Privacy notice (Datenschutzerklärung)
Draft — have it reviewed by a lawyer before publishing. The app processes location and message data; this notice must match.
1. Controller
[Company / name], [address], email: [email address]
2. What we process
Website: server logs (IP address, time, page requested, browser) to provide and secure the site (Art. 6(1)(f) GDPR).
Visitor statistics: for every page viewed we count, anonymously, which page it was, which other website you came from (its domain only), whether you use a phone, tablet or computer, and the page language. No cookies are set, nothing is stored on your device, and neither your IP address nor any identifier is stored — you cannot be recognised. The purpose is to improve the website (Art. 6(1)(f) GDPR). If your browser has “Do Not Track” or “Global Privacy Control” switched on, we count nothing.
Contact form: your name, email address, topic, message and, for coach applications, the link to your certificate, to answer your request. We store the message and forward it by email to our support team, based on the consent you give in the form (Art. 6(1)(a) GDPR).
Waitlist and newsletter: your email address, role and language, to tell you when we launch — and, only if you tick the second box, for the newsletter. Both start only after you confirm through the emailed link (double opt-in), based on your consent (Art. 6(1)(a) GDPR). Every email has an unsubscribe link; once you unsubscribe we stop writing to you.
App: account (name, email), sport profile, planned sessions with place and time, location (while in use, to find sessions nearby), messages, reports and reviews — to perform the service agreement (Art. 6(1)(b) GDPR).
Crash reports: when the app crashes or our server hits an unexpected error, we record the error (type, message, where in the code it happened), device model, operating system, app version and your user ID — not your name, message content, location or IP address; email addresses in error messages are masked before sending. The purpose is to find and fix errors and keep the app stable and secure (Art. 6(1)(f) GDPR).
3. Recipients and hosting
[Hosting provider, server location, data processing agreement if any]
[Email delivery service, push services (Apple, Google)]
Crash reports: Sentry, a service of Functional Software, Inc., San Francisco, USA, as our processor under a data processing agreement. Reports are stored in the EU (Frankfurt am Main). As Sentry is a US company, access from the USA cannot be ruled out; the EU Standard Contractual Clauses apply to it (Art. 46(2)(c) GDPR).
4. Retention
Account data until the account is deleted (possible in the app at any time); contact requests [period]; server logs [period]; crash reports [period]; anonymous page views 400 days; statutory retention duties remain unaffected.
5. Your rights
Access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and the right to complain to a supervisory authority.
6. Cookies and consent
The website sets one necessary cookie (“synathlos_consent”, 6 months) that stores your cookie decision. Statistics or advertising cookies are set only with your consent — no such tool is in use at present. The anonymous visitor statistics (see 2.) use no cookies. You can change your choice at any time via “Cookie settings” in the footer.