Privacy Policy

How we collect, use, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR).

1. Who we are

The data controller for your personal data is GREEK POWERLIFTING Ι.Κ.Ε (trading as "Greek Powerlifting League"), VAT 803322790, GEMI Reg. No. 194574609000, registered office at Μυκάλης 32, Πειραιάς, Greece.

For anything related to your personal data, contact us at greekpowerliftingleague@gmail.com.

2. What data we collect and from where

We do not use tracking cookies, advertising pixels, or third-party analytics on this website. Your language and theme (light/dark) preference is stored only locally in your browser and is never sent to us.

We collect personal data at the following points:

2.1 Website contact form

When you use the contact form at /contact, we collect your name, email, and message. The form is delivered via the FormSubmit.co service directly to the federation's email — it is not stored in any database of ours.

2.2 Competition registration

Athletes register for competitions using the registration form on our website, on each event's page. We collect: full name, e-mail, phone, date of birth, sex, club (optional), the divisions and disciplines you enter, country, Instagram handle (optional), ID card or passport number, weight class, equipment and best total (optional), a link to your openpowerlifting.org profile (optional), any optional extras you order, and your consents — with the timestamp, language, and version of the text you read.

Your Instagram handle, if you give one, is used solely to tag you in the meet's social media posts. It is optional and has no bearing on your entry.

Your identity document number is collected for one purpose only: verifying at weigh-in that the person competing is the person entered. It is not used for anything else and is not shared with third parties.

On the form you submit a health declaration electronically (solemn declaration under art. 8 of Greek Law 1599/1986), which replaces the paper form previously signed by hand. We store the name you declared and the time of submission, as evidence of the declaration.

Some competitions may additionally require a medical fitness certificate from a cardiologist. That is sensitive health data, collected solely for your safety while competing, and where it is required this is stated explicitly on that competition's form.

The entry fee is processed by Viva Payments (Viva.com Smart Checkout). Your card details are entered directly into Viva's environment — they never pass through or get stored by us. From Viva we receive only the transaction reference, the amount, and the outcome of the payment.

If payment is not completed, your provisional entry is deleted automatically within 30 minutes, along with all personal data and any attached files.

Once payment is confirmed you receive a confirmation e-mail and the organising committee is notified of the new entry. A committee member may follow up with you by e-mail about the competition.

2.3 Informational messages (SMS / e-mail)

When registering for a competition you may be asked for separate, explicit consent to receive SMS or e-mail updates about our activities and events. This consent is optional and can be withdrawn at any time by contacting us.

2.4 Photography and video at competitions

Photography or video may be taken at competition venues (excluding changing rooms and restrooms) to promote the event on our social media (Facebook, Instagram, YouTube), our website, and printed materials. This material may also be shared with the event's sponsors, solely for their own promotional purposes. Competing in an event requires your explicit consent to the above, given at registration.

2.5 Competition results and records

Your name and competition performance (weight class, lift results, total) are published publicly on our Events and Records pages, as part of the federation's official competitive record. The same data is also submitted and permanently published on the international database openpowerlifting.org, which operates independently of us. Deletion requests concerning openpowerlifting.org must be made directly to them.

2.6 Committee members

The name, role, short bio, and photo of the governing committee's members are published on the About page, as information of public interest for the federation's operation.

3. Legal basis for processing

We process your data based on: (a) your explicit consent (informational messages, photography/video), (b) performance of the competitive "contract" of your participation in an event (registration data, payment of the entry fee, health declaration and cardiologist certificate for safety), (c) compliance with our legal obligations (tax and accounting records for payments), and (d) our legitimate interest as a sports federation in maintaining and publishing an official competitive record (event results), and in keeping evidence of the consents and declarations you submitted.

4. Who we share data with

FormSubmit.co (contact form delivery), Viva Payments (entry fee processing), Sanity.io (website content hosting and storage of entries), Resend (confirmation and notification e-mail), Vercel (website hosting), openpowerlifting.org (public publication of competitive history), and event sponsors/social media platforms where promotional photo/video material is published, as described in section 2.4.

5. Retention period

Competition registration data is kept for as long as necessary for the event and the federation's records, or until you request its deletion. Competition results (name, performance) are kept permanently as part of the official competitive record, as is standard practice for sports federations. Consent for informational messages remains valid until you withdraw it.

6. Your rights

You have the right to access your data, correct inaccuracies, request deletion ("right to be forgotten"), restrict or object to processing, and withdraw your consent at any time, without affecting the lawfulness of processing carried out before that. To exercise any of these rights, email greekpowerliftingleague@gmail.com stating your request (e.g. "Access to my data" or "Right to be forgotten"). We will reply within the following business days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Λ. Κηφισίας 1-3, 115 23 Athens, Greece, www.dpa.gr) if you believe our processing of your data violates the General Data Protection Regulation (GDPR).

7. Data security

We take reasonable technical and organizational measures to protect the data you entrust to us, and use reputable third-party providers (Viva Payments, Sanity, Resend, Vercel, FormSubmit) for the specific functions described above. Card details never reach our systems.

8. Changes to this policy

We may update this privacy policy from time to time. The date of the last update is shown at the bottom of this page — we recommend checking back periodically.

Last updated: August 31, 2026