Политика конфиденциальности

1. Who is responsible

Сервис — платформа для кастомизации ракеток, натяжки, тренировок, консультаций и теннисных клубов. Оператор персональных данных:

2. Data we collect

Аккаунт: email address, a hashed password, your role(s), time zone, language and currency, and whether you agreed to marketing email.

Профили: what you enter for your player, stringer, coach, consultant or club profile (for players e.g. height, grips, playing style, level).

Ракетки и журналы: racquet specifications and measurements, customization recipes, stringing and tension logs, training goals and sessions, expenses.

Деловые записи: if you run a stringing shop, coaching, consulting or a club on Arcus, the records you keep about your clients (orders, lessons, bookings, memberships, invoices you record).

Поддержка: the messages you send us and the page you sent feedback from.

Технические данные: your IP address, kept briefly to limit abusive requests, and server logs kept for a short time to investigate errors and abuse. When something breaks in your browser, the error message and the page path (without any query) are sent to us so we can fix it; nothing you typed is included.

3. Why, and on what legal basis (GDPR Art. 6)

• Договор (ст. 6(1)(b)): running your account and the tools you use: calculations, recommendations, logs, bookings, orders.
• Законный интерес (ст. 6(1)(f)): security (rate limits, logs) and fixing errors.
• Согласие (ст. 6(1)(a)): marketing email, only if you opt in; you can withdraw at any time.

4. Businesses on Arcus

When a stringer, coach, consultant or club keeps records about their clients on Arcus, that business is the controller for those records and Arcus processes them on its behalf. If you are such a client, ask the business first; we will help them answer.

5. Who sees your data

Мы не продаём персональные данные. Они передаются только при необходимости:

• Публичные профили (мастеров по натяжке, тренеров, консультантов, клубов) видны всем.
• A business you work with sees what you share with it (e.g. your racquet for an order).
• Ссылка для доступа показывает объект любому, у кого она есть, пока не истечёт её срок или вы её не удалите.
• Наши хостинг- и почтовые провайдеры обрабатывают данные по нашему поручению на основании договоров обработки данных.
• Государственные органы — когда этого требует закон.

6. How long we keep it

• Пока ваш аккаунт активен.
• When you delete your account: you are signed out everywhere, your share links are removed and your name and contact details are anonymised at once; the account and everything that belongs to it are deleted 90 days later.
• Записи, которые бизнес ведёт о вас как о клиенте, остаются у этого бизнеса — без связи с вашим аккаунтом.
• Ссылки для сброса пароля и подтверждения email действуют 1 час и 48 часов соответственно.

7. Your rights

• Доступ и переносимость: download everything about you as JSON from your account page.
• Исправление: edit your profile and records at any time.
• Удаление: delete your account from your account page.
• Ограничение и возражение: write to us.
• Отзыв согласия: switch off marketing email in your settings.
• Жалоба: you can complain to a data protection supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country.

8. Cookies and browser storage

Arcus sets no tracking or advertising cookies. To keep you signed in, the browser stores a sign-in token in its local storage; logging out removes it. Local storage also keeps your theme and a few display settings. None of this is used for tracking.

9. Security

Encrypted connections (TLS), bcrypt-hashed passwords, short-lived access tokens, sign-in tokens per device that you can revoke by logging out, and one-time links stored only as hashes.

10. Contact

По вопросам конфиденциальности и для реализации ваших прав: [Эл. почта: не указано]