Privacy policyUpdated: August 2026

1. Data controller

1. The controller of your personal data is Black Belt Club MTÜ (hereinafter the Club), registry code 80375406, address Tartu mnt 87D, 10112 Tallinn, Estonia.
2. For questions about your data, contact info@blackbeltclub.eu or +372 5303 4072.
3. This page is also the privacy notice referred to in the Club rules and in the membership and tuition services agreement.

2. What data we process

1. The website contact form: name, e-mail address, phone number (if you leave one), preferred training location, the child's age range and the content of your message.
2. Trial session sign-up: the child's name and age and the parent's name and contact details submitted through the form.
3. When joining the Club: the data requested in the membership and tuition services agreement — the athlete's and the parent's names, contact details, date of birth and training group. Training attendance is managed in the Sportlyzer environment.
4. Billing: tuition and joining fee invoices and payment information.
5. Health information: important information about the child's health given to the coach by the parent (section 10 of the Club rules).
6. Photos and videos from trainings, competitions and camps (section 16 of the Club rules).

3. Why and on what legal basis

1. Answering enquiries — steps taken before entering into an agreement, and the Club's legitimate interest in replying to you.
2. Organising trial sessions and trainings and managing membership — the membership and tuition services agreement.
3. Billing and accounting — a legal obligation.
4. Health information is used only to keep the child safe during training. We only process information the parent has given us, and only to the extent necessary.
5. We do not send newsletters or advertising and do not use your data for marketing.
6. The data requested in the agreement is necessary for setting up the membership — without it the Club cannot enter into the agreement.

4. Photos and videos

1. The Club may use photos and videos taken at trainings, competitions and camps to present the Club's activities on the website and in the Club's social media channels, in accordance with the membership and tuition services agreement and section 16 of the Club rules.
2. The legal basis is the parent's consent, given when signing the membership and tuition services agreement, which can be withdrawn at any time.
3. If you do not want the athlete to be recognisable in the Club's public channels, let us know at info@blackbeltclub.eu. We will take this into account going forward and remove already published material within a reasonable time.

5. Who we share data with

1. The Club does not sell or share your data for marketing purposes.
2. We use service providers who process data on our behalf: Elkdata OÜ (Veebimajutus.ee — website and e-mail hosting), Sportlyzer OÜ (member and training group management) and Google (the trial session registration form).
3. Google may also process data outside the European Union. Google has joined the EU–US Data Privacy Framework.
4. We hand data over to public authorities only in the cases provided by law.

6. How long we keep data

1. Contact form enquiries: until the enquiry is resolved, as a rule no longer than one year.
2. Agreement and membership data: for the duration of the membership and up to three years after it ends (the limitation period for claims).
3. Accounting documents: seven years (required by the Estonian Accounting Act).
4. Photos and videos: for as long as the purpose of publication applies or until we receive a removal request.

7. Your rights

1. You have the right to access your data, have it corrected or erased, restrict processing, object to processing and withdraw your consent at any time.
2. Contact us at info@blackbeltclub.eu. We reply within one month at the latest.
3. If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee).

8. Children's data

1. The Club's trainings are aimed primarily at children. The child's data is provided, and the agreement signed, by a parent or guardian.
2. We only collect data about the child that is needed to organise trainings safely and properly.

9. Cookies

1. Cookie use on this website is described on a separate page: Cookies.

10. Changes

1. The Club may update this privacy policy. The current version is always on this page and the date of the last update is shown at the top.
2. We will notify members of significant changes by e-mail.