Privacy Policy
Goality Sport Group OÜ (registration code 17232252, address Peterburi tee 34/4, 11415 Tallinn, Estonia; “Goality360”, “we”, “us”) is the controller of personal data collected through goality360.com. This policy explains what we collect, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Data we collect
Registration forms (camps, tournaments, training sessions): child's name, year of birth or age, parent or guardian's name, phone number, email, team affiliation if applicable. Contact form: name, email, phone, message. Order processing: cart contents and the corresponding payment session reference. Server logs: IP address, user agent, request timestamp, kept for up to 30 days for security and abuse prevention.
Why we collect it
To deliver the service you requested (places in camps and events, contact replies, order fulfilment), to comply with Estonian accounting and tax law, and to protect the site from abuse. Legal bases: performance of a contract (GDPR art. 6(1)(b)), legal obligation (art. 6(1)(c)), and our legitimate interest in operating the site safely (art. 6(1)(f)).
Payment data
Payments are processed by Stripe Payments Europe Ltd. and AS LHV Pank (EveryPay). Card numbers, CVC and bank credentials never reach our servers. We receive only the session ID, masked card brand, amount, currency and customer email returned by the provider for accounting and customer service.
Sharing with third parties
We share data only with processors strictly necessary to deliver the service: hosting (Zone Media OÜ / standard EU hosting), email delivery, and the payment providers above. We do not sell personal data and do not share it for advertising. Where required, we share data with Estonian tax or law-enforcement authorities.
How long we keep it
Registration and order data: 7 years from the end of the financial year (Estonian Accounting Act). Contact form messages: up to 24 months unless they become part of an ongoing matter. Server logs: up to 30 days. After these periods data is deleted or anonymised.
Your rights
You can request access to, correction, deletion, restriction or portability of your personal data, and you can object to processing based on legitimate interest. To exercise any right, write to sport@goality.ee. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).
Children
Registrations for minors are made by a parent or legal guardian, who provides consent for processing the child's data for the specific event. We do not market directly to children.
Contact
Goality Sport Group OÜ, Peterburi tee 34/4, Lasnamäe linnaosa, 11415 Tallinn, Estonia. Email: sport@goality.ee.