Privacy Policy

Version of 31 August 2026

1. Data Controller

The controller of the personal data of Users of the Ranfano service (ranfano.pl) is Wojciech Waśniowski, Bochnia, Poland. Contact regarding personal data matters: kontakt@ranfano.pl.

2. What Data We Process

Account data: email address, first and last name, phone number, optionally a profile picture, and interface language.

Competition data: sign-ups for leagues and tournaments, match results, standings, rankings and sporting statistics.

Fee records: amounts and statuses of entry fees charged by the Club. The Service does not process payment data (card or account numbers) — payments are made outside the Service.

Technical data: IP address and server logs related to the security of the service.

3. Purposes and Legal Bases

Managing accounts and administering competitions — Article 6(1)(b) GDPR (performance of a contract).

Sending emails related to the account and competitions (address verification, competition notifications) — Article 6(1)(b) and (f) GDPR.

Ensuring the security of the Service, including logs and abuse prevention — Article 6(1)(f) GDPR (legitimate interest).

Establishing and pursuing claims and fulfilling statutory obligations — Article 6(1)(f) and (c) GDPR.

4. Public Nature of Sporting Results

Competitions are sporting in nature — standings, match results and rankings, together with the Player’s first and last name, are publicly visible on club pages within the Service, including to users who are not logged in.

The profile picture is publicly visible only if the Player enables this option in their profile settings.

5. Recipients of Data

Infrastructure providers: OVH (servers, European Union) and Vercel (frontend layer hosting).

Email service provider — for the purpose of sending transactional messages.

Clubs whose competitions the Player signs up for — to the extent necessary to manage sign-ups, competitions and fee records.

6. Transfers of Data Outside the EEA

Use of Vercel’s services may involve the transfer of data to the United States. Such transfers take place on the basis of mechanisms provided for under the GDPR — an adequacy decision (the Data Privacy Framework) or standard contractual clauses.

7. Retention Period

Account data — for as long as the account exists within the Service.

Competition results — indefinitely, as part of the sporting archive; after account deletion, the Player may request that data in the archive be restricted or anonymized.

Technical logs — up to 12 months.

Fee records — for the period required by applicable law.

8. Your Rights

You have the right to access your data, to rectify it, to have it deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interest.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (uodo.gov.pl).

9. Cookies

The Service uses only cookies necessary for its operation: session and authentication cookies (httpOnly) and cookies that remember the interface language.

The Service does not use advertising or analytics cookies.

10. Voluntary Nature of Data Provision

Providing your data is voluntary but necessary to create an account and take part in competitions.

11. Changes to This Policy

We will announce any changes to this Policy within the Service. The current version is always available at ranfano.pl/polityka-prywatnosci.