1. Data controller and contact
Ljubljanska cesta 2A, 1295 Ivančna Gorica, Slovenia
Company registration number: 9213899000 · VAT ID: SI22595279
Email for privacy enquiries: info@turnirplan.si
The company named above is the data controller for user account information, contractual relationships, payments, support, security and its own business operations.
For personal data about teams, players, coaches and other participants entered by an organizer to run their tournament, the organizer generally determines the purpose and means of processing. In this respect, the organizer acts as data controller and TurnirPlan as the technical tool provider or processor. Requests relating to such data are best addressed directly to the organizer; we help them implement requests technically.
2. Data we process
| Data category | Examples |
|---|---|
| Account and profile | Email address, name, phone number, account identifier, sign-in and email confirmation details. |
| Organization | Name, members and roles, contact and business details, and information for issuing documents. |
| Tournament and competition | Tournaments, categories, teams or players, schedules, results, standings, match events, statistics, announcements, sponsors and accreditations. |
| Team registrations | Team, club, category, contact person, email, phone, note, registration status and optional billing details. |
| Payments | Purchased plan, amount, currency, status, transaction time, Stripe identifiers and accounting information. We do not store the full payment card number. |
| Support and communication | Message content, support requests, complaints and responses. |
| Technical and security data | IP address, request time and type, browser or device information, error logs and security events, where recorded by our infrastructure providers. |
| Basic account usage data | Signed-in user identifier, day of use and time of first and last activity on that day. We use these for an internal overview of service usage. We do not record what you type, cursor positions or a history of individual clicks. |
| Local settings | Selected language, organization, tournament, category, drafts and other settings stored in the browser. |
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation, providing features, managing organizations and tournaments | Performance of a contract or steps taken before entering into a contract. |
| Purchases, subscriptions, invoices and customer support | Performance of a contract and compliance with legal obligations. |
| Security, abuse prevention, troubleshooting and protection of legal claims | Legitimate interests in a secure and reliable service and in asserting or defending claims. |
| Sending essential service messages, account confirmation, password resets and registration notifications | Performance of a contract and legitimate interests in communication as part of the requested service. |
| Optional marketing messages | Consent where required by law; consent may be withdrawn at any time. |
| Participant data entered by the organizer | The organizer determines the legal basis according to the tournament’s purpose; TurnirPlan processes data on the organizer’s instructions. |
4. Public tournament data
If the organizer enables public access, TurnirPlan may display information needed to follow the tournament without signing in: name, sport, location, date, categories, teams or players, schedule, results, standings, statistics and announcements. Registrants’ contact and billing details are not intended for public display.
The organizer decides whether a tournament is public and is responsible for having an appropriate legal basis to publish personal data. For minors, organizers should use the minimum necessary data and comply with information and consent requirements.
5. Who we share data with
We disclose data only as necessary to operate the service, comply with the law or protect rights. Key providers are:
| Provider | Purpose |
|---|---|
| Supabase | Database, user accounts, authentication, real-time updates and server functions. |
| Vercel | Hosting and delivery of the web application. |
| Stripe | Processing payments, subscriptions and tax information, and preventing payment fraud and abuse. |
| Resend | Sending transactional and service emails. |
| CDN providers of software libraries | Delivery of technical libraries required to display and operate the app. |
We may also disclose data to competent public authorities where required by law, and to professional advisers subject to appropriate confidentiality obligations.
6. Transfers to third countries
Some providers may process data outside the European Economic Area. In such cases, appropriate safeguards apply, such as a European Commission adequacy decision, standard contractual clauses or another lawful mechanism. For more information about the mechanism used, contact info@turnirplan.si.
7. Retention periods
- We retain account, organization and tournament data while the account or service is active, and afterwards until deletion or for as long as necessary for security, recovery and handling claims.
- We retain data processed by an organizer for a tournament until the organizer deletes the tournament, organization or account, or in accordance with their instructions.
- We retain invoices, transaction information and other business documents for the periods required by law.
- We retain support correspondence and security logs for as long as reasonably necessary to resolve the case, prevent abuse and assert or defend legal claims.
- Daily usage records for signed-in accounts cover the last 90 days. Older records are removed when activity is next recorded. Deleting a user account also deletes its activity records.
- Deleted data may remain in protected backups for a limited time and is removed during the normal overwrite cycle.
Where an exact period cannot be determined in advance, we determine it according to the duration of the contractual relationship, legal obligations, data sensitivity, risk and limitation periods.
8. Your rights
Subject to the conditions of the General Data Protection Regulation, you may request:
- access to your personal data and a copy of it;
- correction of inaccurate data or completion of incomplete data;
- deletion of data;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interests;
- withdrawal of consent, without affecting the lawfulness of earlier processing.
Send your request to info@turnirplan.si. For security reasons, we may verify your identity before responding. If the request concerns data controlled by a tournament organizer, we will forward it to the organizer where appropriate or help you identify the correct contact.
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.
9. Cookies and local storage
TurnirPlan uses technically necessary browser storage for sign-in, security, the selected language, current organization and tournament, drafts and other functional settings. Without it, some features would not work correctly.
TurnirPlan does not use advertising cookies. For an internal usage overview, we record basic daily activity of signed-in accounts as described above; we do not add cookies or browser identifiers for this purpose. If non-essential cookies or similar technologies are added in future, an appropriate choice or consent will be provided before they are used.
10. Data security
We use reasonable organizational and technical measures, including encrypted transmission, access control, separation of user roles, server-side storage of secrets and limits on public access. However, no online system can guarantee absolute security.
Users must use a strong, unique password, protect their account and promptly notify the provider of suspected misuse.
11. Automated decision-making
TurnirPlan does not carry out automated decision-making or profiling that has legal or similarly significant effects on individuals. Automatic standings and advancement calculations are based on tournament rules and results specified or entered by the organizer.
12. Policy changes
We may update this policy due to changes in the service, providers or legislation. The current version is always published on this page with its update date. Registered users will be appropriately notified of material changes.