Privacy Notice
Information about data processing according to GDPR
The controller responsible for data processing on this website is:
[Your Company Name / Your Name]
[Street Address]
[Postal Code] [City]
[Country]
Email: [your-email@example.com]
Phone: [Your Phone Number]
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2.1 Account Data
When you create an account, we collect:
Email address (required for account creation and communication)
First and last name (for personalization and club membership)
Date of birth (for age division categorization in archery)
Gender (for competition categorization)
Password (stored securely using industry-standard hashing)
2.2 Archery Data
To provide our services, we collect archery-related data including:
Scores and competition results
Bow setup configurations and equipment details
Training session attendance and progress
Club membership information
2.3 Technical Data
When you use our website, we automatically collect:
IP address (anonymized where possible)
Browser type and version
Operating system
Date and time of access
Pages visited
We process your personal data based on the following legal grounds under GDPR:
Article 6(1)(a) - Consent
For optional features such as marketing communications and analytics cookies.
Article 6(1)(b) - Contract Performance
For processing necessary to provide our archery tracking services, including account management, score tracking, and club features.
Article 6(1)(f) - Legitimate Interests
For security measures, fraud prevention, and service improvement, where our interests do not override your fundamental rights.
We may share your personal data with the following categories of recipients:
Club Administrators and Trainers
When you join a club, club administrators and trainers can see your name, scores, training attendance, and other archery-related data necessary for club operations.
Service Providers
We use third-party service providers for hosting, email delivery, and analytics. These providers process data only on our behalf and are contractually bound to protect your data.
Legal Requirements
We may disclose your data if required by law or to protect our rights, safety, or property.
Under the GDPR, you have the following rights regarding your personal data:
Right of Access (Art. 15) - Request a copy of your personal data
Right to Rectification (Art. 16) - Correct inaccurate personal data
Right to Erasure (Art. 17) - Request deletion of your personal data ("Right to be Forgotten")
Right to Restriction (Art. 18) - Restrict processing of your data
Right to Data Portability (Art. 20) - Receive your data in a machine-readable format
Right to Object (Art. 21) - Object to processing based on legitimate interests
Right to Withdraw Consent (Art. 7) - Withdraw consent at any time
Right to Lodge a Complaint - File a complaint with a supervisory authority
To exercise any of these rights, please contact us at [your-email@example.com]. We will respond within 30 days.
We retain your personal data only as long as necessary for the purposes outlined in this privacy notice:
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days backup |
| Archery scores & statistics | Until account deletion |
| Club membership data | Until you leave the club or delete account |
| Server logs | 90 days |
| Analytics data | 26 months (anonymized) |
After the retention period, data is securely deleted or anonymized.
We implement appropriate technical and organizational measures to protect your data:
Encryption of data in transit (TLS/HTTPS)
Encryption of sensitive data at rest
Secure password hashing (bcrypt/Argon2)
Regular security audits and updates
Access controls and authentication
Regular backups with encryption
Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place:
EU-US Data Privacy Framework for US transfers
Standard Contractual Clauses (SCCs) approved by the EU Commission
Adequacy decisions for approved countries
We use cookies and similar technologies. For detailed information, please see our Cookie Policy.
Essential Cookies
Required for the website to function (authentication, security, preferences). These cannot be disabled.
Analytics Cookies
Help us understand how visitors use our website. These are only set with your consent.
We may update this privacy notice from time to time. We will notify you of significant
changes by email or through a notice on our website. The date of the last update is
shown at the bottom of this page.
We encourage you to review this privacy notice periodically for any changes.
If you have any questions about this privacy notice or our data practices, please contact us:
Data Protection Contact
Email: [your-email@example.com]
Address: [Your Address]
Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
In Germany, you can contact your state's data protection authority or the Federal
Commissioner for Data Protection (BfDI).
Important: Please replace all placeholder text in brackets [...] with your actual information. Consider having this document reviewed by a legal professional to ensure compliance with applicable laws.
© 2026 Anchor - Archery Portal