This policy describes how ZEKLAR processes the personal data of users of the Calottina mobile application (the “Service”), in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable data protection legislation.
1 · Data controller and contacts
The data controller is ZEKLAR (VAT L81419031T), with registered office at Njesia 3, Rr. Ali Baushi 10, 1001-1028 Tirana, Albania. For any request concerning your personal data and the exercise of your rights, write to privacy@zeklar.com; for app support, write to info@zeklar.com.
2 · Data we process and purposes
Account (optional): email address and login credentials, used to authenticate you and personalise the feed. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Preferences: followed teams, requested sporting roles (for example club manager), and notification settings. Legal basis: contract.
Submitted content: entered results and, if you use the dedicated feature, photographs of the match report. The paper report may contain third parties' personal data (names of athletes and registered members, including minors): the photos are stored in a private space, accessible only to the uploader and to administrators, used solely to verify the result, and never made public. Legal basis: legitimate interest in the accuracy of sporting results (Art. 6(1)(f) GDPR).
Push notifications (optional): device token, used to deliver the notifications you choose. Legal basis: consent.
Purchases: the status of any Premium subscription is managed by the stores (Apple/Google) and by our provider RevenueCat; we do not process payment data. Legal basis: contract.
Advertising: the free version shows ads through Google AdMob. On first launch you are asked for consent (UMP/TCF; on iOS also via App Tracking Transparency); without consent, ads are non-personalised. Legal basis: consent.
Public sporting data: schedules, results, and standings of federation championships are public data from FIN sources and do not concern the users of the Service.
3 · Providers and processors
Data is neither sold nor disclosed to third parties for marketing purposes. It is processed on our behalf by providers acting as data processors: Supabase (database and authentication, hosted in the European Union), Google Firebase (push notifications), Google AdMob (advertising), RevenueCat (subscriptions), and Apple and Google (distribution and payments).
Some providers may process data outside the European Economic Area. In such cases, transfers take place only where appropriate safeguards under Chapter V of the GDPR are in place, such as adequacy decisions or Standard Contractual Clauses (SCCs).
4 · Retention
Account data is kept for as long as the account exists. Match report photos are kept for as long as needed to verify the result and to handle any disputes within the current sporting season, then deleted. Push tokens expire when the app is uninstalled or notifications are revoked.
5 · Your rights
You may at any time exercise the rights provided for in Articles 15–22 GDPR (access, rectification, erasure, restriction, objection, portability) and withdraw your consents by writing to privacy@zeklar.com. You may request the deletion of your account and associated data at the same address. You also have the right to lodge a complaint with the competent supervisory authority (for Italy, the Garante per la protezione dei dati personali).
6 · Minors
The Service is not directed at children under 14 and does not request their data for registration. The names of underage athletes that may appear in photographed match reports are never published and are processed as described in Section 2.
7 · Changes
We will update this page if the processing changes; the date at the top indicates the latest revision.