Privacy Policy

General Information & Principles

As a user of our website, this privacy policy provides you with all necessary information regarding how, to what extent, and for what purpose we or third-party providers collect and use data from you. The collection and use of your data complies strictly with the provisions of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG), and the General Data Protection Regulation (GDPR). We are deeply committed to maintaining the confidentiality of your personal data and therefore operate strictly within statutory boundaries. Personal data is collected on a voluntary basis wherever possible. Furthermore, we only disclose this data to third parties with your explicit consent.

We ensure high security for particularly confidential data, such as payment transactions or inquiries, by utilizing SSL encryption. However, we would also like to point out the general risks of Internet usage over which we have no control. In particular, unencrypted email communication is not entirely secure and may under certain circumstances be intercepted by third parties.

Information, Erasure & Blocking

You have the right to receive information free of charge at any time regarding your stored personal data, its origin, recipient, and the purpose of data collection and processing. You also have the right to request the correction, blocking, or erasure of your data. Excluded from this is data that must be retained due to statutory regulations or for proper business operations.

To ensure that data blocking can be implemented at any time, data is retained in a block list for control purposes. If data is not subject to a statutory archiving obligation, we will erase your data upon request. If an archiving obligation applies, we will block your data. For all questions and concerns regarding correction, blocking, or erasure of personal data, please contact our Data Protection Officer using the contact details provided above or at the address stated in the imprint.

Registration & Authentication (Passkey / WebAuthn)

For user registration and authentication, we rely on modern, highly secure, and privacy-friendly authentication methods. We do not use Google OAuth or any other third-party login services. No credentials or authentication data are transferred to external servers or third parties.

Passkey Authentication (WebAuthn / FIDO2 Standard)

Users have the option to log in passwordlessly and securely using the W3C/FIDO2 standard Passkey (WebAuthn). This method utilizes asymmetric public-key cryptography:

• Private Key: Remains exclusively and securely on your own device (e.g., in your smartphone/laptop's Secure Enclave or hardware security key) unlocked via biometrics (Touch ID, Face ID) or device PIN. The private key never leaves your device.
• Public Key: Stored on our server to verify digital signatures during authentication.
• Data Collected: Anonymized credential ID, public key, and signature counter. No biometric data is ever transmitted to or stored on our server.
• Legal Basis: Art. 6 (1) (b) GDPR (performance of contract / account provision) and Art. 6 (1) (f) GDPR (legitimate interest in IT-secure authentication).

Use of Cookies & Exemption from Cookie Banner Requirements

Our website uses exclusively technically necessary cookies and session storage. These are small text files or temporary identifiers stored in your browser to ensure the core functionality of our application (e.g., user login/authentication, session management, and CSRF security protection).

No Cookie Banner Required (Section 25 (2) No. 2 TDDDG / Art. 6 (1) (f) GDPR):
Because we do not use any tracking, analytics, or marketing cookies (such as Google Analytics or Facebook Pixel) and do not create user profiles for advertising purposes, obtaining prior user consent via a cookie banner is not required by law under Section 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR. Storing strictly necessary technical data serves our legitimate interest in providing a secure and functional service.

Server-Side Map Processing without Third-Party Tracking:
To display tournament locations and venue maps, we utilize a server-side proxy solution via our Play server (Alternative 3). Map tiles and location data are fetched server-to-server and delivered directly by our application. Consequently, your browser establishes no direct connection to third-party providers (such as Google Maps or OpenStreetMap) when viewing maps, ensuring that neither your IP address nor tracking cookies are transmitted to third parties.

You can disable or delete cookies at any time via your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the application (especially user authentication and login features).

Provision of Paid Services & Payment Processing (Payhip)

If you wish to use paid services offered on our website (such as purchasing tournament licenses or credit packages), we must collect and process data from you for billing, service delivery, and security purposes. Typically, this includes your name, email address, selected product, purchase price, and transaction details.

Processing via Service Provider Payhip (Payhip Ltd.)

The checkout and payment process is handled via our external service provider Payhip Ltd. (1 Hobson Place, High Street, Sheffield, S1 2WT, United Kingdom). When you purchase a product or credit package, the transaction is processed through Payhip's platform. Purchase and billing details provided by you (such as email address, name, payment, and order information) are processed by Payhip and transmitted to our system via webhook for automated account activation.

• Legal Basis: Data processing and transfer take place pursuant to Art. 6 (1) (b) GDPR for the performance of a contract to which you are party regarding the purchase of paid services.
• Payment Security: All payment transactions are encrypted using SSL/TLS protocols.
• Further Information: Detailed privacy information regarding Payhip's data processing can be found in Payhip's Privacy Policy at: https://payhip.com/privacy.

Newsletter Dispatch (Update Information)

You can subscribe on our website to receive update information (newsletters). We require your email address for this purpose. Furthermore, we must verify ownership of the provided email address in compliance with legal regulations. We therefore collect information enabling such verification.

Data collected in this context serves solely for sending and receiving the newsletter or update information. It is not used for any other purpose and is not shared with third parties. No additional data beyond what is required for newsletter dispatch is collected by us. Since newsletter dispatch depends on your consent, you may revoke your consent to data collection and storage at any time without giving reasons via the "Unsubscribe" link provided in the newsletter or by sending a message to us.

Personal Data & Data Minimization

We collect personal data under the principles of data avoidance and data minimization only to the extent and for as long as necessary for website usage or required by law. We take the protection of your personal data seriously and adhere strictly to statutory regulations and this privacy policy when collecting and processing personal data.

Once the purpose of data collection ceases or the statutory retention period expires, collected data is blocked or erased. As a rule, our website can be used without providing personal data. Where personal data is collected (such as your name, address, or email address), this is done on a voluntary basis. Without your explicit consent, this data will not be disclosed to third parties. Please note that internet data transmission is not always completely secure, particularly in email communication.

Server Log Files

Server log files consist of anonymized data recorded upon your access to our website. This information does not allow conclusions regarding your identity, but is technically indispensable for delivering and displaying our content. Furthermore, log files serve statistical analysis and continuous optimization of our content.

Typical log files include access date and time, data volume, browser type and version, operating system, provider domain name, referrer URL, and IP address. Log files also allow precise examination in cases of suspected illegal website usage.

Objection to Promotional Emails

Under statutory impressum requirements, we must publish our contact details. These details are sometimes used by third parties to send unsolicited advertising and information. We hereby object to any sending of advertising materials not explicitly authorized by us. We reserve the right to take legal action against unsolicited promotional materials.

This applies in particular to spam emails, letters, and faxes. Unauthorized transmission of promotional material may touch upon competition law, civil law, and criminal law matters. Spam emails specifically can lead to substantial damage claims if they disrupt business operations by overflowing mailboxes.

Encrypted Transmission (SSL)

Our website uses SSL encryption for security reasons and to protect confidential and personal content during transmission. You can determine whether SSL encryption is active by checking your browser address bar. Data transmission is encrypted only when the prefix switches from http:// to https://. With SSL encryption active, third parties cannot read your confidential data. Therefore, please transmit your data only when SSL encryption is enabled.