Privacy
What we do with your data
A club entering a tournament has to hand over some details. This says exactly which ones, why we need each, how long we keep it and how to get it back.
1.Who is responsible
MTÜ Jalgpalliturniir Tallinn Cup organises the Tallinn Cup and decides what happens to the personal data described here. In data-protection terms we are the controller.
Write to cup@tallinncup.eu with any question about this policy, or to exercise any of the rights listed below. A person, not a form, reads that address.
Registry code 80377440. Postal address: Sihi tn 122-14, 10918 Tallinn, Estonia.
2.What we collect, and why
We ask for as little as we can. A club registers as an organisation, so most of what we hold is about the club and about one or two adults who speak for it.
We do not ask for the names or dates of birth of players on this website. Squads are registered as numbers — so many players, so many coaches, so many officials.
| What | Why we need it | How long we keep it |
|---|---|---|
| Club name, town, country, shirt colour, crest | To enter you in the draw, print the schedule and list you publicly as a participant | Kept as tournament history |
| Contact name, role, e-mail, telephone | To confirm your place, invoice you and reach you during the tournament | 3 years after the tournament, for the accounts and for next year's invitation |
| Squad sizes, age categories | To build the groups and the match schedule | Kept as tournament history |
| Accommodation choice, arrival and departure details | To book beds, meals and the shuttle | 12 months after the tournament |
| Allergies and special diets | So the kitchens can feed your squad safely | Deleted within 3 months of the tournament |
| Invoice number and what has been paid | Accounting, and Estonian law requires us to keep it | 7 years, as the law requires |
| Messages you send us — chat, enquiries, e-mail | To answer you, and to remember what was agreed | 2 years |
| Notes our office writes about your club | To run the tournament — who to call, what was agreed | 3 years after the tournament |
3.Allergies and special diets
Information about an allergy is health data, which the law protects more strictly than a telephone number. We ask for it for one reason: a kitchen feeding several hundred young people needs to know.
Give us what the kitchen needs and no more — "two lactose-free, one severe nut allergy" rather than a medical history. It is visible only to our office and to the caterer concerned, and we delete it within three months of the tournament.
You provide it on behalf of the people it concerns, having asked them or their parents. If any of them would rather tell us directly, they can write to us instead.
4.Young players
Almost everyone playing is under eighteen, so we have built the registration to hold as little about them as possible: numbers, not names.
During the tournament we photograph and film matches and ceremonies, and we publish some of it. A parent or club can ask us not to publish a particular child — write to us and we will take it down.
The club's contact person is an adult, and it is that adult we correspond with.
5.On what basis
- Performing our contract with your club — registration, invoicing, beds, meals, transport.
- A legal obligation — keeping accounting records.
- Our legitimate interest — running the tournament, answering messages, publishing who is taking part, and keeping the event safe.
- Your explicit consent for dietary and allergy information, given by the club on behalf of its people. You may withdraw it, though we then cannot guarantee a suitable meal.
6.What appears in public
Once your place is approved, your club's name, town, country and crest appear on the list of registered teams, in the schedule and in the results. That is what a tournament is.
Nothing else is published. Contact details, prices, dietary notes and our internal notes are never shown outside the office.
9.Your rights
Write to cup@tallinncup.eu and we will answer within a month. You can ask us to:
- Show you what we hold about you.
- Correct anything wrong.
- Delete what we no longer need — though we must keep invoices for seven years.
- Send you your data in a portable form.
- Stop processing it, or object to our doing so.
10.If you are unhappy
Tell us first — most things are a misunderstanding we can fix the same day.
If that does not resolve it, you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or to the supervisory authority in your own country.
11.How it is kept
Data is held in the European Union, transmitted over encrypted connections, and reachable only by the handful of people in the tournament office who need it. Their accounts are individual and password-protected.
If something goes wrong in a way that puts you at risk, we will tell you and the supervisory authority as the law requires.
12.Changes
This policy was last changed on 1 August 2026. If we change it in a way that matters, we will say so on this page and write to the clubs registered at the time.
The rules a club agrees to when it enters are in the participation terms and the official regulations.
Something here unclear, or something you would like removed? Write to the office — a person answers.