Skip to content
← Back to Hyvia

GDPR

Last updated: [EFFECTIVE DATE]

This page summarises how Hyvia approaches the EU General Data Protection Regulation (GDPR). It should be read together with our Privacy Policy, which has the full detail.

Controller and processor roles

For our website, Hyvia is the controller. For the platform, the club or organisation is the controller and Hyvia is a processor acting on the club's documented instructions under a data processing agreement. Hyvia is established in Austria, within the EU.

Lawful basis

For website enquiries and analytics we rely on our legitimate interests and, where relevant, your consent. For athlete and staff data on the platform — which includes special-category health data — the club as controller is responsible for the lawful basis, including any explicit consent and, for minors, appropriate parental or guardian consent. Hyvia processes this data only to provide the service on the club's behalf.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to processing;
  • data portability; and
  • withdraw consent at any time, where processing is based on consent.

How to exercise them: because the club controls athlete and staff data, athletes and staff should contact their club, which we assist as processor. For website data, or any general question, contact us at contact@hyvia.io.

International transfers

Each club's database is hosted in the region closest to that club, and our application layer runs in the EU (Frankfurt). Where a provider processes limited data outside the EU/EEA, we rely on safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses.

Sub-processors

We use a limited set of vetted providers to run the service, each under a data processing agreement. The current list is set out in our Privacy Policy, and includes our cloud, database, identity, email, AI, and website providers.

Data protection contact and complaints

For any data-protection matter, or to reach our Data Protection Officer, contact contact@hyvia.io [DPO details to be confirmed]. You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).