Privacy Policy

This Privacy Policy explains how we collect, use, store and protect your personal data when you use stadiongaming.eu ("the Service"), and the rights you have under the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation. We are committed to processing your personal data lawfully, fairly and transparently.

1. Data Controller

The controller responsible for the processing of your personal data is:

2. Personal Data We Collect

Depending on how you use the Service, we may process the following categories of personal data:

• Account data: username, email address, password (stored only in hashed form), display name, avatar, biography, and language/theme preferences.
• Usage and log data: IP address, device and browser information, access times and pages viewed, generated automatically when you use the Service.
• User-generated content: forum posts, comments, and game scores and statistics you create on the platform.
• Newsletter data: your email address if you subscribe to our newsletter.
• Communications: the content of messages you send us by email or through contact forms.
• Cookies and similar technologies: data stored on or read from your device, as described in our Cookie Policy.

3. Purposes and Legal Bases of Processing

We process your personal data on the following legal bases under Article 6(1) GDPR:

• Performance of a contract (Art. 6(1)(b)): to create and manage your account, provide the Service, display your forum posts and game scores, and respond to your support requests.
• Consent (Art. 6(1)(a)): to send you our newsletter and to set non-essential (functional, analytics, advertising) cookies. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Legitimate interests (Art. 6(1)(f)): to keep the Service secure, prevent fraud and abuse, ensure technical stability, and improve and develop the Service. We balance these interests against your rights and freedoms.

4. Data Retention

We retain your account data for as long as your account remains active. When you delete your account, we delete or irreversibly anonymise your personal data, except where we are required to retain certain information to comply with legal obligations or to establish, exercise or defend legal claims. Log data is kept only for a limited period necessary for security and troubleshooting and is then deleted or anonymised. Newsletter data is retained until you unsubscribe.

5. Recipients and Processors

We do not sell your personal data. We share it only with carefully selected service providers (processors) who act on our instructions under data processing agreements:

• Hosting provider: operates the servers (located within the EU) on which the Service and its database run.
• Email/SMTP provider: delivers transactional emails and newsletters on our behalf.
• OpenAI: used for AI-assisted translation of content on the platform; this may involve processing certain content by a provider in the United States.

We may also disclose personal data to public authorities where required by law, or where necessary to establish, exercise or defend legal claims.

6. International Data Transfers

Where a processor is located outside the European Economic Area (such as OpenAI in the United States), the transfer takes place on the basis of the European Commission's Standard Contractual Clauses (SCCs) and, where appropriate, additional safeguards, to ensure that your personal data continues to enjoy an adequate level of protection.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): to obtain confirmation of and a copy of the personal data we hold about you.
• Right to rectification (Art. 16): to have inaccurate or incomplete data corrected.
• Right to erasure / "right to be forgotten" (Art. 17): to have your personal data deleted.
• Right to restriction of processing (Art. 18): to limit how we process your data in certain circumstances.
• Right to data portability (Art. 20): to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): to object to processing based on our legitimate interests, including profiling.
• Right to withdraw consent: to withdraw any consent you have given, at any time.

You can exercise many of these rights directly in your profile settings, where you can edit your information, download a copy of your data, and delete your account. For any other request, or if you prefer, you can contact us at hello@stadiongaming.eu. We will respond within the time limits set by the GDPR (generally within one month).

8. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Croatia this is:

9. Children's Privacy

The Service is intended for users aged 16 and over, in line with the digital consent age set under Croatian law. We do not knowingly collect personal data from children under 16 without the consent of a parent or legal guardian. If you are under 16, please use the Service only with the involvement and consent of a parent or guardian. If we become aware that we have collected such data without the required consent, we will delete it.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data. Passwords are stored only as cryptographic hashes (bcrypt) and never in plain text. All traffic is encrypted in transit using HTTPS/TLS, and access to personal data is restricted through access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service. We encourage you to review this page periodically.