PERSONAL DATA PROCESSING
WHO PROCESSES THE DATA
The data controller is the association Brno Alligators, z.s., company ID (IČO) 22832416, registered office Úvoz 441/108, Veveří, 602 00 Brno, Czech Republic. Contact us at info@alligators.cz. We have not appointed a data protection officer; please contact us directly about anything.
WHAT WE COLLECT AND WHY
Full name, age, e-mail, optionally phone, your answer about football experience and where you heard about the event. We need it only to run the combine: to know who to expect, send you a confirmation and schedule, and reach you if anything changes. At the event we add your start number and measurement results.
LEGAL BASIS
Registration, taking part in the event and measurement: we act on your request and the agreement on your participation (Art. 6(1)(b) GDPR). Player profile, name and photo, and photos and videos from events: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Result card: we create it only for you, at your request (Art. 6(1)(b) GDPR). What it shows follows your consents for your name and photo. News about the next combine: your consent (Art. 6(1)(a) GDPR), which you withdraw with one click in any e-mail. The club's legitimate interest (Art. 6(1)(f) GDPR): the results ranking seen by other participants and the public (shortened if you have not agreed to show your name), protection against abuse (one-way fingerprint of the IP address, attempt limits, change log) and cookieless visit statistics. You can object to processing based on legitimate interest at any time at info@alligators.cz.
PLAYER PROFILE AND RESULTS
If you activate a profile after the event, we also process, based on your consent, your measurement results, start number, attendance at other club events and recruitment status (contacted by a coach, practice, membership). The profile may also hold your height, weight and position, which you fill in, your year of birth, which only the club enters, and optionally your gender. Year of birth and gender are used for categories and coach filters. Your profile photo is uploaded by you or the club. It is stored privately; coaches and admins always see it, other signed-in players only with your consent. With the profile we also keep coach notes, your reports of measurement errors and a change log (who changed what and when). For registrations and link requests we do not store your IP address, only a one-way fingerprint of it to protect against abuse. For a signed-in account we keep the IP address and browser type with the session for security, for as long as you stay signed in. You, the club coaches and admins see the profile. Other players see your performance and rank in the app, your name only with your consent, otherwise shortened (for example J** N.). During a live event others see only grades, not exact values. A coaching staff member (coach, admin) also has a profile with phone, photo and card text, which they fill in themselves.
HOW LONG WE KEEP IT
An unconfirmed web registration (link in the e-mail not clicked) is deleted after 48 hours. Registrations from 2026 without an activated profile are deleted on 31 December 2026. Registrations for later events without an activated profile are deleted by 31 December of the year the event took place. An activated profile is kept for 12 months after your last club event, then deleted. After deletion, measurement results remain only as anonymous statistics without name or contact. Together with the profile we delete your year of birth, gender, height, weight, position, photo, coach notes and reports. A member of the club coaching staff (coach, administrator) can also create a results profile; the same rules apply. News about the next combine: we keep the address until you unsubscribe and delete it within 30 days after that.
WHAT IS PUBLIC
Public results show rank, points, category (age, or gender where used) and performance. Start numbers are not shown. With your consent we show your first name and the initial of your surname (Jan N.). Without consent we show you only in a shortened form (J** N.), with category and performance. Teammates may recognise you from it, which is why we say so openly. If you do not want even the shortened form, write to us at info@alligators.cz (objection) and we will show you as “No name”. Players under 18 without valid profile consent and deleted profiles are always “No name”. We never show photos publicly. The result card is an image with your numbers that you create, download and share yourself. It shows your full name only if you have agreed to show your name; otherwise it shows your position instead. The club does not publish it anywhere. We never publish your exact age, year of birth, e-mail or phone.
PHOTOS AND VIDEOS FROM CLUB EVENTS
We take photos and videos at club events. Photos and videos in which you can be recognised are shared on the club's website, social media and invitations to further events only with your separate consent. It is voluntary and your profile does not depend on it. Anyone visiting the club's website or social media can see them. Without consent we leave you out of shots or blur you. Between 15 and 18 you need a parent's consent, which you confirm by ticking a box; under 15 a parent decides. You can withdraw it any time in your profile (Edit profile, Privacy) or at info@alligators.cz. Withdrawal also covers older posts: we take them down or blur you. The exception is footage from Combine 2026, which we use on this website (for example the video on the sign-in page) based on the club's legitimate interest in showing what the event looks like. If you recognise yourself and do not want to be there, write to info@alligators.cz and we will remove or adjust the footage.
NEWS ABOUT THE NEXT COMBINE
If you leave your e-mail on the home page so we can tell you about the next combine, we process only that address, the page language, the wording of your consent and when the subscription was created and cancelled. The subscription is separate from any registration or profile. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box in the form. You can withdraw it at any time with one click in any of our e-mails or by writing to info@alligators.cz. It starts as soon as you submit the form, and we immediately send you an e-mail saying so, with an unsubscribe link. If someone else entered your address, just click that link. We keep the address until you unsubscribe and use it only for news about the next combine. After you unsubscribe, we delete it within 30 days. We do not pass the address to anyone; e-mails are sent for us by Resend (see Who we share it with). To protect the form against abuse we count attempts by a one-way fingerprint of the IP address and the e-mail; we do not store the IP itself.
MINORS
If you are under 15, your parent or legal guardian decides about the profile (Art. 8 GDPR, Section 7 of Czech Act No. 110/2019 Coll.). The parent gets an e-mail with a link and decides on each item separately. You enter their address yourself and thereby declare that it really is theirs; we only check that it is not your own address. Until they agree, we keep and publish nothing. Between 15 and 18 you keep the profile yourself, but we publish your name, photo, photos and videos and result card only with a parent's consent. If the club has your year of birth on record, you confirm it by ticking a declaration that your parent or legal guardian agrees. We store the declaration with its date and wording, nothing about your parent. If we do not have your year of birth, we e-mail your parent a link, as for younger players. The parent can withdraw consent at any time by writing to info@alligators.cz. The club's coaches can see how the consent was given and can cancel publication at any time.
WHO WE SHARE IT WITH
Never for marketing. The following processors handle the data technically, only on our instructions: Vercel Inc. (website hosting, private photo storage, cookieless visit and speed statistics), Neon Inc. (database stored in the EU, in Frankfurt) and Resend Inc. (e-mail delivery, USA). The application runs in the EU, in Frankfurt. All three companies are based in the USA. Where data reaches the USA, the transfer relies on the EU–US Data Privacy Framework or, alternatively, on the European Commission's standard contractual clauses.
YOUR RIGHTS
You have the right to access your data, to have it corrected or erased, to restrict processing and to data portability. You can object to processing based on legitimate interest. You can withdraw consent at any time. Withdrawal does not affect processing that took place before it. You withdraw consent to processing in your profile (Edit profile, Privacy). We then delete the profile right away and results stay only as anonymous statistics without name or contact. You can also delete your profile right away during activation. For anything else just write to info@alligators.cz; we reply within a month. You can lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).