BBQHub – Privacy Policy

Effective Date: February 2026
Operator: LevITec by Zauner / BBQHub
Website: https://bbqhub.eu

1. General Information

The protection of your personal data is very important to us. This Privacy Policy informs you about what personal data is processed when you visit and use the BBQHub platform, for what purposes this is done, and what rights you have regarding your data.

We process your personal data in accordance with applicable data protection laws, in particular:

the EU General Data Protection Regulation (GDPR)
the Swiss Data Protection Act (DSG)
other applicable national data protection regulations

2. Controller

The controller for data processing within the meaning of the GDPR and DSG is:

LevITec by Zauner
BBQHub Platform
Website: https://bbqhub.eu
Email: jonas@gzauner.com

If you have any questions about data protection, you can contact us at any time at the email address above.

3. Data Collected

When using the BBQHub platform, the following personal data may be processed:

3.1 Master Data

First name, Last name – for identification and contact purposes
Email address – for communication and account management
Phone number (optional) – for extended contact options

3.2 Organizational and Participant Data

Club/Team affiliation – for assignment to events and teams
Jury ID / Participant data – for event management and evaluation processes
Evaluation data – Scores, comments, and assessments within events

3.3 Technical Data

Log data – IP address, timestamps, browser information, operating system
Usage data – Access times, visited pages, click behavior on the platform
Device information – Device type, screen resolution, technologies used

3.4 Communication Data

Email correspondence – Contents and metadata of emails related to platform use
Support requests – Information from support inquiries and assistance

4. Purpose of Data Processing

The processing of your personal data is carried out for the following purposes:

4.1 Provision of the Platform

Enabling use of BBQHub features
Management of user accounts
Authentication and access control

4.2 Conducting Events

Organization and execution of BBQ events
Registration of participants and teams
Coordination of jury members

4.3 Management of Teams and Jurors

Assignment of persons to teams and events
Management of jury access and permissions
Coordination of evaluation processes

4.4 Creation of Rankings

Processing and evaluation of assessments
Calculation and publication of rankings
Creation of statistics and reports

4.5 Sending System Emails

Registration confirmations
Password reset links
Event invitations and reminders
Important system notifications

4.6 System Stability and Security

Ensuring technical functionality
Detection and defense against security threats
Error analysis and system optimization
Prevention of abuse

5. Legal Basis

The processing of your personal data is based on the following legal grounds:

If you have given us explicit consent to process your data, processing is based on this. You can revoke your consent at any time with effect for the future.

Processing is necessary for the performance of the user agreement or for pre-contractual measures taken at your request.

Processing is carried out to protect our legitimate interests, in particular:

Ensuring IT security
Improving platform functionality
Analysis and resolution of technical problems
Protection against fraud and abuse

Your interests and fundamental rights do not override our legitimate interests.

Where processing is necessary to fulfill legal obligations (e.g., retention requirements).

6. Hosting & Storage Location

The BBQHub platform operates as a cloud/SaaS solution. Your data is stored on secure servers within the European Union:

6.1 Server Locations

Primary server location: Amsterdam, Netherlands (EU)
Backup location: Amsterdam, Netherlands (EU)

6.2 Hosting Provider

Provider: myasp.net
Location: European Union
Security measures: The hosting provider has comprehensive technical and organizational security measures to protect your data

6.3 Data Transfer

Your data is not transferred to third countries outside the EU/EEA. All data processing operations take place exclusively within the European Union.

7. Email Delivery / SMTP

For sending system emails (e.g., invitations, registrations, password reset), we use external service providers:

7.1 Email Service Provider

Service: Jetmail (SMTP delivery service)
Processed data: Email addresses, technical delivery metadata (timestamps, delivery status)
Purpose: Reliable and secure delivery of transactional emails

7.2 Legal Basis

Processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest in reliable communication).

7.3 Data Transfer

Email delivery service providers process data exclusively on our behalf and are contractually obligated to comply with data protection regulations.

8. Data Processing Agreement (DPA)

8.1 Role of BBQHub

When using BBQHub for events, the following responsibilities apply:

Event organizers are considered controllers within the meaning of the GDPR for participant data they collect via the platform
BBQHub acts as a data processor according to GDPR/DSG for data processed on behalf of organizers

8.2 Data Processing Agreement (DPA)

A separate Data Processing Agreement (DPA) can be concluded if required. Event organizers who process personal data via BBQHub should request such an agreement.

8.3 Obligations as Data Processor

BBQHub commits to:

Process data exclusively according to the organizer's instructions
Take appropriate technical and organizational measures
Support data subject rights
Inform about data breaches

9. Retention Period

Personal data is only stored for as long as necessary for the respective processing purpose or as required by legal retention obligations.

9.1 General Retention Periods

Account data: For the duration of platform use plus 30 days after account deletion
Event data: For the duration of the event plus 12 months for statistical and archival purposes
Evaluation data: For the duration of the event plus 12 months
Log data: Maximum 90 days

9.2 Legal Retention Obligations

Where legal retention obligations exist (e.g., tax or commercial law requirements), data may be stored beyond the periods mentioned above.

9.3 Deletion

After expiration of the retention periods, data is automatically deleted unless its continued storage is necessary for the fulfillment of contractual or legal obligations.

10. Data Disclosure

Your personal data is generally not disclosed to third parties, except in the following cases:

10.1 Legal Obligations

When disclosure is legally required (e.g., due to official orders)
To enforce our rights or defend against claims

10.2 Contract Performance

To event organizers as part of event participation
To other participants in the same event (e.g., team lists, public rankings)

10.3 Service Providers (Data Processors)

Hosting service providers (myasp.net) – for server provision and technical infrastructure
Email service providers (Jetmail) – for sending system emails
Technical service providers – for maintenance, support, and further development

All service providers are contractually obligated to treat your data confidentially and process it only within the scope of our instructions.

10.4 No Disclosure to Third Parties for Advertising Purposes

Your data is not disclosed to third parties for their own advertising purposes.

11. Data Security

We implement comprehensive technical and organizational security measures to protect your data from unauthorized access, loss, manipulation, or destruction:

11.1 Technical Measures

Encrypted transmission (HTTPS/TLS) – all data transmissions are encrypted
Access restrictions – strict access controls at the system level
Role-based permissions – access only on a need-to-know basis
Firewall systems – protection against unauthorized external access
Regular backups – secured data backups at a separate location

11.2 Organizational Measures

Logging of security-relevant events – logging and monitoring
Access rights management – regular review of permissions
Employee training – sensitization to data protection and security
Incident response processes – procedures for handling security incidents

11.3 Updates and Maintenance

We perform regular security updates and continuously adapt our security measures to the state of the art.

12. Cookies & Tracking

12.1 Use of Cookies

The BBQHub platform currently uses exclusively technically necessary cookies to ensure platform functionality:

Session cookies – for managing user sessions
Authentication cookies – to enable logins
Security cookies – to protect against CSRF attacks
Preference cookies – for storing user preferences

12.2 Legal Basis

The use of technically necessary cookies is based on Art. 6(1)(f) GDPR (legitimate interest in platform functionality).

12.3 No Tracking

We currently do not use tracking tools, analytics software, or marketing cookies. No user profiles are created for advertising purposes.

You can delete or block cookies in your browser settings at any time. Please note that the platform may not function fully without technically necessary cookies.

13. Rights of Data Subjects

According to GDPR and DSG, you have the following rights regarding your personal data:

You have the right to obtain information about what personal data we process about you.

You have the right to request the correction of inaccurate or the completion of incomplete data.

You have the right to request the deletion of your personal data if:

the data is no longer necessary
you have revoked your consent
you have objected
the data was processed unlawfully
there is a legal obligation to delete

You have the right to request restriction of processing of your data if:

the accuracy of the data is disputed
the processing is unlawful
you need the data for legal claims
you have objected

You have the right to receive the data concerning you in a structured, commonly used, and machine-readable format and to transmit it to another controller.

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you.

If processing is based on consent, you can revoke it at any time with effect for the future.

13.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your data.

13.9 Exercising Your Rights

To exercise your rights, please contact: jonas@gzauner.com

14. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy at any time with effect for the future to adapt it to changed legal frameworks or changes to our services.

14.1 Notification

We will announce significant changes on the platform or inform you by email.

14.2 Current Version

The current version of the Privacy Policy can be found on our website at https://bbqhub.eu.

14.3 Effective Date

Effective date of this Privacy Policy: February 2026

15. Additional Information

15.1 Minors

Use of the platform is generally permitted from the age of 16. For younger users, consent from legal guardians is required.

15.2 Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15.3 Links to Other Websites

Our platform may contain links to other websites. We have no influence on their data protection practices and assume no responsibility for them.

16. Contact

For questions about data protection, exercising your rights, or complaints, please contact:

LevITec by Zauner / BBQHub
Email: jonas@gzauner.com
Website: https://bbqhub.eu

Version: February 2026

Privacy Policy