Privacy Policy

Last updated: March 2026

1. Data Controller

The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ATHLESY UG (haftungsbeschränkt) i.G.
c/o Jan Küpper
Düsseldorf, Deutschland
Email: jan@athlesy-app.com

2. General Information on Data Processing

We process personal data exclusively in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR). Personal data is any information that can be used to directly or indirectly identify you.

Data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

3. Hosting

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access our website, Vercel processes technically necessary data including your IP address. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in reliable website operation).

For further details, see the Vercel Privacy Policy:
https://vercel.com/legal/privacy-policy

4. Data Collection on This Website

Cookies

Our website uses technically necessary cookies to ensure basic functionality. These cookies are stored on the basis of Art. 6(1)(f) GDPR. You can configure your browser to be informed about cookies and to allow them only on a case-by-case basis.

Server Log Files

When you visit the website, technically required data (e.g. IP address, date/time, pages visited, browser information) is processed in server log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

Contact via Email

If you contact us by email, your inquiry including all resulting personal data (name, email, content) will be stored for the purpose of processing your request. This data will not be shared without your consent. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest).

5. Account Registration

When you create an account, we process your information (e.g. name, email address, city, sport preferences) to provide access to the platform and enable its features. For the active session, we store technically required session information in your browser to keep you logged in.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

6. Firebase / Firestore

We use Firebase and Firestore by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for authentication, data storage, and application infrastructure. Processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest). For details:

https://firebase.google.com/support/privacy

7. Waitlist

When you sign up for our waitlist, we exclusively store your email address for the purpose of notifying you about the launch of ATHLESY. The data will not be shared with third parties. You can request deletion at any time by emailing jan@athlesy-app.com. Legal basis: Art. 6(1)(a) GDPR (consent).

8. Email Delivery (Resend)

For transactional emails (e.g. account notifications, waitlist confirmations, investor correspondence) we use Resend by Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. Email addresses and necessary content data are processed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). For details:

https://resend.com/legal/privacy-policy

9. Data Processing Agreements

We use technical service providers for hosting (Vercel), database and authentication (Firebase/Firestore), and email delivery (Resend). All providers are engaged exclusively within the framework of data processing agreements pursuant to Art. 28 GDPR.

10. Data Retention

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods. Upon request, your data will be deleted unless retention is legally required.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

12. Contact

For questions about the processing of your personal data, you can reach us at:

jan@athlesy-app.com