Privacy Policy

Last updated: November 2026

1. Controller

EUPLAYY gGmbH
Schleißheimer Straße 68
80797 Munich, Germany
Email: info@euplayy.com

Please contact us at this address with any questions about data protection.

2. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Germany. When you visit it, the server automatically stores browser type and version, operating system, referring page, host name, time and IP address. These data serve secure operation and are deleted after 14 days. Legal basis: Art. 6(1)(f) GDPR.

3. Cookies and cookie banner

We only use technically necessary cookies, for example for logging in, the shopping cart and remembering your choice in the cookie banner. We do not set statistics cookies. Legal basis: Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

4. Web analytics with Matomo

We use the open-source software Matomo to analyse the use of our website statistically. Matomo runs on our own server at ALL-INKL.COM in Germany; the data are not passed on to third parties. Matomo does not set cookies. Your IP address is shortened by two bytes before it is stored, so it cannot be traced back to you. We record, among other things, pages viewed, time spent, referring page, browser, operating system and approximate region. For orders, we only record which tickets or courses were booked, how many and for what amount – no names or contact details. If your browser sends “Do Not Track”, nothing is recorded.

Legal basis: our legitimate interest in analysing and improving our services (Art. 6(1)(f) GDPR). You can object to the recording at any time:

Turn off Matomo tracking for this browser

5. User account

You can create an account for the competition, courses, orders and dashboards. We store your email address, user name, password (encrypted), first and last name, language and, optionally, a profile picture and details in your public profile (e.g. title, nationality, city, biography, website). Public profile details of jurors, teachers, patrons and sponsors are shown on the website. Legal basis: Art. 6(1)(b) GDPR. Forms are protected against automated sign-ups with a simple arithmetic question that uses no external services. You can have your account deleted at any time.

6. Orders, tickets and invoices

When you book concert tickets or courses, we process your name, billing address, email address, the services ordered and any comments. Tickets are sent as a PDF with a QR code, which is checked at the entrance. Legal basis: Art. 6(1)(b) and (c) GDPR. We keep invoices and booking records for up to ten years because of statutory obligations.

7. Payment with Stripe and PayPal

You can pay with Stripe (Stripe Payments Europe Ltd., Ireland) or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). You enter your payment details directly with the provider; we only receive confirmation of payment. During checkout, Stripe loads a script that may collect device and usage data to prevent fraud; it is not loaded on our other pages. Data may be transferred to the USA; the providers rely on the EU-US Data Privacy Framework or standard contractual clauses. Legal basis: Art. 6(1)(b) and (f) GDPR.

8. Newsletter

For the newsletter we store your email address, language and the time you subscribed. It is sent via Amazon Web Services EMEA SARL (Luxembourg) using servers in Frankfurt am Main. We learn whether an email could not be delivered or was reported as spam and remove such addresses. We do not analyse opens or clicks on a personal level. Legal basis: your consent (Art. 6(1)(a) GDPR); you can unsubscribe at any time via the link in every newsletter.

9. Taking part in the competition and in courses

For competition registration we process name, date of birth, nationality, address, instrument, contact details, details of your teacher, and the video recordings and programmes you submit. To check your age group we may ask for a copy of an identity document; it is visible only to the competition management and is deleted as soon as it is no longer needed for this check. The jury assesses the recordings; scores and feedback are visible only to you and the competition management. Names, age group, country and placing of prize winners and selected recordings may be published on the website and at concerts. Legal basis: Art. 6(1)(b) GDPR; for publication, your consent (Art. 6(1)(a) GDPR).

Participants under 16 are registered by or with the consent of their parents or legal guardians, whose names and contact details we also store. The same applies to courses; teachers only see the names and programmes of participants.

To show where participants come from on a map, we convert places into coordinates using OpenCage (OpenCage GmbH, Germany); only city and country are transmitted.

10. Videos

Videos uploaded by participants and videos of our courses and concerts are stored with a video hosting provider based in the EU with servers in the EU, under a data processing agreement. Older recordings from earlier editions are hosted on Vimeo (Vimeo.com, Inc., USA). Legal basis: Art. 6(1)(b) GDPR.

11. Contact form and email

If you contact us by form or email, we store your details to handle your enquiry and any follow-up questions. Legal basis: Art. 6(1)(b) or (f) GDPR.

12. Storage period

We store data only for as long as necessary for the purpose or as required by statutory retention periods (invoices and booking records up to ten years).

13. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw any consent at any time with effect for the future. You can lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

14. TLS encryption and changes

This website uses TLS encryption (“https://”). We update this privacy policy when our services or the law change.