Privacy Policy

1. General provisions

This Privacy Policy governs how personal data is collected and processed on the Orienteering Future System (OFS) platform (hereinafter referred to as "OFS", "we", "our service"). We comply with the GDPR and are committed to ensuring data security and transparency.

2. What data we collect

2.1. During registration:

• Email address
• Password (stored encrypted)

We do not collect name, IP address or physical address during simple registration.

2.2. When purchasing a subscription or placing an order:

• Full name (if required for delivery)
• Postal address, country, ZIP code
• Phone number
• IP address (for security and reporting)
• Order and subscription history
• Payment data (processed via Stripe, not stored by us)

2.3. When using the platform:

• Telegram user ID (if you use the bot)
• Link to devices, competitions and trainings
• GPS coordinates, RFID events and checkpoints
• Activity logs (e.g. commands, errors, login times)

2.4. When visiting the website:

• Cookie files
• IP address (if cookie consent is given)
• Device type, browser, language
• Visited pages and activity

3. How we use your data

• User registration and login
• Conducting competitions and trainings
• Telegram bot and equipment operation (RFID, LoRa, GPS)
• Order delivery and payment processing
• User communication (notifications, newsletters — only with consent)
• Analytics and interface improvements

4. Legal basis for processing

• User consent (e.g. for newsletters, cookies)
• Contract performance (access to service, participation in events)
• Legitimate interest (security, analytics)
• Legal obligation (e.g. accounting)

5. Who has access to your data

We do not share your data with third parties except for:

• Hosting and infrastructure providers (e.g. Hetzner, AWS)
• Payment services (Stripe, Mollie etc.)
• Delivery services (for shipping equipment)
• Legal authorities — if required by law

All partners are required to comply with GDPR.

6. Data retention periods

• User account — until deleted by user
• Competition results — up to 5 years
• Orders and payments — up to 7 years (for accounting)
• Cookies — up to 1 year

7. Your rights

Under the GDPR, you have the right to:

• Access your data
• Correct or delete your data
• Restrict or object to processing
• Transfer your data to another service
• Withdraw your consent at any time

To exercise these rights, please contact us at: 📧 privacy@ofs-platform.com

8. Cookies and analytics

We use cookies for authentication, cart functionality, analytics, and connecting third-party services. You can manage cookie settings in your browser.

9. Data security

All data is stored on servers in the EU. All transfers are protected via HTTPS. We use encryption, limited access, and regular system updates.

10. Labyrinth sports events (Telegram bot registration)

When you register for a Labyrinth orienteering event via our Telegram bot, we additionally collect:

• Telegram user ID
• First and last name (entered by you)
• Start number assigned for the event
• Date and time of consent to the Terms of Participation

This data is used exclusively to organise the event: assigning start numbers, displaying public results, and sending event-related messages via the bot. Your name and results are publicly visible on the event results page — this is standard practice in orienteering sports.

To delete your data from all Labyrinth events, send the command /delete_me to the Telegram bot (@ofuture_bot). Registration records are automatically deleted 2 years after the event, or immediately upon your request. Full details are available in the Terms of Participation — Labyrinth.

11. Policy updates

We may update this policy. In case of significant changes, we will notify users via email or in the platform interface. The date of the last update is always shown at the top of the page.