At Sportribe, we take data protection very seriously. Privacy and data security are at the heart of Sportribe. This Privacy Policy outlines the key principles and practices we follow to protect your privacy when using our services.
Sportribe Oy, along with the local country-specific Sportribe companies belonging to the same group ('Sportribe,' 'we'), process the personal data of users of the Thril booking services and online store services ('Thril app,' 'Thril') through the Thril app, as well as users of other Thril services and visitors to the Website.
In this Privacy Policy, the term 'Thril services' refers to the Website, the Thril app, and other services provided by Thril to its users. The term 'User' or 'you' refers to our customers, users of Thril's booking services, their representatives, and other authorized users of our client organizations, potential customers, and users of Thril services. Our Privacy Policy explains, for example, what types of personal data we process, how we process personal data, and how you can exercise your rights as a data subject (such as the right to object and the right to access).
Some of our services may also have a separate privacy policy. If a specific service is subject to a separate privacy policy, we will publish it in connection with that service.
This Privacy Policy may be updated from time to time to reflect changes in our data processing practices or other changes. You can find the current version on our website. We will not make significant changes to this Privacy Policy or reduce users' rights under this policy without notifying them.
This Privacy Policy applies to the processing of personal data carried out by the Thril product. Thril is a product of Sportribe Oy. Sportribe Oy is a technology company with the official address Fredrikinkatu 14, 00120, Helsinki, Finland. We operate as one team and may sometimes jointly decide on the processing of personal data. This Privacy Policy only applies to the processing of personal data where Sportribe Oy acts as the data controller.
Sportribe Oy is designated to respond, on behalf of the local joint data controllers, to all requests and inquiries from data subjects related to the processing of personal data.
Sportribe Oy
VAT ID: 3354195-4
Address: Fredrikinkatu 14, 00120 Helsinki
Email: support@thril.fi
Data Protection Officer: Sportribe has appointed a Data Protection Officer, who can be contacted using the contact information above or by sending an email to privacy@thril.fi.
We process personal data only to the extent that it is necessary and appropriate for a specific purpose. The personal data we collect and process can be divided into two general categories: user data and usage data.
User data consists of personal data collected on a case-by-case basis, either directly from you or from the client organization on behalf of which you use Thril services ('Client Organization'). We collect user data in various ways, such as after entering into a service agreement with the Client Organization, when you register for Thril services, subscribe to a newsletter, or fill out a form. Please also note that we collect information about transactions and payments you make through Thril services.
The following personal data we collect and process is necessary for the proper fulfillment of the agreement between you and us, as well as for our legitimate interest while we fulfill our contractual obligations to our client organizations and comply with legal requirements.
Once the service agreement between us and the client organization has been made, the client organization provides us with your full name and email address.
When you register for Thril services and create a user account, you must provide us with the following information:
You can enhance your user experience by providing the following information:
In addition to the user data collected from you and the Client Organization, we process certain personal data provided by third-party service providers. For example, in the case of business clients, we may process the contact details of a company representative to facilitate communication and marketing with the company, as well as managing the customer relationship. Such information is primarily obtained from public sources, such as local business registers, companies that provide such data services, or directly from the companies themselves.
Usage data is collected from the user's interaction with Thril services. While we typically do not use usage data to identify you as an individual, you may be identifiable under certain circumstances, either alone or in combination or linked with user data. In such cases, usage data may also be considered personal data under applicable laws, and we process such data as personal data.
We may automatically collect the following usage data when you visit or interact with Thril services:
We use various technologies, such as cookies, website data storage, and web and app telemetry, to collect and store usage data and other information when users visit Thril services.
Using cookies and other website data stored on your device, we can identify visitors to Thril services, facilitate the use of Thril services, and create aggregated data about our visitors. This helps us improve Thril services and better serve our users. Cookies and other website data do not harm your device or files. We use cookies and other website data to tailor Thril services and the information we provide to our users' individual preferences. Please note that the retention period of different cookies is limited and varies from less than a minute to permanent or until an individual cookie is deleted.
Users can choose to set their web browser to refuse cookies.
Please note that some parts of the Thril service may not function properly if cookies are disabled.
Thril services use pseudonymized identifiers to track and predict the usage and settings of your app and services. Thril also uses session-based third-party tracking technologies to confirm and report events initiated by its advertising partners.
You can manage your cookie settings through the cookie banner on our websites.
You can also manage your communication and other privacy settings through the Thril app.
You can disable Thril visitor identifiers on iOS and Android mobile devices by changing your device settings (iOS: Settings → Thril → Thril Settings → Limit Tracking and Android: Thril app → Profile button → Settings icon in the top right corner).
In general, advertising identifiers can be disabled on iOS devices by turning off the "Personalized Ads" setting (Settings → Privacy & Security → Apple Advertising → Personalized Ads). For an overview and more information about advertising identifiers, see Apple's Advertising and Privacy website.
Sportribe Oy käyttää erilaisia kolmannen osapuolen analytiikka- ja telemetriapalveluiden tarjoajia, markkinointi- tai kumppanuusyrityksiä sekä muita asiakasohjelmistoomme integroituja palveluja, jotka on lueteltu alla:
We process personal data only to the extent that it is necessary and appropriate for specific processing purposes. Please note that the processing may fall under one or more of the following processing purposes and legal grounds.
Firstly, Thril processes your personal data to fulfill its contractual obligations to you or the Client Organization, for example, to the extent necessary:
Secondly, we may process your personal data if there is a legitimate and justified interest (i.e., a legitimate interest) in conducting, maintaining, and developing business or in creating and maintaining customer relationships. When we process your data based on our legitimate interests, we balance our interests against your privacy rights. We provide an easy way to opt-out of marketing communications and use pseudonymized or non-personally identifiable data where possible. You have the right to object to the processing of your personal data based on legitimate interests. However, Thril may refuse such an objection in accordance with applicable law, for example, if processing is necessary for the preparation, presentation, or defense of a legal claim.
We process your personal data to the extent necessary and based on legitimate interest, for example:
When processing your personal data to provide Thril services to you and for the other purposes mentioned above, we may use automated methods, which may include automated decision-making.
Additionally, we may process your personal data to manage and fulfill our legal obligations. This includes data processed to comply with our accounting obligations and to provide information to relevant authorities, such as tax authorities or law enforcement agencies, in accordance with mandatory legal requirements.
In some parts of Thril services, you may be asked to give your consent for the processing of personal data. For example, in the Thril app, you can manage your marketing and other permission settings. If the processing of your personal data is based on your consent, you can withdraw it at any time by contacting us or changing the relevant consent settings, such as in the Thril app.
We share your personal data within the Sportribe organization only if and to the extent necessary for the purposes of this privacy policy.
We do not share your personal data with third parties outside the Sportribe organization unless one of the following conditions is met:
For the purposes outlined in this privacy policy and to authorized service providers.
To the extent that third parties (such as the companies, merchants, or resellers providing the service for your reserved session or purchased service, or our customer organizations delivering your session) require access to personal data in order to provide Thril services or for other legitimate reasons, we may share your information with such third parties. For example, we may share your phone number with the Partner responsible for your reserved session if necessary, for instance, to ask if you accept a substitute product in your order, notify you if a product is missing from your order, or to obtain specific clarifications otherwise.
Additionally, we may provide your personal data to our group companies or authorized service providers who perform services for us (including data storage, accounting, analytics, sales and marketing, and payment fraud prevention), so that they can process the data on our behalf, and to payment service providers to process the payments you make to us.
When third parties process data on behalf of Thril, Thril has taken appropriate contractual and administrative measures to ensure that your data is processed solely for the purposes defined in this Privacy Policy and in compliance with all applicable laws and regulations, as well as in accordance with our instructions and the obligations regarding confidentiality and security measures.
Remember that if you provide personal data directly to a third party, for example through a link within Thril services, the processing will typically be governed by the practices and terms of that third party.
For the implementation of Thril-services with partners
To the extent that third parties, such as the providers of your reserved times, selling and/or supplying Partners, and customer organizations providing your purchases, need access to personal data in order to perform Thril services, we will provide your data to such third parties.
We will provide the Partner and, where applicable, its parent company or franchise operator with personal data necessary to fulfill the service or product you have purchased. Depending on the Partner's role, this may include your name, address, and information related to your purchase, including event location details, order number, order time, the products ordered, and any comments and feedback you have provided about the purchase. This data is shared so that the Partner can prepare the purchase, including, where applicable, product pickup from the store, ensuring the quality of the service and product selection available through the Partner on Thril, and ensuring the Partner complies with their legal obligations. When the Partner processes such data to fulfill their own rights and obligations, such as legal obligations toward you, the Partner is considered an independent data controller and is responsible for the legality of their processing actions.
You may be able to add your Partner-specific loyalty card or membership program details to the Thril service, allowing you to link purchases made from the Partner to the relevant loyalty program according to the terms set by the Partner. Thril will share this information with the respective Partner, and the Partner will be the independent data controller of this information, thus responsible for ensuring the legality of the processing.
We may also share your phone number and name with the Partner preparing your purchase if necessary, for example, to ask whether you accept a replacement product in your purchase or to notify you of other essential purposes related to completing the purchase.
For legal reasons and legal processes
We may share your personal data with third parties outside of Thril if we assess that access to and use of personal data is reasonably necessary for: (i) complying with any applicable law, regulation, and/or court order; (ii) detecting, preventing, or otherwise addressing fraud, crimes, security issues, or technical problems; and/or (iii) protecting the rights, interests, or safety of Thril, Users, or others, within the limits permitted by law. If possible, we will notify you of such processing.
For other justified reasons
In the event that Sportribe Oy and the Thril service are involved in a merger, acquisition, or asset sale, we may transfer your personal data to a third party. However, we will continue to ensure the confidentiality of all personal data. We will notify all affected users when personal data is transferred to another company or when a different privacy policy applies.
With your explicit consent
We may share your personal data with third parties outside of Thril with your consent. You have the right to withdraw this consent at any time free of charge by contacting us, for example.
Sportribe will not retain your personal data longer than permitted by law and necessary for providing the Thril service or its essential parts. The retention period depends on the nature of the data and the purposes of processing. Therefore, the maximum period may vary depending on the intended use.
Once the User has deleted their account, personal data may be retained only as long as required by law or as reasonably necessary for fulfilling our legal obligations or legitimate interests, such as the handling of compensation claims, accounting, internal reporting, and reconciliations.
We regularly assess the retention period of personal data to ensure that data is kept only for as long as necessary.
Right of Access to Data
You have the right to access the personal data we process about you and to obtain information about it. You have the option to view certain information directly through your Thril service user account or request a copy of your personal data by contacting us.
Right to withdraw consent
If the processing is based on the User's consent, the User may withdraw their consent at any time free of charge. Withdrawing consent may lead to a reduction in the availability of Thril services. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Right to rectification of data
You have the right to have any incorrect or incomplete personal data we hold about you corrected or completed by contacting us. You can correct or update some of your personal data directly through your user account in the Thril services.
Right to erasure of data
You may also request us to delete your personal data from our systems. We will comply with such a request unless we have a legal basis not to delete the data.
Right to object to processing of data
You may have the right to object to the use of your personal data for purposes other than the provision of the Thril services or the compliance with a legal obligation. If you object to the further processing of your personal data, it may result in a reduction in the availability of Thril services.
Right to restrict processing
You may request us to restrict the processing of your personal data, for example, when requests for deletion, rectification, or objection are pending and/or when we have no legal basis to process your data. However, this may lead to a reduction in the availability of Thril services.
Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transfer this data independently to a third party.
How to exercise your rights
You can exercise the aforementioned rights by contacting Thril support or by sending us a letter or email to the addresses provided above, including the following information: full name, address, email address, and phone number. If you have a Thril account, we recommend contacting us through Thril support, as this will help us verify your identity more easily. We may request additional information necessary to verify the User's identity. We may refuse or charge for requests that are excessively repetitive, excessive, or clearly unfounded.
The User has the right to object to our use of their personal data for direct marketing purposes, market research, and profiling for direct marketing purposes by contacting us at the addresses provided above or by using the functionalities in the Thril service or the unsubscribe option provided in direct marketing communications.
If the User believes that our processing of personal data is in violation of applicable data protection laws, the User may file a complaint with the local data protection authority in Finland, the Data Protection Ombudsman (tietosuoja.fi). Alternatively, the User may file a complaint with another local and competent supervisory data protection authority.
We use administrative, organizational, technical, and physical safeguards to protect the personal data we collect and process. These measures may include encryption, pseudonymization, firewalls, secure facilities, and access control systems where necessary. Our security monitoring is designed to maintain the appropriate confidentiality, integrity, availability, resilience, and ability to restore data. We regularly test Sportribe's services, systems, and other assets for security vulnerabilities. In addition, access to personal data by Sportribe employees is restricted, and access to and processing of the data is limited to what is necessary for the employee to perform their job duties.
Whether you're an experienced athlete or just starting your sports journey, Thril has something for everyone.