Privacy policy

Controller

The club is responsible for processing personal data in this application:

Demo Club

Aham 19 4962 Mining

Email: office@webmuehle.at

Technical operation

The application is operated by Webmühle e.U. as a processor on behalf of the club (Art. 28 GDPR). Data is processed solely to provide the application and not for the operator's own purposes.

Privacy requests to the technical operator: office@webmuehle.at

Which data is processed

• Account data: first and last name, email address, password (stored as a hash only), language preference, optional profile picture.
• Membership data: club or league affiliation, role and status, invitations and join requests.
• Usage data: court reservations, events, tournament and ladder results, challenges, team line-ups.
• Content you create yourself: feed posts, reactions, images and file attachments.
• Payment data for paid bookings: amount, time, payment status and Stripe reference. Card details are processed exclusively by Stripe and never reach this application.
• Technical data: IP address, timestamp and requested page in server logs, plus aggregated page-view statistics.

Purposes and legal bases

• Performing the usage and membership relationship, in particular reservations, events and competitions (Art. 6(1)(b) GDPR).
• Operational security, error analysis, abuse and spam prevention, and privacy-friendly audience measurement (Art. 6(1)(f) GDPR).
• Optional details and content such as profile pictures, feed posts or optional notifications (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time.
• Compliance with legal obligations, in particular retention of payment records (Art. 6(1)(c) GDPR).

Recipients and service providers

The following processors are used to operate the application:

• Vercel Inc. — Hosting and delivery of the application (privacy policy)
• Supabase Inc. — Database hosting (privacy policy)
• Vercel Blob — Storage of uploaded images and files (privacy policy)
• Resend Inc. — Sending transactional email (privacy policy)
• Stripe Payments Europe Ltd. — Payment processing (privacy policy)
• Vercel Analytics — Aggregated, cookie-free page-view statistics (privacy policy)

Personal data is never sold or shared with third parties for advertising purposes.

Retention

Account data is stored for as long as the account exists. Reservations, results and posts are kept for as long as they are needed to run the club. Payment records are retained for the statutory retention periods. After an account is deleted, remaining data is erased or anonymised.

Cookies

• “courtres_session”: signed session cookie for sign-in, technically required, valid for 7 days.
• “NEXT_LOCALE”: stores the selected language, valid for 1 year.

No advertising or tracking cookies are set and no cross-device profiles are created.

Your rights

• Access to the data stored about you (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure of your data (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).
• Objection to processing based on legitimate interests (Art. 21 GDPR).
• Complaint to a supervisory authority, in Austria the Data Protection Authority (dsb.gv.at).