This English text is a courtesy translation. The French version is the sole legally binding version; in the event of any discrepancy, the French version prevails.
This policy describes how the CompetHub service processes personal data, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act ("loi Informatique et Libertés").
1. Data controller
The Service is published by two natural persons acting on a non-professional basis (the "Publishers"), identified with the host in accordance with the legal notice. For any question regarding your data, you may contact them at: contact@compethub.com.
Given the architecture of the Service, two situations must be distinguished:
- Account and usage data: for the data necessary to create the account and operate the platform, the Publishers act as data controller.
- Competition and participant data: for the data entered by an Organizer about their competitions and participants, the Organizer is the data controller and the Publishers act as processor, processing this data on behalf of and according to the instructions of the Organizer. Participants wishing to exercise their rights over this data are invited to contact the relevant Organizer first.
2. Data collected
Depending on your use, the Service may process the following categories of data:
- Account data: email address, name or pseudonym, password (stored in encrypted/hashed form), role (organizer, staff, athlete).
- Competition data: title and information about the competition, categories, registrations.
- Participant data entered by the Organizer: surname, first name, and depending on the sport, date of birth, sex, category or body weight, club, results and rankings.
- Technical data: connection logs, IP address, browser type, and data strictly necessary for the operation and security of the Service.
Some data (for example a body weight) may be sensitive depending on the context. It is the Organizer’s responsibility to enter only data that is relevant, adequate and limited to what is necessary, and to refrain from entering health data or other sensitive data without an appropriate legal basis.
3. Purposes and legal bases
- Providing and managing the Service (account, competitions, brackets, scoring, public page): performance of the Terms and pre-contractual measures.
- Ensuring security and preventing fraud and abuse: legitimate interest of the Publishers.
- Responding to contact requests: legitimate interest or consent.
- Audience measurement and non-essential cookies, where applicable: consent.
- Complying with applicable legal obligations: legal obligation.
4. Competition public page
Certain information relating to a competition (participants, brackets, results) may be made public on the competition’s public page, at the initiative and under the responsibility of the Organizer. The Publishers decide neither its scope nor its publication.
5. Recipients and processors
The data is neither sold nor rented. It is accessible to the Publishers and, where applicable, to the technical providers strictly necessary for the operation of the Service (in particular the host). A competition’s data is by nature accessible to the Organizer and their staff.
6. Hosting and transfers outside the EU
The data is hosted by OVHcloud, within the European Union. The Publishers favour providers located within the European Union. Should a provider involving a transfer outside the European Union be used, that transfer would be governed by appropriate safeguards compliant with the GDPR (in particular standard contractual clauses).
7. Retention period
- Account data: retained for as long as the account is active, then deleted or anonymized within a reasonable period after its closure.
- Competition and participant data: retained for the period necessary to organize and follow up the competition, under the Organizer’s control.
- Technical logs: retained for a limited period, for security purposes.
8. Security
The Publishers implement reasonable technical and organizational measures to protect the data (password encryption, restricted access, professional hosting). As no transmission or storage of data over the Internet can be guaranteed to be completely secure, absolute security cannot be ensured.
9. Your rights
In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to set guidelines for the fate of your data after your death.
To exercise these rights over your account data, write to contact@compethub.com. For data entered in the context of a competition, contact the relevant Organizer first, who is responsible for it.
10. Cookies and trackers
The Service uses cookies and trackers that are strictly necessary for its operation (for example managing the session and authentication), which do not require consent. Any non-essential cookie (audience measurement, for example) would only be placed with your consent, which you can withdraw at any time.
11. Minors
The Service is not intended to be used directly by minors without the consent of their legal representative. When an Organizer registers minor participants, it is their responsibility to have the appropriate consent or legal basis, in particular the authorization of the legal representatives.
12. Complaint to the CNIL
If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the French Data Protection Authority (Commission Nationale de l'Informatique et des Libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
13. Changes
This policy may be updated to reflect changes in the Service or in the regulations. The applicable version is the one published on this page.
14. Contact
For any question relating to your personal data: contact@compethub.com.