Privacy Policy

1. Data controller

The controller of your data is [NOMBRE Y APELLIDOS], holder of ID No. [DNI], resident at [DOMICILIO], owner and operator of the TerpsScore service. For data protection matters you can contact [email privacidad].

Technical support and hosting are provided by Resolutiva acting as data processor, on behalf of and under the instructions of the controller, under a processing agreement that guarantees the security measures required by the GDPR.

2. Data we collect

Registration and account data: name, email, password (always stored encrypted with bcrypt, never in clear text), preferred language, and confirmation that you are over 18.

Participation data: the sample photos you upload, the categories you enter, and your competition and scoring history. We do not collect payment data: financial transactions take place off-platform.

3. Purpose of the processing

We process your data to create and manage your single global account, enable your enrolment and participation in competitions, run anonymous judging and the publication of results, and send you service communications necessary for the operation of the platform.

4. Legal basis for the processing

The legal basis is the performance of the service contract you accept upon registration (art. 6.1.b GDPR) for managing your account and participation; your consent (art. 6.1.a GDPR) given expressly when accepting the policies at registration; and our legitimate interest (art. 6.1.f GDPR) in ensuring the security of the platform.

5. Retention period

We retain your data for as long as your account remains active. After you close your account, we will keep it blocked during the applicable legal limitation periods and, once these elapse, we will delete it. Sample photos are kept according to the competition lifecycle and your per-sample privacy settings.

6. Location and storage of data

Accounts and activity data are stored in a PostgreSQL database hosted on a server located in the European Union. Sample photos are stored in Cloudflare R2 (private bucket “terpsscore-media”) with data residency in the European Union (Western Europe region).

We do not carry out international data transfers outside the European Economic Area.

7. Recipients and data processors

Your data is only shared with the providers that deliver the service as data processors: Resolutiva (technical support and hosting) and Cloudflare (file storage in the EU). We do not sell or transfer your data to third parties for advertising purposes.

8. Off-platform payments

TerpsScore does not take part in any payment: the enrolment fee is paid directly between the competitor and the event organizer. We therefore do not process any banking or payment data.

9. Anonymity and visibility of samples

During judging, samples are presented anonymously to the jury, who never know the identity of the competitor. Once voting closes, the podium and ranking may show the competitor's name together with their sample and category.

The sample gallery is anonymous by default. You control, from your profile and sample by sample, whether your photo is made public or stays private.

10. Rights of data subjects

You can exercise your rights of access, rectification, erasure, portability, objection and restriction of processing by writing to [email privacidad], proving your identity.

If you believe the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

11. Data security

We apply technical and organizational measures to protect your data: passwords are stored encrypted with bcrypt, the session is managed with an httpOnly and secure cookie, and transmission always takes place over HTTPS.

12. Minimum age

Access to TerpsScore is strictly restricted to people over 18. We do not knowingly register or process data of minors.

13. Cookies

TerpsScore only uses one essential technical cookie to keep your session logged in. You will find the details in our Cookie Policy.

14. Applicable law and jurisdiction

This policy is governed by Spanish law. The courts and tribunals of Spain shall have jurisdiction to resolve any dispute.

15. Changes and prevailing version

We may amend this Privacy Policy to adapt it to legal or service changes; the version in force will always be the one published on this page. In the event of any discrepancy between the versions in different languages, the Spanish version shall prevail.