Privacy policy
Last updated: 1 September 2026
Version: 2026-09-01-privacy-v1
1. Controller
The controller for the processing of personal data on Free-Tournament is:
Eda Kara
Weichselring 26
50765 Köln
Germany
Email: info@free-tournament.com
2. General information
We process personal data only where this is necessary for operating Free-Tournament, providing our functions, performing contracts, communicating with our users or complying with legal obligations.
Depending on the processing, this is based in particular on:
- Art. 6(1)(a) GDPR – consent
- Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
- Art. 6(1)(c) GDPR – legal obligation
- Art. 6(1)(f) GDPR – legitimate interest
Where cookies or similar technologies store information on your device or access information stored there, the requirements of Section 25 TDDDG apply in addition.
3. Hosting and server logs
Free-Tournament is hosted with the following provider:
netcup GmbH
Daimlerstraße 25
76185 Karlsruhe
Germany
When our website is accessed, technical data may be processed automatically, in particular:
- IP address
- date and time of access
- page or file accessed
- browser and operating system
- referrer URL
- technical status and error information
This data is required to provide Free-Tournament technically, to detect errors and to protect our systems against attacks and misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the platform.
Where the processing is necessary for providing our contractual services, it is additionally based on Art. 6(1)(b) GDPR.
A data processing agreement is in place with the hosting provider where legally required.
Server and security logs are stored only for as long as this is necessary for operation, error analysis and security. In the event of security-relevant incidents, the logs concerned may be stored for longer.
4. Registration and user account
A user account is required for certain functions of Free-Tournament.
In this context we process in particular:
- email address
- user identifier
- password in technically secured form
- time of registration
- verification status
- account and notification settings
- roles and permissions
- tournaments and functions linked to the user account
The processing serves to create and manage the user account and to provide Free-Tournament.
The legal basis is Art. 6(1)(b) GDPR.
The information required for a user account must be provided. Without this data, a user account or the corresponding function cannot be offered.
The data of the user account is generally stored for as long as the account exists. After an account deletion the data is deleted, unless statutory retention obligations or other permissible reasons for further storage exist.
5. Signing in with Google
As an alternative to registering with an email address and password, signing in via Google may be offered.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
When signing in via Google we receive the information released for the sign-in. This may include in particular:
- unique Google user identifier
- email address
- name
- profile picture where applicable
We use this information solely for signing in, identification and assignment to your Free-Tournament user account.
The legal basis is Art. 6(1)(b) GDPR.
Further data processing at Google is governed by Google’s privacy provisions.
6. Tournaments and user content
When using Free-Tournament, data on tournaments, leagues and Funino tournaments may be stored.
This may include in particular:
- tournament and event information
- club and team names
- match schedules
- results
- tables and rankings
- venues
- logos and images
- sponsor information
- editors and roles
- referees
- participant and application information
- other content entered by the user
Where this information contains personal data, it is processed in order to provide the respective Free-Tournament function.
The legal basis is Art. 6(1)(b) GDPR.
Users who enter personal data of other people are responsible for being entitled to do so.
7. Public tournament pages
Certain tournament information may be made publicly available by the organiser.
Public tournament pages may contain in particular:
- tournament name
- clubs and teams
- match schedule
- results
- tables
- venues
- logos
- sponsor information
- further details published by the organiser
Publicly published information can be accessed over the internet without signing in.
Users should therefore not publish personal information of other people if they are not entitled to do so.
8. Contact and support
If you contact us via a contact form, by email or through a support function, we process the information you provide.
This may include in particular:
- email address
- name, if provided
- subject
- content of the message
- reference to your user account or tournament
The processing serves to handle your enquiry.
If the enquiry relates to a contract or user account, the legal basis is Art. 6(1)(b) GDPR.
In other cases the processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in handling enquiries.
The data is deleted as soon as it is no longer required for processing and no statutory retention obligations conflict with this.
9. Email communication
Free-Tournament sends different types of emails.
Necessary system and contract emails
This may include in particular:
- registration and verification
- password reset
- security information
- essential information about the user account
- contract and payment information
- invoices and credit notes
- cancellation confirmations
The processing is based in particular on Art. 6(1)(b) GDPR and, where legal obligations are concerned, on Art. 6(1)(c) GDPR.
Necessary system and contract emails cannot be deactivated where they are required for using the account, performing the contract or complying with legal obligations.
Optional notifications
Free-Tournament may offer optional email notifications, for example about:
- tournament invitations and roles
- team and participant changes
- messages and contact enquiries
The legal basis is Art. 6(1)(f) GDPR due to our legitimate interest in functioning user communication.
These notifications can be deactivated via the account settings offered.
Delivery via Brevo
We use the email service Brevo to send emails. In doing so, in particular the recipient’s email address, the name where applicable, and the content and technical delivery information required for the respective email may be transmitted to Brevo and processed there.
Brevo processes this data on our behalf for sending and technically delivering the emails. The legal basis depends on the type of email concerned and corresponds to the legal bases stated above.
A data processing agreement pursuant to Art. 28 GDPR is in place with Brevo.
10. Newsletter
If you subscribe to our newsletter, we use your email address for information about Free-Tournament, in particular new functions and product news.
In doing so we may store in particular:
- email address
- time of consent
- consent version used
- time of a withdrawal
The newsletter is sent via Brevo. For this purpose, in particular your email address and the data required for sending the newsletter are transmitted to Brevo and processed there on our behalf.
Where opening or click statistics are collected for the newsletter, information may additionally be processed on whether a newsletter was opened and which of the links it contains were accessed. Such an evaluation only takes place within the data protection requirements applicable to it.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
Consent is voluntary and can be withdrawn at any time with effect for the future.
Agreeing to our terms and conditions or taking note of this privacy policy does not constitute newsletter consent.
After a withdrawal, necessary evidence data may remain stored where this is required in order to prove the withdrawal and to prevent further sending without consent.
11. Cookies and similar technologies
Free-Tournament uses cookies and comparable storage technologies.
Some of these are technically necessary, for example for:
- signing in
- session management
- security
- storing necessary settings
- technical provision of the platform
For strictly necessary technologies, no consent is required under Section 25(2) TDDDG, provided that the statutory requirements are met.
Analytics, advertising or comparable non-essential technologies are used only if you have given your consent in the consent banner. If you decline, they are not loaded. Consent applies uniformly to these technologies; we do not currently offer a separate selection of individual services.
Where consent is required, the processing is based on Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Consent given can be changed or withdrawn at any time with effect for the future via the privacy or cookie settings offered.
12. Free-Tournament Premium and payment data
When concluding or managing a Premium subscription we process in particular:
- user identifier
- email address
- selected plan
- start of contract and Premium term
- payment status
- renewal and cancellation status
- external payment and contract identifiers
The processing serves to perform and manage the Premium contract.
The legal basis is Art. 6(1)(b) GDPR.
13. Payment processing with Stripe
For paid services we use the payment service provider Stripe.
For European customers, the Stripe services are provided in particular by companies of the Stripe group in Ireland.
During the payment process the following information in particular may be transmitted to Stripe or processed by Stripe:
- email address
- customer or user identifier
- product purchased
- price and currency
- payment and transaction data
- payment status
- invoice information where applicable
- technical information
Credit card details and other sensitive payment data are generally entered directly with Stripe and are not stored by Free-Tournament.
The processing serves to carry out the payment and the contract and is based on Art. 6(1)(b) GDPR.
Where payment data is processed to comply with statutory tax or accounting obligations, Art. 6(1)(c) GDPR is an additional legal basis.
Depending on the respective processing, Stripe may process data both on our behalf and under its own responsibility, in particular for payment processing, fraud prevention, security and compliance with legal obligations.
14. Vouchers, invoices and refunds
In connection with Premium vouchers as well as invoicing, payment and refund processes, the following data in particular may be processed:
- user and customer identifier
- email address
- invoice data
- date of purchase
- product and amount
- voucher code and redemption status
- payment status
- refunds and cancellations
- associated payment or transaction identifiers
The processing serves to perform the contract on the basis of Art. 6(1)(b) GDPR and to comply with statutory accounting and retention obligations on the basis of Art. 6(1)(c) GDPR.
Invoices and corresponding accounting records are stored in accordance with the statutory retention obligations.
Deleting the user account therefore does not automatically delete invoice or accounting data that is subject to statutory retention.
15. Google Analytics
We use Google Analytics in order to understand how Free-Tournament is used and to improve the platform.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics may process in particular information about pages accessed, usage events, device and browser information, approximate location and technical usage data.
Google Analytics is used only if you have given your consent in the consent banner.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG, where information is stored on or read from your device.
Consent can be withdrawn at any time via the privacy or cookie settings.
The storage period depends on the data retention we have configured in Google Analytics.
16. Google AdSense
Free-Tournament may use Google AdSense to display advertising on the platform.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
In connection with advertising, Google and its partners may process in particular technical information, IP address, device information and information about the use of the website.
Where cookies, identifiers or other technologies requiring consent are used for advertising, or personal data is processed for personalised advertising, this only takes place if you have given your consent in the consent banner.
In these cases the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
Without corresponding consent, no advertising technologies requiring consent are activated.
17. Data transfers to third countries
Some of the service providers we use may also process data outside the European Union or the European Economic Area.
Such a transfer only takes place if the statutory requirements are met.
For this purpose, an adequacy decision of the European Commission, a valid certification under the EU-US Data Privacy Framework, standard contractual clauses of the European Commission or other safeguards provided for by law may be used in particular.
18. Storage period
Personal data is generally stored only for as long as it is required for the respective purpose.
It is then deleted, unless statutory retention obligations, limitation periods, obligations to provide evidence or other permissible reasons for further storage exist.
In particular:
- Account data is generally stored until the user account is deleted
- Tournament data is stored for as long as it is needed for using the corresponding functions or until it is deleted by the user or in connection with an account deletion
- Consent data may continue to be stored in order to prove that consent was given or withdrawn
- Invoices and accounting records are stored in accordance with the statutory retention periods
19. Recipients of data
Personal data is only passed on to external bodies where this is necessary for one of the purposes described in this privacy policy or permitted by law.
These include in particular:
- hosting and IT service providers
- payment service providers
- email delivery provider (Brevo, see section 9)
- analytics and advertising service providers, where the necessary consent has been given
- authorities or other bodies, where a legal obligation exists
Processors are used only within the framework of the statutory requirements.
20. Your rights
Within the scope of the statutory requirements you have in particular the right to:
- access to your personal data
- rectification of inaccurate data
- erasure of your data
- restriction of processing
- data portability
- object to certain processing operations
Where processing is based on your consent, you can withdraw it at any time with effect for the future.
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you may object to the processing on grounds relating to your particular situation.
You may object at any time to the processing of personal data for the purposes of direct marketing.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights you can contact the following address:
info@free-tournament.com
21. Security
Free-Tournament uses appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access.
Our website is transmitted in encrypted form via HTTPS or TLS.
22. Changes to this privacy policy
We adapt this privacy policy when the functions, service providers or legal requirements used by Free-Tournament change.
The version applicable at any given time is published on Free-Tournament.
23. Status and version
Last updated: 1 September 2026
Version: 2026-09-01-privacy-v1