I. About this policy
TravelLab Solutions GmbH in Vienna organises the Adria Soccer Cup and runs adriacup.com. This policy explains which personal data we process when you visit the website, when your club applies, and when your team plays at the tournament. It also explains why we do it and what your rights are.
We provide this information under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR). Our full contact details are in section X.
The website is made for clubs, coaches and team officials. Players take part through their clubs. We do not ask children to enter any data on this website.
II. When you visit our website
Every time you open a page, our web server, run by Hetzner Online GmbH in Germany, records technical data. This includes your IP address, the date and time, the pages you open, the page you came from, your browser, operating system and device type.
We use this data to show you the website, keep it secure, find errors and block attacks. Our security software also records the IP address of suspicious requests.
- Legal basis: our legitimate interest in a safe website that works (Art. 6(1)(f) GDPR).
- Fonts: the fonts on this website are loaded from our own server. No data goes to Google Fonts.
- Social media: our links to Instagram, TikTok and Facebook are plain links. Those platforms only receive your data when you click a link and open their site.
III. Cookies and similar technologies
We use a few cookies. Some are needed to run the website. Others measure visits and help us show Adria Soccer Cup ads to coaches and clubs.
III.1 Necessary
Your choice in the cookie banner is saved in your browser so we do not ask again. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). These are strictly necessary under § 165(3) of the Austrian Telecommunications Act (TKG 2021).
III.2 Statistics
We use Google Analytics 4 through Google Tag Manager. It shows us which pages are visited, how long people stay, the approximate region, the device type, and how visitors found us. Google Analytics 4 does not store full IP addresses.
III.3 Advertising
- Google Ads: measures which ads lead to a registration and lets us show ads to people who visited our website.
- Meta Pixel (Facebook and Instagram): measures which Meta ads lead to a registration and lets us show ads on Facebook and Instagram to people who visited our website.
For the collection and transfer of data through the Meta Pixel, we and Meta Platforms Ireland Ltd. are joint controllers (Art. 26 GDPR). Meta’s Controller Addendum applies. Meta is responsible for everything that happens with the data after it reaches Meta.
III.4 When these tools run and how to switch them off
Statistics and advertising tools start when you open our website. Legal basis: our legitimate interest in measuring and promoting the tournament (Art. 6(1)(f) GDPR).
- Google Analytics and Google Ads: choose “Only necessary” in the cookie banner, or later under “Cookie settings” in the footer. Google may still receive basic signals without cookies or identifiers, for example that a page was viewed.
- Meta Pixel: this is not switched off by the cookie banner. You can object at any time by email (section X), and you can manage ads from Meta in your Facebook or Instagram ad settings.
III.5 Cookies we use
| Name | Provider | Purpose | Kept for |
|---|---|---|---|
| asc_consent (browser storage) | Adria Soccer Cup | Saves your cookie banner choice | Until you delete it |
| _ga | Tells visitors apart for statistics | 2 years | |
| _ga_WQMWQGJQHG | Keeps the visit session for statistics | 2 years | |
| _gcl_au | Links ad clicks to registrations | 90 days | |
| _fbp | Meta | Recognises the browser for Meta ads | 90 days |
IV. Tournament registration and participation
When your club applies, we use your details to handle the application. If your team takes part, we use the team’s data to organise its stay and its matches.
IV.1 Application form
The form asks for the tournament, team name, age category, country, and the contact person’s name, role, email and phone number. Team achievements, team website and how you heard about us are optional. We use these details to review the application, contact you and send you an offer.
- Legal basis: steps before a contract, at your request (Art. 6(1)(b) GDPR).
- Required fields: without them we cannot process the application.
- Where it goes: your entry is saved in our website database and sent to our team by email.
IV.2 Taking part in the tournament
After we confirm a team, the club sends us what we need to run the tournament:
- names and years of birth of players, to check the age category
- names and roles of coaches and team officials
- rooming lists, arrival and departure details
- special requests, such as dietary needs
Legal basis: the contract with the club (Art. 6(1)(b) GDPR), and legal duties such as invoicing, accounting and guest registration by accommodation providers (Art. 6(1)(c) GDPR).
We only use health information, such as food allergies, if the club gives it to us with the parents’ consent. We use it only to plan meals and first aid (Art. 9(2)(a) GDPR).
IV.3 Schedules and results
We publish match schedules, results and standings with team and club names on our website and social media. Individual awards may name the player and the club. Legal basis: our legitimate interest in running and reporting on the tournament (Art. 6(1)(f) GDPR).
IV.4 Photos and videos
We photograph and film the tournament for our website and our social media channels. Most images show matches, ceremonies and crowds.
- General shots: based on our legitimate interest in reporting on the event (Art. 6(1)(f) GDPR).
- Content that features one player: close-ups, interviews or posts about a single player are only published if the club has confirmed the parents’ consent (Art. 6(1)(a) GDPR).
- Removal: parents can ask us at any time to remove a photo or video, through the club or directly (section X).
IV.5 Invitations to clubs
We send information about upcoming tournaments to clubs that played with us before. We also contact clubs whose contact details are public, for example on their website or in a federation directory.
Legal basis: our legitimate interest in promoting the tournament (Art. 6(1)(f) GDPR). You can object at any time, and every email tells you how.
V. How long we keep data
We keep data only as long as we need it for the purpose or as the law requires.
| Data | Kept for |
|---|---|
| Server logs | 30 days |
| Applications that do not lead to participation | Up to 3 years after our last contact |
| Participation, contract and invoicing records | 7 years (§ 132 Austrian Federal Fiscal Code, BAO) |
| Records needed for legal claims | Until the claim is settled, in justified cases up to 30 years |
| Health information (e.g. food allergies) | Deleted within 30 days after the tournament |
| Photos and videos | As long as they are published, or until you ask us to remove them |
| Club contacts for invitations | Until you object, or 3 years after our last contact |
| Cookies | See the table in III.5 |
VI. Who receives data
We share data only with partners who need it to run the website or the tournament, and with authorities when the law requires it.
| Recipient | Data | Why |
|---|---|---|
| Hetzner Online GmbH (Germany) | All website data, form entries and emails | Runs the website and its mail server |
| Our web agency (Serbia) | Website data, form entries | Maintains the website |
| Google Ireland Ltd. (Dublin) | Statistics and advertising data | Google Analytics, Google Ads |
| Meta Platforms Ireland Ltd. (Dublin) | Meta Pixel data | Meta ads (joint control, see III.3) |
| Accommodation partners in Slovenia | Names, rooming lists, dietary needs | Rooms and meals |
| Transport companies, when we book transfers | Names, arrival and departure details | Transfers |
| Venue and match officials | Team lists, years of birth | Running matches, age checks |
| Tax advisor, auditors, authorities | Invoices, records on legal request | Legal duties |
Transfers outside the EU: Google and Meta may process data in the USA. Their US parent companies, Google LLC and Meta Platforms Inc., are certified under the EU–US Data Privacy Framework, which the European Commission recognised on 10 July 2023. Where that does not apply, the EU Standard Contractual Clauses are used.
VII. Data we receive from others
- From clubs: data about players, coaches and team officials (see IV.2). Clubs must inform players, parents and officials and share this policy with them.
- From public sources: club names, addresses, general email addresses and phone numbers, and names and roles of club officials from club websites and federation directories. We use them to invite clubs (see IV.5).
- From advertising platforms: Google and Meta give us reports about our ads. These reports are statistics and do not identify you.
VIII. Automated decisions and profiling
We do not make decisions about you based only on automated processing (Art. 22 GDPR). Google and Meta use data from our website to build interest profiles, show ads and measure them. We only see the statistics in their reports.
IX. Your rights
You can contact us at any time by email or post (section X). We answer within one month.
- Access to the data we hold about you (Art. 15 GDPR)
- Correction of wrong or incomplete data (Art. 16)
- Deletion (Art. 17)
- Restriction of processing (Art. 18)
- Data portability in a common, machine-readable format (Art. 20)
- Objection to processing based on our legitimate interest, including invitations, statistics and ads, at any time (Art. 21)
- Withdrawing consent at any time, without affecting what we did before (Art. 7(3))
Complaints: if you think we break data protection law, please tell us first so we can fix it. You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, or to the authority in your own EU country.
X. Who is responsible and how to reach us
The controller is:
TravelLab Solutions GmbH
Schüttelstraße 101/17, 1020 Vienna, Austria
Phone: +43 1 388 38 83 10
Email: info@travellabsolutions.com
Company register: FN 428684 v
VAT ID: ATU69337906
We are not required to appoint a data protection officer. For any data protection question, write to the email or postal address above, subject “Data protection”.
Changes: we update this policy when our website or the tournament changes. The current version is always on this page.
Last updated: 14 October 2026
