Privacy Policy

Last updated: July 1, 2025

1. Controller and Contact Information

Controller according to Art. 4 No. 7 GDPR:

Tournamic (private, non-commercial project)

Competent Supervisory Authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: https://www.lda.bayern.de/
Email: poststelle@lda.bayern.de

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us when you:

Create an account (email address, username, password)
Use our sports match tracking features (match data, scores, statistics)
Submit feedback or contact us (name, email, message content)
Participate in tournaments and matches (tournament participation data)

2.2 Information We Collect Automatically

When you use our service, we automatically collect:

Technical information (IP address, browser type, device information)
Usage data (pages visited, time spent, features used)
Log data (access times, error messages, system activity)

3. Legal Basis for Processing (Art. 6 GDPR)

We process your personal data based on:

Performance of a contract (Art. 6(1)(b) GDPR): To provide our sports tracking services
Legitimate interests (Art. 6(1)(f) GDPR): To improve our service and ensure security
Your consent (Art. 6(1)(a) GDPR): For optional features like newsletters (where applicable)

4. How We Use Your Information

We use your information to:

Provide and maintain our sports tracking services
Process and store your match data and statistics
Communicate with you about service updates and support
Improve our platform's functionality and user experience
Ensure the security and proper functioning of our services
Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With your consent: When you explicitly agree to share data
Service providers: With trusted third-party service providers who assist us in operating our platform (under strict data protection agreements)
Legal compliance: When required by law, court order, or to protect our rights and safety

6. Cookies and Tracking Technologies

We only use the cookies the service needs:

Essential Cookies: Required for user authentication and core functionality (Art. 6(1)(f) GDPR)
Preference Cookies: To remember your settings like theme preferences

We do not use analytics or advertising trackers.

You can control cookie settings through your browser preferences.

7. Data Retention

We retain your personal data only as long as necessary:

Account data: Until you delete your account or request deletion
Match data: As long as your account is active or as required for service provision
Log data: Typically 12 months for security and troubleshooting purposes

8. Your Rights under GDPR

You have the following rights regarding your personal data:

Access (Art. 15): Request information about your personal data we process
Rectification (Art. 16): Correct inaccurate or incomplete data
Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
Restriction (Art. 18): Limit the processing of your data under certain circumstances
Data portability (Art. 20): Receive your data in a structured, machine-readable format
Objection (Art. 21): Object to processing based on legitimate interests
Withdraw consent (Art. 7(3)): Where processing is based on consent

To exercise these rights, contact us at support@tournamic.com.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against:

Unauthorized access, alteration, disclosure, or destruction
Accidental loss or damage
Unlawful processing

These measures include encryption, access controls, and regular security assessments.

10. International Data Transfers

⚠️ IMPORTANT - Germany → USA Data Transfer:

Your data is processed on US servers. For this transfer we use:

Legal Basis:

Standard Contractual Clauses (SCCs) of the EU Commission
Additional technical safeguards: End-to-end encryption
Limited data categories: Only necessary data is transferred

US Cloud Act Notice: US authorities may under certain circumstances request access to data. We have not been requested to disclose data so far.

Your Rights:

You can object to the transfer (Art. 21 GDPR)
In case of objection, your account will be deleted as service provision becomes impossible

Additional Safeguards: We implement technical and organizational measures including data encryption, access controls, and data minimization to ensure adequate protection during international transfers.

11. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

Posting the updated policy on our website
Sending you an email notification (if you have an account)
Displaying a prominent notice on our platform

13. Contact Information

For questions about this privacy policy or our data practices, contact us:

Email: support@tournamic.com

14. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. Contact your local data protection authority or:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 53 1300
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de/