GDPR in Slovenia
The short version. The General Data Protection Regulation (GDPR) applies in Slovenia as everywhere in the European Union. This page explains who is responsible for your data in Hashmark, which authority you can turn to in Slovenia, and how to use your rights. What we keep, why and for how long is in our privacy policy.
Ta stran v slovenščini: slovenska različica.
Who is responsible for your data
In Hashmark there are two possible controllers, depending on the information:
| Information | Controller | Who to write to first |
|---|---|---|
| Your account (email, name, sign-in), billing, the usehashmark.com website | Vantry LLC, which publishes Hashmark | Hashmark: support@usehashmark.com |
| What your team or club records about you: roster, attendance, injuries and absences, wellness, fitness tests, licence and medical certificate, dues, trips, photos and videos, messages, club emails | Your club or team. Hashmark is only its processor (section 14 of the terms). | Your club office or coaches. If you write to us, we pass your request on and help them answer. |
Vantry LLC, 2524 Van Beek Road, Green Bay, WI 54311, United States. Data protection contact: support@usehashmark.com, with "GDPR" in the subject line. We answer in English or French.
The data protection authority in Slovenia
If you think your rights are not respected, write to us first: most questions are settled quickly. You can also complain at any time, free of charge, to the national authority:
| Authority | Informacijski pooblaščenec Republike Slovenije, the Information Commissioner of the Republic of Slovenia |
|---|---|
| Postal address | Dunajska cesta 22, 1000 Ljubljana, Slovenija |
| Website | www.ip-rs.si |
| How to complain | Complaint page |
You can also complain to the authority of the EU country where you live, where you work or where the problem happened.
National rules in Slovenia
The GDPR applies directly; the national law that supplements it is the Personal Data Protection Act (Zakon o varstvu osebnih podatkov, ZVOP-2) of 2022, in force since 26 January 2023.
Age of digital consent (GDPR article 8): 15 (article 8 of ZVOP-2). Below this age, a parent or guardian must agree before a young person uses an online service on the basis of consent.
In Hashmark there is no account before 13, and anyone aged 13 to 15 needs the agreement of a parent or guardian, which we ask for by email. The parent can take that agreement back at any time with the link in that email, which deletes the account. For photos and videos of a minor, the parent answers the club's image rights form. This is stricter than the age set in Slovenia.
Your federation may have its own rules on licences and medical certificates; your club office can tell you what they are.
Health data and photos
Injuries and absences, wellness check-ins and medical certificates are health data, which the GDPR protects more strongly (article 9). Your club or team decides to record them, to organise practices and games and to follow its federation's rules; only the roles that need them can see them. Hashmark keeps them only to provide the service to your club, never uses them for anything else and never shows them to other clubs. Wellness check-ins are only for adult players who agree to them themselves.
The club only shows and shares photos and videos of you if you (or your parent, for a minor) said yes in its image rights form. You can change your mind and ask the club to remove a picture of you.
Your rights and how to use them
| Right | What it means | How to use it |
|---|---|---|
| Access | Know what information we have about you and get a copy | Write to us. For your team's or club's data, also ask the club office. |
| Rectification | Have wrong or incomplete information corrected | Your name: in Hashmark, Settings, Account settings. The rest: your coaches, the club office, or us. |
| Erasure | Have your information deleted | Delete your account yourself in Hashmark (Settings, Account settings, Delete my account). Data the club must keep (for example its accounts) stays with the club, no longer linked to your account. |
| Restriction | Have the use of your data put on hold while something is checked | Write to us. |
| Portability | Get your data in a reusable format | A coach can export a full copy of the playbook at any time. For your other data, write to us. |
| Objection | Refuse a use based on our legitimate interest | Write to us. Website visits are only measured if you agreed ("Cookie settings" button at the bottom of the website). |
| Withdrawing consent | Take back an agreement you gave | Image rights: change your answer in the club's form. Parent's agreement: the link in the email the parent received. Notifications: your phone's settings. Shared plays: stop sharing the play. |
We answer within one month, free of charge. We may ask you to confirm who you are, for example by writing from your account's email address. We make no automated decisions that significantly affect you, and we do no advertising profiling.
Where your data goes, and security
Hashmark's database is hosted in Ireland (European Union); clubs' photos are stored in the European Union and their videos in Slovenia (European Union). Some providers (email sending, payment, notifications) may process data in the United States; these transfers are covered by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. The full list of providers is in the privacy policy. We never sell or rent personal data.
Everything travels encrypted (HTTPS), and everyone sees only their own teams and, within a team, only what their role allows. If a data breach puts you at risk, we notify the competent authority within 72 hours and inform you and your club, as the law requires.
Other countries: GDPR by country. In France, see our RGPD page.
Slovenska različica
Na kratko. Splošna uredba o varstvu podatkov (GDPR) velja v Sloveniji tako kot v vsej Evropski uniji. Ta stran pojasnjuje, kdo je odgovoren za vaše podatke v Hashmarku, na kateri organ se lahko obrnete v Sloveniji in kako uveljavljate svoje pravice. Kaj hranimo, zakaj in kako dolgo, je opisano v našem pravilniku o zasebnosti (v angleščini).
Kdo je odgovoren za vaše podatke
V Hashmarku sta glede na vrsto podatkov možna dva upravljavca:
| Podatki | Upravljavec | Komu najprej pišete |
|---|---|---|
| Vaš račun (e-pošta, ime, prijava), obračun, spletna stran usehashmark.com | Vantry LLC, izdajatelj Hashmarka | Hashmark: support@usehashmark.com |
| Kar vaša ekipa ali klub beleži o vas: seznam igralcev, prisotnost, poškodbe in odsotnosti, počutje, telesni testi, licenca in zdravniško potrdilo, članarine, potovanja, fotografije in videoposnetki, sporočila, e-pošta kluba | Vaš klub ali ekipa. Hashmark je le njegov obdelovalec (14. člen pogojev). | Vodstvo kluba ali vaši trenerji. Če pišete nam, vašo zahtevo posredujemo in jim pomagamo odgovoriti. |
Vantry LLC, 2524 Van Beek Road, Green Bay, WI 54311, Združene države Amerike. Kontakt za varstvo podatkov: support@usehashmark.com, z »GDPR« v zadevi. Odgovarjamo v angleščini ali francoščini.
Nadzorni organ v Sloveniji
Če menite, da vaše pravice niso spoštovane, najprej pišite nam: večina vprašanj se hitro reši. Kadar koli lahko tudi brezplačno vložite prijavo pri nacionalnem nadzornem organu:
| Organ | Informacijski pooblaščenec Republike Slovenije |
|---|---|
| Poštni naslov | Dunajska cesta 22, 1000 Ljubljana, Slovenija |
| Spletna stran | www.ip-rs.si |
| Kako vložiti prijavo | Vložitev prijave |
Prijavo lahko vložite tudi pri organu države EU, v kateri živite, delate ali kjer je prišlo do težave.
Nacionalna pravila v Sloveniji
GDPR se uporablja neposredno; dopolnjuje ga Zakon o varstvu osebnih podatkov (ZVOP-2) iz leta 2022, ki velja od 26. januarja 2023.
Starost za digitalno privolitev (8. člen GDPR): 15 let (8. člen ZVOP-2). Pod to starostjo mora starš ali skrbnik privoliti, preden mlada oseba uporablja spletno storitev na podlagi privolitve.
V Hashmarku ni računa pred 13. letom, kdor je star od 13 do 15 let, pa potrebuje privolitev starša ali skrbnika, za katero zaprosimo po e-pošti. Starš lahko privolitev kadar koli prekliče s povezavo v tem sporočilu, s čimer se račun izbriše. Za fotografije in videoposnetke mladoletne osebe na obrazec kluba o uporabi podobe odgovori starš. To je strožje od starosti, določene v Sloveniji.
Vaša zveza ima lahko lastna pravila glede licenc in zdravniških potrdil; vodstvo kluba vam pove, katera.
Podatki o zdravju in fotografije
Poškodbe in odsotnosti, vprašalniki o počutju in zdravniška potrdila so podatki o zdravju, ki jih GDPR posebej varuje (9. člen). Vaš klub ali ekipa se odloči, da jih beleži, da organizira treninge in tekme ter spoštuje pravila svoje zveze; vidijo jih le vloge, ki jih potrebujejo. Hashmark jih hrani samo za izvajanje storitve za vaš klub, jih nikoli ne uporabi za nič drugega in jih nikoli ne pokaže drugim klubom. Vprašalniki o počutju so samo za polnoletne igralce, ki se z njimi sami strinjajo.
Klub prikazuje in deli vaše fotografije in videoposnetke le, če ste (ali vaš starš, če ste mladoletni) privolili v njegovem obrazcu o uporabi podobe. Premislite si lahko in klub prosite, naj odstrani posnetek, na katerem ste.
Vaše pravice in kako jih uveljavljate
| Pravica | Kaj pomeni | Kako |
|---|---|---|
| Dostop | Izvedeti, katere podatke imamo o vas, in prejeti kopijo | Pišite nam. Za podatke ekipe ali kluba vprašajte tudi vodstvo kluba. |
| Popravek | Popraviti napačne ali nepopolne podatke | Vaše ime: v Hashmarku, Settings, Account settings. Ostalo: vaši trenerji, vodstvo kluba ali mi. |
| Izbris | Izbrisati vaše podatke | Račun izbrišite sami v Hashmarku (Settings, Account settings, Delete my account). Podatki, ki jih mora klub hraniti (na primer računovodstvo), ostanejo pri klubu, brez povezave z vašim računom. |
| Omejitev | Začasno ustaviti uporabo podatkov, dokler se nekaj preverja | Pišite nam. |
| Prenosljivost | Prejeti podatke v ponovno uporabni obliki | Trener lahko kadar koli izvozi celotno kopijo playbooka. Za druge podatke nam pišite. |
| Ugovor | Zavrniti uporabo, ki temelji na našem zakonitem interesu | Pišite nam. Obiski spletne strani se merijo le, če ste privolili (gumb "Cookie settings" na dnu strani). |
| Preklic privolitve | Umakniti dano privolitev | Uporaba podobe: spremenite odgovor v obrazcu kluba. Privolitev starša: povezava v e-pošti, ki jo je prejel starš. Obvestila: nastavitve telefona. Deljene akcije: prenehajte deliti. |
Odgovorimo v enem mesecu, brezplačno. Lahko vas prosimo, da potrdite svojo identiteto, na primer s sporočilom z e-poštnega naslova vašega računa. Ne sprejemamo avtomatiziranih odločitev, ki bi na vas pomembno vplivale, in ne izvajamo profiliranja za oglaševanje.
Kam gredo vaši podatki in varnost
Podatkovna baza Hashmarka gostuje na Irskem (Evropska unija); fotografije klubov so shranjene v Evropski uniji, njihovi videoposnetki pa v Sloveniji (Evropska unija). Nekateri ponudniki (pošiljanje e-pošte, plačila, obvestila) lahko obdelujejo podatke v Združenih državah Amerike; ti prenosi so zajeti s standardnimi pogodbenimi klavzulami Evropske komisije ali z okvirom EU-ZDA za zasebnost podatkov. Celoten seznam ponudnikov je v pravilniku o zasebnosti. Osebnih podatkov nikoli ne prodajamo in ne dajemo v najem.
Vse potuje šifrirano (HTTPS), vsak vidi le svoje ekipe in znotraj ekipe le tisto, kar dovoljuje njegova vloga. Če kršitev varnosti podatkov za vas pomeni tveganje, jo v 72 urah prijavimo pristojnemu organu ter obvestimo vas in vaš klub, kot zahteva zakon.
Druge države: GDPR po državah.