Last updated: 18 March 2026
1. Introduction
We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection laws. This Privacy Policy explains how personal data is collected, processed, and protected when you use our fishing competition website ("Platform"). By registering for an account and using the Platform, you agree to the practices described in this Privacy Policy.
2. Data Controller
The Data Controller responsible for the processing of personal data on this Platform is: Open Fishing Cup 4072 Alkoven, Österreich Email: admin@openfishingcup.com
3. Personal Data We Collect
When you create and use a user profile on the Platform, we may collect and process the following personal data: Account Information: • Full name • Date of birth • Address • Email address • Username • Password (encrypted) User Generated Content: • Photos uploaded to competitions • Profile pictures • Comments • Likes and reactions • Competition participation data Technical Data: • IP address • Device information (screen resolution, hardware concurrency, operating system) • Browser type and user agent • Log files • Usage and interaction data • Push notification tokens (on mobile devices) • Device fingerprint data (on mobile app only — canvas rendering, WebGL renderer/vendor, timezone, screen dimensions) used for fraud prevention and single-device enforcement Location Data: • GPS coordinates (when submitting a catch, with your permission) • Reverse-geocoded location names derived from GPS coordinates
4. Use of Artificial Intelligence
You acknowledge and agree that any personal data and user-generated content submitted to the Platform, including uploaded photos, comments, and interaction data, may be processed using artificial intelligence (AI) technologies. AI-based processing may be used for purposes including but not limited to: • Competition administration • Content moderation • Fraud detection • Ranking and scoring support • Platform improvement • Performance and security monitoring AI processing is conducted exclusively within the Platform's internal infrastructure and in accordance with GDPR requirements.
5. Purpose and Legal Basis of Processing
Your personal data is processed for the following purposes: • Providing and managing your user account • Enabling participation in fishing competitions • Displaying user-generated content • Operating social interaction features (comments, likes) • Ensuring platform security • Improving platform functionality • Sending informational and promotional communications (with separate consent) • Fraud prevention and abuse detection via device fingerprinting The legal bases for processing are: • Article 6(1)(b) GDPR – performance of a contract • Article 6(1)(f) GDPR – legitimate interests (security, fraud prevention, device fingerprinting) • Article 6(1)(a) GDPR – consent (e.g., marketing emails, analytics cookies)
6. Publicly Visible Information
The Platform ensures that the following personal data is never publicly accessible without your consent to other users or visitors: • Full name • Date of birth • Address • Email address Only voluntarily submitted user content such as: • Uploaded photos • Uploaded catch information • Username • Bio • Country • Social media profiles • Comments • Likes may be publicly visible within the Platform.
7. Data Processors and Third-Party Services
Your personal data is never sold or rented. However, we use the following third-party data processors to operate the Platform. Each processor acts on our behalf and is bound by data processing agreements: • Google Analytics & Google Tag Manager — Website analytics and usage tracking (IP address, device info, browsing behavior). Only active when you consent to analytics cookies. • Google AdSense — Displaying advertisements (IP address, device info, browsing behavior). Only active when you consent to marketing cookies. • Google Firebase Cloud Messaging (FCM) — Delivering push notifications to your mobile device (push notification token, device platform). • Brevo (Sendinblue) — Sending transactional and marketing emails (email address, name, country). Marketing emails require separate newsletter consent. • Lovable AI Gateway — AI-powered image analysis for species detection, photo authenticity verification, length measurement, and recapture detection (uploaded photos, catch metadata). • SightEngine — Automated content moderation for uploaded images (nudity, violence, offensive content detection) and text moderation for comments, captions, bios, and display names. Also used for AI-generated image detection (uploaded photos, user-submitted text). • Geoapify — Reverse geocoding and water body detection from GPS coordinates (latitude, longitude), based on OpenStreetMap data. No personal data is shared with third parties for their own independent commercial purposes.
8. Email Communication
The Platform sends transactional emails related to your account (e.g., password resets, competition notifications). These are necessary for the operation of the Platform. Marketing and promotional emails are only sent if you have given separate, explicit consent via the newsletter opt-in toggle in your profile settings. You may withdraw your consent and unsubscribe at any time via: • The unsubscribe link in each marketing email • Your profile notification settings on the Platform
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against: • Unauthorized access • Loss or destruction • Alteration • Disclosure
10. Data Retention
We retain personal data for the following periods: • Account data (name, email, profile): Retained until you delete your account. Upon account deletion, data is permanently removed within 30 days. • Catch submissions and photos: Retained until you delete them or your account is deleted. • Push notification tokens: Automatically cleaned when they become stale (device no longer reachable). • Cookie consent preferences: Stored locally on your device until you clear them or withdraw consent. • API usage and submission logs: Retained for up to 90 days for debugging and platform improvement. • Device fingerprint data: Retained as long as your account exists, for fraud prevention. • Notification inbox: Automatically cleaned after 90 days. You may request deletion of your account and all associated personal data at any time via your profile settings or by contacting admin@openfishingcup.com.
11. Your Rights Under GDPR
You have the following rights: • Right of access • Right to rectification • Right to erasure ("right to be forgotten") • Right to restriction of processing • Right to data portability • Right to object • Right to withdraw consent at any time Requests may be submitted to: admin@openfishingcup.com
12. International Data Transfers
Some of the third-party services we use (see Section 7) are operated by companies based outside the European Economic Area (EEA), particularly in the United States: • Google LLC (Analytics, Tag Manager, AdSense, Firebase Cloud Messaging) — United States. Transfers are protected by EU Standard Contractual Clauses (SCCs) and Google's data processing terms. • Brevo (Sendinblue) — France / United States. Transfers are protected by SCCs. • SightEngine — France. Data is processed within the EU. • Lovable AI Gateway — Processing may occur outside the EEA. Transfers are governed by data processing agreements with appropriate safeguards. All transfers to third countries are made in accordance with Chapter V of the GDPR, using appropriate safeguards such as Standard Contractual Clauses adopted by the European Commission.
13. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for the Data Controller is: Österreichische Datenschutzbehörde (Austrian Data Protection Authority) Barichgasse 40–42 1030 Vienna, Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at Website: https://www.dsb.gv.at
14. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Users will be notified of any significant changes.
Artificial Intelligence (AI) Transparency Notice
Fishing Competition Platform
Last updated: 18 March 2026
1. Introduction
This Platform uses Artificial Intelligence (AI) technologies to support various internal processes related to the operation, security, and improvement of our fishing competition services. In accordance with applicable European Union legislation, including the General Data Protection Regulation (GDPR) and the EU Artificial Intelligence Act, this notice informs you about how AI systems may process personal data and user-generated content.
2. Use of Artificial Intelligence
Artificial Intelligence systems may be used within the Platform to process: • User profile information • Uploaded photos • Comments • Likes and user interaction data • Competition participation data • Technical and usage data AI-supported processing may include automated analysis of user-generated content and behaviour within the Platform environment.
3. Purpose of AI Processing
AI technologies may be used for the following purposes: • Administration of fishing competitions • Automated content moderation • Fraud prevention and abuse detection • Detection of rule violations • Ranking and scoring assistance • Prevention of duplicate or manipulated submissions • Platform performance optimization • IT security monitoring • Improvement of user experience
4. Nature of AI-Based Processing
AI systems used by the Platform may: • Analyse uploaded competition photos • Review comments for compliance with community guidelines • Identify potentially suspicious or fraudulent activity • Support competition result validation • Detect spam or automated behaviour • Evaluate platform usage trends These processes may involve automated decision-support mechanisms.
5. Human Oversight
AI systems do not make legally binding decisions independently. Where automated processing materially affects users (e.g. disqualification of a competition entry or restriction of content), such outcomes are subject to human review and verification.
6. Data Sources Used by AI Systems
AI systems may process: • Data directly provided by users • User-generated content • Interaction data within the Platform • Technical and device-related data Photos and catch metadata may be sent to external AI providers (Lovable AI Gateway) for analysis. No external data sources are used to profile users.
7. Data Sharing
Personal data processed by AI systems: • Is not sold • Is not used for external advertising purposes AI processing may involve transmitting data to external AI service providers (see Section 7 of the Privacy Policy for details). These providers act as data processors under contractual agreements and do not retain or use the data for their own purposes.
8. Legal Basis for AI Processing
AI-supported processing is based on: • Article 6(1)(b) GDPR – Performance of a contract • Article 6(1)(f) GDPR – Legitimate interests • Article 6(1)(a) GDPR – Consent (where applicable)
9. Your Rights
Under GDPR, you have the right to: • Request information about automated processing • Obtain human intervention • Contest decisions based on automated processing • Request correction or deletion of personal data • Withdraw consent where processing is based on consent Requests may be submitted to: admin@openfishingcup.com
10. Updates to this Notice
We reserve the right to update this AI Transparency Notice at any time to reflect technological, legal, or operational changes.