Documents
Privacy policy
1. What this policy covers
This policy explains how we process the personal data of people who visit melon.edu.pl (the “Site”) and send the sign-up form for the Melon app pilot. It provides the information required by Article 13 of Regulation (EU) 2016/679 (GDPR).
This policy does not cover the Melon app itself or the data processed in the app, including children's data.
2. Data controller
The controller is Nublado sp. z o.o., ul. Henryka Sienkiewicza 3, 80-227 Gdańsk, Poland, entered in the Register of Entrepreneurs of the National Court Register by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register, under KRS 0001050386, NIP (tax ID) 9571161497, REGON 525989527 (“we”).
For anything related to personal data, write to us at info@melon.edu.pl or by post to our registered office.
3. What data we process
When you send the sign-up form, we process the data you enter:
- first name and surname,
- email address,
- the name of the club or school and the town,
- the community type (sports club, school, other activities) and your role (e.g. parent, coach, club board),
- the fact that you gave consent to be contacted, the language version of the Site the sign-up came from, and the date and time of the sign-up.
When you send the form we also use your IP address to limit the number of sign-ups from one address (at most 5 per 15 minutes). The IP address is held only in server memory for the duration of that limit and is not stored with the sign-up.
As with any website, the infrastructure the Site runs on processes technical connection data (such as the IP address, browser type and requested page) to deliver the content to you and to protect the Site from abuse.
The form is meant for adults: parents and people from clubs and schools. It does not ask for any data about children.
4. Purposes and legal bases
- Contacting you about the Melon pilot: reviewing your sign-up and replying to it. Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the consent box in the form.
- Keeping the Site secure and protecting the form from spam, including the per-IP sign-up limit. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
- Establishing, exercising or defending legal claims, should the need arise. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
5. Do you have to provide your data
Providing data is voluntary, but without the fields marked as required and without consent to be contacted we cannot accept your sign-up or get in touch with you.
6. Who receives the data
Sign-ups are visible only to authorised members of our team. We use Microsoft services, and Microsoft processes data on our behalf under a data processing agreement (the Microsoft Products and Services Data Protection Addendum):
- Microsoft Azure: hosting the Site (Azure App Service), the sign-up database (Azure Database for PostgreSQL) and sending email notifications about new sign-ups (Azure Communication Services),
- Microsoft 365: the team mailbox that receives sign-up notifications and our correspondence with you.
The Azure services the Site uses run in regions within the European Economic Area. We do not sell data or share it with anyone for marketing purposes. We may disclose data to public authorities where the law requires it.
7. How long we keep the data
We keep sign-up data until the pilot ends, and no longer than 12 months after the sign-up was sent. If you withdraw your consent earlier, we delete it earlier. We may keep longer only the data needed to establish, exercise or defend legal claims, for as long as the limitation periods run.
8. Your rights
You have the right to:
- access your data and receive a copy of it,
- have your data rectified,
- have your data erased,
- restrict processing,
- data portability for data processed on the basis of consent,
- object to processing based on our legitimate interest,
- withdraw your consent at any time; withdrawing consent does not affect the lawfulness of processing before the withdrawal.
To exercise these rights, write to info@melon.edu.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
9. Cookies and third-party tools
The Site does not set cookies or store any other data in your browser (except in the admin panel, which only our team uses), and it does not use analytics or advertising tools. Fonts and images are served from our own server. The Instagram and Facebook links in the footer are plain links: only when you click them do you go to those companies' services, where their own privacy policies apply.
10. Automated decisions
We do not make decisions about you based solely on automated processing, including profiling.
11. Changes to this policy
If we change how we process data, we will update this policy and the date at the top of this page.