Health Data Notice

1. Purpose of This Notice

This notice provides specific information about how BiathlonHub processes your health data, as required by GDPR Article 9 (special category data) and the European Health Data Space (EHDS) Regulation.

2. What is Health Data?

Under GDPR, health data includes any data relating to your physical or mental health. In BiathlonHub, this includes:

Data We May Collect

3. Why We Need Your Consent

Health data is considered special category data under GDPR Article 9. This means:

• We CANNOT process it without your explicit consent
• Consent must be freely given and informed
• You can withdraw consent at any time
• Withdrawal does not affect the lawfulness of prior processing

4. How We Use Your Health Data

Permitted Uses

• Display your health metrics in the app
• Calculate recovery scores and training readiness
• Correlate health data with training performance
• Generate charts and trends for your review
• Sync data between devices (your devices only)

Sharing with Coaches/Teams

• Only if you enable it in Privacy Settings
• You control which data types are shared
• You can revoke sharing at any time
• Coaches cannot export your health data

What We DO NOT Do

• We do NOT use health data for advertising
• We do NOT sell health data to third parties
• We do NOT share with insurance companies
• We do NOT make medical diagnoses
• We do NOT provide medical advice

5. Data Security for Health Data

We implement additional protections for health data:

6. Your Rights Regarding Health Data

Access

• View all your health data in the app
• Export your data in JSON format

Rectification

• Edit or correct inaccurate entries
• Add notes to health records

Erasure

• Delete individual records
• Delete all health data (withdraw consent)
• Request complete account deletion

Restriction

• Pause health data syncing
• Restrict coach access to health data

Portability

• Export data compatible with Apple Health / Health Connect
• Download in standard JSON format

7. Withdrawing Consent

You can withdraw health data consent at any time:

1. Go to Settings > Privacy Settings
2. Tap Health Data consent
3. Select Withdraw Consent

What Happens When You Withdraw

• Health data sync stops immediately
• Existing health data is deleted within 30 days
• Training data (non-health) is preserved
• You can re-grant consent later

8. Third-Party Health Platforms

Apple Health (iOS)

• We request read access only
• Data stays on your device until you sync
• Apple's privacy terms apply: Apple Privacy

Health Connect (Android)

• We request read access only
• Data processed per Google's policies
• Health Connect terms apply: Health Connect

10. Children and Health Data

For users under 16:

• Parental consent is required for health data
• Parents/guardians can view/manage health settings
• Additional safeguards apply per GDPR Article 8

11. Data Retention

12. Contact for Health Data Questions

For questions specifically about health data processing:

13. Regulatory Information

This notice complies with:

• GDPR Article 9 (Special category data)
• GDPR Article 13/14 (Information requirements)
• EHDS Regulation (European Health Data Space)
• BDSG §22 (German Federal Data Protection Act)