Privacy Policy

Controller contact details: info@bowlmine.com

In this document we would like to inform you how we process your personal data, the purposes of processing, the legal basis for processing, the retention period and your rights in connection with the processing of personal data. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

We operate the online platform BOWLMINE available at the domain bowlmine.com (the "Platform"), which is used for recording bowling results, organising and managing tournaments, running player profiles and related social features, advertising sports equipment in the marketplace and maintaining a catalog of bowling centers. We provide the Platform to end users as consumers (B2C), and this document is therefore intended primarily for you as a registered user of the Platform, a person who registers for a tournament via the Platform, a person who posts a listing on the Platform, or a bowling center contact person listed in the catalog ("you").

Cookies are also stored on the Platform. At present, the Platform uses only the strictly necessary technical cookies described in Section B.8 below; we do not use analytics or advertising cookies.

A. Scope of Personal Data

Below, we have divided the personal data we process into individual categories:

Identification and Registration Data, such as e-mail address, first name, last name, date of birth and the date of registration. Optionally, you may add your address and GPS coordinates. These data are needed to create and maintain your user account and to determine the appropriate level of access to the Platform's features and to verify age when applying for a special role.
Login Data, i.e. the access credentials to your user account. These data are needed for logging in and securing your account.
Profile and Social Feature Data, i.e. profile photo, place of residence, playing data (style, hand, average), posts and comments you publish including photos, information about friendships, following other players and group memberships, and the content of messages sent via the Platform.
Tournament Registration Data, such as the first name, last name and e-mail of the registering person, and optionally a phone number. These data are needed to manage your participation in a specific tournament. This also includes names and tournament participation data obtained from publicly available sources (see Section B.3).
Marketplace Data, i.e. the content of a listing and the photos attached to it, which you post when offering sports equipment.
Bowling Center Contact Person Data, i.e. the name, phone number and e-mail of the person listed for a bowling center in the catalog, and documents submitted by the user to verify ownership of the bowling center.
Special Role Request Data, i.e. the requested role (Tournament Organizer, Bowling Center Operator or Developer), the justification of the request that you write yourself, the status of the request, the date it was submitted and decided, and any administrator's note on rejection.
Platform Usage and Security Data, such as IP address and technical records of activity on the Platform and the time of your last activity (recorded at most once per hour).
Cookie Data, i.e. data from strictly necessary technical cookies (keeping you logged in, language selection) and data processed as part of CAPTCHA verification (Cloudflare Turnstile) on the registration and contact forms.
Personal Data Relating to Criminal Offences in Connection with Content Moderation, i.e. where a suspected criminal offence is reported, we process a frozen snapshot of the reported content and identification data of the affected user and of the reporting person. These are personal data relating to criminal offences within the meaning of Art. 10 GDPR, see Section B.6 below.

B. Purposes of Processing Personal Data

Your personal data are processed for the purposes described below. For each purpose you will also find the scope of the personal data processed, the legal basis and the retention period of the personal data.

B.1. Registration and User Account Management

We process personal data for the purpose of creating your user account, logging you in to the Platform and setting the appropriate level of access to its features according to your age, and assessing your requests for a special role (Tournament Organizer, Bowling Center Operator, Developer).

For this purpose we process your Identification and Registration Data and Login Data and, if you submit a request for a special role, Special Role Request Data.

The legal basis for processing your e-mail address, first name and last name and login data is the performance of the contract between you and us (Art. 6(1)(b) GDPR). We process your date of birth on the basis of our legitimate interest in verifying the minimum age and setting the appropriate level of access to the Platform's features (Art. 6(1)(f) GDPR). We process Special Role Request Data and the date of birth in connection with such requests on the basis of our legitimate interest in verifying the legitimacy of the request, including the age of at least 18 and the status of the account (in particular blocking or restriction under moderation), and in protecting the Platform and its users against misuse of roles (Art. 6(1)(f) GDPR). A BOWLMINE administrator decides on the request; we notify you of the outcome by e-mail.

If you choose to sign in with an external account (Google, Facebook, Microsoft or X), we receive from that provider your name and e-mail address needed to create the account.

We retain these data, including Special Role Request Data, for as long as your account exists. After it is closed, we delete them together with your other personal data, unless they are data that we are entitled or obliged to retain for longer under Section B.3, B.6, B.7, B.9 or B.10 below.

The Platform allows you to create a player profile, publish posts and comments with photos, make friends, follow other players, join groups, find a substitute player and contact other users.

For this purpose we process your Identification and Registration Data and Profile and Social Feature Data.

The legal basis for this processing is the performance of the contract you enter into with us by using these features of the Platform (Art. 6(1)(b) GDPR).

You set the visibility of your profile yourself — public, friends only, or private. Your name is always shown; other data (photo, place of residence, activity) are shown only according to the selected level. Membership in a public group is visible to others. Restrictions on visibility and on some features apply to minor users. When searching for a substitute, visitors who are not logged in see only the aggregate number of available players; names and contact details are visible only to logged-in users, and only for profiles that allow it. Messages sent via the Platform (e.g. contacting a substitute, a friend request) contain the text you write and are also delivered to the recipient by e-mail.

The group leadership (the owner and admins) sees the name of members and of applicants for membership when managing members and requests — or their e-mail address if they have no name filled in. If you close your account as the owner of a group, ownership of the group passes to the longest-serving admin who meets the conditions for leading a group; if there is no such admin, the group ceases to exist and the posts published on its behalf are deleted. Closing your account also deletes your group memberships and membership requests; posts published on behalf of a group that continues to exist remain without your name being shown.

We process the data for as long as your account exists, or until you remove the relevant content.

B.3. Tournament Participation

Under this purpose we process your personal data in connection with managing your tournament registration and, where applicable, sending invitations to future tournaments. We distinguish two sub-purposes, each with a separate legal basis.

For this purpose we process your Tournament Registration Data.

Registration management and confirmation e-mail — the legal basis is the performance of a contract (Art. 6(1)(b) GDPR). The participant's first and last name are displayed publicly in the list of registered players for the tournament. We retain the data for the period necessary to organise the tournament and keep a record of its participants.
Sending invitations to future tournaments by the tournament organizer — the legal basis is consent (Art. 6(1)(a) GDPR), given by voluntarily ticking the relevant box in the registration form. Consent may be withdrawn at any time by e-mail to the tournament organizer's address. The data are processed until consent is withdrawn.

A tournament organizer may also create a registration on your behalf — either individually (if you requested registration by other means, e.g. by phone or in person), or in bulk by entering the entire list of participants at once (e.g. from an attendance sheet or the organizer's own records). For registrations entered in bulk, only the first and last name are stored; neither e-mail nor phone number is required, and the information about processing is displayed to the organizer at the time of entry, not directly to the player. In this case, the data controllers are the operator of the Platform and the organizer of the specific tournament.

We also obtain data on tournaments and their participants (in particular names) from publicly available tournament and results websites in order to provide an overview of bowling tournaments. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). We process these data for the period necessary for this purpose.

B.4. Marketplace Listings

Under this purpose we process your personal data in order to publish your sports equipment listing on the Platform.

For this purpose we process your Marketplace Data and Identification and Registration Data.

The legal basis for this processing is the performance of the contract you enter into with us by using this feature of the Platform (Art. 6(1)(b) GDPR).

For a published listing, your name and city are displayed publicly, i.e. also to visitors who are not logged in. Neither your e-mail nor your phone number is displayed — an interested party contacts you via the reply form within the Platform.

The personal data are processed until the listing is removed.

B.5. Bowling Center Catalog

We operate a catalog of bowling centers. For individual bowling centers, the contact details of the bowling center contact person, entered by the bowling center operator, may be displayed publicly; the bowling center operator is responsible for their accuracy and for being entitled to enter them. If a user (even one without the Bowling Center Operator role so far) requests to take over a bowling center and to verify its ownership, they may upload a supporting document with the request (e.g. an energy bill, a bank statement, an extract from the Commercial Register or a lease agreement); ownership can also be verified by confirming an e-mail address from the bowling center's domain. By approval of the documents or by e-mail verification, the user obtains the Bowling Center Operator role.

For this purpose we process Bowling Center Contact Person Data.

The legal basis for this processing is our legitimate interest in maintaining a complete and up-to-date catalog of bowling centers and in verifying the legitimacy of the request to take over a bowling center (Art. 6(1)(f) GDPR).

A document submitted for verification is accessible only to the Platform's administrators and is used solely to verify the request. We retain the contact details for as long as the bowling center is published in the catalog.

B.6. Content Moderation and Reporting of Criminal Offences

When content on the Platform is reported as a suspected criminal offence, we create an independent case record with a frozen snapshot of the reported content, the affected user and the reporting person (including images).

For this purpose we process your Personal Data Relating to Criminal Offences in Connection with Content Moderation.

This is processing of personal data relating to criminal offences under Art. 10 GDPR. We process these data only to the extent necessary to fulfil the obligations imposed on us by law, in particular Regulation (EU) 2022/2065 (DSA) and criminal law, and for the establishment, exercise and defence of legal claims. The legal basis is compliance with our legal obligation and our legitimate interest in protecting the Platform and defending against false accusations.

Retention. If a report is not confirmed as a criminal offence, we automatically delete the snapshot 30 days after the decision; only a minimal audit record that the report was made and how it was resolved is kept. Confirmed cases are retained as evidence until the matter is closed, within a period tied to the applicable limitation periods for criminal prosecution.

Restriction of the right to erasure. While a report is under review, deletion of the affected account may be restricted, and if the report is confirmed, the account is blocked. This is a statutory restriction under Art. 17(3) GDPR (compliance with a legal obligation and the establishment, exercise or defence of legal claims). The reporting person's identity is visible only to our administrators and is not disclosed to the reported person, except where its disclosure is required in criminal proceedings by law enforcement authorities or a court. The reporting person's identity is excluded from the reported person's data export.

B.7. Platform Security

We process your personal data for the purpose of preventing attacks, protecting user accounts and verifying that the Platform is not being used by automated software (CAPTCHA).

For this purpose we process your Platform Usage and Security Data and Cookie Data (Cloudflare Turnstile).

The legal basis for this processing is our legitimate interest in the secure operation of the Platform (Art. 6(1)(f) GDPR).

We retain security records for the period necessary to ensure the security of the Platform.

B.8. Platform Operation and Cookies

We process your personal data to ensure the functioning of the Platform, in particular to keep you logged in during a session, to protect forms against cross-site request forgery (CSRF) and to remember your selected language.

For this purpose we process your Cookie Data.

These are exclusively technical cookies strictly necessary for providing the Platform, which under Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications, do not require your consent; the Platform therefore does not display a separate cookie banner. The legal basis is our legitimate interest in the proper functioning of the Platform (Art. 6(1)(f) GDPR). We do not use analytics or advertising cookies. You can disable cookies in your browser settings; logging in and other features will then stop working.

Cookie Data are processed for the duration of your session on the Platform, and at most for the lifetime of the relevant cookie.

B.9. Compliance with Legal Obligations

If you make payments in connection with using the Platform, we also process your personal data for the purpose of complying with our legal obligations, in particular in the area of tax and accounting (issuing documents, keeping accounting records).

For this purpose we process your Identification and Registration Data, to the extent required by the applicable laws.

The legal basis for this processing is compliance with our legal obligations (Art. 6(1)(c) GDPR).

The data are processed for the period laid down by law, which in the area of accounting and taxes is generally up to 10 years.

B.10. Internal Records, Statistics and Protection of Our Rights

We may process your data for the purpose of keeping internal records, compiling statistical overviews of the Platform's operation (e.g. the number of registrations and active users) and protecting our rights and legal claims, including defence against any claims you may bring.

For this purpose we process your Identification and Registration Data (including the date of registration), Tournament Registration Data, Marketplace Data and Platform Usage Data (the time of your last activity).

The legal basis for this processing is our legitimate interest in keeping internal records and statistics and in protecting our rights (Art. 6(1)(f) GDPR).

The data are processed for the duration of the limitation periods, which is typically 10 years from the occurrence of the events from which the limitation period runs.

We do not sell your personal data. We may share them with the following recipients:

providers of services for delivering e-mails and browser notifications;
Cloudflare, Inc. — protection against attacks and CAPTCHA;
providers of the Platform's hosting and technical infrastructure;
map data providers Mapy.com and OpenStreetMap (Nominatim) for displaying maps and looking up the location of bowling centers; when you use a map, your IP address may be transmitted to the map service provider;
the external sign-in provider (Google, Facebook, Microsoft or X), if you choose to use this option;
the organizer of the specific tournament, to the extent of the Tournament Registration Data under Section B.3;
tax authorities and other public authorities in the course of complying with legal obligations under Section B.9;
law enforcement authorities and courts, where a suspected criminal offence is reported under Section B.6 or on the basis of another legal obligation.

If we share your personal data with recipients outside the European Economic Area — typically with Cloudflare, Inc., based in the USA — we do so only on the basis of appropriate safeguards under Art. 44 et seq. GDPR, in particular standard contractual clauses.

D. Your Rights in Relation to Processing and How to Exercise Them

You have the right to (i) request access to your personal data; (ii) withdraw consent; (iii) request rectification of your personal data; (iv) request erasure of your personal data; (v) request restriction of processing; (vi) request portability of your personal data; (vii) object to processing; or (viii) lodge a complaint with a supervisory authority.

Right of access. You have the right to obtain from us confirmation as to whether we process your personal data and, if so, to receive a copy of them together with information about the purpose and scope of processing, the recipients of the data and the retention period.

Right to withdraw consent. Where processing is based on consent (see Section B.3), you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to rectification. You have the right to request rectification of inaccurate or completion of incomplete personal data. Most data can be corrected directly in your account settings.

Right to erasure. You have the right to request deletion of your personal data where they are no longer necessary for the purposes for which they were collected, or where you withdraw consent and there is no other legal basis for the processing. Your account can be deleted in your account settings. This right is restricted to the extent described in Section B.6 (content moderation and reporting of criminal offences) for the period stated there.

Right to restriction of processing. You have the right to request restriction of the processing of your personal data, for example while their accuracy is being verified or after you have lodged an objection.

Right to data portability. You have the right to receive the personal data you have provided to us and which we process by automated means on the basis of a contract or consent, in a structured, commonly used and machine-readable format.

Right to object. You have the right to object to processing carried out on the basis of our legitimate interest (see Sections B.1, B.3, B.5, B.7, B.8 and B.10). We will stop processing your data unless there are other overriding grounds for the processing or unless the processing is necessary for the establishment, exercise or defence of legal claims.

To exercise these rights, contact us at info@bowlmine.com. We will respond to your request without undue delay and at the latest within one month; in justified cases this period may be extended by a further two months.

E. Right to Lodge a Complaint

In addition to exercising your rights directly with us, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In the Czech Republic, the supervisory authority is the Úřad pro ochranu osobních údajů (Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

F. Automated Decision-Making

As part of operating the Platform, we automatically evaluate game results and statistics (scores, rankings). This is not automated decision-making or profiling within the meaning of Art. 22 GDPR that would produce legal effects concerning you or similarly significantly affect you.

G. Sources of Personal Data

We obtain your personal data primarily directly from you, when you register, register for a tournament, post a listing in the marketplace or otherwise communicate with us.

In some cases we obtain them from third parties:

from a tournament organizer, if they register you for a tournament on your behalf, including bulk entry of a list of participants (Section B.3);
from a bowling center operator, if they list you as the bowling center contact person in the catalog (Section B.5);
from publicly available tournament and results websites (Section B.3);
from an external sign-in provider, if you choose to sign in via Google, Facebook, Microsoft or X (Section B.1).

H. Changes to This Information on Processing

We are entitled to change this information on processing from time to time, so please check it regularly. We will publish any changes to this document on the Platform.

This document is effective from 3 October 2026.