Privacy Policy

We take the protection of your personal data seriously. This privacy policy informs you, in accordance with the General Data Protection Regulation (GDPR), about the data we process when operating the World4Sport platform (the "Platform").

1. Controller

The controller within the meaning of the GDPR is:
AiNext GmbH, Lindenstraße 2, 87787 Wolfertschwenden, Deutschland
Email: kontakt@world4sport.com, Phone: +49 176 9825 8925

2. Hosting

The Platform is hosted on Amazon Web Services (AWS) servers in the Frankfurt region (eu-central-1, Germany) under a data processing agreement. Data is stored within the EU.

3. Data we process

a) Server log files

When you access the Platform, information such as IP address, date/time, page accessed and browser type is processed automatically (Art. 6(1)(f) GDPR, legitimate interest in security and stability).

b) Registration and account

For registration we process first name, last name, email address, password (stored encrypted) and, for providers, additional business data (company name, address, phone). Purpose: providing the account and performing the contractual relationship (Art. 6(1)(b) GDPR).

c) Bookings

For a booking we process the booking data and pass the data required for performance (e.g. your name) to the relevant provider, as the contract for the course is concluded between you and the provider (Art. 6(1)(b) GDPR).

d) Payment processing (Stripe)

Payments are processed via the payment service provider Stripe (Stripe Payments Europe Ltd., Ireland). You enter payment data (e.g. card details) directly with Stripe; we do not store full card data. Stripe's privacy notices apply in addition.

e) AI assistant

For AI-based course recommendations we use services from OpenAI. Your chat input is transmitted to OpenAI to generate a response. Please do not enter sensitive personal data there. Legal basis: performance of the contract and our legitimate interest in the feature (Art. 6(1)(b) and (f) GDPR).

f) Email delivery

For transactional emails (e.g. confirmation emails) we use the email service of our provider IONOS.

4. Recipients / processors

We use carefully selected service providers:

• Amazon Web Services (hosting, EU)
• Stripe (payment processing)
• OpenAI (AI assistant)
• IONOS (email delivery)
• Providers of the booked courses (recipients of booking-related data)

5. Transfers to third countries

Where service providers (e.g. Stripe, OpenAI) process data outside the EU/EEA, this is based on appropriate safeguards, in particular the EU Standard Contractual Clauses (Art. 46 GDPR).

6. Retention period

We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods (e.g. up to 10 years under commercial and tax law).

7. Cookies and local storage

We use technically necessary storage mechanisms (e.g. to store your language choice and your login). See our Cookie Notice for details.

8. Your rights

Under the GDPR you have, in particular, the following rights:

• Access (Art. 15), rectification (Art. 16), erasure (Art. 17)
• Restriction of processing (Art. 18), data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent with future effect (Art. 7(3))
• Lodging a complaint with a supervisory authority (Art. 77)

To exercise your rights, simply email kontakt@world4sport.com.

9. Obligation to provide data

Certain data is required to conclude a contract and use the Platform; without it an account or booking cannot be provided.