Privacy Policy for Competely

Last updated: [2026-08-27]
Version: 1.0

This Privacy Policy explains how personal data is processed when you use Competely.

Competely is a service provided by:

Didgeridoo Event & Aktivitet AB
Company registration number: 556875-2231
Elverslösavägen 29
395 90 Kalmar
Sweden

In this Privacy Policy, “Competely”, “we”, “us” and “our” refer to the Competely service and Didgeridoo Event & Aktivitet AB as the provider of the service.

1. Who we are

Competely is a web-based service for creating, managing and running competitions and events, participant registrations, result management and live leaderboards.

Didgeridoo Event & Aktivitet AB is the data controller for personal data processing where we determine the purposes and means of the processing. This includes, for example, personal data relating to customer accounts, payments, billing, support, service operation, security and communications relating to Competely.

When a customer or event organiser uses Competely to collect and process personal data relating to participants, such as names, contact details, company information, team names, competition results or images, the customer or organiser will normally be the data controller for that processing.

In such cases, Didgeridoo Event & Aktivitet AB processes personal data as a data processor on behalf of the customer or organiser, in accordance with Competely’s Data Processing Agreement (DPA).

2. When this Privacy Policy applies

This Privacy Policy applies when:

you visit the Competely website;
you create or use a Competely account;
you purchase or manage a subscription;
you contact us for support or other enquiries;
you use Competely as an organiser or administrator;
you participate in a competition or event using Competely; or
your personal data is processed in connection with the operation, security or administration of the service.

If you participate in an event or competition organised by a Competely customer, you should also review the privacy information provided by the organiser regarding its processing of your personal data.

3. Personal data we process

The personal data we process depends on how Competely is used.

3.1 Customer and administrator data

When you create an account or use Competely as a customer, organiser or administrator, we may process:

name;
company name;
company registration number;
email address;
telephone number;
billing information;
payment status;
account settings;
login credentials;
user and access information;
communications with us; and
technical logs relating to the account and use of the service.

3.2 Participant data

When an organiser uses Competely to collect participant information, the following personal data may be processed depending on the organiser’s settings:

name;
team name or team number;
company or organisation;
email address;
telephone number;
nationality;
answers to customised questions;
competition results;
scores;
rankings;
timestamps relating to registration and result submissions; and
images or other uploaded content, where such functionality is used.

The organiser normally determines which participant information is collected for a particular event or competition.

3.3 Payment information

Payments are processed through our payment service provider, Stripe. We do not store full payment card numbers.

We may process information relating to:

subscriptions or services purchased;
billing address;
company registration number;
VAT information;
payment status;
transaction references;
receipts; and
invoices.

Stripe may process additional payment information in accordance with its own terms and privacy policy.

3.4 Technical information and usage data

When Competely is used, we may process certain technical information, including:

IP address;
browser type;
device type;
operating system;
login and usage timestamps;
technical logs;
error reports; and
security-related events.

This information is primarily used to operate, troubleshoot, secure and improve the service.

4. Why we process personal data and our legal bases

We process personal data for different purposes and on different legal bases under the General Data Protection Regulation (GDPR).

Where other applicable data protection laws apply, we also process personal data in accordance with those requirements.

4.1 To provide the service

We process personal data to create and manage accounts, provide authentication, manage competitions, display leaderboards, register results and provide the functions available through Competely.

For customers and account holders, the legal basis is generally performance of a contract.

Where an individual uses Competely on behalf of a company or organisation that is our customer, certain processing may instead be based on our legitimate interest in providing and administering the service contracted by that organisation.

4.2 To manage customers, subscriptions and payments

We process personal data to manage subscriptions, purchases, payments, invoices, receipts and our customer relationships.

Legal basis: Performance of a contract and compliance with legal obligations.

4.3 To comply with accounting and legal requirements

We process and retain certain personal data in order to comply with accounting, tax and other legal requirements.

Legal basis: Compliance with a legal obligation.

4.4 Support and communications

We process personal data when you contact us regarding support, enquiries, troubleshooting, complaints or other communications.

Legal basis: Performance of a contract where the communication relates to our contractual obligations, and otherwise our legitimate interest in providing customer service, responding to enquiries and maintaining our customer relationships.

4.5 Security and service operation

We process technical information and logs to protect Competely, detect unauthorised access, prevent misuse, troubleshoot problems and maintain the stability and security of the service.

Legal basis: Our legitimate interest in operating, protecting and securing Competely and its users.

4.6 Processing participant data on behalf of organisers

When an organiser uses Competely to collect participant information, register results, display leaderboards or export event data, we process that information on behalf of the organiser.

In these situations, the organiser is normally the data controller and Didgeridoo Event & Aktivitet AB acts as the data processor.

The organiser, as data controller, is responsible for determining the applicable legal basis for processing participant data.

Our processing is carried out in accordance with the Data Processing Agreement and the organiser’s documented instructions.

5. Participant data, leaderboards and results

Competely may be used to display names, team names, results, scores and rankings on leaderboards or result pages.

The information displayed depends on how the organiser has configured the competition.

The organiser is responsible for informing participants about which personal data will be visible publicly or to other participants and for determining the appropriate legal basis for such processing.

Where images or other media are used in connection with an event, the organiser is responsible for ensuring that participants receive appropriate information about how that material may be used.

6. Lead collection and data exports

Competely may be used to collect and export participant information, competition results, leads or other event data.

When an organiser exports personal data from Competely, the organiser is responsible for any subsequent processing, storage, sharing and deletion of that data.

Didgeridoo Event & Aktivitet AB is not responsible for how an organiser uses exported data after it has been exported, except where otherwise required by applicable law or specifically agreed between the parties.

7. Who we share personal data with

We do not sell personal data.

We may share personal data with service providers and other parties where necessary to provide and operate Competely, including:

hosting and database providers;
authentication providers;
payment service providers;
support and communication services;
email service providers;
security, logging and monitoring services;
professional advisers and auditors; and
public authorities where disclosure is required by law.

Service providers that process personal data on our behalf are required to be subject to appropriate data processing agreements or equivalent data protection obligations.

8. Service providers and subprocessors

Competely uses third-party service providers to operate and provide the service.

Examples include:

Supabase

Supabase is used for infrastructure, database services, authentication, storage and real-time functionality.

Stripe

Stripe is used for payment processing, billing and subscription management.

Additional providers may be used for services such as email delivery, customer support, logging, security, error reporting or technical monitoring.

An up-to-date list of subprocessors may be provided upon request or published separately.

9. Where personal data is stored and processed

We aim to process and store personal data within the European Union or European Economic Area (EU/EEA) where appropriate and technically configured to do so.

Competely data is stored and processed using our technical service providers.

Before publication, the current Supabase project region must be confirmed: [CONFIRM SUPABASE REGION].

Some service providers may process personal data outside the EU/EEA.

Where personal data is transferred to a country outside the EU/EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection law.

Such measures may include an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses (SCCs), or another legally recognised transfer mechanism.

10. How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it is processed or for as long as we are required to retain it by law.

10.1 Customer and account information

Customer and account information is retained while the account is active and afterwards for as long as reasonably necessary to manage contractual matters, support, security, legal claims or legal obligations.

10.2 Invoices and accounting records

Invoices, payment records and other accounting-related information are retained for the periods required under applicable accounting and tax legislation.

10.3 Participant and event data

Participant information, competition results and other event data are retained for as long as necessary to provide the service to the organiser.

In some cases, organisers may be able to delete or export information through Competely.

Where an organiser requests deletion, the request will be handled in accordance with our Terms of Service, Data Processing Agreement and the technical capabilities of the service.

After an account is terminated, personal data may be deleted or anonymised within a reasonable period unless continued retention is required by law, necessary for security or backups, required for the establishment, exercise or defence of legal claims, or otherwise agreed between the parties.

10.4 Backups

Personal data may remain in backups for a limited period until those backups are rotated, overwritten or deleted in accordance with our backup procedures.

11. Cookies and similar technologies

Competely may use cookies and similar technologies that are necessary for the website and service to function, including for:

login;
authentication;
security;
session management; and
technical functionality.

We do not use cookies for advertising unless this is specifically stated in separate cookie information.

If we use analytics cookies, marketing cookies or similar technologies that require consent, we will provide appropriate information and obtain consent where required by applicable law.

12. Your rights

Under the GDPR, you have certain rights in relation to your personal data.

Depending on the circumstances, you may have the right to:

request access to your personal data;
request correction of inaccurate personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive certain personal data in a structured, commonly used and machine-readable format; and
withdraw your consent at any time where processing is based on consent.

These rights are subject to the conditions and limitations set out in applicable data protection law.

If you are a customer or administrator, you may contact us directly.

If you are a participant in an event or competition organised by a Competely customer, you should normally contact the organiser first, as the organiser will generally be the data controller for participant information.

If you contact us regarding personal data for which an organiser is the data controller, we may refer you to the organiser or forward your request to the organiser as appropriate.

13. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction or unlawful processing.

These measures may include:

access controls;
authentication;
restricted access to personal data;
encrypted transmission where appropriate;
backups;
logging of relevant security events;
incident response procedures;
use of established technology providers; and
internal confidentiality and access procedures.

Our security measures are reviewed and developed as Competely evolves.

14. Personal data breaches

If we become aware of a personal data breach involving personal data for which we are the data controller, we will manage the incident in accordance with applicable data protection law and notify the relevant supervisory authority and affected individuals where required.

If a breach relates to personal data that we process as a data processor on behalf of an organiser, we will notify the organiser without undue delay in accordance with our Data Processing Agreement.

15. Children’s personal data

Competely is not specifically directed at children.

If an organiser uses Competely for an event in which children may participate, the organiser is responsible for ensuring that the collection and processing of children’s personal data complies with applicable law, including any requirements relating to privacy information, consent or another appropriate legal basis.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will be made available on the Competely website.

Where changes are material, we may notify users in an appropriate manner, for example by email, through the service or on the website.

17. Complaints

If you believe that we are processing your personal data in breach of applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

Our primary supervisory authority in Sweden is:

Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY)

If you live or work in another EU/EEA country, you may also have the right to contact the data protection authority in that country.

18. Contact

If you have any questions about this Privacy Policy or how personal data is processed through Competely, please contact us: