Privacy Policy
1. Overview of Data Protection
General Information
The following information provides a clear overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on data protection can be found in the full Privacy Policy below.
Data Collection on This Website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by the website operator. Contact details for the responsible entity can be found in the section titled “Information About the Data Controller” in this Privacy Policy.
How do we collect your data?
Your data is collected in part by you providing it to us, for example when you submit information through a contact form. Other data is collected automatically or based on your consent when you visit the website. This primarily includes technical data (e.g., browser, operating system, time of access). Such data is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior.
What rights do you have regarding your data?
You have the right to request information, free of charge, at any time regarding the origin, recipients, and purpose of your stored personal data. You also have the right to request rectification or deletion of this data. If you have given consent to data processing, you may withdraw it at any time with effect for the future. Furthermore, under certain conditions, you have the right to request the restriction of processing of your personal data. You also have the right to lodge a complaint with the relevant supervisory authority. For such matters and any other data protection inquiries, you may contact us at any time.
Analytics Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically evaluated. This is primarily done using analytics tools. Detailed information regarding these analytics tools can be found within this Privacy Policy.
2. Hosting
We host the contents of our website with the following provider:
External Hosting
This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider(s). This may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access logs, and other data generated through website usage. External hosting is carried out for the purpose of fulfilling contractual obligations to our prospective and existing customers (Art. 6(1)(b) GDPR) and to ensure a secure, fast, and efficient operation of our online offering by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG, particularly regarding the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent may be withdrawn at any time. Our hosting provider(s) will process your data only to the extent necessary to fulfill their service obligations and strictly in accordance with our instructions.
We use the following hosting provider:
netcup GmbH
Daimlerstraße 25
D-76185 Karlsruhe
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with the aforementioned provider. This legally required agreement ensures that the provider processes the personal data of our website users strictly in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
We take the protection of your personal data very seriously. Your personal data is handled confidentially and in accordance with applicable data protection laws and this Privacy Policy. When using this website, various personal data may be collected. This Privacy Policy explains which data we collect, how we use it, and for what purpose. Please note that data transmission over the Internet (e.g., email communication) may contain security vulnerabilities. Complete protection of data from third-party access is not possible.
Information About the Data Controller
The data controller responsible for processing data on this website is:
Yunus Emre Kara, Weichselring 26, 50765 Cologne, Germany, Email: info[at]free-tournament.com
The controller is the natural or legal person who determines, alone or jointly with others, the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Period
Unless a more specific retention period is stated within this Privacy Policy, personal data will be stored by us only for as long as necessary to fulfill the purpose for which it was collected. If you submit a legitimate request for deletion or withdraw your consent to processing, your data will be deleted unless we have other legally permissible grounds for retaining it (e.g., tax or commercial law retention requirements). In such cases, deletion will occur once those obligations no longer apply.
Legal Bases for Data Processing on This Website
If you have consented to data processing, we base the processing of your personal data on Art. 6(1)(a) GDPR or, where special categories of data under Art. 9(1) GDPR are involved, Art. 9(2)(a) GDPR. If you have explicitly consented to the transfer of personal data to third countries, processing also takes place under Art. 49(1)(a) GDPR. Where you have consented to the use of cookies or similar technologies (e.g., device fingerprinting), processing additionally occurs under § 25(1) TTDSG. Consent may be withdrawn at any time. If your data is necessary for contractual performance or pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. Where processing is required to fulfill a legal obligation, the legal basis is Art. 6(1)(c) GDPR. Data may also be processed pursuant to our legitimate interests under Art. 6(1)(f) GDPR. The applicable legal basis will be indicated within the individual sections of this Privacy Policy.
Notice Regarding Data Transfers to Non-Secure Third Countries and to Non-DPF-Certified U.S. Providers
We use tools provided by companies based in countries that do not offer an adequate level of data protection under EU law, as well as U.S. providers that are not certified under the EU-U.S. Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. In non-secure third countries, a level of data protection equivalent to the EU cannot be guaranteed. The United States, however, is generally considered a safe third country if the data recipient is DPF-certified or offers appropriate additional safeguards. Details regarding third-country transfers, including data recipients, can be found within this Privacy Policy.
Recipients of Personal Data
In the course of our business activities, we work with various external service providers. This may require transferring personal data to such entities. We share personal data with third parties only when necessary to fulfill contractual obligations, when required by law (e.g., tax authorities), when justified by our legitimate interests under Art. 6(1)(f) GDPR, or when another legal basis permits data sharing. When using processors, personal data is shared only under a valid Data Processing Agreement. In cases of joint processing, an agreement for joint controllership is concluded.
Withdrawal of Your Consent to Data Processing
Many processing operations are based on your explicit consent. You may withdraw consent at any time with effect for the future. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
Right to Object to Data Processing in Special Cases and to Direct Marketing (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on these provisions. The applicable legal basis for each processing activity is outlined in this Privacy Policy. If you object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if processing is required for the establishment, exercise, or defense of legal claims (Art. 21(1) GDPR). If your data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to direct marketing. If you object to direct marketing, your personal data will no longer be used for such purposes (Art. 21(2) GDPR).
Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically based on your consent or for the performance of a contract in a structured, commonly used, and machine-readable format. You may also request that this data be transmitted to another controller, where technically feasible.
Access, Rectification, and Erasure
Within the scope of applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing, as well as, if applicable, a right to rectification or deletion of this data. For further questions concerning personal data, you may contact us at any time.
Right to Restrict Processing
You have the right to request restriction of processing of your personal data. You may contact us at any time for this purpose. The right to restriction applies in the following cases:
- If you contest the accuracy of your personal data stored by us, we generally require time to verify this. During the verification period, you have the right to request restriction of processing.
- If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion.
- If we no longer require your personal data, but you need it for the establishment, exercise, or defense of legal claims, you may request restriction of processing instead of deletion.
- If you have objected pursuant to Art. 21(1) GDPR, a balancing of interests must take place. Until it is determined whose interests prevail, you have the right to request restriction of processing.
If you have restricted the processing of your personal data, such data may only be processed—with the exception of storage—with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content (for example, orders or inquiries sent to us as the website operator), this website uses SSL or TLS encryption. An encrypted connection can be identified when the browser’s address bar changes from “http://” to “https://” and a lock symbol is displayed. When SSL/TLS encryption is active, data transmitted to us cannot be read by third parties.
Objection to Unsolicited Email Advertising
We hereby object to the use of contact details published within the scope of legal notice obligations for the purpose of sending unsolicited advertising or informational materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
4. Data Collection on This Website
Cookies
Our website uses so-called cookies. Cookies are small data files that do not harm your device. They may be stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically when you leave the website. Persistent cookies remain stored on your device until you delete them manually or your browser performs the deletion automatically.
Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies allow the integration of certain third-party services into websites (for example, cookies used for payment processing).
Cookies serve different purposes. Many cookies are technically necessary, as certain website functionalities would not work without them (e.g., shopping cart functionality or video display). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies required for the execution of electronic communications, the provision of certain functions you have requested (e.g., shopping cart), or for optimizing the website (e.g., audience measurement cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the technically error-free and optimized provision of its services. Where consent has been requested for the storage of cookies or similar recognition technologies, processing is based solely on this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG). Consent may be withdrawn at any time.
You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to refuse cookies in specific cases or in general, and to enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Details on cookies and services used on this website can be found in this Privacy Policy.
Contact Form
If you send inquiries to us via the contact form, the information you provide—including your contact details—is stored for the purpose of processing your inquiry and in case of follow-up questions. We do not share this data without your consent. Processing takes place under Art. 6(1)(b) GDPR, where the request relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested. You may withdraw consent at any time. Data submitted through the contact form remains stored until you request deletion, withdraw consent, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected.
Requests by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry—including all related personal data (e.g., name, request)—is stored and processed for the purpose of handling your request. We do not share this data without your consent. Processing is carried out based on Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in the efficient handling of inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where requested. You may withdraw your consent at any time. Data sent to us via contact requests remains stored until you request deletion, withdraw consent, or the purpose for retention no longer applies. Mandatory statutory retention periods remain unaffected.
5. Social Media
Social Media Elements with Shariff
This website uses elements from various social media platforms (e.g., Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr). Such elements are typically identifiable by the corresponding social media icons. To protect your privacy, we use the “Shariff” solution. This method prevents social media providers from receiving your personal data when you first access the website. A direct connection to the server of the respective provider is only established once you actively click the relevant social media button (consent). If you activate a social media element, the provider receives the information that your device has accessed this website with your IP address. If you are logged into your social media account, the provider may associate your visit with your user profile. Activation constitutes consent within the meaning of Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent may be withdrawn at any time. The use of Shariff is required to collect legally valid consents for certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.
This website integrates elements of the social network Facebook. The service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, collected data may also be transferred to the USA and other third countries. An overview of Facebook plugins is available at: https://developers.facebook.com/docs/plugins/?locale=en_US. When an active Facebook element is loaded, a direct connection is established between your device and Facebook’s servers. Facebook thereby receives information that your device accessed this website with your IP address. If you click the Facebook “Like” button while logged into your account, you may link content from this website to your profile. This allows Facebook to associate your visit with your user account. We have no insight into the content of the transmitted data or how Facebook uses it. Further details can be found in Facebook’s Privacy Policy: https://www.facebook.com/privacy/explanation. Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG; consent may be withdrawn at any time. Otherwise, processing is based on our legitimate interest in a broad online presence. Joint controllership under Art. 26 GDPR exists for data captured and transferred via this website. The agreement is available at: https://www.facebook.com/legal/controller_addendum. Facebook is responsible for the security of its products and for handling data subject rights. Data transfers to the USA are based on the EU Standard Contractual Clauses. Facebook is certified under the EU-U.S. Data Privacy Framework (DPF). Details: https://www.dataprivacyframework.gov/
This website integrates functions of the Twitter service, provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. When an active Twitter element loads, a direct connection is established with Twitter servers. Twitter thereby receives information that your device accessed this website. By using “Re-Tweet” or similar functions, visited websites may be linked to your Twitter profile and shared with other users. We have no insight into the content or usage of the transmitted data. Details can be found in Twitter’s Privacy Policy: https://twitter.com/privacy. Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG; otherwise on our legitimate interest in a strong social media presence. Data transfers to the USA are based on EU Standard Contractual Clauses: https://gdpr.twitter.com/en/controller-to-controller-transfers.html. You can adjust your Twitter privacy settings at https://twitter.com/account/settings.
This website integrates functions of Instagram, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When an active Instagram element loads, a direct connection to Instagram servers is established, enabling the provider to receive information about your visit, including your IP address. If logged into your Instagram account, clicking the Instagram button allows you to link website content to your profile. We have no knowledge of the content or subsequent use of transmitted data. When consent is obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG; otherwise on our legitimate interest in visibility on social media. For data transferred from this website to Meta (Instagram/Facebook), joint controllership under Art. 26 GDPR applies. The agreement is available at: https://www.facebook.com/legal/controller_addendum. Instagram’s Privacy Policy is available at: https://privacycenter.instagram.com/policy/. Meta is certified under the EU-U.S. Data Privacy Framework (DPF).
Tumblr
This website uses buttons and elements from Tumblr, operated by Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA. When an active Tumblr element loads, a direct connection to Tumblr servers is established, enabling Tumblr to receive information about your visit. Tumblr buttons allow users to share content or follow the provider. Data such as IP address and accessed URL may be transferred. Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG; otherwise on our legitimate interest in broad visibility. Further information: https://www.tumblr.com/privacy/en.
We use elements from Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. When a Pinterest element is loaded, your browser establishes a direct connection with Pinterest servers, transmitting log data—including IP address, visited pages containing Pinterest features, browser type, and cookies. Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG; otherwise on our legitimate interest in strong visibility on social media. More information: https://policy.pinterest.com/en/privacy-policy.
6. Newsletter
Newsletter Data
If you wish to subscribe to our newsletter, we require a valid email address and information that allows us to verify that you are the owner of the email address and that you consent to receiving the newsletter. Additional data may be collected voluntarily. We use this data exclusively to send the requested information and do not share it with third parties. Processing is based solely on your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time, for example via the “unsubscribe” link in the newsletter. The legality of prior processing remains unaffected. Data stored for newsletter distribution is kept until you unsubscribe and will be deleted thereafter or when the purpose no longer applies. We may remove or block email addresses based on our legitimate interests under Art. 6(1)(f) GDPR. After unsubscribing, your email address may be stored in a blacklist to prevent future mailings. This is based on both your and our legitimate interests in compliance with legal requirements. Blacklist entries are not merged with other data and are stored indefinitely unless your interests outweigh our own.
7. Plugins and Tools
YouTube
This website embeds YouTube videos, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When accessing a page with an embedded YouTube video, a connection to YouTube servers is established, informing YouTube of the pages you visited. YouTube may also store cookies or use similar recognition technologies such as device fingerprinting to collect information about visitors. This information is used for purposes such as statistical analysis, improving user experience, and preventing fraud. If you are logged into your YouTube account, your browsing behavior may be associated with your personal profile unless you log out. The use of YouTube is in our legitimate interest in providing an engaging online presentation (Art. 6(1)(f) GDPR). Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG. You may withdraw consent at any time. YouTube’s Privacy Policy: https://policies.google.com/privacy?hl=en. Google is certified under the EU-U.S. Data Privacy Framework (DPF).
Google Fonts
This site uses Google Fonts for consistent typeface display, provided by Google. When a page is accessed, your browser loads the required fonts into its cache. This requires a connection to Google servers, informing Google that your IP address accessed this website. The use of Google Fonts is based on our legitimate interest in a uniform and optimized presentation (Art. 6(1)(f) GDPR). Where consent is required and obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG. If your browser does not support Google Fonts, a default system font is used. More information: https://developers.google.com/fonts/faq and https://policies.google.com/privacy. Google is certified under the EU-U.S. Data Privacy Framework (DPF).
Google Maps
This site uses Google Maps, provided by Google Ireland Limited. To use Google Maps, storage and processing of your IP address is required, which may be transferred to the USA. We have no control over these transfers. Google Maps may also use Google Fonts for consistent display. The use of Google Maps is in our legitimate interest in providing an attractive website and easy location discovery (Art. 6(1)(f) GDPR). Where consent has been obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG. Data transfers to the USA rely on EU Standard Contractual Clauses. More information: https://policies.google.com/privacy. Google is certified under the EU-U.S. Data Privacy Framework (DPF).
Google reCAPTCHA
We use Google reCAPTCHA to determine whether data entered on this website (e.g., in a form) is provided by a human or an automated system. reCAPTCHA analyzes visitor behavior using various metrics, such as IP address, time spent on the site, and mouse movements. The analysis begins automatically and runs silently in the background. Data is transferred to Google. Processing is based on our legitimate interest in protecting our website from abusive automated activity (Art. 6(1)(f) GDPR). Where consent is required and obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG. Google is certified under the EU-U.S. Data Privacy Framework (DPF).
hCaptcha
We use hCaptcha, provided by Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA, to distinguish between human and automated form submissions. hCaptcha analyzes visitor behavior (e.g., IP address, time spent, mouse movement). When used in invisible mode, the analysis runs entirely in the background. Processing is based on our legitimate interest in protecting our website against bots and spam (Art. 6(1)(f) GDPR). Where consent is obtained, processing is based on Art. 6(1)(a) GDPR and § 25 TTDSG. Data transfers rely on EU Standard Contractual Clauses. More information: https://www.hcaptcha.com/privacy.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies—text files stored on your device—to help analyze how you use the website. Information generated by the cookie regarding your website usage is generally transmitted to and stored on Google servers in the USA. If IP anonymization is activated on this website, your IP address will first be shortened by Google within EU Member States or other countries party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of this website’s operator, Google will use this information to evaluate website usage, compile reports on website activities, and provide additional services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You may disable cookies through your browser settings; however, doing so may limit website functionality. You may also prevent the collection and processing of cookie-generated data related to your website usage (including IP address) by downloading and installing the browser plugin available here: http://tools.google.com/dlpage/gaoptout. This website uses Google Analytics with the “_anonymizeIp()” function to ensure that IP addresses are processed only in a truncated form, thereby preventing direct identification. We use Google Analytics to analyze and improve our website for users. For cases in which personal data is transferred to the USA, Google complies with the EU-U.S. Privacy Shield Framework (now succeeded by the EU-U.S. Data Privacy Framework). Legal basis for using Google Analytics is our legitimate interest under Art. 6(1)(f) GDPR. Additional information: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Terms of Service: http://www.google.com/analytics/terms/. Privacy overview: http://www.google.com/intl/en/analytics/learn/privacy.html. Google's Privacy Policy: http://www.google.de/intl/en/policies/privacy. To disable Google Analytics on mobile devices, you may click a corresponding opt-out link to set an opt-out cookie that prevents future tracking within this website. Note: The opt-out cookie applies only to this browser and this website. If cookies are cleared, the opt-out must be activated again.
Login with Facebook or Google
If you are already registered with Facebook or Google, you may log into our app using your Facebook or Google credentials. This eliminates the need for a separate registration with us. During the login process, you are redirected to Facebook or Google where you authenticate yourself. Your Facebook or Google profile is then linked to our app. Through this connection, we automatically receive the following information from Facebook Inc. or Google LLC: profile picture and email address. We use this information solely to verify your identity for contract conclusion. Additional details on Facebook Connect, including privacy and settings, can be found at: https://www.facebook.com/policy.php and https://www.facebook.com/legal/terms. Additional details on Google Sign-In, including privacy and settings, can be found at: https://policies.google.com/privacy and https://www.google.com/intl/en_us/policies/terms/.
Source: https://www.e-recht24.de