Privacy notice

Short version: we collect only what the evening needs, we never sell or share it beyond what's below, and it's all deleted 30 days after the event. You can see or delete your data yourself at any time.

Last updated 1 October 2026.

Who is responsible

Algarve Offseason is run by a private individual, Dev Nain, in Portimão, Portugal. He decides what happens to your data (the "controller" under the EU's General Data Protection Regulation, GDPR). Contact: hello@algarveoffseason.com.

What we collect for SpeedSocial, and why

• First name, gender and age: to print your card, plan the seating and balance the rounds.
• Email: to confirm your place, contact you about the event and send you your matches.
• What you're open to (friendship, dating, business): shown on your card so partners know what to expect.
• Dating preferences (who you'd like to meet, and their age range): only if you tick dating. These can reveal your sexual orientation, which the GDPR treats as a special category of data. We use them only with your explicit consent, given by ticking a separate box. You can withdraw that consent at any time by deleting your registration.
• Your picks at the event, and whether you arrived and paid the deposit.

The legal basis for the first four is that you asked to take part (GDPR Article 6(1)(b)). For dating preferences it is your explicit consent (Article 9(2)(a)). You must be 18 or older to sign up.

Who sees it

• The organiser. Nobody else can look up the list of participants.
• Other participants see only what's on your card: first name, badge number and stickers.
• Your matches. If you and another person both ticked each other for the same thing, each of you receives the other's first name, badge number and email address, and what you matched for. Nobody is told about picks that weren't mutual.

We use two service providers, under data-processing agreements:

• Supabase stores the data, in Ireland (EU). What you type in the sign-up form goes straight from your browser to Supabase.
• Google Cloud hosts the web pages, on a server in the United States. That server never receives what you type in the forms. It sees only which pages are requested, and its access logs do not record IP addresses. Google is certified under the EU–US Data Privacy Framework.

The deposit is paid outside this website, by MB WAY or bank transfer. Your bank details are never entered here.

How long we keep it

Everything about you for an event is deleted automatically 30 days after that event. You can delete it sooner yourself, as described below.

Your rights

When you sign up you get a private link. It shows everything we store about you, and it has a button that deletes it all immediately. You also have the right to have your data corrected, to object, to withdraw consent and to receive a copy. To use any of these rights, or if you've lost your link, email hello@algarveoffseason.com. If you're unhappy with how we handle your data, you can complain to the Portuguese data protection authority, the CNPD.

Cookies and tracking

None. There are no analytics, ads, social-media buttons or third-party fonts. The only thing ever stored in a browser is the organiser's own sign-in on the organiser page.