Personal Data Protection (GDPR)

1. Data Controller

The data controller of personal data is:

• Name / Company: FILL IN
• Registered office / Address: FILL IN
• Company ID (IČO): FILL IN
• Email: FILL IN
• Phone: FILL IN

Enter the details of the event organizer here.

2. Contact for data protection

If you have questions about the processing of personal data, contact us at: FILL IN. If you have a Data Protection Officer (DPO), include their contact details.

3. What data we process

Depending on how you use the website, we may process in particular:

• identification data (first name, last name),
• contact data (email, phone),
• data about registration and participation in the event,
• data you provide in the note / “About you” field,
• photograph (if part of a fighter registration),
• technical data (IP address, cookies, device/browser identifiers),
• communication data (if you email or message us).

4. Purposes and legal bases of processing

4.1 Fighter / participant registration

• Purpose: processing the registration, communication, event organization, verification of provided details.
• Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
• Scope: first name, last name, email, phone, date of birth, photo, “about you” text and other form data.

4.2 Communication (email, messages)

• Purpose: handling questions, requests and complaints.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or performance of a contract.

4.3 Website operation and security

• Purpose: security, prevention of abuse, logging, error diagnostics.
• Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4.4 Cookies and analytics

We use cookies and similar technologies according to your cookie banner settings. Details are available in the Cookies document.

• Necessary cookies: legitimate interest (website functionality).
• Analytics/marketing cookies: consent (Art. 6(1)(a) GDPR) – if used.

5. Recipients and processors

Your data may be disclosed only to the necessary extent to these categories of recipients:

• hosting and website administration providers,
• email service providers,
• IT/security vendors,
• accountants and legal advisors (if necessary),
• public authorities where required by law.

6. Transfers to third countries

If we use service providers outside the EU/EEA (e.g., some analytics tools), transfers will take place only if GDPR requirements are met (e.g., Standard Contractual Clauses). If you do not use such services, you may keep or remove this section.

7. Retention periods

• Event registrations: for the time necessary to organize the event and related administration, typically 12 months, unless the law requires longer.
• Communication: typically 12 months.
• Security logs: typically 6 months.
• Cookies: according to the Cookies document settings.

Adjust the retention periods to match the organizer’s real practice (e.g., disputes, archiving, accounting obligations).

8. Data subject rights

You have the right to:

• access your data,
• rectify inaccurate data,
• erase data (“right to be forgotten”) where conditions are met,
• restrict processing,
• data portability (where processing is based on a contract or consent and carried out by automated means),
• object to processing based on legitimate interest,
• withdraw consent at any time (where processing is based on consent),
• lodge a complaint with a supervisory authority.

9. Supervisory authority

In Slovakia, the supervisory authority is the Office for Personal Data Protection of the Slovak Republic. You have the right to lodge a complaint if you believe processing is in breach of the GDPR.

10. Obligation to provide data

Providing data is voluntary; however, for registration, some data is necessary to process your registration. If you do not provide the data, we may not be able to handle your registration.

11. Automated decision-making and profiling

We do not carry out automated individual decision-making or profiling under the GDPR. If this changes (e.g., marketing segmentation), we will add information and the legal basis.

12. Publishing photos and media content (if applicable)

If photography/recording takes place at the event, we may publish materials for event promotion. The legal basis is typically legitimate interest or consent (depending on the scenario). Adjust this section according to the organizer’s real practice.

13. Contact

Send personal data-related requests to: FILL IN. To speed up processing, specify your request type and identify yourself.