Privacy policy

This policy explains what personal data Malta International Table Tennis Club ("MITTC", "we", "us") collects through this website and the member area, why we collect it, and the rights you have over it. We follow the EU General Data Protection Regulation (GDPR) and Malta's Data Protection Act (Cap. 586).

1. Who is responsible for your data

Malta International Table Tennis Club is the data controller. You can reach us about anything in this policy at [email protected] or on WhatsApp at +35679709001.

2. What we collect

• When you ask to join: your name, email address, phone number, date of birth, playing level, an emergency contact (name and phone number) and any message you write to us.
• When you use the member area: your bookings for training sessions, when your account was approved, and when you last signed in. Your password is stored only as a secure one-way hash; we can never see it.
• Notes kept by the club: club administrators may add short notes to a member's record, for example about attendance or the training group.
• Security records: the IP address and the email or name used in sign-in attempts and join requests, kept for no longer than 24 hours to block abuse.
• When you contact us: whatever you send us by WhatsApp, email or phone.

We do not use advertising, tracking or analytics cookies, and we do not sell or rent your data to anyone.

3. Why we use it, and our legal basis

• To handle your membership (reviewing your request, creating your account, managing bookings and club news): to take steps at your request and to perform our membership agreement with you (GDPR Art. 6(1)(b)).
• To keep you safe (date of birth for age groups, emergency contact if something happens during training): our legitimate interest in running safe sessions (Art. 6(1)(f)), and your vital interests in an emergency (Art. 6(1)(d)).
• To protect the website (security records): our legitimate interest in preventing misuse (Art. 6(1)(f)).
• To meet legal duties, for example sports association or accounting requirements, where they apply (Art. 6(1)(c)).

4. Children

Many of our players are under 18. If you are under 16, a parent or guardian must make the join request for you or agree to it, and we may contact them to confirm. Parents and guardians can use all the rights below on behalf of their child.

5. Photos and results

We publish match results, team lists and photos from training and competitions on this website and our social media. If you would rather not appear, or want a photo or your name removed, tell us and we will take it down.

6. Cookies

The website sets one cookie, mittc, which keeps you signed in and protects forms against forgery. It is strictly necessary, expires when you close your browser, and does not track you. Pages with embedded content from other companies (see below) may let those companies set their own cookies.

7. Other companies involved

• Cloudflare delivers the website securely and sees basic connection data, such as your IP address.
• Google: our fonts are loaded from Google Fonts, and the Contact page shows Google Maps. Your browser connects to Google to load them, and Google Maps may set cookies.
• Twitch shows the live video on the Live page, and may set cookies when the player loads.
• WhatsApp, Facebook and Instagram (Meta) are only involved if you choose to contact or follow us there; their own privacy policies then apply.

Some of these companies may process data outside the EU. Where they do, they rely on safeguards recognised under the GDPR, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

8. How long we keep it

• Join requests we do not approve: deleted within 6 months.
• Member accounts and bookings: for as long as you are a member, then deleted within 12 months of you leaving, unless we must keep something longer by law.
• Security records: no more than 24 hours.
• Results and team lists published as part of the club's sporting history may be kept, but we will remove your name or photo if you ask.

9. How we protect it

Your data is stored on the club's own server, is not reachable directly from the internet, and is only available to club administrators. The site is served over an encrypted connection (HTTPS), and passwords are hashed.

10. Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to how we use it, and receive a copy of it in a portable format. Where we rely on your consent, you can withdraw it at any time. You can update most of your details yourself in the member area under My details; for anything else, contact us at [email protected] and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to Malta's Information and Data Protection Commissioner (IDPC) at idpc.org.mt.

11. Changes to this policy

If we change this policy, we will update the date at the top of this page. For significant changes, we will also tell members through the member area.