This privacy notice describes how BJJ Vaasa ry handles personal data collected through course signups.
Data controller
BJJ Vaasa ry · Wasamove, Meijerinkatu 9, 65100 Vaasa, Finland · bjjvaasa1@gmail.com
Data collected
- First and last name
- Email address
- Phone number
- Confirmation that you are at least 16 years old
We do not collect date of birth, social security numbers, or other identifying data.
Legal basis
Processing is based on the performance of a contract (GDPR Art. 6(1)(b)) — signing up to a course constitutes a contract with the club.
Purpose
- Reserving and confirming your course spot via email
- Practical communication about the course
- Insurance registration through Suomisport
Retention
Data is deleted automatically 30 days after the course ends. Unconfirmed signups are deleted after 24 hours if the confirmation link is not used.
Who can access the data
Only members of the BJJ Vaasa board and beginner-course instructors have access. Data is not shared with third parties except where required by law.
Sub-processors
- Turso (database, EU region) — stores signup records
- Resend (email, EU region) — delivers confirmation links
- Vercel (application platform, EU region) — hosts the site
Your rights
- Access — request a copy of the data we hold about you
- Erasure — use the cancel link in the confirmation email, or email us
- Rectification — sign up again to update, or email us
- Right to complain to a supervisory authority — the Finnish Data Protection Ombudsman, tietosuoja.fi
Contact
For privacy matters: bjjvaasa1@gmail.com