Privacy Policy

This Privacy Policy sets out the terms on which we process your personal data you provide to Us in relation to your FITEQ membership and your use of the www.fiteg.org website.

I. Policy-Specific Definitions

In addition to the terms already defined in the “Digital Content Terms of Use” (https://assets.fiteq.org/static/fiteq_toc.pdf), data processing terms, whether or not they are capitalized, shall be defined as in the General Data Protection Regulation [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC; hereinafter referred to as “GDPR”].

“Affiliating Sport Entity”: an entity, such as a national federation or sports club, in which you are a member and/or who has transmitted your data to us for purposes related to FITEQ Membership.

“FITEQ Members”: coaches, referees, players registered on www.fiteq.org.

II. Data Controller

The data controller (and under CCPA the service provider) for your personal data is, unless otherwise specified:

International Federation of Teqball (Fédération Internationale de Teqball) or “FITEQ”, an association registered in Hungary at the Company Registry Court of the Budapest-Capital Regional Court (Fővárosi Törvényszék Cégbírósága) under n° 01-02-0017651; having its registered address at Expo tér 5-7., 1101 Budapest, Hungary; with domestic VAT n° 19305688-2-42 and EU VAT n° HU19305688.

Name of DPO: KCG Partners Ügyvédi Társulás

Email of the DPO: [email protected]

III. Details regarding processing of personal data

Your personal data is processed for the purposes and according to the methods defined in the tables below, depending on the category of data and/or your relationship to us.

We show the data processing based on a typical athlete carrier, which follows the process below:

Data processing in connection the FITEQ website,
- registration,
- contact form,
- direct media
- cookies,
register the athlete as a member of the FITEQ:

- Processing of personal data related to all Members,
- identification of the athlete,
- health related data processing,
- billing membership fees to the athlete,

sport activity

- entry of athletes to international events,
- carrying out anti-doping tests involving athletes,
- disclosure of athlete results,
- athlete's and other persons appearance in the media in relation to sporting events,
- disciplinary procedure,

Data processing in connection with the coaches
Data processing in connection with the referees
Data processing in connection with National Federations
Data processing in connection with club development

This privacy policy gives information about the processing of personal data related to club development and related to Referees too.

1. Data processing in connection with the FITEQ website

1.1. Registration on the www.fiteq.org

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

All persons who register on the FITEQ website. The data is provided by the abovementioned persons themselves on the online registration form.

Role, email address, password, First name, Family name.

Country of residence, Nationality, gender, date of birth.

Registration on the website.

Make a profile to the registered person.

Consent

While registration exists.

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement)

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en -us/legal/privacy ).

Teqball Group – data hosting (IT support)

Data transfer: We use an SSO system in Teqball Group, which means that if you register on www.fiteq.org or www.teqers.com we share the registration data between the operating entities of both websites. All Teqball Group entities use the same sign-in method, and you can sign in to the other website too.

1.2. Filling Contact form on the www.fiteq.org

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

All persons who fill the contact form on www.fiteq.org. The data is provided by the abovementioned persons themselves on the online registration form.

Full name, email, Phone number, subject, massage.

On the Website, we provide you with the opportunity to contact us directly by filling out and submitting the contact form.

Consent

The data is processed until your contact request is handled.

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en -us/legal/privacy).

Teqball Group – data hosting (IT support)

1.3. Processing of personal data related direct marketing

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Data Processors

Any person (visitors, Members) subscribing to the FITEQ newsletter.

The data is collected on the online newsletter subscription form, online membership registration form and in individual player participation agreements for competitions

Name, email address

Provision of FITEQ and TEQBALL related news, special offers, other relevant marketing information to subscribers

Consent

Until the

consent withdrawn (unsubscribe on from the newsletter)

The Rocket Science Group LLC (675 Ponce De Leon Ave NE Ste 5000 Atlanta, GA, 30308-2172 United States) – Mailchimp email marketing services (https://www.intuit.com/privacy/statement/)

TEQBALL Group – data hosting (IT support)

International data transfers: The transfer of personal data to The Rocket Science Group LLC is pursuant to an adequacy decision of the European Commission.

1.4. Cookies on www.fiteq.org

What is a cookie?

Upon visiting the website, the Data Controller uses cookies. A cookie is an information package consisting of letters and numbers sent to your browser by our website with the purpose of saving certain settings, facilitate the use of our website and help us collect relevant, statistical information of our visitors.

Some cookies do not contain personal information and are not suitable for identifying individual users, but some cookies contain a unique identifier, that is, a secret number sequence generated randomly, which will be stored by your device and therefore will ensure your identification. The operational duration of each cookie is included in the relevant description.

Legal background and legal grounds of cookies:

The legal basis of processing is:

your legal interest to provide the website for the necessary cookies,
your consent to the statistical and marketing purpose cookies.

Main characteristics of the cookies used by the website:

Necessary cookies:

Cookie name	expiration	Description
locale	Session	Remembers display locale when user logs out, for returning language and location preferences.
.AspNetCore.Session	Session	The .NET Core Session Store allows it to store data server-side for the current client. Per default the cookie which identifies the client only remains in the browser until it’s closed.

If you do not accept the use of cookies, certain functions will not be available to you. You can find further information about deleting cookies at the following links:

2. Register the athlete as a member of FITEQ

2.1. Processing of personal data related to all Members

We process all the data what the member gives to us during the registration process (see in point 1.1. of this policy).

2.2. Identification of the athlete

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

All persons applying for any type of FITEQ membership.

The data is provided by the abovementioned persons or the legal guardians of the person themselves on the online registration form.

Name (as in passport), e- mail address, date of birth, gender, country of residence, nationality.

Photo ID data (name, place of birth, date of birth, issuing country, ID type, ID number, expiry date);

ID verified status (yes or no)

Legal guardian data (if it necessary):

Photo ID data (name, place of birth, date of birth, issuing country, ID

Registration of members, ability to keep in contact with them and provide them with all necessary information related to their membership and their activity.

Verification of Player’s identity in

order to prevent fraud (among
others, with respect to competitions) and meeting the relevant membership requirements.

For the legal guardian data: Verification of legal guardian in order to assess their right to provide consent to the minor Player’s membership.

Taking the steps necessary for entering into a contract

While membership exists but at most within 5 years of the identification

TEQBALL Group – data hosting (IT support)

Legal guardians of minor Players: These data are provided by the legal guardians as part of procedure of the formation of the minor.

International data transfers:

We share the identify information of the athletes to our national federation (if exist in the country of residence of the athletes). In this case, the national member will make the identification procedure. Our national members process the data based on the FITEQ data management policy. If the National Federation is a member outside the EEA, the basis of the international transfer the Standard Contractual Clauses in the FITEQ Data management policy.

2.3. Health related data processing

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

All persons applying for any type of FITEQ membership.

The data is provided by the abovementioned persons themselves on the online registration form.

Physical, health and biological data in line with the provisions of the up-to-date the Pre-participation Physical Evaluation Form and the Comprehensive PPE Form.

Ensuring compliance with FITEQ’s Regulations on health, competitions and anti-doping; Safeguarding other players’ and

participants’ health and well-being

Legitimate interest & substantial public interest

The later of either (i) while Player’s membership is live + 5 years or (ii) as required by applicable

Laboratories

Teqball Group – data hosting (IT support

We share the health information of the athletes with our national federation member (if such exists in the country of residence of the athletes). In this case, the national federation member will investigate the health suitability procedure. Our national federation members process the data based on the FITEQ Data Management Policy. If the National Federation is a member outside the EEA, the basis of the international transfer the Standard Contractual Clauses in the FITEQ Data management policy.

2.4. Billing membership fees to the athlete

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

All FITEQ members.

Players via Escalion S.à r.l. (44 Avenue John F. Kennedy, L-1855 Luxembourg; https://www.escalion.com

The data is provided by the abovementioned persons themselves.

Billing address (country, ZIP code, city)

Issuing an invoice to the Player on the payment made by Player (membership fee, competition fees).

Performance of the contract.

8 years (Act C of 2000 on Accounting)

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services ((https://www.twilio.com/en -us/legal/privacy).

Teqball Group – data hosting (IT support)

3. Data processing related to sport activity

3.1. Entry of athletes international events

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

Athletes who attend an event that Data Controller organize.

The data is provided by the athletes themselves or the organization that nominates the athlete to the event.

Identification data of the athletes, results, prize details.

Health data in line with the provisions of the up-to-date the Pre-participation Physical Evaluation Form and the Comprehensive PPE Form.

Make a contract with the athletes.

Performance of the contract.

We process the data until the fulfilment of the contract + 5 years.

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en -us/legal/privacy).

Teqball Group – data hosting (IT support)

International data transfers: The data in the Microsoft Azure cloud is stored on servers located inside the EEA and therefore is not subject to data transfer to third countries. The transfer of personal data to Twilio Inc. is pursuant to the EU Standard Contractual Clauses applied by Twilio Inc. (available at: https://www.twilio.com/legal/data-protection-addendum).

3.2. Carrying out anti-doping tests involving athletes

With regards to our data processing in relation to anti-doping activities, please refer to our Anti-Doping Privacy Notice available at https://www.fiteq.org/governance/anti-doping/anti-doping-privacy-notice.

3.3. Disclosure of athlete results

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

Athletes.

The data is provided by the athletes themselves and we record event data during the events and give information to us our national members about national events.

Identification data: Name (as in passport), date of birth, gender, nationality.

Sport related data: actual club, results, prize money, activity data, ranking history, ranking breakdown information, Head-to-Head information.

Personal data: Instagram, Facebook, FITEQ profile link, preferred foot data, height, weight.

Creation of a Player Profile publicly available on fiteq.org. and give information to funs about the players and their results.

Legitimate interest and for the personal data the consent of the athletes.

We share this information without time limit for support of sport history.

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en-us/legal/privacy).

Teqball Group – data hosting (IT support)

This data and statistics based on this data available at https://datateq.org website too, which is Data Controller’s statistical platform.

3.4. Athlete's and other persons appearance in the media in relation to sporting events

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

Athletes and other persons (coaches, referees, tc.) who attend an event that Data Controller organize.

Photos, videos, broadcast during the event and matches.

Make publicity to the events.

Legal interest

We share this information without time limit for support of sport history.

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en us/legal/privacy).

Teqball Group – data hosting (IT support)

Data transfer:

Data Controller and media partners share the photos, videos, and the broadcast of the event in television, community media platforms too without limitation. Data controller can sell the media broadcasting rights to media companies, that provide the efficient broadcast of the event.

3.5. Data processing in connection to disciplinary procedure

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Our Data Processors

Athletes and other persons (coaches, referees, etc.) who are under investigation based on a disciplinary offense.

Any relevant data in connection with the disciplinary offence

Investigate the disciplinary offense.

Legal obligation based on the paragraph 12 of the Act I. of 2004 on the sport.

We store this data a 5 years period after the decision.

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en us/legal/privacy).

Teqball Group – data hosting (IT support)

Data transfer

We share public the decision of the disciplinary procedure.

4. Processing of personal data related to Coaches

Beyond all the data processing applicable to all FITEQ members (see Section 1), the table below applies specifically to the processing of the personal data of Coaches:

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Data Processors

Registration on the www.fiteq.org website

These personal data are provided subsequent to registration.

Registration data:

Full name, nationality, date of birth, country, email address, FITEQ ID:

Additional data: T-shirt size

Registration to the website, which is a precondition of an official coach activity and precondition to register to fiteqeducation.com website.

Consent

While membership exists

Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting)

(https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en us/legal/privacy).

Teqball Group – data hosting (IT support)

Data in connection with coach level

FITEQ collected these data trough www.fiteqeducational.com website.

FITEQ organized coach training-related information: including the type of program you are enrolled in, the status of completion of such program, certificate-related information (e.g. certificate number, issuance date, expiry date, if any).

Store the training level of the coach. The pass the exam of the www.fiteqeducational.com website is a requirement of the registering to a FITEQ event.

Fulfilment the training contract

While membership exists

Wix.com Ltd. Wix.com Ltd. (Namal Tel Aviv 40, 6350671 Tel Aviv, ISRAEL:

SAAS for building and maintaining the FITEQ Education Platform

International Data Transfers

The data in the Microsoft Azure cloud is stored on servers located inside the EEA and therefore is not subject to data transfer to third countries. The transfer of personal data to Twilio Inc. is pursuant to the EU Standard Contractual Clauses applied by Twilio Inc. (available at: https://www.twilio.com/legal/data-protection-addendum). We may share the data of a coach with our affiliates, which organize the sport activity of the country of the coach. If in the country If your data is collected in Europe, we will transfer your personal data subject to appropriate safeguards, such as Standard Contractual Clauses, or through appropriate derogations such as through your consent.

5. Processing of personal data related to Referees

Beyond all the data processing applicable to all FITEQ members (see Section 1), the table below applies specifically to the processing of the personal data of Referees:

Data subjects and source of data	Data processed	Purpose of data processing	Legal Basis	Storage Period	Data Processors
Registration on the www.fiteq.org website These personal data are provided subsequent to registration.	Registration data: Full name, nationality, date of birth, country, email address, FITEQ ID. The circumstance of acting as a referee in any other sport, and the details thereof Additional data: T-shirt size	Registration to the website, which is a precondition of an official referee activity and precondition to register to fiteqeducation.com website as well.	Consent	While membership exists	Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement). Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en us/legal/privacy). Teqball Group – data hosting (IT support)
Data in connection with referee level FITEQ collected these data trough www.fiteqeducational.com website.	FITEQ organized referee training-related information: including the type of program you are enrolled in, the status of completion of such program, certificate-related information (e.g. certificate number, issuance date, expiry date, if any).	Store the training level of the referee. The pass the exam of the www.fiteqeducational.com website is a requirement of the registering to a FITEQ event.	Fulfilment of the training contract	While membership exists	Wix.com Ltd. (Namal Tel Aviv 40, 6350671 Tel Aviv, ISRAEL: SAAS for building and maintaining the FITEQ Education Platform
Referees who sign an event that Data Controller organize. The data is provided by the Referee themselves or the national Teqball organization that nominates the referee to the event.	Identification data of the athletes, amount of the referee fee.	Make a contract with the referee.	Performance of the contract.	We process the data until the fulfilment of the contract + 5 year.	Microsoft Corporation (98052 One Microsoft Way, Redmond, WA, USA) – Microsoft Azure cloud computing services (database hosting) (https://www.microsoft.com/en gb/privacy/privacystatement). Twilio Inc. (101 Spear Street, First Floor, San Francisco, CA 94105, USA) – Twilio Sendgrid: transactional e-mail delivery services (https://www.twilio.com/en us/legal/privacy). Teqball Group – data hosting (IT support)

6. Processing of personal data related to National Federation

Data subjects and source of data

Data processed

Purpose of data processing

Legal Basis

Storage Period

Data Processors

Contact persons of

prospective National

Federations

Name, e-mail

address,

phone number

Liaising with the

prospective National

Federation

Legal interest if the National Federation is established.

Consent if the National Federation isn’t established

Until the contact person work to the national federation

Microsoft Corporation (98052 One

Microsoft Way, Redmond, WA,

USA) – Microsoft Azure cloud

computing services (database hosting)

(https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First

Floor, San Francisco, CA 94105,

USA) – Twilio Sendgrid:

transactional e-mail delivery

services

(https://www.twilio.com/en us/legal/privacy).

Teqball Group (data hosting, IT

support)

Representatives of the National Federations

Name, title, country issuing the photo ID, Photo ID type, Photo ID number, official e-mail address passport number

Entering into a membership agreement (accession agreement) between

FITEQ and the National Federation + Performing the contract

Conclusion and performance of the contract

Until the

agreement is in force + 5

years

Microsoft Corporation (98052 One

Microsoft Way, Redmond, WA,

USA) – Microsoft Azure cloud

computing services (database

hosting)

(https://www.microsoft.com/en gb/privacy/privacystatement).

Twilio Inc. (101 Spear Street, First

Floor, San Francisco, CA 94105,

USA) – Twilio Sendgrid:

transactional e-mail delivery

services

(https://www.twilio.com/en us/legal/privacy

DocuSign Inc. (221 Main St., Suite

1550, San Francisco, CA 94105 –

document signature system

(https://www.docusign.com/)

Teqball Group (data hosting, IT

support)

7. International Competitions and Data Transfers

In order to organise and manage international competitions, FITEQ may transfer athlete personal data to competition organisers, National Federations, event hosts, anti-doping organisations, referees, and other official bodies involved in the organisation and operation of a competition.

Where a competition takes place outside the European Union, the organiser of the competition may be located in a country outside the European Economic Area. In such cases, athlete personal data will be transferred outside the European Economic Area only where such transfer is necessary for the organisation of the competition and the participation of the athlete in the competition.

Competition organisers receiving athlete data will act as independent data controllers and will process the data in accordance with their own legal obligations and data protection policies.

The transferred data will be limited to the data necessary for competition registration, accreditation, scheduling, communication, results management, prize money payment, anti-doping administration, classification (where applicable), and compliance with legal and regulatory obligations.

By registering for and participating in international competitions, athletes acknowledge that such international transfers of personal data may take place.

Organisers are solely responsible for their local compliance with data protection laws.

8. Public athlete profile data

By registering as an athlete and participating in competitions, the athlete acknowledges and agrees that certain personal data (including name, nationality, ranking, competition category, results, competition history, club affiliation and other sport-related data) may be made publicly available on the athlete’s public profile, competition platforms, and official communication channels for the purposes of organising, operating, administering and promoting the sport and competitions.

The publication of such data is necessary for the organisation of competitions and is based on the legitimate interests of the organiser and the international federation in ensuring transparency of competitions, rankings and sporting results.

IV. YOUR RIGHTS

You have the following rights in relation to your personal data:

1) Right to be informed

You have the right to be informed about the collection and use of your personal data in a clear and transparent way. Please consult the table above in clause III Data Controllers & Data Processors, or, in case of questions, contact our Data Protection Officer (contact details in clause VI ACCOUNTABILITY).

2) Right to access

You have the right to request access to your personal data and obtain information regarding the purpose of processing, what categories of personal data are processed, data processors, length of processing, your rights relating to our processing, your right to lodge a complaint with a supervisory authority regarding our processing, information on third party sources of your personal data communicated to us, and the existence of automated decision-making and related information, including the logic involved, as well as the significance and the envisaged consequences of such processing for you, whether your personal data is transferred outside the EEA, and the conditions of these transfers.

3) Right to rectification

You have the right to obtain rectification of inaccurate personal data and, taking into account the purposes of the processing, to have incomplete personal data completed.

4) Right to erasure

You have the right to request erasure of your personal data without delay if:

● your personal data are no longer necessary for the purpose for which they were collected or otherwise processed;

● you withdraw your consent and there is no other legal basis for processing;

● you object to the processing pursuant to paragraph 6) below and there are no overriding legitimate grounds for the processing;

● your personal data has been processed unlawfully;

● your personal data has to be erased for compliance with a legal obligation.

Please note that the abovementioned right to erasure does not apply to the extent that processing is necessary:

● for exercising the right of freedom of expression and information;

● for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller

● for reasons of public interest in the area of public health

● for achieving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

● for the establishment, exercise or defense of legal claims.

5) Right to restrict processing

You have the right to restrict processing of your personal data if:

● you have contested the accuracy of your personal data, for a period enabling us to verify the accuracy of your personal data;

● the processing is unlawful and you oppose the erasure of your personal data and request the restriction of its use instead;

● we no longer need the personal data for the purposes for which they were collected, but they are required by you for the establishment, exercise or defense of legal claims

● you have objected to the processing of your personal data pursuant to paragraph 6) below, pending the verification whether our legitimate grounds override those of yours

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the EU or of a Member State.

6) Right to object to processing

Where personal data is processed based on legitimate interest or public interest, you have the right to object at any time to the processing of your personal data, on grounds relating to your particular situation.

7) Right to data portability

Where personal data is processed based on your consent or in order to perform a contract, you have the right to receive the personal data in our possession or control in a structured, commonly used and machine-readable format, and have the right to transmit that data to another data controller without hindrance from us. You also have the right to have your personal data transmitted directly from us to another data controller where technically feasible.

8) Right to withdraw your consent

You have the right to withdraw any consent to data processing you have given at any time. Such withdrawal does not affect the lawfulness of processing based on your consent before its withdrawal. The costs incurred by Data Controller due to such withdrawal of consent shall however be borne by you.

You can do this by contacting us at [email protected].

9) Rights related to automated decision making including profiling

The creation and continuous updating of Player Profiles shall be regarded as profiling with a view to facilitating transparency and developing TEQBALL as a sport. Profiles are being updated based on the players’ performance at the various competitions, tournaments. Other than establishing an openly accessible registry of records, the creation and maintenance of Player Profiles do not have any adverse effects on Players. Profiling is an essential part of FITEQ membership and the rules related to the sport.

10) Right to lodge a complaint with a supervisory authority & the right to an effective judicial remedy

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the data processing infringes the GDPR.

The supervisory authority having jurisdiction in the Member State where the Data Controller is established:

Name: National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)

Address: Falk Miksa u. 9-11; 1055 Budapest; Hungary

E-mail: [email protected]

Without prejudice to any administrative or non-judicial remedy, including submitting a complaint directly to us in accordance with Section V. ‘ACCOUNTABILIY’, you have the right to an effective judicial remedy before the courts of the Member State where the Data Controller or data processor is established, or, alternatively, where you have your habitual residence.

V. ACCOUNTABILITY

For queries and complaints relating to our processing of your personal data or this Privacy Policy in general, please contact us at the following e-mail address: [email protected]

VI. DATA SECURITY

The Data Controller takes appropriate technical and organizational security precautions to protect your personal data against manipulation, loss and destruction, as well as against access by unauthorized third parties, and to ensure the protection of your rights and adherence to the applicable data protection laws and regulations. However, you are kindly reminded that the internet is an open,

global network. When you transmit personal data to us via the internet, you are deemed to accept the unavoidable risks associated therewith. Despite the technical and organization security measures implemented by the Data Controller, data can get lost or be intercepted and/or manipulated by unauthorized third parties. We decline all liability relating to such loss, corruption, interception and/or manipulation of your personal data and any consequence thereof, unless we have breached the standards of care required of data controllers based in the EU.

Updated: 07 April 2026