Scope and Purpose: This Agreement outlines the policies and procedures for the collection, use, storage, and protection of personal data by Lean Poker ("the Company") in accordance with the General Data Protection Regulation ("GDPR").
Data Collected: The Company collects event-related data including, but not limited to, team names, points, and team members. GitHub OAuth keys are stored only for the duration of the respective event. Further, user identification data such as email addresses, GitHub usernames, display names, and GitHub profile pictures are collected.
Data Usage: Data collected shall be exclusively used for activities directly related to Lean Poker events and training services ("the Services"). The usage of GitHub OAuth keys shall be limited to the duration of the respective event and shall be removed immediately thereafter.
Consent for Marketing: Subject to explicit user consent, the Company may use user names and email addresses for the purpose of sending marketing content, including but not limited to notifications of future events and product updates.
Data Protection Measures: The Company shall implement reasonable technical and organizational measures to ensure the security and confidentiality of collected data.
Data Subject Rights: Users shall have the right to request access to, and correction or deletion of, their personal data, in accordance with GDPR.
Data Storage and Retention: Data shall be stored on secure servers and shall be retained only for periods necessary to fulfill the purposes outlined herein.
Data Breaches: In the event of a data breach, the Company shall notify affected users and relevant supervisory authorities in compliance with applicable laws.
Third-Party Access: Unless required by law, the Company will not share personal data with third parties without explicit user consent.
Amendments: The Company reserves the right to amend this Agreement. Users shall be notified of any amendments in a timely manner.
User Acknowledgment: By utilizing the Services, users acknowledge having read, understood, and agreed to the data practices described in this Agreement.