1. Controller
Zoltán Joó, sole proprietor (Joó Zoltán E.V.)
Registered office: 2465 Ráckeresztúr, Szegfű u. 31., Hungary
Tax number: 59746890-1-27
Registration number: 57795018
Email: info@run-in-team.com
Website: https://mandalasoft.hu/runinteam
2. Data, purposes and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Name, nickname, email, secure password hash and profile picture | Account, identification and communication | Performance of contract |
| Confirmation code, session and security data, hashed IP address for registration attempts | Activation, sign-in and abuse prevention | Contract and legitimate interest |
| GPS coordinates, timestamps, completed route, distance, pace and activity data | Recording, live tracking and replay | User-requested service and performance of contract |
| Team, event, connection, comment and sharing data | Team and community features | Performance of contract |
| Technical logs, device and browser data | Security, diagnostics and stability | Legitimate interest |
| Google Analytics 4 data | Usage statistics and interface improvement | Prior consent |
| Facebook social feature data | Loading the sharing feature | Prior consent |
3. Location data and visibility
Location transmission starts only with device permission and when a run is started. Anyone holding the live link may see the runner’s nickname and animal icon, current position, completed path, distance and related timestamps. A planned route may also be displayed.
For team or relay runs, the same live link may display several runners. The link is not part of a public searchable directory, but it can be forwarded and opened without registration. A user may share another person’s location only with the appropriate permission.
4. Processors and third parties
- Tag21 Kft. – hosting, server and database operation.
- Email infrastructure – delivery of registration and service messages.
- Google Analytics 4 – only after statistics consent.
- Meta/Facebook – only after marketing and social media consent.
- OpenStreetMap and content delivery networks – map tiles and technical interface resources; they may receive the IP address and browser data when requested.
External providers may also act as independent controllers under their own terms. Some providers may process data outside the EEA using their applicable lawful transfer safeguards.
5. Retention
Account and activity data are retained until the account or content is deleted, or while needed to provide the service. Security data are kept as long as necessary to investigate abuse, and the consent choice for up to 180 days. Data required for legal claims may be retained until the relevant limitation period ends.
6. Recipients
Recipients may include the processors listed above, recipients selected through a live link and authorities or courts where disclosure is legally required. Personal data are not sold.
7. Rights
You may request access, correction, deletion, restriction and, where applicable, data portability; object to processing based on legitimate interests; and withdraw consent at any time. Withdrawal does not affect earlier lawful processing. Requests can be sent to info@run-in-team.com.
8. Security
Passwords are stored as one-way secure hashes and technical controls are used for queries and access. No internet service can guarantee zero risk; security incidents are handled as required by law.
9. Complaints
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; email: ugyfelszolgalat@naih.hu; website: www.naih.hu. You may also seek a judicial remedy.
10. Changes
Material changes will be announced on the website and, where appropriate, by email at least 15 days before taking effect.