Privacy policy
Last updated: September 2026
This notice describes the personal data processed when you use this platform.
On roles: for the entry data of an event, the federation or organiser is the controller under the GDPR and Eventhos OÜ acts as its processor. For your user account and the operation of the platform itself, Eventhos OÜ is the controller.
What we process
- Account data: name, email address, password (stored only as a hash), language preference
- Profile data: date of birth, nationality, contact details, profile photo where provided
- Sporting data: licences, vehicles, team membership, entries, results
- Documents and photos uploaded as part of an entry
- Payment-related data for paid entries and tickets
- Server log data (IP address, timestamp, page requested)
Legal bases
We process data to perform a contract or take pre-contractual steps (Art. 6(1)(b) GDPR), to comply with legal obligations ((c)), on the basis of legitimate interests in operating the platform securely ((f)), and, where explicitly requested, on the basis of consent ((a)).
Recipients and processors
We use the following providers, which process data only on our instructions:
Data processing agreements under Art. 28 GDPR are in place with every provider listed, binding them to confidentiality and to processing data solely on our instructions.
- Supabase — database, authentication and file storage
- Hostinger — server infrastructure running the application
- Resend — delivery of system and notification email
- Stripe and Montonio — payment processing for paid transactions
- Google — only if you choose to sign in with the Google button
No tracking
This platform uses no analytics, tracking or advertising cookies, and embeds no third-party analytics. Only cookies strictly necessary for sign-in and language preference are set.
Retention
Account data is kept while the account exists. Entry and result data is kept for as long as the relevant federation requires for sporting and evidential purposes. Accounting records are kept for the statutory retention periods.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Contact the email address in the legal notice. If your request concerns event entry data, we will pass it to the responsible federation.
You may also lodge a complaint with a supervisory authority — in Estonia the Andmekaitse Inspektsioon (www.aki.ee), or the authority for your place of residence.
International transfers
Our providers process data predominantly within the EU. Where data is transferred to a third country, this is done on the basis of the European Commission's standard contractual clauses.
