Who handles your data
- Controller: Iván Navarro Pascual
- Spanish tax ID: 74389315R
- Address: Calle de Cronos 20, 28037 Madrid (España)
- Email: [email protected]
What we collect
- When you sign up: your email and your password, which is stored hashed and nobody can read. If you sign in with Google, we receive your email, your name and your profile picture.
- When you complete your profile: name, phone number, city and the level the test gives you.
- If you leave your email and level in step 1 on a tournament page, we keep them so you can finish signing up. If you don't finish, we may send you one reminder email.
- When you play: entries, results, incidents and any message you send us from your profile.
- When you pay: the payment reference and the amount. Stripe handles the card; we never see it or store it.
- When you browse: your IP address and the server logs.
What we use it for
- Purpose
- Running your account, placing you at your level and building the draws
- Legal basis
- Performance of the contract
- Purpose
- Charging the entry fee and issuing the receipt
- Legal basis
- Contract and legal obligation
- Purpose
- Emailing you about your opponent, your deadlines and your results
- Legal basis
- Performance of the contract
- Purpose
- Telling you when a draw opens at your level, if you ask us to
- Legal basis
- Your consent
- Purpose
- Sending you the Lecourt newsletter, if you subscribe
- Legal basis
- Your consent
- Purpose
- Telling you about upcoming tournaments once you have played one
- Legal basis
- Legitimate interest (art. 21.2 LSSI)
- Purpose
- Keeping out fake accounts and abuse, and keeping the service running
- Legal basis
- Legitimate interest
- Purpose
- Keeping invoicing and payment records
- Legal basis
- Legal obligation
Who sees your data
Worth reading in full, because some of it is visible to other players.
- Each opponent sees your name and your phone number while you have a match pending, so you can arrange it over WhatsApp. In a group-format tournament, that means your whole group from the draw. Once your match is over, it disappears.
- Your name and your results appear in the tournament draw and in the standings, which other players can see.
- The tournament admin sees your profile details and your entries in order to run it.
- No other player ever sees your email or your password.
Providers
The site runs on our own server located in Spain. These companies process data on our behalf so it can work:
- Provider
- Stripe Payments Europe
- Purpose
- Taking the entry fee
- Where
- Ireland, with transfers to the US
- Provider
- Resend
- Purpose
- Sending the tournament emails
- Where
- United States
- Provider
- Google Ireland
- Purpose
- Google sign-in, if you use it
- Where
- Ireland, with transfers to the US
- Provider
- Cloudflare
- Purpose
- Secure connection and site protection
- Where
- United States
Transfers outside the European Union rely on the European Commission’s standard contractual clauses or on the EU-US Data Privacy Framework. We also hand over data to the authorities when the law requires it.
How long we keep it
- Your account data, for as long as the account is open.
- If you close it, we delete your profile. Results from tournaments already played stay in the draw without your name, so we do not break the history of the people who played you.
- Invoicing records, six years, which is what Spanish commercial and tax rules require.
- Server logs, twelve months.
Your rights
You can ask for a copy of your data, correct it, delete it, take it elsewhere, object to a use or have it restricted. You can also turn off the alerts and the news whenever you want, from your profile or from the link in every email. Write to [email protected] from your account email and we answer within a month at most.
If you think we have got something wrong, you can complain to the Spanish data protection authority, the AEPD (www.aepd.es).
Minors and security
lecourt open is for people aged 18 and over. If we spot an account belonging to a minor, we close it and delete the data.
Passwords are hashed with scrypt, the connection always runs over HTTPS and the database backups are encrypted.