Privacy policy

1. Data controller

• Controller: Pablo Saiz Hernansanz
• Tax ID (NIF): 04617701Z
• Address: Calle Palo de Rosa, 3, 3rd floor B, 28005 Madrid, Spain
• Contact: hola@enroqgames.com

2. What data we process and why

• Registration data: name, team name, number of people, email, phone and, for chess, your approximate rating if you give it. We use them to manage your registration, send you the confirmation and let you know about changes to the event. Legal basis: performance of the contract.
• How you heard about us (optional): to learn which channels work. Legal basis: your consent when you fill it in.
• Payment data: amount, status and payment reference. Card details are handled directly by Stripe; we never see or store them. Legal basis: performance of the contract and legal (tax and accounting) obligations.
• On the night of the event: the team or player name is used in the Pub&Play in-venue app (bar screens and participants' phones) to play and show the standings. Emails and phone numbers are never used or shared there. Legal basis: performance of the contract.

We never publish on the website who has registered. We will not send you marketing communications without your express consent.

3. Who we share data with

• Supabase (database, hosted in the European Union, Frankfurt).
• Vercel (website hosting).
• Stripe (card payments).
• Resend (email delivery, European Union region).
• Google (sign-in for the admin team only).
• Pub&Play (in-venue app; only receives the team or player name).

Only with the providers we need to deliver the service, acting as data processors:

4. International transfers

Some of these providers are US companies. In those cases transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

5. How long we keep data

• Registration data: for the duration of the event or league and, afterwards, for as long as needed to handle any claims.
• Payment data: up to 6 years, due to tax and accounting obligations (Article 30 of the Spanish Commercial Code).

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to hola@enroqgames.com. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Cookies

We only use strictly necessary technical cookies: the admin panel session cookie and those Stripe uses during payment to prevent fraud. We do not use analytics or advertising cookies, which is why we do not ask for cookie consent.

8. Minors

Registration must be made by a person aged 18 or over, who is responsible for their team's data.

9. Security and changes

We apply appropriate technical and organisational measures: encryption in transit, access to personal data restricted to administration only, and backups. If we change this policy substantially, we will publish it here.