Last modified: 21/08/2025

This Privacy Notice describes how Unify Athletes Ltd (We, Us) handle your (User) personal data.

  1. WHAT IS PERSONAL DATA AND OTHER RELATED TERMS USED IN THIS PRIVACY NOTICE?
    1.1. In this Privacy Notice we use the following terms:
    1.1.1. ‘personal data’ means any information relating to an identified or identifiable natural person
    (‘data subject’);
    1.1.2. ‘data subject’ is an identifiable natural person is one who can be identified, directly or
    indirectly, in particular by reference to an identifier such as a name, an identification
    number, location data, an online identifier or to one or more factors specific to the physical,
    physiological, genetic, mental, economic, cultural or social identity of that natural person;
    While using our website or app you are considered to be a data subject.
    1.1.3. ‘processing’ means any operation or set of operations which is performed on personal
    data or on sets of personal data, whether or not by automated means, such as collection,
    recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation,
    use, disclosure by transmission, dissemination or otherwise making available, alignment or
    combination, restriction, erasure or destruction;
    1.1.4. ‘controller’ means the natural or legal person, public authority, agency or other body which,
    alone or jointly with others, determines the purposes and means of the processing of
    personal data; where the purposes and means of such processing are determined by
    European Union or Member State law, the controller or the specific criteria for its
    nomination may be provided for by European Union or Member State law;
    We are the controller of your personal data. You may find more information about us in Chapter 3 of
    this Privacy Notice.
    1.1. ‘processor’ means a natural or legal person, public authority, agency or other body which
    processes personal data on behalf of the controller;
    1.1.1. ‘third party’ means a natural or legal person, public authority, agency or body other than
    the data subject, controller, processor and persons who, under the direct authority of the
    controller or processor, are authorised to process personal data;
    1.1.2. ‘consent’ of the data subject means any freely given, specific, informed and unambiguous
    indication of the data subject’s wishes by which he or she, by a statement or by a clear
    affirmative action, signifies agreement to the processing of personal data relating to him or
    her;

1.1.3. ‘GDPR’ means Regulation (EU) 2016/679 of the European Parliament and of the Council of
27 April 2016 on the protection of natural persons with regard to the processing of personal
data and on the free movement of such data, and repealing Directive 95/46/EC.

  1. WHAT KIND OF PERSONAL DATA DO WE PROCESS?
    Personal data which is being collected Purposes for collecting (processing) personal

data

Name User of service/product
Contact information (telephone number,
email) Use of service/product
Address Use of service/product
Date of birth Use of service/product
Photos & Videos Use of service/product
Academic background & transcripts Use of service/product
Athletic background & preferences Use of service/product
Height & weight Use of service/product
References Use of service/product
University background & history Use of service/product
University contact information Use of service/product
University Programmes Use of service/product

  1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
    4.1. The controller of the personal data within the meaning of the General Data Protection
    Regulation, other data protection laws applicable in the Member States of the European Union and
    other provisions of a data protection nature is:
    Unify Athletes
    Registered Director: Ashley Smith
    Email: ashley@unifyathletes.com
    You may always reach us by sending an electronic message to our email. For any of these, you
    should use the contact information above.
  2. HOW LONG DO WE STORE YOUR PERSONAL DATA?

We store your data for as long as personal data is needed for the respective purpose and then delete
it as far as no legal storage obligations stand in the way.

  1. WHAT ARE THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

Article 6 I lit. a GDPR – the data subject has given consent to the processing of his or her
personal data for one or more specific purposes – serves our company as the legal basis for
processing operations in which we obtain consent for a specific processing purpose.
6.1. If the processing of personal data is necessary for the performance of a contract to which the
data subject is a party, as is the case, for example, with processing operations that are
necessary for the delivery of goods or the provision of another service or consideration, the
processing is based on Article 6 I lit. b GDPR – processing is necessary for the performance of a
contract to which the data subject is party or in order to take steps at the request of the data
subject prior to entering into a contract. The same applies to such processing operations that are
necessary for the implementation of pre-contractual measures, for example in cases of inquiries
about our products or services.
6.2. If our company is subject to a legal obligation by which a processing of personal data becomes
necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c
GDPR – processing is necessary for compliance with a legal obligation to which the controller is
subject.
6.3. In rare cases, the processing of personal data might become necessary to protect vital interests
of the data subject or another natural person. This would be the case, for example, if a visitor
were to be injured on our premises and as a result his or her name, age, health insurance data
or other vital information had to be passed on to a doctor, hospital or other third party. Then the
processing would be based on Art. 6 I lit. d GDPR – processing is necessary in order to protect
the vital interests of the data subject or of another natural person.
6.4. Finally, processing operations could be based on Art. 6 I lit. f GDPR – processing is necessary
for the purposes of the legitimate interests pursued by the controller or by a third party, except
where such interests are overridden by the interests or fundamental rights and freedoms of the
data subject which require protection of personal data, in particular where the data subject is a
child. Processing operations that are not covered by any of the aforementioned legal bases are
based on this legal basis if the processing is necessary to protect a legitimate interest of our
company or a third party, provided that the interests, fundamental rights and freedoms of the
data subject are not overridden. Such processing operations are permitted to us in particular
because they were specifically mentioned by the European legislator. In this respect, it took the
view that a legitimate interest could be assumed if the data subject is a customer of the
controller.
6.5. Your personal data may be transferred to the country other than your own. This includes transfer
to both EU countries and non-EU countries, in which no level of data protection comparable to
that in the EU is guaranteed. This applies in particular to the USA, where unsolicited access by
government agencies is possible. A transfer to recipients outside the EU only takes place if it is
ensured that the recipient of the data guarantees an adequate level of data protection and that
there are no other interests worthy of protection against the data transfer.

WHAT ARE YOUR RIGHTS WITH RESPECT TO PROTECTION OF YOUR PERSONAL DATA?
6.1. The right to be informed – that’s an obligation on us to inform you how we use your personal data
(and that’s what we’re doing in this Privacy Notice)
6.2. Right of access – The Controller offers you access to your personal data we process. This means
you can contact us and request from us a confirmation whether or not your personal data are being
processed and if so, you have the right to request access to your data, which we will provide to you in
the form of a so-called “registry” (stating, in particular, purposes, categories of personal data,
categories of recipients of personal data, storage periods or criteria for determining storage periods).
6.3. Right to rectification – You have the right to have inaccurate personal data we have stored about
you rectified.
6.4. Right to erasure – You may also ask us to erase your personal data from our systems. We will
comply with such requests unless we have a legitimate ground to not delete your personal data.
6.5. Right to restriction of processing – You may request us to restrict certain processing of your
personal data. If you restrict certain processing of your personal data, this may lead to fewer
possibilities to use our Services and website.
6.6. Right to data portability – You have the right to receive your personal data from us in a structured,
commonly used and machine-readable format in order to transmit the personal data to another
controller.
6.7. Right to object – that’s a right for you to object to us processing your personal data (for example, if
you object to us processing your data for direct marketing).
6.8. Rights in relation to automated decision-making and profiling – that’s a right you have for us to
be transparent about any profiling we do, or any automated decision-making.
6.9. Right to withdraw Consent — that’s the right to revoke any consent you may have previously given
us at any time, if we have collected and processed your personal information with your consent.
Withdrawing your consent will not affect the lawfulness of any processing we conducted with your
consent prior to your withdrawal, nor will it affect processing of your personal information conducted
in reliance on lawful processing grounds other than consent.
.10. How to use your rights – You may exercise your rights above in writing by sending an email to the
contact details in How to Contact Us. You will not have to pay a fee to exercise any of your rights
unless your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to
comply with your request in these circumstances. We may require confirmation of your identity
depending on your request. We respond to all requests we receive from individuals wishing to
exercise their data rights in accordance with applicable data protection laws.

CAN THIS PRIVACY NOTICE BE AMENDED?

Yes.

We may amend this Privacy Notice from time to time. The new version will be come into force upon its
publishing on our website. You may always find out whether our Privacy Notice was amended by checking
“last modified” legend on the top of the page.

INFORMATION FOR CALIFORNIA RESIDENTS
if you are a resident of California, you are granted specific rights regarding access to your personal
. information

California Civil Code Section 1798.83, also known as the ‘Shine The Light’ law, permits our users who are
California residents to request and obtain from us, once a year and free of charge, information about
categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the
names and addresses of all third parties with which we shared personal information in the immediately
preceding calendar year. If you are a California resident and would like to make such a request, please submit
. your request in writing to us using the contact information provided below

If you are under 18 years of age, reside in California, and have a registered account with Services, you have
the right to request removal of unwanted data that you publicly post on the Services. To request removal of
such data, please contact us using the contact information provided below and include the email address
associated with your account and a statement that you reside in California. We will make sure the data is not
publicly displayed on the Services, but please be aware that the data may not be completely removed from
our systems

USERS UNDER THE AGE OF 18

We do not knowingly collect data from or market to children under 18 years of age. We do not knowingly
solicit data from or market to children under 18 years of age. By using the Services, you represent that you
are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s
use of the Services. If we learn that personal information from users less than 18 years of age has been
collected, we will deactivate the account and take reasonable measures to promptly delete such data from
our records. If you become aware of any data we may have collected from children under age please contact
us at ashley@unifyathletes.com
Student registration and University registration
It is also possible for you to register an account. For this purpose, you will need to provide us with the
following: email and password. By signing up with Unify Athletes, student user agree to share their
information on their profile with University Partners. Unify Athletes stores the data you enter to set up a
customer account. We will hold your data for further orders as long as you maintain your registration. You
have the right to access, correct or delete your registration data at any time. The legal bases for the storage
is your consent.
Profile Data
Within your Sportfolio Profile you may be able to display certain profile information, share certain details,
engage with others, exchange knowledge and insights, post and view relevant content. Content and data is
not publicly viewable. You have choices about the information on your profile. You don’t have to provide
additional information on your profile; however, profile information helps you to get more from our Services.
It’s your choice whether to include sensitive information on your profile and to make that sensitive information

public. Please do not post or add personal data to your profile that you would not want to be available. The
legal bases for the storage is our legitimate interest.