Legal
Privacy Policy
Last updated: 12 June 2026
This policy explains what personal information atletiksey.com collects, why it is collected, and how it is handled. We are committed to protecting the privacy of all users, including the school athletes whose results are published on this platform.
1. Who is responsible for your data?
This platform is operated by the Ministry of Education and Human Resource Development, Republic of Seychelles ("the Ministry", "we", "us", "our"). The Ministry acts as the data controller for all personal information processed through https://atletiksey.com.
For data protection enquiries, please contact us at info@eduhq.edu.sc.
2. What personal information do we collect?
We collect the following categories of information:
Athlete and competition data
When athletes are registered for a competition, their full name, gender, age, and school are entered by authorised school officials. Competition results — finishing positions, times, and distances — are recorded during events and published publicly on this platform as part of the official competition record.
Admin and official accounts
Officials and administrators who manage the platform have an account consisting of a username and a securely hashed password. Account credentials are never stored in plain text.
Technical and access data
When you access this website, we automatically record your IP address, browser type (user agent), the pages you request, and the time of the request. These access logs are retained for security monitoring and are not used for commercial profiling.
We use a session cookie to keep you logged in if you are an authorised official. This cookie is flagged httpOnly (cannot be read by JavaScript) and Secure (only sent over encrypted HTTPS), and expires after 8 hours of inactivity. We do not use advertising cookies or third-party tracking scripts.
3. Why do we collect this information?
| Purpose | Data used | Lawful basis |
|---|---|---|
| Publishing official competition results | Athlete name, school, result | Public task / legitimate interests |
| Maintaining historical records | All competition data | Public task |
| Administering the platform | Official account details | Contractual necessity |
| Security and fraud prevention | IP address, access logs | Legitimate interests |
| Session management | Session cookie | Contractual necessity |
4. Children's data
This platform publishes results for school athletics competitions, which include participants who may be under the age of 18, and in some age groups under the age of 13.
Athletes' data (name, school, age group, results) is entered by authorised school officials acting on behalf of the competing schools. By registering an athlete, the school official confirms that appropriate consent has been obtained from the athlete and/or their parent or guardian in accordance with Seychelles education regulations and the school's participation agreement with the Ministry.
We do not knowingly collect personal information directly from children. We do not run sign-up forms accessible to the general public for data collection purposes.
Parents or guardians who believe their child's data has been recorded incorrectly or wish to request its removal should contact their school's athletics coordinator or write to us at info@eduhq.edu.sc.
5. Who can see your information?
We do not sell, rent, or share personal data with third parties for commercial purposes. Access to data is strictly limited:
- Competition results and athlete names: Visible to the general public as part of the official record.
- Admin account details: Accessible only to Super Administrators within the Ministry.
- Access logs (IP addresses): Accessible only to Super Administrators for security review.
- Password hashes: Never visible to anyone — stored only as a one-way hash.
We may disclose personal information if required to do so by Seychelles law or by a valid order of a competent court or authority.
6. How long do we keep your data?
- Competition results and athlete records: Retained indefinitely as part of the permanent official athletics record of Seychelles schools.
- Admin account data: Retained for as long as the account is active, then deleted within 30 days of account removal.
- Access logs: Retained for a maximum of 90 days, then deleted.
- Session cookies: Expire automatically after 8 hours of inactivity and are cleared on logout.
7. How do we protect your data?
We take reasonable technical measures to protect personal information, including:
The platform's security practices were reviewed by the Department of Information Communications Technology (DICT), Seychelles, to ensure alignment with modern internet security standards prior to going live.
- All connections are encrypted in transit via HTTPS/TLS.
- Passwords are stored using a strong one-way hashing algorithm and are never recoverable.
- Admin sessions use signed, short-lived JWT tokens stored in httpOnly, Secure cookies.
- Rate limiting is applied to all API endpoints to prevent brute-force attacks.
- Access to sensitive data and admin functions requires authenticated, role-based authorisation.
No system is completely secure. If you discover a security vulnerability, please report it responsibly to info@eduhq.edu.sc.
8. Your rights
Under the Seychelles Data Protection Act and, where applicable, the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate data.
- Right to erasure: You may request deletion of your data in certain circumstances. Note that official competition results form part of the permanent public record and may not be erasable in full.
- Right to object: You may object to processing based on legitimate interests.
- Right to restriction: You may ask us to restrict processing while a dispute is resolved.
To exercise any of these rights, please contact info@eduhq.edu.sc. We will respond within 30 days.
9. Third-party services
This platform does not embed third-party analytics, advertising networks, or social media tracking scripts. We do not use Google Analytics, Meta Pixel, or similar services.
This platform is hosted on a server located in Germany, within the European Union. All personal data is stored and processed on that server. Germany is subject to the EU General Data Protection Regulation (GDPR), which provides a high standard of data protection consistent with Seychelles data protection law. No personal data is transferred outside the EU except where inherent to normal internet operation (for example, DNS resolution when a user accesses the site from abroad).
10. Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect when it was last revised. We encourage users to review this page periodically.
11. Contact and complaints
For any questions about this policy or to make a data request, contact us at info@eduhq.edu.sc.
If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the relevant data protection authority in your country. In Seychelles, this is the Data Protection Commissioner under the Seychelles Data Protection Act.