You are in: Liga Nacional de Béisbol División de Honor Oro 2024 Leave the tournament

Privacy Policy

1. Introduction

Diamond Core ("we", "us", "our") operates a baseball and softball scoring and statistics platform. This Privacy Policy explains how we collect, use, store, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR) and applicable local data-protection legislation.

2. Data Controller

The data controller responsible for this site is Antonio Pérez, who operates Diamond Core as an individual. For any data-protection question or request, contact info@diamondcore.app. A postal address is available on request.

3. What Data We Collect

We process the following categories of personal data:

3.1 Account Data

Username and email address (provided at registration)
First name and last name
Password (stored as a salted hash — we never store plain-text passwords)

3.2 Player, Coach and Official Data

Name
Year of birth
Nationality / country of origin
Club and competition history, licence/registration references
Playing position, batting/throwing preferences, on-field statistics
Photograph (where available — subject to the children's rule below)

3.3 Game and Scoring Data

Game events, lineups, scoring records, and box-score statistics
These records are linked to player and team identifiers
Signatures on official game reports: the drawn signature, the signer's name and role, the date and time, and the IP address and browser of the device it was drawn on.
Team contacts: the name and e-mail address of the people a federation names to receive the calendar of a competition for a team, and whether they have asked to stop receiving it.

3.4 Technical Data

IP address (logged for security and consent audit purposes, and recorded when an authorised person signs a competition's playing rules)
Browser user-agent string (logged with consent records)
Session identifiers
Cookie preferences
A record of each visit to this site: date and time, IP address, the page requested, the site's response and how long it took, the browser or program name your device sends, and the page that linked to it. Cookies, passwords and login details are never recorded.

4. Where Player and Competition Data Comes From

Most player, team and competition information is not collected from the individuals directly. It is compiled from the public and official records of national, regional and international sports federations and their competitions, and published so that the public can follow those competitions. Individuals may contact us at any time to access, correct or request removal of their information (see Your Rights below).

5. Why We Process Data (Legal Basis)

Purpose	Legal Basis (GDPR Art. 6)
Recording and publishing competition results, standings and statistics	Legitimate interest (Art. 6(1)(f))
User authentication and access control	Contract performance (Art. 6(1)(b))
Cookie consent and preference tracking	Consent (Art. 6(1)(a))
Security logging (IP addresses)	Legitimate interest (Art. 6(1)(f))
Recording visits, to keep the site available and secure and to detect automated programs that overload it	Legitimate interest (Art. 6(1)(f))
Recording who signed a competition's playing rules, with the date, time and IP address, as proof of the decision	Legitimate interest (Art. 6(1)(f))
To record that the officials and coaches approved the official report of a game	Legitimate interest (Art. 6(1)(f))
To send the calendar of a competition by e-mail to the people a federation names for each team	Legitimate interest (Art. 6(1)(f))

6. How We Store and Protect Data

All data is stored in a PostgreSQL database hosted within the European Union, on Hetzner infrastructure in Nuremberg, Germany.
Data in transit is encrypted using TLS/HTTPS.
Access to production systems is restricted to the operator.
E-mail a federation sends from the platform (the calendar of a competition) is delivered by Brevo (France), which receives the name and e-mail address of the person written to, and the message, for that purpose only.
Visit records are kept in a separate file on our own server in the same EU data centre, readable only by the site's operator, and are not copied to backups.
Passwords are stored using industry-standard salted hashing — we never store plain-text passwords.

7. Data Retention

Account data: retained while the account is active. Deleted upon request or account closure.
Player and game data: retained for as long as it is relevant to the sporting record. May be anonymised upon request.
Consent records: retained for 3 years as required for GDPR compliance proof.
Rules signature records: the user name, date, time and IP address of the person who signed a competition's playing rules are retained while that competition is active and for 5 years afterwards. They are the proof of who took those decisions, so they are kept on the basis of legitimate interest rather than consent and are not deleted while that period runs.
Signatures on official game reports: kept with the official game report for as long as the federation keeps its competition records.
Team contacts: kept until the federation removes them. Every e-mail carries a link by which its reader stops receiving the calendar; from then on that address is not written to again. The record of each sending (to whom, when, and whether it was delivered) is kept with the competition.
Session data: automatically expires and is purged after session timeout.
Visit records: 90 days, then deleted automatically. Only daily totals, which identify nobody, are kept longer.

8. Your Rights Under GDPR

As a data subject within the EU/EEA, you have the following rights:

Right of access (Art. 15) — request a copy of your personal data.
Right to rectification (Art. 16) — correct inaccurate data.
Right to erasure (Art. 17) — request deletion of your data, including a photograph ("right to be forgotten").
Right to restrict processing (Art. 18).
Right to data portability (Art. 20).
Right to object (Art. 21) — object to processing based on legitimate interest.
Right to withdraw consent (Art. 7(3)) at any time, without affecting prior processing.

To exercise any of these rights, contact info@diamondcore.app. You also have the right to lodge a complaint with your national data-protection authority.

9. International Transfers

Your data is stored and processed within the European Economic Area (EEA). We do not transfer personal data outside the EEA.

10. Children's Data and Photographs

We do not publish photographs of players aged 14 or younger. Where such an image is identified, it is removed from that player's record and the underlying file is deleted. Other data of younger players is compiled from official competition records managed by the relevant federations, not collected directly from the children themselves.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the latest version took effect.

12. Contact

For any privacy-related question or request, contact info@diamondcore.app.