Privacy policy

This policy covers the three services of the NGO Debate Federation of Ukraine: uadebate.com, the Federation's public site; cab (cab.uadebate.com), where debate clubs run their sessions; and the DFU cabinet (dfu.uadebate.com), for members of the organisation. It follows the Law of Ukraine «Про захист персональних даних» (No. 2297-VI) and, for people in the European Union, the GDPR. The services are in beta testing; when we change this policy we update the date above and say so on this page.

Who we are

The services are run by the NGO Debate Federation of Ukraine (ВМГО «Федерація Дебатів України»), the controller of the personal data described here. Address: [legal address]. ЄДРПОУ: [code].

Questions and requests about your data: [email protected]. Questions about the organisation: [email protected].

One sign-in for all three

You sign in through cab only. uadebate.com and the DFU cabinet keep no accounts or passwords of their own: each keeps only the role it gave you, linked to your cab account, and asks cab who you are.

cab

Your account. When you sign in with GitHub or Google we receive and keep your name, e-mail address, picture link and your account number there (and your GitHub username). We never see your password. Each sign-in method is its own cab account unless you link them on your Account page. We use these to sign you in and to show your name on rosters and draws. You can change your display name on your Account page.

Club membership. When you ask to join a club we keep your request, the message and the contact you wrote for the club head, your role and the dates. The club head reads them to decide on your request.

Debates. For each session you take part in we keep your registration, your seat in the draw, the motions, the ballots and scores, and the results. Standings and your personal statistics are computed from exactly these records.

Guests. If you register without an account we keep the name you enter and a personal link to that one session. If a club head adds you by name, the same applies.

Invitations. A club head can add a registered person by their exact username or e-mail. We keep the invitation until you accept or decline it. An address a club head types to send someone their personal link or an invitation is used once to send that e-mail and is not stored. An address a platform admin types to invite someone to head a club is kept only until the invitation is accepted, cancelled or expires (after 14 days).

Feedback on adjudicators. After a room's ballot is in, each team can send one feedback on its adjudicator: two scores from 1 to 10 and a written discussion, kept with the debate's results. The team that sent it and the club head see it with the team's name; the adjudicator sees it without the team's name once the club head finishes the session. Everyone sees each adjudicator's average, where a base of 5 counts as one vote.

Who can see what. Club pages, session pages, draws and results are public, so anyone can see the names in them. A club can make its standings and roster visible to members only. Your account details, e-mail and join-request messages are never public.

How long we keep it. Your account stays until you ask us to delete it. Results are the record of a debate and stay; when an account is deleted, its name in past results is replaced, so history stays complete without identifying you. Leaving a session before you are seated in a room, or being removed by the club head, deletes your name from it. A guest who leaves or is removed loses the guest account and the personal link. A guest who later signs in can move their results into their account, and the guest record is deleted.

Legal basis: providing the service you asked for (GDPR Art. 6(1)(b); Law 2297-VI Art. 11), and our legitimate interest in running safe, fair debate sessions and keeping their results (GDPR Art. 6(1)(f)).

uadebate.com

Visitors. The public site needs no account, sets no cookies and never checks whether you are signed in: every visitor sees the same pages.

What the site publishes. News, the calendar of tournaments and events, and the directory of clubs with the city, schedule and contacts each club chose to publish. News and event pages may name people and show their photos [how consent to publish names and photos is obtained].

Content managers. People the Federation asks to edit the site get a content-manager role. We keep that role, who granted it and when, and your name as the author or editor of what you publish. Removing the role keeps the authorship of what was already published.

Legal basis: our legitimate interest in informing the debate community about the Federation's work (GDPR Art. 6(1)(f)).

DFU cabinet

The DFU cabinet is only for members of the organisation and is closed to everyone else.

Member registry. Your name, contact details, branch, the dates of your membership and your roles in the organisation.

Documents and cases. Incoming and outgoing documents are registered with a journal number and kept with the case they belong to, together with who registered, sent or handled them.

Votes. For each vote we keep who could vote, who signed and the result; how each person voted is kept only for a named vote, never for a secret ballot. [who may see individual votes, per the statute]

Public documents. Documents the Federation marks as public are also published on uadebate.com; the rest stay inside the cabinet.

Legal basis: your membership under the Federation's statute (GDPR Art. 6(1)(b)), the Federation's duties to keep records as a public organisation (GDPR Art. 6(1)(c)) and its legitimate interest in running its governance (GDPR Art. 6(1)(f)). [how long the registry, documents and votes are kept under record-keeping rules]

For all three services

Technical data. Our web servers log each request (IP address, page, time and browser) to keep the services secure and working. These logs are kept for [retention, e.g. 14 days].

Cookies and browser storage. One cookie keeps you signed in to cab; the editing part of uadebate.com and the DFU cabinet use the same sign-in. It is strictly necessary and needs no consent. Your theme choice (light, dark or system) is kept in your browser only and never sent to us. None of the services use analytics, advertising or third-party trackers, and their pages load nothing from other companies.

Who else handles the data. GitHub and Google handle your sign-in when you choose them. Hetzner hosts our servers in [data centre location]. We sell or give your data to no one.

Your rights

You can ask to see your data, correct it, delete it, restrict or object to how we use it, and get a copy to take elsewhere. Write to [email protected] and we answer within 30 days.

You can also complain to the Ukrainian Parliament Commissioner for Human Rights (Уповноважений Верховної Ради України з прав людини) or, in the EU, to your data protection authority.

Children

Many debaters are at school. If you are under 14, a parent or guardian should agree to your registration and can make any request on this page for you. [confirm the age with a lawyer]