Privacy Policy (GDPR)

This Policy explains how we process personal data in accordance with the EU General Data Protection Regulation (GDPR).

Controller

XXX (contact: info@munichsmashclub.com)

Data We Process

- Account data: name, email (required), phone (for match organization), region, rank, wins/losses

- Challenge and match data: opponents, status, scores, dates

Purpose & Legal Basis

We process your data to operate the ladder system and enable match organization (Art. 6(1)(b) GDPR – contract-like service) and to send necessary notifications (Art. 6(1)(f) GDPR – legitimate interests). Optional newsletters/broadcasts are based on consent (Art. 6(1)(a)).

Contact Sharing

Your contact information (email/phone) is shared only after a challenge is accepted and only with the opponent for match organization.

Retention

Profile data is stored while the account is active. You may request deletion at any time; match records may be retained for integrity/audit purposes.

Rights

You have the right to access, rectification, erasure, restriction, objection, and data portability. Contact us at info@munichsmashclub.com.

Processors & Transfers

We use Firebase (Google) and SendGrid as processors. Data may be processed outside the EU with appropriate safeguards (SCCs).

Imprint/Impressum

See the Impressum page for legal information.