Privacy Policy "7cup.be"

2. Traitements des données à caractère personnel ne nécessitant pas le consentement des Utilisateurs

The ORGANIZER is required for contractual and/or legitimate purposes, and for the purposes of authenticating and enabling Users to use the Site, to process the following personal data for the purposes described below. This processing of personal data carried out by the ORGANIZER does not require Users' consent of the Regulation.

The personal data communicated by the User is saved on a register, as is outlined in article 9, which is controlled and remains under the responsibility of the ORGANIZER at all times.

a. What data is processed?

The personal data processed is the following:

b. What processing is carried out by the ORGANIZER?

Processing consists of collection, recording, storage, consultation, organization, use, merging or any other necessary or useful as part of the organization of the event. The processing can also consist of the transfer of personal data:

• The ORGANIZER's suppliers and partners, whose services are inseparable from the use of the Site and the organization of the tournament.

c. What are the purposes of this processing?

The ORGANIZER also processes the personal data referred to in article 2 a) for the purposes of authenticating Users to allow them to access and use the Site; this processing is carried out to ensure:

• Event registration management;
• The organization of the tournament, meetings and other services offered by the ORGANIZER or the ORGANIZER's partners;
• Informing the User about the services offered by the ORGANIZER or the ORGANIZER's partners.

3. Processing of personal data subject to Users' consent

By using the ORGANIZER’s Site, for whatever reason, the User expresses their free, specific, informed and unequivocal will to expressly authorize the ORGANIZER to process personal data in accordance with the Regulation, within the limits and for the purposes defined below.

The personal data communicated by the User is saved on a register, as is outlined in article 9, which is controlled and remains under the responsibility of the ORGANIZER at all times.

The User also benefits from rights, including the right to withdraw their consent at any time, according to the terms and conditions defined in article 4.

a. What data is processed?

Les données traitées par L’ORGANISATEUR sont les suivantes :

• Last name, first name(s), date of birth, language, sex, home/postal address, National Registration Number (or identity card or passport number), email address, landline or mobile telephone number;
• Bank details used for tournament registration and other services offered through the Site;
• Copies of personal documents for user authentication, such as a photo of an identity card, bank statement, proof of deposit or any other document proving the domicile and/or the residence of the User;
• The User's navigation and activity history on the Site, including the transactions and connection data (browser data, IP address), notably by using cookies;
• All other information that may be exchanged between the ORGANIZER and the User, in particular by email or live chat, as part of their registration for the tournament.

The personal data communicated by the User is saved on a register, as is outlined in article 9, which is controlled and remains under the responsibility of the ORGANIZER at all times.

4. User rights

Without prejudice to article 2, Users have the right to exercise a right of rectification, opposition and restriction, according to the terms and within the following limits.

a. Right of access

I) The ORGANIZER makes the following information available to Users:

• The identity and contact details of the data controller;
• The contact details of the Data Protection Officer;
• The personal data processed;
• The purposes of the personal data processing, as well as the legal base for processing;
• The recipients or categories of recipients of personal data, if applicable;
• And, if applicable, the fact that the data controller intends to transfer personal data to a country located outside the European Union and: either the existence (or absence) of an adequacy decision made by the European Commission, or, in the absence of such a decision, the guarantees offered by the third country and the measures implemented to get a copy of the personal data.
• The possibility of opposing automated processing of their data, such as profiling, unless proper reasons make this processing by the ORGANIZER necessary, as well as the possibility of opposing all processing of their personal data for market research.

II) Users have the right to request, at any time, access to all the information stated in this article, by getting in touch with the Contact referred to in article 9. The ORGANIZER shall respond to these information requests within one month.

III) Users have the right to obtain a copy of the personal data being processed. The ORGANIZER reserves the right to demand payment for the potential costs induced by this request; these costs will be calculated on the basis of administrative costs induced by the request; they will not exceed 20 euros.

IV) Users have the right to obtain, in a structured format, this access or said copy, in such a way that the personal data they are provided is in a format that conforms to the technical standards in force when requesting access; this format will therefore allow them to be machine readable.

5. Transfer of data to a data controller

Users are authorized to transfer their personal data to another data controller without the ORGANIZER being able to prevent this.

While such a transfer is technically possible, Users are authorized to request the ORGANIZER to have this transfer carried out directly by their data controller.

6. Notification

The ORGANIZER will provide the User with a notification of any deletion or rectification of data carried out conforming to provisions set out in article 5, unless such a notification proves to be impossible or imposes disproportionate effort.

This notification will be done by email or mail, based on the details communicated by the User.

7. Location, storage and duration of storage of personal data

The ORGANIZER stores users' personal data in a form that allows their identification and availability and follows appropriate and secure methods.

The data is stored and hosted in Belgium at a Data Center, which offers all the necessary and useful security guarantees regarding the technical standards in force.

Users' personal data is stored by the ORGANIZER for the purposes defined in articles 2 and 3. They are stored for a period of 10 years for all the purposes defined in the same articles; the ORGANIZER therefore reserves the right to keep the Users' personal data for all purposes that would be imposed on them by the Law.

Personal data is kept for a period not exceeding that necessary for the execution of the purpose of processing for all the purposes defined in article 2 and 3. The data is then deleted from the ORGANIZER’s files upon request of the Users addressed to the Contact referred to in article 9.

8. Responsibility of the ORGANIZER - Subcontractor

I) The ORGANIZER agrees to process Users' personal data in a legal, loyal and transparent way regarding the User concerned. Any data processing performed by the ORGANIZER will comply with the requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to personal data processing and to this Privacy Policy.

The ORGANIZER implements all reasonable and appropriate methods to ensure confidentiality, integrity and availability of the personal data it processes. These technical and organizational measures, notably those set out in the register which can be accessed via the Contact referred to in article 9.

The technical measures include notably anonymization and encryption of personal data, depending on the required purpose.

If necessary, the ORGANIZER carries out, with the help of the data protection officer, an impact analysis when processing is likely to cause a heightened risk for Users.

II) Users' personal data is not transferred to third parties other than authorities, the ORGANIZER’s providers and partners, except for the purposes outlined in articles 2 and 3, therefore, if:

• The transfer becomes compulsory by law, regulation or injunction of an administrative or judiciary authority;
• The transfer is necessary for maintenance services;
• The User gives their consent for such transfer.

III) The partner will not be considered as a subcontractor within the meaning of the Regulation, unless they process Users’ personal data on behalf of the ORGANIZER. The ORGANIZER declines all responsibility regarding the processing of Users' personal data by the partner that provides their own services in their own name and on their own behalf or if the ORGANIZER proves they are not accountable for any damage caused.

IV) In the event that the ORGANIZER acts as the partner's subcontractor, it is agreed that the ORGANIZER will only be held liable for damage caused by the processing of personal data contrary to the Regulation or this Privacy Policy if it has not complied with the obligations set out in the Regulation that are specifically incumbent on the subcontractors or acted outside of or contrary to the partner's lawful instructions. Similarly, the ORGANIZER cannot be held liable under any circumstances if it proves that the fact that caused the damage is in no way attributable to it.

V) The ORGANIZER ensures that, when processing is carried out by a subcontractor, they provide sufficient guarantees for the implementation of appropriate technical and organizational measures and, more generally, regarding compliance with the Regulation's demands. In particular, it requires the subcontractor to comply with the Regulation and, therefore, to keep a register.

VI) The ORGANIZER undertakes that, in the event of a security problem related to the data processed, likely to affect their confidentiality, the ORGANIZER will notify the incident to the data protection authority referred to in article 9 as soon as possible.

VII) The ORGANIZER will also inform the Users concerned, insofar as the violation of personal data presents a heightened risk for Users' rights and freedoms; they will be informed by email or mail using the contact details communicated by the User.

9. Other

a. Personal Data Register and Information Security Manual

As the personal data controller, the ORGANIZER has a register of all of its processing activities. This contains all information relating to the type of data processed, the people concerned by the processing of data, the potential recipients to whom the data is, if applicable, communicated, to which end the data is processed as well as the duration the data is stored and a general description of the technical and organizational security measures put in place.

• The personal data communicated by the User is saved, as well as the processing carried out and its purposes, in a register that is controlled by and remains under the responsibility of the ORGANIZER at all times. This register includes, in addition to the aforementioned information:
• A description of the purposes of the processing;
• A description of the categories of people concerned and the categories of personal data;
• The categories of recipients that the personal data has been or will be communicated to, including the recipients in third countries or international organizations;
• The periods expected for the deletion of various categories of data;
• A general description of the technical security measures.

b. Completeness - modification of the Privacy Policy

e. Contact — Information relating to the identity of the data controller and the data protection officer

The ORGANIZER can be contacted for all questions regarding the protection of its Users’ personal data as follows:

By email : [email protected]

The data controller is the ORGANIZER.

The ORGANIZER has also appointed a data protection officer within the meaning of article 37 of the aforementioned Regulation, who can be contacted by email: [email protected]. The officer is responsible for monitoring and ensuring compliance of the ORGANIZER’s processing of Users’ personal data.

10. Language versions

The Privacy Policy is available in French, Dutch and English. In the event of contradiction or discrepancy between the two versions, the French version shall prevail.