1. Data Controller
Event Setup is the data controller for personal data processed through this platform. Contact: support@event-setup.com.
2. What We Collect
- You provide directly: Identity (name, date of birth, gender, nationality), Contact (email, phone number, address), Account (hashed password, profile photo, emergency contact), and Event-specific details (medical declarations, T-shirt size, dietary needs).
- Collected automatically: Device, browser, IP address, approximate location, usage analytics, and Cookies.
- From third parties: Payment confirmations from our payment processor, timing/results data from the event organizer or timing partner.
3. Why We Use Your Data (Legal Basis)
- Performance of contract: To register you for events, process payments, deliver tickets, and provide results.
- Legitimate interest: To keep the platform secure, prevent fraud, and improve our service.
- Consent: For marketing emails and non-essential cookies. You can withdraw consent at any time.
- Legal obligation: To keep tax records and respond to lawful requests.
4. Who We Share Data With
- Event organizers: So they can manage participation, timing, and results.
- Payment processors: Blom Bank (via CyberSource) processes payments securely. We never receive or store your full card number.
- Service & Infrastructure providers: Email delivery, hosting (Cloudflare, Supabase), error monitoring, and customer support (under strict data-processing agreements).
- Authorities: When required by law.
Note: We do not sell your personal data.
5. International Transfers
Some of our processors are located outside your country. Where data leaves the EEA or your country of residence, we rely on Standard Contractual Clauses or equivalent safeguards.
6. How Long We Keep Data
- Account data: while your account is active, plus 24 months.
- Event registrations and results: 7 years (sport history & accounting).
- Invoices and tax records: 10 years.
- Marketing consent: until withdrawn, plus 3 years.
7. Cookies
We use strictly necessary cookies to keep you signed in and process payments. Optional analytics and marketing cookies are only set with your consent. You can change your preferences at any time by clearing your browser cookies for this site.
8. Your Rights
You have the right to access, correct, delete, or restrict your data, as well as the right to data portability and to withdraw consent. To exercise these rights or lodge a complaint, email support@event-setup.com. We respond within 30 days.
9. Security
Data is encrypted in transit (TLS) and at rest. Passwords are hashed. Access is restricted and audited. Payment card data is never stored on Event Setup servers. All card processing is handled exclusively by PCI DSS-compliant payment processors.
10. Children
Athletes under 16 years of age must be registered through a parent or guardian's family profile. We do not knowingly collect data directly from children.
11. Changes
We will notify you of material changes by email or in-app notice.