Privacy statement
Provisional version of 15 October 2026. This short statement applies to korfball.sport and worldkorfball.sport, and to the IKF Korfball app. A complete version will replace it after a legal review, on this same page.
Who we are
The International Korfball Federation (IKF) is responsible for the personal data described here. The IKF is an association under Netherlands law, with its statutory seat in Zeist, registered with the Netherlands Chamber of Commerce under number 40479755.
- Address: Orteliuslaan 1041, 3528 BE Utrecht, the Netherlands
- Questions about privacy, and requests to use your rights: [email protected]
- Other questions: [email protected]
In short
- You can read our websites without telling us who you are.
- We do not sell personal data and do not use it for advertising. We use no advertising or tracking cookies.
- Videos and posts from other services, such as YouTube or Facebook, only load after you click them.
What we collect, and why
Visiting our websites. To send you a page, our server records your IP address, the date and time, the page, the page you came from and your browser type. We use this to keep the websites secure and working. All traffic passes through Cloudflare, which protects the websites against attacks and makes them faster. We count page views with Cloudflare Web Analytics, which uses no cookies and shows us only totals. When you use the search box on korfball.sport, your search words are also sent to the results database of worldkorfball.sport; searches are not stored. Legal basis: our legitimate interest in secure, working websites (Article 6(1)(f) GDPR).
The contact form. Your name, e-mail address, subject and message, and your IP address, which we use only to protect the form against abuse. Your message is stored in the website and e-mailed to the IKF office (Microsoft 365); IKF staff follow up questions in our internal system. Legal basis: our legitimate interest in answering you.
Job applications. The vacancy, your name, e-mail address, phone number, motivation, CV and IP address. Your CV is kept in a private folder on our server, outside the public website, and is never sent by e-mail. Only authorised IKF staff can open applications. Legal basis: the steps you ask us to take before a possible employment contract (Article 6(1)(b) GDPR).
Fan accounts and the Fan Zone (worldkorfball.sport). You must be 16 or older to create a fan account, and you confirm this before you sign in. You sign in with a link we e-mail to you, or with Google or Apple; that company then shares your name and e-mail address with us. We keep your e-mail address, the public name you choose, what you follow, when you signed up and last signed in, and your comments with their time and a one-way code made from your IP address, to block abuse. Your public name and your comments are visible to everyone. You can delete your account yourself on the Following page ("Delete my account"). Legal basis: the agreement to provide your fan account, and our legitimate interest in a safe Fan Zone.
The IKF Korfball app. The app shows our two websites on your phone. It contains no advertising, analytics or tracking software, and you do not need an account to use it. Only if you allow notifications on your phone, we store your device's notification token (a random code that Apple or Google gives to the app on your phone), whether it is an iPhone or an Android phone, and when the app first and last opened our website. We use it to tell you when we publish news: we send the token with the title, a short excerpt and the link of the article to Apple (iPhone) or Google (Android), who deliver the notification. We do not store your name, e-mail address or location with it. If you have a fan account and turn on notifications in the app for the teams and players you follow on worldkorfball.sport, we also keep your device's notification token and your choices (start of a match, final score, every goal) with your account, to send you those notifications in the same way. Legal basis: your consent, which you give on your phone and in the app. You can withdraw it at any time by switching notifications off in your phone's settings or by removing the app.
Results, and people in our news. Our websites publish the results of IKF competitions: names, photos, nationality, teams, matches, goals, cards, and appointments as referee, coach or jury member, also of players under 18. We do not publish dates of birth; the websites show only an age or an age category. These data come from the IKF's competition database, filled with the team lists that national federations send in and with what the match jury records. Our news shows people by name and in photos. Legal basis: our legitimate interest in publishing the results and the history of korfball. If you do not want something about you to be published, for example a photo, contact us: we look at every request.
People who manage our websites. For IKF staff and volunteers who manage content: name, e-mail address, username, password (stored in scrambled form), a second sign-in step, and the IP address and browser of each login.
Videos and posts from other services
Content from YouTube, Facebook, X, Instagram, TikTok, Google Maps, SlideShare, Issuu and The World Games only loads after you click it. Until then, nothing is sent to that service; the preview image of a YouTube video comes from our own server. After your click, that service receives your IP address and the page you are on, it may place its own cookies, and its own privacy policy applies. You can tick "Always load …" for a service: your browser remembers that choice (not in a cookie) until you undo it under "Embedded content" at the bottom of every page. Legal basis: your consent, which you give with your click.
Cookies
We only use cookies that are needed for security or for signing in: a security cookie of Cloudflare (cf_clearance), only placed when Cloudflare checks that you are a real visitor; the sign-in cookie of a fan account on worldkorfball.sport (60 days); and the sign-in cookies of the people who manage our websites. Other services only place cookies after you click their content, or, for Google and Apple, when you choose to sign in with them.
Who receives your data
We do not sell or rent personal data. We share it only with service providers who work for us (our hosting company, whose data centre is in Belgium; Cloudflare; Microsoft), with Google or Apple if you sign in with them or receive notifications from our app, with the services whose content you choose to load, and with authorities if the law requires it. Cloudflare, Microsoft, Google and Apple are based in the United States. For transfers to the United States we rely on the EU-U.S. Data Privacy Framework where the company is certified under it, and otherwise on the standard contractual clauses approved by the European Commission.
How long we keep your data
- Server logs: about five weeks.
- Contact messages in the website: 12 months; the IP address with a form entry: 30 days. Copies in the office mailbox and in our internal system: as long as we need them to deal with your question.
- Job applications and CVs: until four weeks after the vacancy closes, and at most 12 months after you applied.
- Fan accounts: until you delete yours, and automatically after 24 months without signing in. Sign-in links that were never used: 30 days. Fan Zone comments: 12 months; the code made from the IP address: 30 days.
- Notification tokens for news: until Apple or Google tells us that the token no longer works, for example because you removed the app, and at most six months after the app last opened our website.
- Notification tokens and choices with a fan account: until you sign out on that device or delete your account, until Apple or Google tells us that the token no longer works, and at most 180 days after you last opened your Following page in the app.
- Results, line-ups, goals, cards and appointments: permanently, as the record of the sport.
- Backups: 14 days on our server, and 30 days in an encrypted copy outside the server.
How we protect your data
Both websites use an encrypted connection (HTTPS), and Cloudflare protects them against attacks. Everyone who manages the websites signs in with a second step. CVs are stored outside the public website. Access to backups is limited to the IKF's own people who maintain the websites: staff and volunteers acting under the IKF's authority.
Your rights
You can ask to see the personal data we hold about you, to have it corrected or deleted, to limit or object to its use, and to receive the data you gave us in a common format. You can withdraw your consent at any time. Send your request to [email protected]; we answer within one month. If you are not satisfied, please tell us first. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the authority in the country where you live or work.