Privacy and cookie policy
Updated: 20 October 2026
This policy covers the public sportago.online website and contact about demos. Processing player data in the club application requires separate terms and documents.
Controller and contact
The controller is IT POMELO, Ochla-Makowa 15, 66-006 Zielona Góra, Poland, tax ID (NIP) 9252029918, REGON 541417563. For privacy enquiries contact [email protected]. Controller details will change if the actual controller changes; plans to establish a company do not themselves transfer responsibility.
Contacting us
The form sends your name, email, club name and message through Cloudflare to [email protected] using encrypted SMTP at dhosting (smtp.dpoczta.pl). You can also email directly. We use these details to answer your enquiry, with no automatic newsletter subscription. The basis is Article 6(1)(f) GDPR (handling correspondence), or Article 6(1)(b) for prospective contracting parties. Details are voluntary; a reply address is needed. Do not send participant data or children’s documents.
Website and hosting
Cloudflare Pages (Cloudflare, Inc.) hosts this website. Connections provide technical information such as IP address, request time, requested resource and browser information to deliver and secure the site (Article 6(1)(f) GDPR). This site has no user accounts, payments or recruitment forms. Fonts are not fetched from Google Fonts.
Analytics only with consent
Google Analytics 4 (G-Q6QHYVMC4K, Google Ireland Limited / Google LLC) starts only after you select “Allow analytics” and only when the integration is enabled. Before consent, no Google script or cookieless analytics pings are sent. The basis is Article 6(1)(a) GDPR and consent to device storage/access under applicable electronic communications law. Measurement includes page views and technical browser/device data. Google Signals, ad personalisation and custom email-click tracking are not enabled. URL query strings and fragments are not sent to GA.
Browser storage and withdrawal
localStorage stores sportago.landing.consent.v1 with your analytics choice, date and notice version for up to 180 days to respect your decision. After consent, GA may set _ga and _ga_Q6QHYVMC4K cookies with an expiry configured to up to 180 days. Use “Privacy settings” in the footer and “Necessary only” to withdraw. We disable measurement, delete accessible _ga cookies and reload the page. Withdrawal does not affect the lawfulness of earlier processing. You can also clear site data in your browser.
Recipients, transfers and monitoring
Hosting, email and, with consent, analytics providers may receive data as needed to provide their services. Cloudflare and Google may process data outside the EEA, including the USA, using an applicable transfer mechanism such as an adequacy decision for a participant in the EU–US Data Privacy Framework or standard contractual clauses. Contact us for safeguards information; provider privacy policies are linked below. Planned UptimeRobot monitoring checks public URLs from its own servers; no monitoring script, identifier or widget is embedded in visitors’ browsers.
Retention
Demo correspondence is kept while handling your enquiry and normally for up to 12 months after it closes, unless a contract, legal obligation or establishing and defending claims requires longer retention. The analytics choice expires after 180 days. The service administrator should set GA4 event retention to 2 months; aggregate reports may remain available for a different period. Cloudflare technical logs follow the scope and retention of the service used; we do not maintain an additional visitor-log database.
Your rights and complaints
You can request access, rectification, erasure or restriction and, where applicable, portability. You can object to processing based on legitimate interests and withdraw analytics consent at any time. You may complain to the Polish supervisory authority, the President of UODO (uodo.gov.pl), or your competent supervisory authority. We do not use this website for automated decisions with legal effects or advertising profiling.
Cloudflare Turnstile
Cloudflare Turnstile protects the form and loads after form interaction. It processes technical device and connection data to prevent abuse (Article 6(1)(f) GDPR). Sending limits store HMAC hashes of network identifiers, not message content or plain IP addresses; expired entries are removed on subsequent requests and expire within 24 hours of creation. Cloudflare may process data outside the EEA. This protection is independent of optional analytics.