Privacy Policy

Effective Date: May 1st, 2024
Version 1.1

Welcome to GRAET!

GRAET is a platform that helps connect Athletes, Supporters and Industry Professionals such as coaches, managers, scouts, agents and others. “GRAET” and/or “ Platform,” “we,” “us,” and “our” refer to GRAET CZ, s.r.o. with its registered office at Zahrebska 562/41,120 00 Prague, Czech Republic, ID No 19471670 and registered with the Municipal Court in Prague under file number C 387190.This Privacy Policy (“Privacy Policy”) explains how GRAET collects, uses, and discloses information from visitors to and users of any websites that GRAET operates that link to this Privacy Policy, including www.graet.com and related online and offline services (“Services”).

This Privacy Policy provides information on the following aspects: (A) the personal information collected when you use our Services, (B) how we use this information, (C) the parties with whom we share it, and (D) the measures we take to safeguard your privacy. Additionally, this Privacy Policy explains how individuals with the legal authority to do so can (a) make requests for accessing, rectifying, ceasing the collection of, or erasing their personal information, and (b) how to opt out of our use of their personal information, or (c) how to exercise other rights granted by relevant data protection regulations.

This Privacy Policy does not extend to the data practices of third parties who may engage with our Services. Our Services may provide access to third-party content and enable connections to other websites, products, or services that are beyond our control. We advise you to review the relevant privacy policies of third parties whose websites or applications you may access via our Services.

By utilizing our Services, you consent to the gathering and utilization of information as outlined in this Privacy Policy. Should you have any inquiries or apprehensions concerning this Privacy Policy, our procedures concerning your personal information, or your entitlements connected to our collection of your personal information, please get in touch with us at privacy@graet.com.

All capitalized terms not otherwise defined herein shall have the meaning set forth in the GRAET Terms of Use available at graet.cz/terms.

A. Information We Collect

Information You Provide to GRAET

This is information that you provide to us through text fields, such as your name, contact details, and payment information. The information of this type that we require you to provide differs depending on whether you register and join the Platform to become a Member as an Athlete, a Professional, and/or a Supporter. For a successful registration we will ask you for your:

  • first and last name/surname;
  • email address;
  • phone number;
  • password; and/or further information according to the membership, as specified below.

You may also have the option to sign up for GRAET using a Facebook, Google, or Apple account. We will ask for permission to access basic information from your Facebook, Google, or Apple account, such as your userID, full name, email address, and profile picture. You can choose to stop sharing that information with us at any time by going to Facebook, Google, or Apple to remove GRAET’s access to that account and your ability to use it to log in to GRAET. In order to use an account with one of these companies to sign up for GRAET, these companies may require you to share personal data with them, including information about your usage of GRAET. As applicable to you, please consult the Facebook, Google, and Apple privacy policies to learn more about that.

You may also have the option to add more information to your public profile, such as a location, social media links, and an about section, which we store along with the other information that we collect.

Athlete

“Athlete” or “Player” is someone who creates an Athlete Profile on GRAET to engage with industry Professionals and Supporters who may provide direct Donations to athletes through a “Boost Athlete” function. To become a GRAET Athlete, you must create an Athlete Profile that showcases your athleticism. To receive payouts, you have to create an account with our Payment Processor (which is, as of the effective date of this Privacy Policy Stripe). You may also be required to provide your bank account information to process payouts. Depending on your location and your sport, you may have to provide GRAET some combination of the following:

  • email address;
  • phone number;
  • username;
  • password;
  • first and last name/surname;
  • address;
  • country of citizenship;
  • date of birth;
  • place of birth;
  • weight and height;
  • personal and/or team statistics;
  • academic information;
  • bank account information;
  • identification of legal guardian if younger than 18; or self identification as an Adult/18+ Athlete; and
  • copies of your and/or your legal guardian’s ID card and proof of residency.

Supporter

“Supporter” or “Booster” refers to someone who makes a direct Donation to an Athlete on GRAET otherwise known as a “boost” or “support”. As a Supporter, you must provide your payment information to our Payment Processor (which is, as of the effective date of this Privacy Policy, Stripe). Familiarize yourself carefully with Stripe's privacy policy available here. GRAET stores the expiry and postal code associated with your payment card, but does not store your full payment card number. Instead, GRAET uses a Payment Processor (which is, as of the effective date of this Privacy Policy, Stripe)  to create a token that represents your card’s primary account number, which GRAET then stores. If you choose to pay using a payment partner that requires you to provide to them your personal data like name and email address, then that payment partner may provide that information to GRAET.

We collect and process information about the Athletes you follow and/or support. We may also derive your location from your self-disclosed country, your IP address, and/or your payment card.

Professional

“Professional” or “Industry Professional'' refers to a wide range of professionals in the world of sports such as coach, manager, agent, scout and others. As a Professional on GRAET you may follow an Athlete and receive regular mail notifications.

We collect and process information about the Athletes you follow. We may also derive your location from your self-disclosed country and/o your IP address.

Depending on your specific profession, location and your sport, you may have to provide GRAET some combination of the following:

  • email address;
  • phone number;
  • first and last name/surname;
  • profession type;
  • name of your business or organization/club you work for;
  • location of your business or organization/club you work for;
  • details of you services you provide;
  • number of your clients.

“GRAET Database”, “Database”, “Sport Nexus” or “Nexus” refers to a database of Industry Professionals that serves as a contact database for Athletes. As a Professional you have the option to add your details to Nexus. Nexus is created by GRAET.


Automatically Collected Information

We automatically receive information when you view content on or otherwise interact with GRAET, even if you have not created an account. For example, when you visit www.graet.com we may automatically receive information about you, including:

  • your IP address;
  • your approximate location (typically derived from your IP address);
  • your browser and/or device type;
  • your operating system;
  • your language settings;
  • the referring web page (including parameters contained therein);
  • your mobile carrier;
  • device information (including device and application IDs);
  • your search terms (including those not submitted as queries);
  • the links you click;
  • the pages you visit/the creations you load or request;
  • session length, dwell time, and duration of media experiences (including view time); and/or
  • cookie information (further detailed in our Cookie Policy).

Communication

If you contact us directly, we may receive additional information about you. For example, when you contact our support, we may receive your name, email address, the contents of messages or attachments that you may send to us, other information you choose to provide, and other information that may be associated with your communications.

User Research Studies & Surveys

We conduct research about current, former, and prospective Athletes, Professionals and Supporters. From time to time, we may solicit your participation in such a research study and, if you choose to participate, then we may observe how you use GRAET and may record video, audio, and images of you using GRAET and your interview with GRAET researchers. As part of these research studies we may also ask you to answer survey questions, including about how you use GRAET and how you perceive GRAET’s Platform and brand. When you answer these questions, we will store your responses.

Event Information & Surveys

From time to time, we may solicit your participation in surveys related to GRAET events. In order to better understand and serve Athletes, Professionals and Supporters, we may ask you for demographic information, including information related to your gender identity, ethnicity, race, age, sexual orientation, earnings, and accessibility, which you may optionally choose to provide while expressly consenting to their processing. When you complete these surveys, we store your survey responses, including any such demographic information you choose to provide.

We may also request information from you at in-person and online events. This information may include your name, email address, mobile phone number and survey or feedback responses.

Information from Third-Party Accounts

After creating a GRAET account, you may be able to connect your social media account(s) (e.g. Instagram, Facebook, YouTube, TikTok, and Twitter) with GRAET and we may collect and store some information related to those accounts, including:

  • profile information, including userID, username, page name, and/or profile picture;
  • follower and/or subscriber counts;
  • relationship graph, including accounts you follow and that follow you;
  • post and/or upload counts; and/or
  • view, like, and/or comment counts.

You may also grant GRAET access to these third-party accounts in order for some GRAET features to operate. When you connect such a third-party account to your GRAET account, that third-party service will typically present a page that describes the information that GRAET can access and/or permissions you are granting to GRAET to take actions on your behalf. At any time, you may be able to revoke GRAET’s access to those accounts using the respective third party’s settings page.

Promotions

GRAET may operate certain promotions from GRAET-operated accounts on third party platforms such as Instagram, Twitter, and Facebook. Personal data collected by GRAET as part of such promotions will be used in accordance with this Privacy Policy.

Information Collected by Third Parties

Cookies

Third parties may use cookies on our website. A cookie is a small text file that a website stores on your computer or mobile device when you visit GRAET. Please see our Cookie Policy for more information on the use of cookies on GRAET.

Social Media Features and Widgets

We may use social media and related products and features, including a Discord server, the Facebook Like button, and widgets, such as the Share button or similar interactive mini-programs that run on GRAET. These features may collect your IP address and other personal data, including which page you are visiting on our site, and may set and/or read cookies. Social media features and widgets are either hosted by a third party or directly on GRAET. For more information on the technologies used by these third parties, the information they collect, and how that information is used, please refer to their respective privacy policies. Below are links to the privacy policies of the most used such services for easy reference:

Links to Other Resources

GRAET contains links to other resources that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other resources or third parties.

B. How We Use The Information

As applicable, we use the information we collect mainly to:

  • comply with industry requirements, self-regulatory guidelines, US federal law, US state law, and international laws;
  • enable you to sign in to your account;
  • enable you to follow an Athlete and/or boost an Athlete;
  • process payments and payouts;
  • send you messages and notifications, including push notifications, email, and SMS/MMS as controlled by your notification preferences;
  • provide you with information about GRAET, GRAET Services , and your Boosts on GRAET;
  • provide you with customer support and reply to your questions;
  • promote your GRAET account and/or Athlete profile for greater discoverability;
  • personalize the GRAET experience, including recommending Athletes to Supporters;
  • market GRAET Services to you or to audiences similar to you, including via personalized advertising (also referred to as online behavioral advertising or interest-based advertising) as controlled by your marketing preferences;
  • organize and tailor in-person and online events;
  • understand and analyze how you use the Services;
  • conduct research and development to improve GRAET and develop our Services; and
  • prevent fraud, abuse, and illegal activities on GRAET, including using automated processing (which is executed by Stripe), and manual review.

SMS/MMS

If you sign-up to receive text messages from us, you agree to receive recurring automated promotional and personalized marketing text (e.g., SMS and MMS) messages from us, including text messages that may be sent using an automatic telephone dialing system, to the mobile telephone number you provided when signing up or any other number that you designate. Consent to receive automated marketing text messages is not a condition of any Service provision. Message and data rates may apply. Message frequency may vary. We reserve the right to alter the frequency of messages sent at any time, so as to increase or decrease the total number of sent messages. We also reserve the right to change the short code or phone number from which messages are sent. Not all mobile devices or handsets may be supported and our messages may not be deliverable in all areas. We, our service providers, and the mobile carriers supported by the program are not liable for delayed or undelivered messages.

Business Relationship

If you are a GRAET service provider or you are working with GRAET personnel on a possible engagement between GRAET and your company, we may use your personal data you provided to us, particularly your business contact information and information relevant for the engagement, for the purpose of managing the relationship and in connection with any potential contractual arrangements between our companies.

C. With Whom We Share The Information

Information Shared with Athlete

By supporting, boosting or following an Athlete on GRAET, or otherwise engaging with or becoming a Supporter of an Athlete, you agree to share personal data with that Athlete that may include:

  • your full name in your GRAET profile;
  • your other GRAET profile information, including your avatar image;
  • your email address;
  • information about your Donation, including amount and date but not your full payment card information; and
  • some aggregated data about how you use GRAET, including analytics like post views, video views, and video view duration.

We may solicit your participation in surveys related to particular Athletes on GRAET. For example, when you follow and/or make a Donation on GRAET or when you unfollow, you may be asked to optionally take a survey about that choice. If you choose to participate in that survey, then you agree that your responses, which may include your personal data like full name, will be shared with the associated Athlete.

GRAET Database of Professionals

GRAET Database of Professionals know as “GRAET Database”, “Database”, “Sport Nexus” or “Nexus” is our private database of specific industry Professionals and may include:

  • first and last name/surname;
  • email address;
  • phone number;
  • profession type;
  • social media accounts;
  • name of business, organization or club you are associated with;
  • location of business, organization or club you are associated with;
  • details of service you provide;
  • number of clients; and
  • website of business, organization or club you are associated with.

Information Shared with the Public

The following information may be publicly accessible or otherwise shared with Visitors and other members of the public:

  • Aggregated and otherwise non-personal data, including aggregated usage data in blog posts, press releases, or other ways to share information about GRAET’s usage and business.

For Athlete:

  • your public GRAET profile, including your name, avatar image, the date you created your GRAET account, and location information you’ve added;
  • social media accounts and external links you’ve connected to your GRAET account;
  • the contents of your GRAET profile, including a personal and team statistics, academics;
  • your number of followers;
  • your number of Supporters;
  • your total amount you have raised on GRAET;
  • your 30 days rolling amount you have raised on GRAET;
  • your top 3 supporters in last 30 days or in total on GRAET;
  • your top 3 highest boosts you have received on GRAET;
  • the contents of your posts, like highlight tape, interview or other posts; and
  • Supporters of your Athlete Profile may be notified when you become a Supporter for another Athlete Profile on GRAET.

For Supporter:

  • your public GRAET profile, including your user name, avatar image, and the date you created your GRAET account;
  • social media accounts you’ve connected to your GRAET account;
  • amount and message of each Donation is shown on Athlete profile;
  • monthly or 30 days rolling total amount you have donated to Athletes; and
  • your highest donation to an Athlete profile in the last 30 days or in total on GRAET.

For Professionals:

  • your public GRAET profile, including your user name, avatar image, and the date you created your GRAET account; and
  • social media accounts you’ve connected to your GRAET account.

Information Shared with Third Parties

We never sell your information to third parties. Other than information that is shared with users of GRAET, or shared with members of the public, we will only share data with third parties under the following circumstances:

  • GRAET’s service providers: these are companies that are contractually engaged with us to provide us with services, including cloud hosting, content distribution, security, email and document management, internal communication/chat, analytics, credit card processing, multi-currency settlement solutions, and fraud detection and prevention. We may share your personal data with such service providers subject to obligations consistent with this Privacy Policy and any other appropriate confidentiality and security measures, and on the condition that these third parties use your personal data only on GRAET’s behalf and pursuant to our instructions (service providers may use other non-personal data for their own benefit).
  • Governments, legal process and law enforcement: to protect the security or integrity of GRAET, as well as to protect the rights, property, and safety of GRAET, its employees, Athletes, Supporters, Professionals or others, or if we believe that disclosure is reasonably necessary to comply with a law, regulation, or other valid legal process. When legally permitted to do so, and under appropriate circumstances, GRAET will endeavor to notify you (typically by email) when we intend to release your data pursuant to a valid government request, law-enforcement request, or other legal process.
  • Any third parties connected with the sale, merger, bankruptcy, sale of assets, or reorganization of GRAET: in such a circumstance the promises in this Privacy Policy apply to any data transferred to a new entity.

D. How We Safeguard Your Data

Your Preferences and Control over Your Data

Choosing Your Preferences

On GRAET, you may find your settings by clicking on your avatar or profile after you log in to your GRAET account.

Opting out of Marketing

You may opt out of marketing at any time in every marketing communication as applicable.

Opting out will stop marketing emails and SMS/MMS as applicable. Please allow up to 30 days for your opt-out request to be processed. If you have an account with GRAET, you will continue to receive service-related emails and texts if you have opted into receiving texts.

We may work with third-party advertising partners to market our Platform. You can opt your current browser out of interest-based advertising from partners that adhere to the Digital Advertising Alliance’s Principles for Online Behavioral Advertising at https://optout.aboutads.info.

Turning Off Email Notifications

You can change your email notifications in your email settings. While this allows you to stop many notification emails, we will still send other service-related emails.

Controlling Your Data

We enable individuals to:

  • access their personal data that GRAET has collected;
  • correct or rectify any such personal data that they believe is inaccurate;
  • restrict or oppose the processing of their personal data;
  • delete their personal data; and
  • transport their personal data.

You can do this on GRAET in the following ways:

  • access, review, modify, and update your data by logging in to your account at GRAET and going to your account settings;
  • delete a previously-disabled account by emailing GRAET at privacy@graet.com; and
  • exercising preferences as described above.

If you are unable to log in to your account, and are unable to recover your account with a password reset in order to lodge your privacy request, then you may reach out to  privacy@graet.com. We reserve the right to refuse access to or recovery of an account, at our sole discretion, in order to prevent an unauthorized takeover of your account or unauthorized access to your personal data.

Verification of Requests

Users typically maintain password-protected accounts with GRAET. If you submit a request to exercise your privacy rights, you will be asked to verify the request by logging in to your GRAET account, or to verify your identity in another manner.

If we are unable to adequately verify your request at our sole discretion then, in order to protect against unauthorized access to personal data, we reserve the right to deny the request.

Do Not Track Signals

Your browser may be configured to transmit a “Do Not Track” signal to websites that you visit. There is no industry-standard approach to what this signal means. Accordingly, GRAET does not monitor or otherwise respond to these “Do Not Track” signals.

EU Privacy Laws and Data Transfers

GRAET is a global company. By using GRAET, you agree that your personal data may be transferred to and stored in the United States, and handled as described in this Policy. GRAET acts as a data controller, as defined under applicable law. If you reside in the European Union (including EFTA States), the United Kingdom, Switzerland or anywhere else, GRAET CZ s.r.o. acts as a controller of your personal data.

GRAET processes personal data based on different legal grounds depending on the circumstances. This includes performance of a contract, legitimate interest, legal obligation, and consent where appropriate. Where we rely on consent, you may withdraw such consent at any time.

International Transfer

In addition, GRAET may subcontract the processing of your data to, or otherwise disclose your data to, service providers and trusted business partners in countries other than your country of residence, in accordance with applicable law. Such third parties may be engaged in, among other things, the provision of our Services to you, the processing of transactions, and/or the provision of support services. By providing us with your information, you acknowledge any such transfer, storage, or use. GRAET will at all times provide an adequate level of protection for the personal data, wherever processed and/or (internationally) transferred, in accordance with the requirements of applicable data protection law.

Complaints

We take your privacy queries seriously, and are committed to resolving any complaints that may arise about our collection or use of your data. If you believe your privacy rights have been infringed, we encourage you to contact us at privacy@graet.com. You may also have the right to complain to the appropriate data protection supervisory authority.

You may also post a letter with your questions.

GRAET CZ s.r.o.

Zahrebska 562/41

Prague, 120 00

Czech Republic

Our Data Retention Period

GRAET stores your personal data until it is no longer necessary to provide our services, or until you ask us to delete it. We may continue to retain some information even after you delete your account if we are required to do so in order to comply with applicable laws.

Information Security

The security of your personal data is important to us and we follow industry standards to protect it. We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of personal information in our control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Therefore, while we strive to protect your personal information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and GRAET cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.

As the security of personal information depends in part on the security of the device you use to communicate with us and the security you use to protect your credentials, please take appropriate measures to protect this information.

Data Breach

In the event we become aware that the security of GRAET has been compromised or users’ personal information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the user as a result of the breach or if notice is otherwise required by law. When we do, we will send you an email.

Children and Privacy of Children

GRAET is not directed to children, and you may not use GRAET if you are under the age of 13. You must also be old enough to consent to the processing of your personal data in your country (in some countries we may allow your parent or legal guardian to do so on your behalf). You must be at least 18 years old or have your parent’s or legal guardian’s permission to have an Athlete Profile on GRAET or to make a Donation on GRAET.

We do not knowingly collect any personal information from children under the age of 13. If you are under the age of 13, please do not submit any personal information through the GRAET Platform. If you have reason to believe that a child under the age of 13 has provided personal information to us, please contact us to request that we delete that child’s personal information from our Services.

Changes

We may sometimes make changes to this Privacy Policy. If we make a change to this Privacy Policy that, in GRAET’s sole discretion, is material, then we will let you know before the changes come into effect. Continuing to use GRAET after a change to this Privacy Policy means you accept the new policy. If you have any questions, please email privacy@graet.com.

Acceptance of This Privacy Policy

You acknowledge that you have read this Privacy Policy and agree to all its terms and conditions. By accessing and using the GRAET Platform and submitting your information you agree to be bound by this Privacy Policy. If you do not agree to abide by the terms of this Privacy Policy, you are not authorized to access or use GRAET.

If you have any questions, concerns, or complaints regarding this Privacy Policy, the information we hold about you, or if you wish to exercise your rights, we encourage you to email us at privacy@graet.com.