Privacy Policy
Leon — Sports Shooting Range Management System · last updated: [date]
1. Data controller
The system Leon is operated by:
If you have questions or want to exercise your rights of access, rectification, erasure, or lodge a complaint with a supervisory authority, contact us at: [contact email].
2. Introduction
This Privacy Policy describes how the Leon system collects, uses, stores and protects your personal data. The system is designed to support a sports shooting range: organising competitions, registering shooters, recording membership fees, publishing results, and maintaining a guest logbook (WRS).
3. Types of personal data processed
Depending on your activity, the system may process:
- Identity data — first name, last name, username, email address, phone number;
- Login data — username and password;
- Contact data — email, phone (e.g., in contact forms, for replies);
- Competition data — shooter details, licence number, results, rankings, event and competition data;
- Financial data — information about entry fees, membership dues and additional fees;
- Technical data — IP address and login session information;
- Guest logbook (WRS) data — first name, last name, permit details (permit number and issuing authority, or address), entry time, signature data (as an image);
- Data submitted via the contact form — name, email, message.
Special categories of data (Art. 9 GDPR) are not processed. Children's data is not collected. If this changes, you will be informed in advance.
4. Purposes of processing
Personal data is processed for:
- performing contracts (competition entry, fee collection, results publishing);
- maintaining the guest logbook (WRS) in accordance with legal requirements;
- communicating with members (newsletter — optional, requires consent);
- ensuring service security;
- improving the service;
- meeting legal obligations (reporting, registration).
5. Legal basis for processing
- Contract (Art. 6(1)(b) GDPR) — competition entry, services, membership dues;
- Legal obligation (Art. 6(1)(c) GDPR) — guest logbook (WRS), competition records;
- Consent (Art. 6(1)(a) GDPR) — newsletters and special communications;
- Legitimate interest (Art. 6(1)(f) GDPR) — security and proper functioning of the service.
6. Storage and data lifecycle
- Data is stored in the European Union (EU/EEA).
- Competition and results data — for as long as needed to fulfil their purpose, and longer where required by law.
- Guest logbook (WRS) — in accordance with legal requirements; after the records are closed, data is deleted.
- Accounts and login data — for as long as the account is active; after closure, deleted unless required by law.
- The controller does not keep data longer than necessary for the purposes of processing.
7. Your rights (Art. 15–22 GDPR)
You have the right to:
- access your personal data (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure of your data, including the right to be forgotten (Art. 17);
- restriction of processing in certain circumstances (Art. 18);
- data portability — receive your data in a structured, commonly used and machine-readable format and transfer it to another controller (Art. 20);
- object to processing in certain circumstances (Art. 21);
- withdraw consent at any time (Art. 7(3) GDPR);
- lodge a complaint with a supervisory authority or request deletion of data.
The competent supervisory authority for Poland is the President of the Office for Personal Data Protection (UODO):
8. Disclosure to third parties
Personal data is not sold and is not shared with third parties for marketing purposes. Data may be disclosed only to:
- authorised members of the controller's staff — to the extent necessary to operate the service;
- service providers (hosting, email) — under contracts requiring protection of the data;
- judges or competition organisers — only within the scope required to run the competitions.
Only authorised persons who need the data for the stated purposes have access to it.
9. Cookies and similar technologies
The website and the mobile app do not use cookies or analytics tools. Data is transmitted only as a result of your own actions (e.g., login, submitting a form).
10. Data transfers
Data is processed in Poland and in European Economic Area (EU/EEA) countries. The controller does not transfer data outside the EU/EEA.
11. Security
The controller applies appropriate technical and organisational measures to protect personal data. In the event of a personal data breach, the controller will notify the supervisory authority and affected individuals as required by GDPR.
12. Changes to this Privacy Policy
The controller may update this policy. Changes are published on the website at this address. You will also be notified of material changes (e.g., in-app or on-site notice).
13. Voluntary provision of data and consent
Providing data is voluntary, but necessary to use the service — without it we cannot provide it. We do not use automated decision-making, including profiling. You accept this policy when creating an account, registering for competitions or entering the guest logbook — before providing your data.