Privacy Policy

JudoTournament (Havun) respects your privacy and is committed to protecting personal data. This privacy policy explains what data we collect, how we use it, and what rights you have.

This privacy policy has been drafted in accordance with the General Data Protection Regulation (GDPR).

Organizer data:

• Name, email address, and organization name (upon registration)
• Chamber of Commerce (KvK) number and VAT number (for KYC verification)
• Password (stored encrypted)

Participant data (judokas):

• Name and year of birth
• Gender and belt color
• Weight (at weigh-in)
• Club name

Technical data:

• IP address (for security purposes)
• Browser type and device information
• Session data and cookies

Payment data:

• Transaction IDs and payment status
• No credit card details (processed by Mollie)

Purposes:

• Providing our services (tournament management, pool layouts, scoring)
• Account management and authentication
• Processing payments (platform subscriptions and registration fees)
• Technical maintenance and security
• Compliance with legal obligations

Guarantee:
We use personal data exclusively for providing our services. Data is never sold, rented, or shared with third parties for commercial purposes.

We only share data with the following parties, solely for the purpose of delivering our services:

Payment processors:

• Mollie: Voor verwerking van iDEAL | Wero, creditcard en Bancontact betalingen

Hosting:

• Hetzner (server hosting, data center located within the EU)

Security measures:

• SSL/TLS encryption for all data transmission
• Encrypted storage of passwords (bcrypt hashing)
• Regular security updates
• Automatic session timeouts during inactivity
• Device binding for volunteer interfaces
• Rate limiting on login and API endpoints

Data Breach Protocol:
In the event of a data breach, we will report this to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours and inform affected users in accordance with GDPR legislation.

For information regarding cookies, please refer to our Cookie Policy.

Data is retained as follows:

• Organizer data: As long as the account is active
• Tournament data: As long as the organizer retains the tournament record
• Participant data: Linked to the specific tournament
• Payment data: 7 years (legal obligation)
• Log files: Maximum of 90 days

You have the following rights:

• Right of access: You can request to see what data we hold about you
• Right to rectification: You can have incorrect data corrected
• Right to erasure: You can request the deletion of your data
• Right to data portability: You can request your data in a machine-readable format
• Right to object: You can object to the processing of your data

Exercising your rights:
Please contact us at havun22@gmail.com. We will respond within 30 days.

Filing a complaint:
You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We may update this privacy policy. The most recent version can always be found on this page.