How we handle your personal data

Who is responsible

Rotary Club Zalău (Zalău, Romania), organiser of the European Rotary Tennis Championship 2026, is the data controller for this website and the registration system. For any request about your data, contact the organisers listed on the homepage.

What we collect and why

• Account and registration: name, email, phone, country, Rotary club, the brackets and events you choose, payment status and amounts owed. Used to run your registration, contact you about the tournament and collect fees. Legal basis: the contract you enter by registering (GDPR Art. 6(1)(b)).
• Partner and guest details you enter: your doubles partner's name and email, your guests' names. Used only to pair players and seat guests. Legal basis: the tournament's legitimate interest in organising the draw and catering (Art. 6(1)(f)).
• Dietary notes: optional free text, shared only with the caterer. Because such notes can reveal health or religious information, we process them only with your explicit consent, which you give by filling the field in (Art. 9(2)(a)). Leave it empty if you prefer.
• Notification device token: only if you opt in on the Notifications page. Legal basis: consent, withdrawable any time.
• Traffic statistics: page path, browser family, country and a hashed network bucket of your IP address, kept 90 days. Legal basis: legitimate interest in keeping the site working (Art. 6(1)(f)). Details on the Cookie Policy page.

Who processes it for us

We never sell your data or use it for advertising. These providers process it on our behalf, under contract:

• Microsoft Azure — hosting and database, West Europe region.
• Netlify — website hosting and edge country lookup.
• Resend — sending the transactional emails (verification, confirmation, password reset).
• Google — Firebase Cloud Messaging for the notifications you opted into, and Google Maps on the venue map, which receives your IP address when the map loads.

How long we keep it

• Account and registration data: until 12 months after the tournament ends, then deleted or anonymised. Payment records may be kept longer where accounting law requires it.
• Traffic statistics: 90 days, then only anonymous daily totals remain.
• Notification tokens: deleted the moment you turn notifications off.

Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw a consent you gave. Contact the organisers listed on the homepage; we answer within 30 days. You may also lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro).

If someone entered you as a partner or guest

Your name and, for doubles partners, your email were given to us by the person who registered. We use them only to pair you and seat you, and we email partners once so they can confirm. Ask the organisers to remove them at any time.

How we protect it

Encrypted connections everywhere, passwords stored only as salted hashes, access limited to the organising team, and every change made by an organiser is logged.