Informativa sulla privacy

1. Who we are

The controller of your personal data is FOOTBALL4PRO d.o.o. za usluge, Dubrava 120, 10000 Zagreb, Croatia, OIB 12559092859, registered at the Commercial Court in Zagreb under MBS 081259979 (“we”, “us”). We operate under the brand PEC – Performance Elite Conditioning, including the website performance-elite-conditioning.com and the PEC mobile app.

For anything related to your data, write to info@performance-elite-conditioning.com or to our postal address. We have not appointed a data protection officer, as we are not required to; this address reaches the people responsible directly.

2. What this policy covers

This policy explains how we process personal data when you visit our website, contact us (form, e-mail, phone or WhatsApp) and when you use the PEC app as a PEC member. It is written under the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR.

3. Website visits

When you open the website, our server and content delivery network automatically process technical data needed to deliver the page and keep it secure: IP address, date and time, requested page, browser and device type, and referring page. These logs are used only for operation, security and abuse prevention and are deleted after at most 30 days, unless needed to investigate a specific security incident.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

Videos and some media are delivered through Amazon CloudFront, which processes the same technical data on our behalf.

4. Contact form, e-mail, phone and WhatsApp

When you send us an enquiry we process the data you give us: name, e-mail address and, if you choose to provide them, phone or WhatsApp number, club, role, area of interest, age (academy form) and your message, together with the language and page the form was sent from. The form is delivered to us by e-mail, and you receive an automatic confirmation that we have received it.

We use this data only to answer your enquiry and, if you wish, to prepare an offer or a contract. We do not use it for newsletters or advertising.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Retention: enquiries are kept for 12 months after our last contact. If the enquiry leads to a contract, the data becomes part of the client relationship described below.

Please do not send health information through the form. If you write to us via WhatsApp, WhatsApp (Meta) also processes your data under its own terms and privacy policy.

5. PEC app

The PEC app is available only to players and clients who have a contract with us; accounts are created by PEC. In the app we process:

• Account data — name, username, phone number, club, profile photo and login data.
• Training data — your training plans, sessions, notes and progress entered by you or your coach.
• Anamnesis and health-related data — injury history, medical information, test and diagnostic results.
• Documents — files shared between you and PEC in connection with your programme.
• Technical data — data needed for the app to work securely, such as device and app version and server logs.

Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR). Health data is a special category of data and is processed only on the basis of your explicit consent given in the contract (Art. 9(2)(a) GDPR). You can withdraw that consent at any time; this does not affect processing carried out before the withdrawal, but without this data we may not be able to provide parts of the programme safely.

Retention: app data is kept for the duration of the contract and deleted 12 months after it ends, unless a longer period is required by law (for example, accounting records linked to invoices).

6. Minors

Where a player is under 18, the contract, including consent for processing health data, is signed by a parent or legal guardian. Parents and guardians may exercise the rights described below on behalf of the minor.

7. Cookies and analytics

The website works without cookies that require consent. If we use analytics (Google Analytics 4) to understand how the site is used, analytics cookies (such as _ga and _ga_*, stored for up to 2 years) are set only after you agree in the cookie banner. You can change or withdraw your choice at any time in the cookie settings. Without consent, no analytics cookies are set.

Legal basis: your consent (Art. 6(1)(a) GDPR). We do not use advertising or remarketing cookies.

8. Who receives your data

We do not sell your data. Within PEC, data is available only to the staff who need it for your enquiry or programme. We use the following service providers (processors), bound by data processing agreements:

• Amazon Web Services EMEA SARL (Luxembourg) — hosting of the website and app, file storage, video delivery (CloudFront) and sending of e-mails (Amazon SES); data is stored in the EU (Stockholm region).
• Our e-mail provider — for receiving and answering e-mails.
• Google Ireland Ltd. — Google Analytics, only if you consent.
• Apple and Google — distribute the app through the App Store and Google Play under their own terms and privacy policies.

We share data with your club, agent or medical staff only if you agree or if it is part of the contract. We may disclose data to authorities when the law requires it.

9. Transfers outside the EU

We store data in the EU. Some providers (such as AWS and Google) are part of groups based in the United States, so data may be accessed from outside the EU, for example for support or security. Such transfers are protected by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

10. Security

We protect data with encrypted connections (HTTPS), encrypted storage, access limited to authorised staff, and measures against spam and abuse of the contact form. No system is completely secure; if a data breach is likely to put you at risk, we will inform you and the supervisory authority as the law requires.

11. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. We do not make decisions based solely on automated processing or profiling.

To exercise your rights, write to info@performance-elite-conditioning.com. We will reply within one month. To protect your data, we may ask you to confirm your identity.

You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the authority in the EU country where you live or work.

12. Changes

We may update this policy when our services or the law change. The current version is always published on this page, with the date of the last update. We will notify app users of significant changes in the app or by e-mail.