Privacy

Platform administrators analyse existing operational data and necessary sign-in logs internally, such as team totals, events created and sign-ins, to operate and improve the service (Article 6(1)(f) GDPR). These reports are not sent to Google.

Additional screen usage is collected only with your consent: feature area, device type, active days and time, linked to your account and team, without location or content. Only platform administrators can view these records. They are deleted after at most 90 days, on consent withdrawal or on account deletion.

Where enabled and allowed by you, the website and app use Google Analytics, through Firebase Analytics in apps (Google Ireland Limited). Google receives usage events, technical device/connection data and cookie or app identifiers, but no names, email addresses, team names, GPS coordinates or trails. Advertising IDs, Google Signals and ad personalisation remain disabled. Processing in the USA is possible and requires applicable transfer safeguards.

Optional analytics require active consent under Article 6(1)(a) GDPR; optional device storage also under Section 25(1) TDDDG. Accept all, reject all or choose individually; silence is not consent. All features remain available without analytics. Choices persist for 180 days on the website or in app account preferences.

You can change or withdraw your choice at any time under “Analytics preferences” on the website or in the user menu. Withdrawal stops future Google transfers but does not automatically erase data already held by Google. Contact us for deletion requests.

We process account details (name, email, login details), team, dog, appointment, planning and training data, optional media and messages, and information in service requests. This relies on Article 6(1)(b) GDPR (contracts and requested services). The relevant function cannot be provided without the marked required information.

Connection and security data, such as IP addresses, device details and logs, support operation, abuse prevention and legal defence (legitimate interests, Article 6(1)(f) GDPR). Legal obligations rely on point (c); consent, such as for the waiting list, on point (a).

New track lets you start, pause and finish an independent recording without an event. Raw points are saved on your device first, then in your personal server library. You may assign a role and trail later. This does not share the recording: it remains visible only to you in the app and is excluded from team exports. It is included in your personal data export and its points are removed when your account is deleted.

With device permission, the app can check your location in the background. We use it sparingly, mainly during operations and at the venue; “My position” requests it when you choose. Started recordings store your route, time and accuracy, and where available altitude, heading and speed. They can continue with the screen locked and support navigation and evaluation within the authorised team.

Disable automatic location use through the location icon or change device permissions at any time. Existing recordings remain stored. Location permission alone does not start continuous recording.

Team access follows roles and permissions; multiple memberships do not automatically connect team data. Your sharing choices, exports and monitor views may reach other recipients. Authorised staff and providers receive data needed for operation and support.

Photos, trail videos including sound and other uploaded files may be stored in IDrive e2 object storage. Each team receives a separate storage area. The region is selected using the fixed team location; EU storage is used when no location is supplied. Transfers are encrypted and file access is checked by the app. An EU storage location alone does not rule out provider access or international transfers.

For Apple or Google subscriptions, we process the product, term, purchase and contract identifiers and their account and team assignment to provide access and handle renewals, cancellations or refunds. We do not receive credit card numbers or bank account details from your store account. Test purchases are kept separate from real contracts.

Maps and weather use the JSP map platform; weather relates to the selected place and period. Depending on the function, Mapbox or OpenStreetMap map services may receive IP addresses, search terms and coordinates; route matching may send route points to Mapbox. Notifications use Apple Push Notification Service or Google Firebase Cloud Messaging (delivery identifier); email uses our mail provider. When booking, payment data goes to the provider named there, such as PayPal.

Necessary services also remain subject to data protection requirements. Transfers outside the European Economic Area require an applicable adequacy decision or appropriate safeguards. Contact us for information about the relevant safeguards.

We delete data when its purpose ends unless legal obligations or necessary legal evidence require retention. Evaluated runner recordings are kept permanently by default. With retention turned off, a 30-day deadline applies, including adopted runner recordings. Manually deleted recordings remain in the trash for 30 days. A plan change alone does not delete data.

Delivery contents: 90 days; delivery and login logs: 365 days; app notifications: 730 days; security/administrative records: up to three years. Legal records follow statutory periods. Backups require separate consideration during deletion; recipients are responsible for their exported copies.

Delete your account immediately or after 14 days with a withdrawal option. Sole team administrators choose an accepted handover or confirmed team suspension; others’ content remains. Subscriptions continue until separately canceled with the payment provider. The public deletion form requires authority verification, not sign-in.

Report shared content or personally block users. We store blocking relationships, content references, reasons, optional details and reviews. Platform administrators review reports confidentially; reported users never receive reporter identities. Details, review explanations and reporter links are removed 180 days after completion. Protective measures remain until revoked.

Necessary session data secures sign-in and forms. Settings and limited local data support use with weak connectivity. Recordings may remain on your device until uploaded.

Map content for the visited region and changes awaiting upload may be cached locally. They support display and synchronisation for your account and team, not advertising.

A support report contains your description and selected attachments. Technical details such as app version, operating system and feature area, and a map-error recording, are included only according to your choices in the report form. Map-error recordings describe requests, delays and rendering states; they contain no coordinates, trail routes, names, addresses or links. Your report is linked to your account so we can investigate and reply.

Subject to legal requirements, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests on grounds relating to your particular situation and withdraw consent for the future at any time. No solely automated decisions with legal or similarly significant effects are made.

Use our contact form or info@jsp-world.de. You may complain to a data protection supervisory authority, for example where you live or work. At the operator’s location, this is the Hamburg Commissioner for Data Protection and Freedom of Information.