Privacy Policy

Last updated: June 2026

1. Data Controller

The data controller for this website is: Ramsey Albayati, Email: [email protected]

2. Overview

This privacy policy informs you about the type, scope, and purpose of processing personal data on our platform TournaEvent (hereinafter "Website").

3. Cookies

Our website uses only technically necessary cookies that are required for the operation of the site:

  • Supabase Auth Session Cookies — Required for user authentication. Without these cookies, login is not possible. They are deleted when the browser session ends or when the token expires.
  • NEXT_LOCALE — Stores your selected language preference (e.g., German or English) so the website is displayed in the correct language.

We do not use any tracking, analytics, or marketing cookies. No data is transmitted to third-party providers such as Google Analytics, Facebook, or similar services.

4. Legal Basis

The use of technically necessary cookies is based on Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest is to provide a functional website with user authentication and language support. No consent is required for these cookies.

5. Hosting

This website is hosted on servers in the European Union. The database (Supabase) is located in the Singapore region (ap-southeast-1). When using the website, technical data (IP address, browser type, time of access) is automatically stored in server log files. This data is used to ensure operations and is deleted after 30 days.

6. Data Processing During Registration

When registering for a tournament, the data you enter (name, age, club, disciplines) is stored and made available to the tournament organizer. Processing is based on Art. 6(1)(b) GDPR (performance of a contract) for the purpose of tournament registration.

7. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

8. Contact

For privacy inquiries, access requests, or deletion requests, please contact: [email protected]