Privacy

Platform administrators analyse existing operational data and necessary sign-in logs internally, such as team totals, events created and sign-ins, to operate and improve the service (Article 6(1)(f) GDPR). These reports are not sent to Google.

Additional screen usage is collected only with your consent: feature area, device type, active days and time, linked to your account and team, without location or content. Only platform administrators can view these records. They are deleted after at most 90 days, on consent withdrawal or on account deletion.

Where enabled and allowed by you, the website and app use Google Analytics, through Firebase Analytics in apps (Google Ireland Limited). Google receives usage events, technical device/connection data and cookie or app identifiers, but no names, email addresses, team names, GPS coordinates or trails. Advertising IDs, Google Signals and ad personalisation remain disabled. Processing in the USA is possible and requires applicable transfer safeguards.

Optional analytics rely on Article 6(1)(a) GDPR; optional device storage relies on Section 25(1) TDDDG. They start only after your active consent. You can accept all analytics, reject all or choose individually. Waiting, closing or continuing to use the service does not count as consent; all features remain available without analytics. The website remembers your decision for 180 days; the app stores it in your account preferences.

You can change or withdraw your choice at any time under “Analytics preferences” on the website or in the user menu. Withdrawal stops future Google transfers but does not automatically erase data already held by Google. Contact us for deletion requests.

We process account details (name, email, login details), team, dog, appointment, planning and training data, optional media and messages, and information in service requests. This relies on Article 6(1)(b) GDPR (contracts and requested services). The relevant function cannot be provided without the marked required information.

Connection and security data, such as IP addresses, device details and logs, support operation, abuse prevention and legal defence (legitimate interests, Article 6(1)(f) GDPR). Legal obligations rely on point (c); consent, such as for the waiting list, on point (a).

With device permission, the app can check your location in the background. We use it sparingly, mainly during operations and at the venue; “My position” requests it when you choose. Started recordings store your route, time and accuracy, and where available altitude, heading and speed. They can continue with the screen locked and support navigation and evaluation within the authorised team.

Disable automatic location use through the location icon or change device permissions at any time. Existing recordings remain stored. Location permission alone does not start continuous recording.

Team access follows roles and permissions; multiple memberships do not automatically connect team data. Your sharing choices, exports and monitor views may reach other recipients. Authorised staff and providers receive data needed for operation and support.

Maps and weather use the JSP map platform; weather relates to the selected place and period. Depending on the function, Mapbox or OpenStreetMap map services may receive IP addresses, search terms and coordinates; route matching may send route points to Mapbox. Notifications use Apple Push Notification Service or Google Firebase Cloud Messaging (delivery identifier); email uses our mail provider. When booking, payment data goes to the provider named there, such as PayPal.

Necessary services also remain subject to data protection requirements. Transfers outside the European Economic Area require an applicable adequacy decision or appropriate safeguards. Contact us for information about the relevant safeguards.

We delete data when its purpose ends unless legal obligations or necessary legal evidence require retention. Team and training data follow the retention settings; evaluated runner recordings generally follow a team-dependent 30-day rule, with possible exceptions for permanent retention and adopted entries. Switching to the basic version does not delete data.

Delivery contents: 90 days; delivery and login logs: 365 days; app notifications: 730 days; security/administrative records: up to three years. Legal records follow statutory periods. Backups require separate consideration during deletion; recipients are responsible for their exported copies.

In-app account deletion has a 14-day withdrawal period. The public deletion form requires no login. Before deletion, we check your authorisation and arrange any necessary team handover.

Necessary session data secures sign-in and forms. Settings and limited local data support use with weak connectivity. Recordings may remain on your device until uploaded.

Subject to legal requirements, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your particular situation and withdraw consent for the future at any time. No solely automated decisions with legal or similarly significant effects are made.

Use our contact form or info@jsp-world.de. You may complain to a data protection supervisory authority, for example where you live or work. At the operator’s location, this is the Hamburg Commissioner for Data Protection and Freedom of Information.