1. Introduction

SYMMETRIC IT SOLUTIONS S.R.L. ("we", "our", or "us") operates the BeachVolley App mobile application and associated website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

2. Data Controller

The data controller responsible for your personal data is:

SYMMETRIC IT SOLUTIONS S.R.L.

Email: petru.vornicu94@yahoo.ro

For any questions regarding this Privacy Policy or your personal data, please contact us at the email address above.

3. Data We Collect

We collect the following categories of personal data when you register and use the Service:

3.1 Account & Profile Data

Full name or display name
Email address (used for authentication)
Phone number
City / location (provided voluntarily by you)

3.2 App Usage Data

Match scores and game statistics
Tournament participation history
Performance records and rankings

3.3 Technical Data

Device type, operating system, and app version
IP address and general geographic location derived from it
Crash reports and performance diagnostics (via Firebase)
App usage analytics (via Firebase Analytics)

4. How We Use Your Data

We use your personal data for the following purposes:

To create and manage your user account
To provide the core functionality of the Service, including recording and displaying match scores and statistics
To communicate with you about your account, updates, or support requests
To improve and optimize the Service using aggregated analytics data
To ensure the technical stability and security of the Service
To comply with legal obligations under applicable Romanian and EU law

5. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases (Article 6 GDPR):

Performance of a contract: processing necessary to provide the Service you have requested (Art. 6(1)(b))
Legitimate interests: analytics and service improvement, fraud prevention (Art. 6(1)(f))
Legal obligation: compliance with applicable laws (Art. 6(1)(c))
Consent: where explicitly requested, e.g. for optional features (Art. 6(1)(a))

6. Third-Party Services

We use the following third-party services which may process your data:

6.1 Firebase (Google LLC)

We use Firebase for authentication, database storage, analytics, and crash reporting. Firebase is operated by Google LLC, located in the United States. Data transfers to the US are covered by Google's Standard Contractual Clauses (SCCs).

Firebase Privacy Policy: https://firebase.google.com/support/privacy

Google Privacy Policy: https://policies.google.com/privacy

We do not sell your data to any third parties. We do not use your data for advertising purposes.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. Specifically:

Account data (name, email, phone, city): retained for the duration of your account
Match scores and statistics: retained for the duration of your account; may be anonymized upon deletion
Technical and analytics data: retained for up to 24 months

You may request deletion of your account and associated data at any time by contacting us at privacy@[DOMAIN].com.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Right of access: you may request a copy of the personal data we hold about you
Right to rectification: you may request correction of inaccurate data
Right to erasure: you may request deletion of your personal data ('right to be forgotten')
Right to restriction of processing: you may request that we limit how we use your data
Right to data portability: you may request your data in a structured, machine-readable format
Right to object: you may object to processing based on our legitimate interests
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@[DOMAIN].com. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian national supervisory authority (ANSPDCP) at www.dataprotection.ro.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), Firebase security rules, and restricted access to personal data within our organization.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete that information.

11. International Data Transfers

Your data may be processed outside Romania and the EEA, specifically in the United States via Google/Firebase. Such transfers are protected by Standard Contractual Clauses approved by the European Commission, ensuring your data receives adequate protection.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this document and notify you via the app or by email for material changes. We encourage you to review this Policy periodically.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

SYMMETRIC IT SOLUTIONS S.R.L.

Email: contact@beachvolleyromania.ro