Privacy policy

Tourneasy is an online platform for badminton tournaments: players enter tournaments and follow draws and results, and organisers run their tournaments. This policy explains which personal data we process, why, and what your rights are under the General Data Protection Regulation (GDPR).

Who is responsible

Tourneasy (tourneasy.com) is the controller for the data in your account and on the platform. You can reach us at info@tourneasy.com. When you enter a tournament, its organiser receives the data needed to run it and is responsible for how they use it outside Tourneasy.

What we process

• Account: email address, name, password (stored only as a secure hash), language and your two-step login settings. For a passkey we store only its public key: your fingerprint or face never leaves your device.
• Player profile: name, date of birth, gender, club, playing levels and member number, and, if given, nationality, phone number, Badminton Nederland number and an emergency contact.
• Tournaments: your entries, partners, check-ins, draws, schedule and results.
• Payments: amounts, what they were for, status, payment method and refunds. Card and bank details are handled by Stripe; we never see or store them.
• Food orders: what you ordered, the order code and whether it was collected.
• Organisers: the tournaments you run and, if you buy a package, your invoice details.
• Messages: the emails we send you and your notification choices.
• Technical data: IP address, browser and device of your logged-in sessions, security logs (such as logins and changes to roles and settings) and counters that protect against abuse.

Why, and on what basis

• To provide the platform and handle your entries, payments, refunds and food orders (performance of a contract).
• To publish entries, draws, schedules and results, which is what a tournament is about (legitimate interest).
• To keep accounts and the platform secure and to prevent fraud and abuse (legitimate interest).
• To keep financial records as Dutch tax law requires (legal obligation).
• For what you choose yourself, such as a public player profile or news emails, which you can switch off at any time (consent).

We do not sell your data, show no advertising and use no tracking or analytics tools. We make no automated decisions about you that have legal or similarly significant effects.

What is public

For every tournament you enter, your name, club and the events you play appear on its public pages: entries, draws, schedule and results, as is usual in sport. Your date of birth, contact details and payment information are never public. Your player profile appears in the public player search only if you switch that on.

Players under 16

Players under 16 need permission from a parent or guardian, which we record. They never appear in the public player search and cannot have a public profile. In the draws and results of the tournaments they enter, they appear with their first name, the initial of their last name and their club.

Who receives your data

• The organisers of the tournaments you enter: what they need to run them, such as your name, contact details, date of birth, gender, club, levels, emergency contact, payment status and food orders.
• Stripe Payments Europe (Ireland), which processes payments.
• Neon, which hosts our database in Frankfurt, Germany.
• Hostinger, which hosts the website and sends our emails.

These providers process data only on our instructions or under their own privacy terms for payments. Our database is in the EU. Where a provider can access data from outside the EU (for example Stripe in the United States), this is covered by the EU-US Data Privacy Framework or the EU standard contractual clauses.

How long we keep it

• Your account and profile: until you delete your account.
• When you delete your account, your personal data is removed straight away. Entries, results and payments stay, shown as "Deleted player" with only the birth year, so tournament results and the accounts remain correct.
• Payment records and invoices: 7 years, as Dutch tax law requires.
• Session and security data: as long as needed to protect your account and the platform.

Cookies

We only use cookies the site needs to work: one keeps you logged in and one can remember your language. When you pay, Stripe places its own cookies to prevent fraud. We use no tracking or advertising cookies, so we do not ask for cookie consent.

Security

Connections are encrypted, passwords are stored as secure hashes, accounts with administrator rights must use two-step login, and only people who need personal data for their role can see it.

Your rights

You may ask to see, correct, delete or receive a copy of your data, to limit how it is used, or object to its use. Much of this you can do yourself: correct your details under My account → Profile, and download your data or delete your account under My account → Privacy. For anything else, email info@tourneasy.com; we reply within one month. You can withdraw a consent at any time. If you are not satisfied with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this policy. The date at the top shows the current version; we announce important changes by email or on the site.