text: Privacy Notice for European Clients
  For the purposes of the GDPR, Matchup LLC, DBA MoveSpring is the data controller with regard to the Personal Data described in this Privacy Policy. Our mission is to make fitness fun and accessible for individuals of all activity levels. We aim to empower people to lead a healthier life and provide a community that supports them along their fitness journey.
  Matchup LLC, DBA MoveSpring take the protection and privacy of our users' personal data seriously. To that end, we have appointed a Data Protection Officer within the EU.
  Email:dpo@xpertdpo.com
  Post: XpertDPO Ltd. 20 Harcourt Street, Dublin, D02 H364, Ireland
  The purpose of this Privacy Policy is to provide you, as our data subject, with a statement regarding the Data Protection and Privacy practices and obligations of Matchup LLC, DBA MoveSpring and an explanation of your rights as a data subject.
  This Data Protection and Privacy Policy and Notice applies to our business practices, our website (Websites), which are accessible from www.movespring.com.
  Data protection and privacy laws provide rights to individuals with regard to the use of their Personal Data by organisations, including our organisation. Irish and EU laws on data protection govern all activities we engage in with regard to our collection, storage, handling, and disclosure of your Personal Data within the EU.
  We must comply with data protection and privacy laws because the law requires us to but we also would like you to have confidence in dealing with us, and our compliance with data protection law helps us to maintain a positive reputation in relation to how we handle Personal Data.
  We are required to demonstrate accountability for our data protection obligations. We must be able to show how we comply with the applicable data protection and privacy laws, and that we have in fact complied with the laws.
  We do this, in conjunction with our written policies and procedures, by building data protection and privacy compliance into our systems and business practices, by internally monitoring our data protection and privacy compliance and keeping it under review, and by acting if our representatives, including employees or contractors, fail to follow the rules.
  We will collect personal data with you in accordance with the purposes outlined in this document. This will be data used to facilitate a consultant/client type relationship usually your name and email address and from time to time, billing information. If you are a sole trader or partnership, we will consider your address to be personal data.
  Ways in which Matchup LLC, DBA MoveSpring may process your Personal Data:
  You provide us with information when you create an account such as your name, email, username, and password. This information is required for account creation. You may also choose to share a profile photo and your activity preferences.
  Your fitness tracking device or mobile smartphone collects data to estimate a variety of metrics like your steps, distance travelled, and active minutes moved. Not every device tracks all of these metrics. The data collected varies depending on the device you use. When your device syncs with our applications and software, data recorded on your device is transferred from your device or device app to our service.
  We collect your time zone. This is either gathered from your mobile device, your connected fitness device or is manually set by you. We use time zone to allow challenges to start and end locally at the same time for everyone participating in the challenge. You can change your time zone at any time in your profile settings.
  We do not offer our products or services for use by children and, therefore, we do not knowingly collect personal data from, and/or about children under the age of eighteen (18). If you are under the age of eighteen (18), do not provide any personal data to us without involvement of a parent or a guardian. For the purposes of the GDPR, we do not intend to offer information society services directly to children. In the event that we become aware that you provide personal data in violation of applicable privacy laws, we reserve the right to delete it. If you believe that we might have any such information, please contact us at dpo@xpertdpo.com
  Your Organisation Administrator(s)
  If you sign up for our service through an employer or organization, remember that their use of your information will be governed by their privacy policies and terms. You can revoke your consent to share with organizational or employee wellness programs by deleting your personal account with them or asking your employer's administrator to remove you from the organization account.
  We may use trusted service providers who could be considered data processors, sub-processors or third parties. We have written agreements in place with all of our service providers and, before we sign each agreement, we need to have vetted and be satisfied with the service provider's data security. The agreements also need to contain specific clauses that deal with data protection. We require all third parties to have appropriate technical and operational security measures in place to protect your Personal Data, in line with EU laws on data protection. Any such organisation or individual will have access to Personal Data needed to perform these functions but may not use it for any other purpose.
  We may pass on your details if we are:
  If you choose to consent, and where we have identified relevant and appropriate grounds , our processing of your Personal Data in line with this Data Protection and Privacy Policy and Notice you will be giving us permission to process your Personal Data specifically for the purposes identified.
  You may withdraw consent at any time. If you have any queries relating to withdrawing your consent, please contact our Data Protection Officer using the contact details set out below.
  We transmit personal data outside the EEA to our datacentres in the United States of America
  Under certain circumstances, and dependent on the legal basis under which your personal data is processed, by law you have the right to:
  We have appointed an EU Data Protection Coordinator to monitor compliance with our data protection obligations and with this policy and our related policies. If you have any questions about this policy or about our data protection compliance, please contact the Data Protection Coordinator.
  If you wish to exercise your rights please contact our Data Protection Coordinator and they will respond to the request within 30 days.
  We are obliged to comply with exceptions to your requests where laid out in law. Such exceptions may relate to health data, disclosures that would be likely to cause serious harm to your physical or mental health or emotional condition and opinions given in confidence.
  You as the Data Subject have the right to complain at any time to a supervisory authority in relation to any issues related to our processing of your Personal Data. We would like to hear from you first if you have a complaint about how we use your data so that we may rectify the issue. Our organisation is located in the United States of America, however, as we conduct data processing in the European Union, we are regulated for data protection purposes. Our lead supervisory authority is the Irish Data Protection Commissioner.