Privacy
What we store when you register, why, for how long — and how to have it deleted.
Draft. Structurally complete but not yet reviewed by a lawyer. The bracketed details must be filled in before publication. The German version is the authoritative one.
Controller
Christian Herkner, Schenk-Danzinger-Gasse 4/3/33, 1220 Vienna, Austria
The email address for enquiries is in the footer of every page and in the imprint. An informal email is enough for any data protection question; we answer within one month.
What we store, and why
We collect only what we need to run the tournament:
| Data | Purpose | Legal basis |
|---|---|---|
| Name | participant list, table allocation, prize giving | Art. 6(1)(b) GDPR (performing the participation) |
| Age | checking the minimum age, arrangements for minors | Art. 6(1)(b) GDPR |
| Email address | confirmation, news about this tournament | Art. 6(1)(b) GDPR |
| Phone number (optional) | reachability on the day | Art. 6(1)(f) GDPR |
| Nickname (optional) | display at the table | Art. 6(1)(b) GDPR |
| Name and contact of the parent or guardian (for minors) | consent, reachability during the event | Art. 6(1)(b) and (c) GDPR |
| Free-text notes (optional) | allergies, accessibility, accompaniment | Art. 6(1)(a) GDPR (consent) |
| Photo consent | publishing photos | Art. 6(1)(a) GDPR (consent) |
Optional really is optional: you can take part perfectly well without a phone number, nickname, notes or photo consent.
Health-related information (an allergy, for example) is special category data under Art. 9 GDPR. We process it solely on the basis of the consent given by filling in the free-text field, and use it only for the event.
Children’s data
Children are registered by a parent or guardian, who consents at the same time. Children have exactly the same rights as everybody else — access and deletion can be requested at any time by the parent or guardian. We store nothing about children that we do not store about adults.
Who sees the data
- The organising team. Access to the registration list is limited to named, individually authorised email addresses and protected by a sign-in.
- Cloudflare, Inc. as the host of the website and the database (processor). (Add the data processing agreement and server location.)
- Resend for sending the confirmation emails (processor). (Only name this if it is actually used.)
Beyond that we pass nothing on — not to sponsors, not to the venue, not to anybody.
Visiting the website
This website uses no cookies, no tracking and no analytics. Technically necessary server logs are created when a page is requested (time, page requested, shortened IP address) and serve the security of operation.
The registration form runs a spam check (Cloudflare Turnstile). It does not build a profile of you.
How long we keep it
- Registration data: until four weeks after the tournament at the latest, then deleted.
- Photos with consent: until consent is withdrawn.
- Anybody who wants earlier deletion gets it — one email is enough.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Consent given (photos, free-text information) can be withdrawn at any time; this does not affect the lawfulness of processing carried out before the withdrawal.
An informal email to the address in the imprint is enough. We answer within one month.
If you wish to complain, you can contact the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.
Photos
Photos are published only with express, separately given consent. For children it is given by the parent or guardian. A withdrawal takes effect for the future: we take the photo off our own channels, but we cannot retrieve it from other people’s republications.
If you would rather not be photographed at the tournament, just say so on the day — that is enough.