Privacy Policy

Protecting your personal data is important to us. This Privacy Policy informs you in accordance with the General Data Protection Regulation (GDPR) which personal data we process, for what purposes, on what legal basis, for how long the data are stored and which rights you have when using the ThrowSense League platform.

1. Controller

Controller within the meaning of the GDPR is:

ThrowSense
operated by Wilm-Hendrik Schulz (sole proprietor)
Wattweg 27
26524 Hage
Deutschland
📧 info@throwsense.de

2. Definitions

• User: any registered person on ThrowSense League.
• Competitions / Events: Leagues, Quick Leagues, Tournaments, Cups, Ranking series.
• Coins / Bullseyes: internal event tokens for processing entry fees and prize money (1 Coin = 1 EUR, purely internal accounting unit).
• Tournament account: internal area for managing coins; not a payment account, not a wallet.

3. Data processed when visiting the website

When you access the website the following data are processed automatically:

• IP address (truncated/anonymised where possible)
• date and time of access
• page requested
• browser type and operating system
• referrer URL

Purpose: Ensuring technical operation, error analysis, IT security and abuse prevention.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. Registration & user account

On registration we process:

• username
• email address
• password (stored exclusively in hashed form)
• optional profile information (e.g. organisation, team name)
• date of birth (for age verification and compliance with statutory requirements)

Purpose: Setup and administration of the user account, access to platform functions.

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

5. Use of the platform as Software-as-a-Service (SaaS)

When operating the platform as SaaS we process usage and system data, in particular:

• used functional areas
• platform settings and configurations
• roles and permissions (e.g. participant, organiser, admin)
• system-internal events (e.g. error messages, status messages)

Purpose: Provisioning, operation, security, troubleshooting and further development of the platform.

Legal basis: Art. 6(1)(b) GDPR (performance of contract), Art. 6(1)(f) GDPR (legitimate interest in stability and security).

6. Participation in leagues & tournaments

6.1 Competition data

When you participate in competitions we process, among other things:

• event registration data
• match schedules
• match and game results
• standings, rankings and season states
• chat messages in the competition context

Legal basis: Art. 6(1)(b) GDPR.

6.2 Result submission & verification

Depending on the competition, the following may be processed:

• result data from linked systems (e.g. AutoDarts)
• manual result submissions
• photo uploads for result verification (e.g. for Scolia)

Purpose: Proper conduct of competitions, ensuring fair play.

Legal basis: Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR (fraud prevention).

7. Coins, entry fees & prize money

7.1 Coin system (internal event tokens)

We process data relating to the coin system, in particular:

• coin transactions (purchase, use, winnings)
• assignment of coins to competitions
• distinction between purchased coins and prize-money coins

Coins are not a currency, not e-money and not a means of payment outside the platform.

Legal basis: Art. 6(1)(b) GDPR.

7.2 Prize money & payout

When you request a payout we process, in particular:

• payout amount (prize-money coins)
• processing fee (1% of the payout amount)
• PayPal email address
• payout status
• where applicable, age and identity documents within security checks

Specifics:

• Payouts are possible from 10 prize-money coins for administrative and security reasons.
• Beyond that there is no further minimum payout.

Legal basis: Art. 6(1)(b) GDPR (performance of contract), Art. 6(1)(f) GDPR (fraud prevention & system security).

8. Safety & compliance checks

To ensure fair and safe platform operation we process data in the context of:

• multi-account checks
• analysis of suspicious coin or prize-money movements
• handling of chargebacks
• monitoring of the prize-money coin holding limit (currently 200 coins)

Possible measures:

• temporary payout holds
• request for additional evidence
• temporary or permanent account suspension in case of serious abuse

Legal basis: Art. 6(1)(f) GDPR.

9. Payment processing via PayPal

Deposits and payouts are processed exclusively via PayPal. Personal data are transmitted to PayPal, including:

• name
• email address
• payment amount
• transaction ID

Provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg

PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Legal basis: Art. 6(1)(b) GDPR.

10. Integrations & third parties

10.1 AutoDarts / Scolia

When you use integrations the following may be processed:

• linked account IDs
• match and result data
• verification status

Processing takes place only with your consent.

Legal basis: Art. 6(1)(b) GDPR, Art. 6(1)(a) GDPR.

11. Recipients & processors

To provide and operate the platform we use carefully selected processors, in particular in the areas of:

• hosting & server operation
• email communication
• IT security, monitoring & error analysis

These service providers process personal data exclusively on the basis of data-processing agreements in accordance with Art. 28 GDPR.

12. Third-country transfers

Where personal data are transferred to countries outside the EU/EEA in the context of using external service providers, this takes place exclusively in compliance with Art. 44 ff. GDPR (e.g. adequacy decision, standard contractual clauses).

13. Communication (chats & messages)

We process content from team chats, fixture chats and league walls.

Purpose: Communication and organisation within ongoing competitions.

Legal basis: Art. 6(1)(b) GDPR.

14. Retention

We store personal data:

• as long as a user account exists
• as long as necessary for contract performance
• within the scope of statutory retention obligations (e.g. payment data typically 10 years)

After account deletion data are deleted or anonymised, unless legal obligations prevent this.

15. Automated decision-making

There is no purely automated decision-making within the meaning of Art. 22 GDPR. Safety and compliance measures with an impact on users are always supplemented by human review.

16. Your rights

You have the right at any time to:

• information (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection (Art. 21 GDPR)
• withdrawal of granted consents (Art. 7(3) GDPR)

📧 info@throwsense.de

17. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority, e.g.:

Die Landesbeauftragte für den Datenschutz Niedersachsen

18. Data security

We use appropriate technical and organisational measures, in particular:

• TLS encryption
• access restrictions
• secure password-hashing procedures
• role-based permissions

19. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy to reflect legal or technical changes. The current version is available on our website at any time.