REAL KARATE

Privacy policy

Last updated: [DATE]

⚠ Draft — must be reviewed by a qualified lawyer before launch. Every [PLACEHOLDER] value must be completed first.

This policy explains how Real Karate (“we”) processes personal data under the EU General Data Protection Regulation (GDPR). Controller: James O’Brien, Achenbachstr. 15, 13585 Berlin, Germany. Contact: james@real-karate.com.

1. Data we process

  • Account data — your email address and authentication data, when you register (to let you add and manage listings).
  • Content you submit — club and event details, descriptions, links. This is published publicly by design.
  • Technical data — IP address, browser/device info and request logs, kept briefly for security and abuse prevention by our hosting/CDN providers.
  • Cookies — strictly necessary cookies only: a session/auth cookie and a language-preference cookie. No advertising or analytics cookies are set.

2. Legal bases

  • Performing the service / your account — Art. 6(1)(b) GDPR.
  • Publishing listings you submit — Art. 6(1)(b)/(a) GDPR.
  • Security, moderation and abuse prevention — Art. 6(1)(f) legitimate interests.

3. Processors & third parties

We use the following service providers as data processors:

  • Supabase — database, authentication and storage (region: [EU region, e.g. eu-central-1]).
  • Vercel — application hosting.
  • Cloudflare — DNS, CDN and security.
  • Anthropic (Claude) — automated screening of submitted listing text for spam/abuse.
  • DeepL and/or Google Cloud Translation — on-demand translation of public listing descriptions.
  • OpenStreetMap / Nominatim — map tiles and address geocoding.
  • Google Safe Browsing — checking submitted links against known malicious URLs.

Where a provider processes data outside the EU/EEA, transfers are safeguarded by EU Standard Contractual Clauses and the providers’ data-processing agreements. [Confirm DPAs are accepted with each provider.]

4. Retention

Account data is kept while your account is active. Public listings remain until you delete them or your account. Technical logs are kept for [retention period].

5. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can edit or delete your listings at any time, and delete your account from the Account page. To exercise other rights, contact james@real-karate.com. You may also lodge a complaint with a supervisory authority (in Germany, your state Data Protection Authority).

6. Changes

We may update this policy; material changes will be announced on this page.