needed to manage the competitions.
Billing data: when an organiser buys a paid service, their name or company name, tax ID and address, to issue the invoice.
To create and manage user accounts, organise competitions, manage entries, enable digital scoring, produce rankings and results, keep the sporting history and deal with enquiries and technical support.
In addition, to issue invoices for the services purchased.
Processing is carried out in accordance with the GDPR on the following bases: performance of the relationship needed to provide the service, legitimate interest in ensuring the operation and improvement of the platform, and compliance with legal obligations where applicable.
In the case of gymnasts entered by a club, the data are processed in the context of the sporting organisation and management of the competitions.
Issuing invoices and keeping billing data are based on compliance with legal obligations (tax and commercial law).
Rankings may publicly show the gymnast's name, club, category, apparatus, scores and ranking obtained, as part of the normal running of competitions.
Data will be kept for as long as there is an active account, for as long as it is necessary to keep the sporting history of the competitions and for the periods required by the applicable regulations.
When they are no longer needed, they will be securely deleted or anonymised.
Billing data are kept for the periods required by tax and commercial law (generally six years).
We do not sell personal data or share it for commercial purposes.
Certain information may be accessed by clubs regarding their gymnasts, by organisers regarding the competitions they manage, by judges in the course of their duties and by users who consult public results where applicable.
Judges' contact details (name, email address and telephone number) are visible to the organisers of the tournaments in which they take part, in order to coordinate the competition and be able to reach them on the day of the tournament.
When a tournament organiser asks for it, the clubs taking part provide a contact telephone number, which only that organiser can see, in order to coordinate the competition.
Providers currently used: Amazon Web Services (hosting and files) and Zoho (email).
Billing data may be disclosed to the person who provides accounting and tax advice for the business and to the Spanish Tax Agency when required by law.
Data are stored in Amazon Web Services (AWS) data centres located in the European Union (Frankfurt, Germany). Certain public content (such as tournament poster photos) may be distributed through the AWS content delivery network, which uses edge servers in various countries. Where this involves a transfer outside the European Economic Area, the European Commission's Standard Contractual Clauses included in the AWS data processing agreement apply.
We apply technical and organisational measures aimed at protecting the confidentiality, integrity and availability of personal data, following the principles of accountability and data protection by design.
You can exercise your rights of access, rectification, erasure, restriction of processing, objection and portability, where applicable, by writing to info@gymnassy.com.
You can also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
Gymnassy is intended for the management of sporting competitions in which minors take part.
Gymnasts' data are entered by clubs and organisers solely to manage the competition and publish the sporting results associated with it. When the gymnast is under 14, the club declares that it has the consent of the person holding parental authority or guardianship, in accordance with Article 7 of Spanish Organic Law 3/2018.
Gymnassy has no direct relationship with the gymnasts or their families. Any enquiry or exercise of rights regarding these data should first be addressed to the relevant club, although Gymnassy can also be contacted at info@gymnassy.com.