Back to home

Privacy Policy

Last updated:

Introduction

This privacy policy describes how Charge Festival (“we” or “us”) processes personal data when you visit our website, create an account, register for sports or experiences, contact us, or otherwise interact with our digital services.

The controller responsible for processing is Charge Festival (Pathfinder Vision Association / event organisers operating under the Charge Festival brand). For data-protection requests, use the contact details in the Contact section at the end.

Data we may collect

Depending on how you interact with us, we may process the following categories of data:

  • Identity and contact data: name, email address, phone number, date of birth / birth year, nationality, gender, city, country, and address details you voluntarily provide;
  • Account-related data: account identifiers, authentication data managed via our identity provider (Firebase Authentication), communication preferences, and records of consent to terms or policies;
  • Sports and experience registrations: sport or activity selected, competition group (e.g. U12, U18, Open), team name, city, team membership, join codes, and registration status;
  • Technical and usage data: IP address, browser and device type, time zone, network information, and how you navigate the site (e.g. pages viewed, session duration);
  • Communications data: the content of messages you send us via forms, email, careers/volunteer applications, or similar channels;
  • Partner activation data: if you follow a partner registration link (for example World Class), that partner processes the data you submit under their own privacy notice.

Purposes of processing

We use data for purposes such as:

  • providing, improving, and securing the website and digital features;
  • creating and managing accounts;
  • operating sports, team, and experience registrations (including capacity/slot management and communication with captains or participants);
  • event operations, safety, and organisational logistics where needed;
  • complying with legal obligations and defending our legitimate interests;
  • aggregated or pseudonymised traffic analysis (including Google Analytics when you have accepted analytics cookies);
  • marketing and similar communications only where we have valid consent or another lawful basis.

Legal bases (GDPR)

Where the EU General Data Protection Regulation (GDPR) applies, we rely on one or more of the following: performance of a contract or steps at your request (e.g. account and registrations); compliance with a legal obligation; legitimate interests (such as IT security or service improvement), balanced against your rights; or consent where required and validly obtained (e.g. non-essential cookies or certain marketing).

Recipients and processors

We may disclose data to service providers who process data on our behalf under appropriate contracts and safeguards—for example hosting, Firebase (authentication and database), transactional email, and analytics providers when enabled.

Activation or experience partners may receive or collect data directly when you use their registration flows; their policies apply to that processing.

We may also disclose information where required by law, upon request from competent authorities, or to protect our rights and the safety of users and participants.

International transfers

If we transfer data outside the European Economic Area (including via cloud providers such as Google Firebase or Google Analytics), we ensure appropriate safeguards exist—for example EU-approved standard contractual clauses or adequacy decisions—in line with the GDPR.

Retention

We retain data only as long as necessary for the purposes above, including to run the relevant festival edition, meet legal deadlines, resolve disputes, and produce aggregate statistics.

Exact periods vary by data type and legal duty; you may request more detail at the contact address.

Security

We implement reasonable technical and organisational measures to protect data against unauthorised access, loss, or alteration. No internet transmission is completely secure; we encourage strong passwords and up-to-date devices.

Your rights

Where applicable law allows, you may exercise rights of access, rectification, erasure, restriction, objection, data portability, and to withdraw consent where processing is consent-based.

You also have the right to lodge a complaint with a supervisory authority (in Romania: the National Supervisory Authority for Personal Data Processing — ANSPDCP).

Children

Some sports categories may involve minors. Where a registration concerns a participant under 16 (or the relevant age in your jurisdiction), a parent or legal guardian must provide the required information and consent where needed. We do not knowingly create accounts for children without appropriate adult involvement; if you believe we hold data incorrectly, please contact us.

Changes to this policy

We may update this policy from time to time. The current version will be posted on this page with the “Last updated” date. We encourage you to review it periodically.

Contact

For questions about this policy or your personal data, please contact us at:info@chargefestival.com