Privacy Policy

2.1. Who is responsible for data processing?

Data processing is carried out by the operator of the KickJourney platform. Our contact details can be found in Section 8 of this statement.

2.2. How do we collect your data?

Your data is collected in two ways: firstly, through information you actively provide to us (e.g. during registration, in the training log, or when uploading videos). Secondly, certain data is automatically collected by our IT systems when you visit our website or use the app (technical data such as device information, operating system, time of access).

2.3. What data do we collect and what do we use it for?

We process personal data that you provide to us as a user. We collect the following categories:

2.4. What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction, blocking, or deletion of this data. For all inquiries: support@kickjourney.pro.

2.5. Analytics tools and third parties

When visiting our website and using the app, your behavior may be statistically analyzed via cookies and analytics programs. The analysis is generally carried out anonymously or pseudonymously.

3.1. Data protection

We treat your personal data confidentially and in accordance with statutory data protection regulations. The legal basis for data processing is in particular Art. 6 GDPR (consent, contract fulfillment, legitimate interest).

3.2. Controller

The controller for data processing is KickJourney (contact details see Section 8). The controller within the meaning of the GDPR is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3.3. Withdrawal of consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time with effect for the future. A simple notification by email to support@kickjourney.pro is sufficient.

3.4. Right to complain

In the event of data protection violations, you have the right to lodge a complaint with the competent data protection authority. In Austria: Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna. Further information at www.dsb.gv.at.

3.5. Right to data portability

You have the right to have data that we process based on your consent or in fulfillment of a contract handed over to you or a third party in a common, machine-readable format, insofar as this is technically feasible.

3.6. SSL/TLS encryption

Our app and website use SSL/TLS encryption for security reasons. You can recognize an encrypted connection by the address bar changing from http:// to https:// and a lock icon appearing. If encryption is activated, data you transmit cannot be read by third parties.

3.7. Information, blocking, deletion

Within the framework of applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of the data processing, as well as a right to correction, blocking, or deletion of this data.

3.8. Opposition to promotional emails

We hereby object to the use of contact data published as part of the imprint obligation for sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information.

4.1. Cookies

Our website and app use cookies. Cookies are small text files stored on your device. We use:

• Session cookies: Automatically deleted after your visit ends
• Persistent cookies: Remain stored until you delete them and allow us to recognize your browser on your next visit
• Technically necessary cookies: Essential for the operation of the app and website (legal basis Art. 6 para. 1 lit. f GDPR)

You can set your browser to inform you about cookies and only allow them on a case-by-case basis. Deactivating cookies may limit functionality.

4.2. Server log files

Our hosting provider automatically collects and stores information in server log files. These include:

• Browser type and version
• Operating system used
• Referrer URL
• Time of server request
• IP address (anonymized)

This data is not merged with other data sources. Legal basis: Art. 6 para. 1 lit. f GDPR.

4.3. Storage period

Personal data is stored only as long as necessary for the respective processing purpose or if there are legal retention obligations. Upon deletion of your user account, all associated data will be deleted within 30 days, unless legal retention obligations prevent this.

5.1. In-app analytics

To analyze usage behavior in our app, we use anonymized analysis tools. The analysis is pseudonymized; attribution to your person is not possible for us.

5.2. Google Tag Manager

Our website uses Google Tag Manager from Google LLC. This service manages website tags via an interface and itself does not collect any personal data.

5.3. Meta (Facebook) Pixel

Our website uses the Meta Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. With this we can measure the effectiveness of advertisements and define target groups. The data collected is anonymous to us. Further information and opt-out options at facebook.com/about/privacy and youronlinechoices.com.

5.4. Firebase (App Analytics)

For the technical analysis of our app we use Firebase Analytics from Google LLC. Firebase collects pseudonymized usage data such as session length, device type, and app crashes. Further information at firebase.google.com/support/privacy.

6.1. YouTube (Training videos)

Our website and app may contain embedded YouTube videos from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you play a video, a connection to YouTube servers is established. Further information at policies.google.com/privacy.

6.2. Apple App Store and Google Play

When downloading and purchasing via the Apple App Store or Google Play, the privacy policies of the respective platform apply. KickJourney has no influence on the data collected by Apple or Google.

6.3. Payment service providers

Payments are processed via external service providers (e.g., Apple In-App Purchases, Google Play Billing or others). These process your payment data according to their own privacy policies. KickJourney only receives an anonymized payment confirmation, not banking or credit card details.

6.4. Cloudflare

We use services from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ('Cloudflare') to operate and secure our platform. Cloudflare acts as a Content Delivery Network (CDN) and Web Application Firewall (WAF). Cloudflare uses this data exclusively to protect our infrastructure, optimize loading times, and ensure availability. Legal basis: Art. 6 para. 1 lit. f GDPR. Cloudflare is certified under the EU-US Data Privacy Framework. Further information at cloudflare.com/privacypolicy.

6.5. WorkOS

For authentication and management of user accounts, we use WorkOS, Inc., 340 S Lemon Ave #3717, Walnut, CA 91789, USA ('WorkOS'). WorkOS provides us with a secure infrastructure for login, registration, SSO, and session management. This data is processed exclusively for secure identity management and not for advertising purposes. Legal basis: Art. 6 para. 1 lit. b GDPR. Further information at workos.com/legal/privacy.

7.1. Your data subject rights under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about the data stored about you
• Right to rectification (Art. 16 GDPR): You can request the correction of incorrect data
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data under certain conditions
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR): You can object to the processing of your data

To exercise these rights, contact support@kickjourney.pro.

7.2. Right to complain

You have the right to lodge a complaint with the competent data protection authority. In Austria: Data Protection Authority (www.dsb.gv.at).

7.3. Withdrawal of consent

You can withdraw consent given for the processing of personal data at any time with effect for the future. Please note that the withdrawal only takes effect for the future. Processing that took place before the withdrawal remains unaffected.

7.4. Right to object to direct marketing

You have the right to object at any time to the processing of your personal data for the purpose of direct marketing (Art. 21 para. 2 GDPR). After an objection, we will no longer process your data for direct marketing purposes.

7.5. Links to other websites

Our platform may contain links to websites of other providers. This privacy policy applies exclusively to KickJourney. We have no influence on whether other providers comply with applicable data protection regulations.

7.6. Changes to this privacy policy

We reserve the right to change this privacy policy at any time in compliance with applicable data protection regulations. The current version can always be found in our app and on our website. For material changes, we will notify you by email.

KickJourney FlexCo

Lotte-Profohs-Weg 6/17

1220 Vienna, Austria

Email: support@kickjourney.pro

Website: www.kickjourney.pro