Privacy Policy

Last updated: August 9, 2026

This Privacy Policy explains how personal data is processed when you use the OCR Germany app or visit the OCR Germany website.

Personal data is processed only to the extent necessary to provide the website and the app, operate their technical features, ensure security, provide optional synchronization and notification features, or where you have consented to the processing.

1. Controller

The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Norman Rath
c/o OCR Germany
Thomas-Müntzer-Str. 10
04207 Leipzig
Germany
E-Mail: Click to write
Website: www.ocr-germany.info

2. Accessing the Website and Server Log Files

When you visit the OCR Germany website, the web server may automatically process technical information transmitted by your browser.

This information may include in particular:

• the IP address of the accessing device;
• the date and time of access;
• the requested page or file;
• the website from which the request originated;
• browser type and browser version;
• the operating system used;
• the amount of data transferred; and
• technical status and error information.

This data is processed to provide the website, ensure its stability and security, identify technical errors, and prevent misuse or attacks.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically functional operation of the website and the protection of our systems against misuse and attacks.

Server log data is deleted when it is no longer required for these purposes, unless further storage is necessary to investigate a security incident, comply with a legal obligation, or establish, exercise or defend legal claims.

3. Data Processing When Using the OCR Germany App

When using the OCR Germany app, certain technical information may be transmitted to servers operated for OCR Germany. This is done to provide app functionality, manage notification registrations and ensure technical compatibility.

The following data may be processed:

• the device token assigned by the respective push notification service;
• the installed app version;
• the installed app build number;
• the operating system version used on the device;
• the language configured for the app or device; and
• the status of an existing OCR Germany Plus entitlement, where required to provide the corresponding app and notification features.

The device token is used exclusively to address and deliver push notifications to the respective installation of OCR Germany.

The app version, build number and operating system version are used to manage notification registrations, ensure technical compatibility and prevent notifications from being sent to outdated or incompatible app installations.

The configured language is used to select the appropriate language for notifications and related app functionality.

The status of an OCR Germany Plus entitlement may be used to provide features and notifications that depend on the respective entitlement.

This technical data is not combined with a name, email address, user account or other information that would directly identify the user.

The data is not used for advertising, profiling, cross-app tracking or data broker purposes. The data is not sold.

4. Push Notifications

OCR Germany may send push notifications relating to events, app content, event reminders and notification categories enabled by the user.

Push notifications are delivered only if the user has granted the required notification permission through the respective operating system.

For this purpose, the app receives a device token from the respective push notification service. This token serves as the technical delivery address for the respective installation of OCR Germany.

On iOS, push notifications are delivered via the Apple Push Notification service (APNs).

On Android, push notifications may be delivered via Google Firebase Cloud Messaging (FCM).

To deliver a notification, the device token and the content of the notification are transmitted to the respective push notification service provided by the platform operator.

The legal basis for processing in connection with voluntarily enabled push notifications is Article 6(1)(a) GDPR.

Notification permission can be withdrawn at any time with effect for the future. Push notifications can be disabled in the OCR Germany settings or in the system settings of the respective device.

Once disabled, the corresponding push notifications will no longer be delivered.

Technical registration data that is no longer required will be deleted or deactivated when:

• the device token is reported as invalid by the notification service;
• the notification service is discontinued;
• a valid request for deletion is received; or
• the data is no longer required for the stated purpose.

Apple and Google process transmitted data in accordance with their respective privacy policies.

5. Local Notifications and Event Reminders

OCR Germany may allow users to create local reminders for events or other app content.

Local notifications are scheduled and managed on the user's device. The corresponding reminder data does not need to be transmitted to OCR Germany servers in order to schedule a local notification.

Users can manage reminder options within the app and may disable notification permission at any time in the system settings of the respective device.

6. Locally Stored App Data

OCR Germany allows users to store app data, for example:

• favorite events;
• event reminder settings;
• notification preferences;
• filter and sorting preferences; and
• other app settings.

This data may be stored locally on the user's device.

Locally stored app data is not transmitted to OCR Germany servers unless transmission is expressly required for a particular synchronization or technical feature described in this Privacy Policy.

Users can modify or delete locally stored data using the corresponding functions within the app.

Deleting the app may remove locally stored app data. This does not affect any storage or backup mechanisms provided by the respective operating system or platform provider.

7. Optional Synchronization via iCloud and CloudKit (iOS)

On iOS, locally stored app data may be synchronized between the user's Apple devices via Apple's iCloud and CloudKit services, provided that iCloud is available and enabled for OCR Germany.

Depending on the app features used, synchronized data may include in particular:

• favorite events;
• reminder-related settings; and
• other app data intended for synchronization.

This synchronized data is associated with the user's Apple Account within Apple's infrastructure.

OCR Germany does not create a separate user account for this purpose and does not receive the user's Apple Account password.

Data transmitted via iCloud or CloudKit is processed by Apple in accordance with the agreements and privacy policies applicable to the user's Apple Account and iCloud services.

Users can manage or disable iCloud access for OCR Germany through the iOS settings.

Disabling synchronization does not necessarily delete data that has already been stored locally or in iCloud.

8. In-App Purchases and OCR Germany Plus

OCR Germany may offer paid in-app purchases or subscriptions, including OCR Germany Plus.

Payments are processed through the respective app store operated by the platform provider.

On iOS, payments are processed by Apple through the App Store. On Android, payments may be processed by Google through Google Play.

OCR Germany does not receive or store, in particular:

• credit or debit card numbers;
• bank account details;
• Apple Account passwords; or
• Google Account passwords.

The respective platform provider may provide technical transaction information required to verify a purchase, subscription or corresponding entitlement.

OCR Germany may process the status of a Plus entitlement where this is necessary to provide the corresponding app features.

The processing of payment and account information by Apple or Google is governed by the respective contractual terms and privacy policies of the platform provider.

9. Location Data

OCR Germany may request access to the user's current location in order to provide features such as:

• finding events nearby;
• calculating the distance to events;
• sorting events by distance;
• displaying events in the surrounding area;
• displaying the user's own position in relation to event locations; or
• supporting map-related app features.

The user's current location is processed on the user's device and is not transmitted to OCR Germany servers.

Access to location data can be managed or withdrawn at any time through the privacy and location settings of the respective device.

If the user opens an event location in Apple Maps, Google Maps or another mapping or navigation app, the destination and, where necessary for the selected mapping or navigation feature, location data may be processed by the selected provider in accordance with its privacy policy.

10. Calendar Access and Event Export

OCR Germany may allow users to add an event to the calendar on their device.

Access to the calendar is requested only where required for the function selected by the user and where the respective operating system requires such permission.

When adding an event to the device calendar, information such as the event name, date, time, location and other event details may be transferred to the calendar selected by the user.

OCR Germany does not transmit the user's existing calendar content to OCR Germany servers.

Depending on the selected calendar, calendar data may be synchronized by Apple, Google, Microsoft or another calendar provider.

Such synchronization is controlled by the user's device and account settings and is subject to the privacy policy of the respective calendar provider.

11. Event Data and External Registration Links

OCR Germany provides information about Obstacle Course Racing and other sporting events.

Event information may include, for example:

• event names;
• dates and times;
• event locations;
• countries and cities;
• event categories;
• information about individual races;
• information about event organizers;
• descriptions;
• images;
• registration links; and
• other publicly available event information.

This information generally relates to events and organizations rather than individual users of OCR Germany.

OCR Germany may provide links to event organizers, ticket or registration providers and other external services.

Merely displaying a standard link does not transmit personal data to the external provider.

If the user actively opens a registration link or another external service, the respective provider may process technical information as well as any information subsequently entered there by the user.

The respective external provider is responsible for this processing. Its privacy policy and terms of use apply.

12. External Websites and Services

The website and the app may contain links to external websites or services, including:

• event organizers;
• registration and ticket providers;
• mapping and navigation services;
• calendar services;
• video platforms;
• social media services; and
• other websites related to events or app content.

Merely displaying a standard link does not transmit personal data to an external provider.

If the user actively opens an external link or service, data may be transmitted to the respective provider. The respective provider is responsible for the subsequent processing. Its own privacy policy and terms of use apply.

If content from an external provider is embedded directly rather than merely linked, technical data may be transmitted to the respective provider when the embedded content is loaded. Where this occurs, the processing is governed by the privacy policy of the respective provider.

13. Matomo Web Analytics

The OCR Germany website uses Matomo, an open-source web analytics platform, to obtain statistical information about the use of the website and to improve its content, usability and technical performance.

Matomo is operated on infrastructure controlled by OCR Germany or provided for OCR Germany.

Matomo is configured so that no analytics cookies are used. No Matomo tracking cookies are stored on the user's device.

Matomo may process technical and usage-related information such as:

• pages visited;
• date and time of access;
• the website from which the visitor arrived;
• browser type and browser version;
• operating system;
• device type;
• screen resolution;
• technical information relating to the website request; and
• the IP address transmitted as part of the website request.

The data is used to generate website statistics, identify technical problems and improve the website.

It is not combined with user accounts, names, email addresses or other information that directly identifies a visitor.

The data is not used for advertising or cross-site tracking and is not shared with advertising networks or data brokers.

The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interests are:

• analyzing and improving the website;
• identifying technical problems;
• maintaining website security; and
• operating the website efficiently.

Analytics data is retained only for as long as necessary for these purposes and is then deleted or anonymized.

Further information about Matomo is available in the Matomo Privacy Policy.

14. Recipients and Service Providers

Personal data is disclosed only where necessary for the purposes described above, where disclosure is required by law, or where the user has consented to the disclosure.

Recipients may include in particular:

• hosting and infrastructure service providers;
• Apple as the provider of APNs, iCloud, CloudKit, the App Store and other iOS services;
• Google as the provider of Firebase Cloud Messaging, Google Play and other Android services;
• technical service providers acting on our behalf;
• public authorities where disclosure is required by law; and
• legal or other professional advisers where necessary to protect legal interests.

Service providers acting on our behalf process personal data only in accordance with applicable data protection requirements and contractual instructions.

15. International Data Transfers

The use of services provided by Apple, Google or other international providers may result in personal data being processed outside the European Economic Area.

Where personal data is transferred to a country for which the European Commission has not issued an adequacy decision, the transfer is made, where required, on the basis of appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

16. Legal Bases for Processing

Depending on the respective processing activity, personal data is processed on one or more of the following legal bases:

• Article 6(1)(a) GDPR: where the user has given consent, for example for push notifications or permission-dependent device features;
• Article 6(1)(b) GDPR: where processing is necessary to provide a service requested by the user or to perform a contract;
• Article 6(1)(c) GDPR: where processing is necessary to comply with a legal obligation; and
• Article 6(1)(f) GDPR: where processing is necessary for our legitimate interests and those interests are not overridden by the interests, rights or freedoms of the user.

17. Legitimate Interests

Where processing is based on Article 6(1)(f) GDPR, our legitimate interests include in particular:

• the secure and reliable operation of the website and the app;
• providing requested technical features;
• preventing and investigating misuse and attacks;
• identifying and resolving technical errors;
• maintaining the compatibility and stability of the app; and
• establishing, exercising or defending legal claims.

18. Retention and Deletion

Personal data is stored only for as long as necessary for the respective processing purpose.

Data may be stored for a longer period where:

• there is a statutory retention obligation;
• the data is required to establish, exercise or defend legal claims; or
• a security incident must be investigated.

Technical registration data for push notifications is stored only for as long as necessary to provide the notification service or related technical functions.

Locally stored data remains on the user's device until it is deleted by the user, by the app, or through mechanisms provided by the operating system.

Data stored through an optional synchronization service may remain within the infrastructure of the respective platform provider until it is deleted in accordance with the functions and privacy policies of that provider.

Once the respective processing purpose no longer applies and there is no statutory retention obligation or other lawful basis for further storage, data processed by OCR Germany will be deleted, anonymized or otherwise rendered unusable for the respective purpose.

19. Data Security

Appropriate technical and organizational measures are used to protect personal data against accidental or unlawful:

• destruction;
• loss;
• alteration;
• unauthorized disclosure; and
• unauthorized access.

However, completely secure transmission of data over the Internet cannot be guaranteed. Absolute protection against all risks is therefore not possible.

20. Rights of Data Subjects

Subject to the applicable statutory requirements, data subjects have in particular the following rights:

• the right to obtain information about personal data being processed;
• the right to obtain a copy of personal data;
• the right to rectification of inaccurate personal data;
• the right to completion of incomplete personal data;
• the right to erasure of personal data;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interests; and
• the right to withdraw consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, data subjects may contact the controller using the contact details provided in Section 1.

21. Right to Object under Article 21 GDPR

Where personal data is processed on the basis of Article 6(1)(f) GDPR, the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her.

Following an objection, the personal data will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated which override the interests, rights and freedoms of the data subject, or the processing is required for the establishment, exercise or defence of legal claims.

22. Right to Lodge a Complaint with a Supervisory Authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data infringes applicable data protection law.

A complaint may be lodged with the supervisory authority responsible for the controller or with another competent supervisory authority, in particular in the EU Member State of the data subject's habitual residence, place of work or place of the alleged infringement.

The supervisory authority responsible for the controller's place of establishment is:

Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
E-Mail: post@sdtb.sachsen.de
Website: www.datenschutz.sachsen.de

23. Automated Decision-Making and Profiling

OCR Germany does not use personal data for decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them.

OCR Germany does not use personal data to create advertising or tracking profiles.

24. Requirement to Provide Data

Users are not legally required to provide the technical data described in this Privacy Policy.

However, certain technical data is necessary to provide individual features.

For example, a valid device token is required to deliver remote push notifications. If notification permission is not granted or is withdrawn, the app can still be used, but remote push notifications cannot be delivered.

Location permission is optional. If access to location data is not granted, OCR Germany can still be used. Features requiring the current location, such as finding nearby events, calculating distances or sorting events by distance, may not be available.

Calendar access is optional. If calendar access is not granted, OCR Germany can still be used. However, events may not be added directly to the calendar where the operating system requires the corresponding permission.

Synchronization is optional. If synchronization is disabled or unavailable, OCR Germany can still be used. Synchronized app data may then not be available across multiple Apple devices.

25. Changes to this Privacy Policy

This Privacy Policy may be updated if app features, website features, legal requirements or processing activities change.

The current version of this Privacy Policy will be made available through OCR Germany and/or the OCR Germany website.