Data processing agreement
This agreement applies when you as an organizer enter participant data into COMPCTRL. You are the controller and we are the processor.
Parties
Processor: Free Enterprise Invest Sweden AB, company reg. no. 559044-5986, Skolgatan 3, 271 33 Ystad, Sverige.
Controller: the company that accepts the agreement in the service through an authorized organizer, meaning the company owner or an authorized administrator. A private consumer without an organizer role does not accept this agreement.
Subject matter and duration
We process participant data solely to deliver the service according to your documented instructions. Processing continues while you use the service and during applicable retention periods.
Categories of data and data subjects
The processing covers:
- Data subjects: participants in your events and your users
- Data: name, class, format, race number, start times, results and comments
Security
We apply per-company access control, row level security in the database, encrypted transport, logging of administrative actions and least-privilege access.
Sub-processors
We use sub-processors for hosting, database, authentication, storage and system email. The current list is published on the Sub-processors page. You are informed before a sub-processor is replaced.
Assistance and incidents
We assist you with data subject rights and security measures. Personal data breaches are reported to you without undue delay after discovery.
Deletion and return
Operational event data is purged 90 days after the access period ends. Export is available before the purge. Accounting and contractual records are retained as required by law.