Privacy Policy

1. Controller

INCOFOR SK, s.r.o.
Račianska 151, 834 16 Bratislava, Slovak Republic
Company ID: 36 292 117 · Tax ID: 2022182162
IBAN: SK57 8330 0000 0021 0358 5784
BIC/SWIFT: FIOZSKBAXXX
E-mail: info@fantasyhockey.eu

Registered with the Commercial Register of the Bratislava III City Court, Section Sro, File No. 40195/B. No data protection officer has been appointed; the controller handles all requests through the listed e-mail.

2. Account and game delivery

We process login e-mail, password hash, nickname, account ID, sessions, lineups, leagues, scores, credit balance and settings. You can also sign in with Google; Google provides a verified email address and stable identifier so we can securely link an existing account or create a new one. The legal basis is taking steps to enter into and performing the contract under Article 6(1)(b) GDPR.

An optional avatar, bio, favourite club and team name are shown to the extent the user provides them. Nickname, team, game results and community content may be visible to other users.

3. Security, fair play and support

For the legitimate interests in protecting accounts and competition under Article 6(1)(f) GDPR, we record security events, hashed IP and browser identifiers, activity time, moderation audit, reports and support communication. If 2FA is enabled, we keep an encrypted secret and one-way hashes of recovery codes.

You may object to legitimate-interest processing; each objection will be assessed individually.

4. Payments and legal duties

For credit purchases we process order ID, package, price, currency, payment state, bank transaction IDs and variable symbol, time and transaction history. The basis is performance of the contract and compliance with tax, accounting and consumer law under Article 6(1)(b) and (c) GDPR.

Bank transfers are verified on the server through Fio API. WFM does not receive bank login credentials or card details.

5. Recipients and transfers

• WebSupport hosting, database and e-mail infrastructure,
• Fio banka for receiving bank transfers,
• technical suppliers only as necessary and public authorities where required by law.

If a supplier processes data outside the EEA, the transfer must rely on an adequacy decision or standard contractual clauses and appropriate safeguards.

6. Retention

• account and game data while the account exists, followed by deletion or anonymisation,
• security and support records only as needed to resolve incidents and defend claims,
• payment and accounting records for statutory periods, usually ten years,
• cookie consent evidence for up to three years; technical IP rate limits only briefly.

Data may be kept longer where a dispute, inspection or law requires it.

7. Your rights

You have rights of access, correction, erasure, restriction, portability, objection and withdrawal of consent where consent applies. Delete the account in your profile or write to info@fantasyhockey.eu. We may reasonably verify identity first.

You may complain to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

8. Children, automation and cookies

Independent registration is intended for users aged 16 or over. WFM does not make decisions with legal or similarly significant effects based solely on automated processing. Security signals may trigger human review.

Optional storage is governed by the separate Cookie Policy. Refusing it does not prevent account creation or basic use of the game.