Privacy policy
Controller
Shaolin Shifu GmbH
Berner Straße 71a
60437 Frankfurt am Main
E-Mail: info@euroshaolin.eu
Purposes and legal bases
We process personal data to run the championship: registration, grouping/scheduling, scoring, invoicing and publication of results. Legal bases: contract (Art. 6(1)(b) GDPR), consent (Art. 6(1)(a) — incl. publication of photos/videos and rankings/medals/team lists, obtained via the terms) and legal obligation (Art. 6(1)(c) — retention of invoices).
What data we process
Team/school master data (name, address, contact), per-edition registration data, and participant data (name, date of birth, gender, nationality, entries and scores). This includes data of minors.
Consent and minors
On registration the team confirms the terms, including the consent of the legal guardians for minors and consent to publishing photos/videos and result lists. The time and terms version are logged. Consent can be withdrawn at any time with future effect.
Publication (data minimisation)
Publicly (results, statistics, rankings, schedule) only name, team and nationality are shown — no birth dates or contact data. These pages are not indexed by search engines.
Recipients and processors
Hosting with IONOS (servers in Germany), email delivery via our mail provider, and Cloudflare Turnstile as bot protection on login/registration (which may involve transfer to third countries). Data-processing agreements are in place with these providers. No data is shared for advertising.
Contact form
If you use the contact form, we process the data you provide (name, email address, message) solely to handle your enquiry (Art. 6(1)(b) and (f) GDPR). Cloudflare Turnstile is used to prevent abuse.
Cookies
We use one technically necessary session cookie for the logged-in areas and a functional cookie that stores your chosen language (neither is used for tracking). Cloudflare Turnstile may set a cookie for abuse prevention.
Traffic statistics
We count how often the public pages are opened — without cookies, without JavaScript and without any third-party service. All that is stored is a counter per day, page, language, operating-system family (e.g. "Windows", "iOS") and country. No records about individual people are created and visitors are not recognised across visits: a number cannot be traced back to a person, so the analysis is purely statistical.
To determine the country, your IP address is matched against a locally stored country database on our server while the page is being served, and discarded immediately afterwards. The IP address is not stored and not transmitted to third parties. Likewise the browser identification (user agent) is only evaluated to assign one of the families named above and is not stored. The legal basis for this brief processing is our legitimate interest in privacy-friendly traffic measurement (Art. 6(1)(f) GDPR).
Retention
Invoices are retained for 10 years as required by law. Other registration/participant/scoring data is kept for the current edition and as a results archive, and deleted on withdrawal or erasure request (except existing retention obligations).
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent. Logged-in teams can download their data as a file in the team area (access/portability) and delete their team. You may lodge a complaint with a data-protection supervisory authority.