Privacy Policy

Last updated: March 2026

1. Data Controller

Club d'Escacs Sant Adrià
Carrer Ricart Nº6, Sant Adrià de Besòs, Spain
Contact email: clubescacssantadria@gmail.com

2. Personal Data We Collect

Through the registration form we collect the following data:

• First and last name (required)
• Email address (required)
• Chess club (optional)
• ELO rating (optional)

Payment data is handled entirely by Stripe, Inc. and is not stored by the club. Stripe acts as a data processor for payment-related operations.

3. Purpose and Legal Basis

We process your data for the following purposes:

• Tournament registration management: recording your participation, assigning a registration type and processing payment. Legal basis: performance of the requested service (Art. 6.1.b GDPR).
• Sending registration confirmation: we send you an email with your registration details once payment is completed. Legal basis: performance of the requested service (Art. 6.1.b GDPR).
• Tournament-related communications: information about changes, schedules or other updates regarding the tournament you have registered for. Legal basis: legitimate interest of the club (Art. 6.1.f GDPR).

4. Retention Period

Your data will be retained for as long as necessary to manage your tournament registration and, thereafter, for the period required by applicable law (generally up to 3 years).

5. Recipients and Data Processors

Your data may be shared with the following service providers, who act as data processors under confidentiality agreements:

• Stripe, Inc. — payment processing. See their policy at stripe.com/privacy.
• Resend Inc. — confirmation email delivery. See their policy at resend.com/legal/privacy-policy.
• Cloudflare, Inc. — infrastructure and hosting. See their policy at cloudflare.com/privacypolicy.

Stripe and Cloudflare are based in the United States and participate in the EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of protection in accordance with GDPR.

6. Your Rights

You may exercise the following rights at any time:

• Access: know what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data.
• Restriction: restrict processing in certain circumstances.
• Portability: receive your data in a structured electronic format.
• Objection: object to processing based on legitimate interest.

To exercise any of these rights, please send an email to clubescacssantadria@gmail.com stating the right you wish to exercise and attaching a copy of your identity document.

7. Complaint to the Supervisory Authority

If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.