Privacy policy
Last updated 13 September 2026 · This is an English translation provided for convenience. Only the Slovak version is legally binding.
Summary in three sentences. We only receive data from you when you write to us yourself — through the enquiry form or by e-mail; otherwise we learn nothing about you beyond ordinary technical server logs. Analytics will be enabled only with your consent, and none is running today. Athletes' health data is not processed on this website at all.
1. Who we are
The controller is:
Vassweb s. r. o.
Školská 981/36, 931 01 Šamorín, Slovak Republic
Company ID (IČO): 56921021
E-mail: vass@vassweb.com
We have not appointed a data protection officer (DPO) — the law does not require it of us. For anything concerning personal data, write to the e-mail above.
2. What we process on this website
a) Enquiry form and e-mail
When you fill in the form in the Contact section or write to the address shown, we process what you send us — name, e-mail, optionally the name of your team or club, and the content of the message. A message from the form reaches us by e-mail; we do not store it in any database or CRM.
- Purpose: to reply to you and arrange possible cooperation.
- Legal basis: legitimate interest in replying to an approach (Art. 6(1)(f) GDPR); for a specific offer, pre-contractual steps (Art. 6(1)(b) GDPR).
- How long: for as long as the communication is relevant, at most 3 years from the last contact. If a contract results, accounting retention periods apply.
b) Protecting the form against abuse
So that robots cannot flood the form, the server briefly remembers your IP address and the number of submissions from it — for at most 24 hours and solely to count that limit. On page load it issues a signed technical token carrying the load time; that token is bound only to the prefix of the IP address, not the whole of it. This data lives only in the server's memory, is not written to any database and expires by itself. Rejected attempts are written to a technical log without the message content.
- Legal basis: legitimate interest in protecting the service against misuse (Art. 6(1)(f) GDPR).
c) Technical server logs
The hosting provider records ordinary technical data about requests — IP address, time, browser type and page address. These records arise automatically and serve the operation and security of the website.
- Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).
- How long: according to the hosting provider's settings, in the order of days to weeks. We do not combine them with other data and do not use them for profiling.
d) Cookies and local storage
The website stores no advertising or tracking cookies. It stores a single item — your choice in the cookie bar. Details are in the cookie policy.
e) Analytics — only with your consent
An analytics tool loads only when you consent in the cookie bar. As of the date of the last update of this page, no analytics tool is deployed — even if you consent, nothing loads; we only store your choice. You can withdraw consent at any time via the “Cookie settings” link in the footer.
3. What we do NOT process on this website
On velin.coach no health or training data of athletes is processed. The screenshots used on the page are anonymised — athlete names are replaced with Athlete A – D and specific measured values are made illegible.
The Velín Atlét app and the coach cockpit are separate services. Data in them is processed under a separate agreement with the athlete, or with the club or coach, and this website is not concerned with it. If you use the app and want to know what happens to your data there, write to us.
4. Who receives the data
We do not sell data and do not provide it for advertising purposes. It reaches only the processors we need to operate:
| Who | What for |
|---|---|
| Vercel Inc. (USA) | Website hosting, running the form and technical server logs. |
| Resend Inc. (USA) | Delivering the form message to our e-mail inbox. Not used for newsletters or bulk mailing. |
| E-mail provider | Storing the messages you send us. |
Where a transfer to a third country occurs, it is based on the European Commission's standard contractual clauses or another valid mechanism under Chapter V GDPR.
5. Your rights
Under the GDPR you have the right:
- of access to the data we hold about you (Art. 15),
- to rectification of inaccurate data (Art. 16),
- to erasure (Art. 17),
- to restriction of processing (Art. 18),
- to data portability (Art. 20),
- to object to processing based on legitimate interest (Art. 21),
- to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).
Just write to vass@vassweb.com. We reply within one month at the latest.
If you believe we are not handling your data correctly, you may lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
6. Changes
If the processing changes — for example when we deploy analytics — we will update this page and change the date above. Earlier versions can be provided on request.