Privacy policy

OCR Germany website

Controller and scope

Norman Rath
Thomas-Müntzer-Str. 10
04207 Leipzig
Deutschland / Germany

Privacy contact: hallo (at) ocr-germany (dot) info

This privacy policy explains how personal data are processed when you use the OCR Germany website. The data processed depend on the features you use and the permissions you grant. A permission granted in system settings does not automatically replace consent required under data protection law.

Service delivery and server logs

Requests for content, APIs or legal documents involve data such as your IP address, request time, resource, technical status and client information supplied by your device. This data is used to deliver the service, investigate faults and protect systems.

Our API and websites are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The central API is provided at it0815.de. STRATO processes technical hosting data as a contracted service provider; processing agreement information: https://www.strato.de/agb/avv/ .

The legal basis for technically necessary delivery of requested services is Article 6(1)(b) GDPR where a corresponding user relationship exists; security and abuse detection are based on Article 6(1)(f) GDPR. Legitimate interests are reliable operation and protection of users and systems.

Retention: STRATO retains website visitors’ IP addresses for up to seven days to detect and prevent attacks. According to STRATO, access logs provided in its customer area contain anonymised IP addresses and are available for the preceding six weeks. STRATO provides error logs for the preceding five days; the direct display is limited to 100,000 entries. These periods concern STRATO hosting logs. Separate processing of app registrations, push delivery information and usage statistics is described in the relevant sections.

Website analytics and settings

We use self-hosted Matomo at it0815.de/adm/ext/matomo/ to compile website statistics. The integration disables analytics cookies and the JavaScript tracker respects the browser’s Do Not Track setting. It may process pages viewed and links clicked, access time, referring page, browser, operating system, device and screen information, and the IP address transmitted with the connection. A Matomo tracking pixel is included for browsers without JavaScript. Statistics help improve content, usability, technical performance and security. Data are not combined with names or email addresses and are not used for advertising or disclosure to advertising networks. The legal basis for this statistical processing is Article 6(1)(f) GDPR; our legitimate interest is improving and reliably operating the website. Analytics data are retained only as long as needed for these purposes and then deleted or anonymised. Further information about Matomo: https://matomo.org/privacy-policy/ .

Protected event requests use the technically necessary session cookie ocr_public without a persistent cookie lifetime. Your chosen appearance is stored in local browser storage as ocr-theme until overwritten or deleted through the browser.

External organiser, map, store and social media links lead to the respective website when opened. The provider’s privacy information applies there.

Non-essential storage or access on your device requires the applicable consent under section 25(1) TDDDG. Analytics involving personal data also require an appropriate GDPR legal basis. Merely using the website does not replace required consent.

Event watchlist

When you save an event, your browser stores its identifier and name in local browser storage (local storage). This data allows the site to display your watchlist again in the same browser. You do not need an account. The watchlist is neither linked to an app profile nor synced across devices.

When you open the watchlist, the saved event identifiers are sent to our website server so that it can retrieve the corresponding event details and, where available, aggregated ratings. We use the session cookie described under “Website analytics and settings” for this request. The server does not store a separate watchlist for this feature. See “Service delivery and server logs” for information about technical connection data and server logs.

Past events remain saved and appear in the past races section if the event details are still available. You can remove individual entries at any time using the bookmark icon, or clear the entire list by deleting the website data in your browser. Entries have no fixed expiry date. We use them for the watchlist and not for advertising or audience measurement.

Storing and accessing this data on your device is necessary to provide the watchlist you have expressly requested (section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act, TDDDG). Where providing the watchlist involves processing personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide the watchlist you use with up-to-date event details.

Display of app ratings

The website shows the aggregated average star rating and number of ratings from the OCR apps. The summary may include ratings from several editions of the same event. We include ratings from verified app profiles. The website does not display individual rating records, profile names, email addresses or profile identifiers.

To calculate the summary, the server uses the stored star rating, the event edition rated and the link to the profile to check its verification status. Ratings can be submitted, changed or withdrawn only in the app. Withdrawn ratings are excluded from the summary.

Where calculating the summary involves processing personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to help people make informed choices about events. For more information on how ratings data are collected and retained, see the privacy policy of the relevant app.

Contact requests

When you contact us, we process your contact details and message to handle and respond to the request. The legal basis is Article 6(1)(b) GDPR for contractual enquiries, or Article 6(1)(f) GDPR based on the legitimate interest in responding to other enquiries.

Retention: Until the enquiry is resolved; longer only where statutory retention duties or the specific establishment, exercise or defence of legal claims require it. Please send health, location or other sensitive data only where necessary for the enquiry.

Service providers

STRATO GmbH processes the technical data required for hosting in Germany. Additional service providers are those identified for the relevant functions in this policy. The data transmitted to them depend on the platform and the functions used.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability (Articles 15–20 GDPR). You can withdraw consent at any time for the future.

Objection: You may object to processing based on Article 6(1)(e) or (f) GDPR on grounds relating to your particular situation (Article 21 GDPR). You may object to direct marketing at any time.

Contact hallo (at) ocr-germany (dot) info to exercise your rights. We cannot access or erase data stored only on your device without your involvement. Appropriate proof may be needed to identify server-side installation records.

You may complain to a supervisory authority, particularly where you live, work or believe an infringement occurred. The authority for the controller’s location is Sächsische Datenschutz- und Transparenzbeauftragte, https://www.datenschutz.sachsen.de/.

Where data are required for a requested feature, that feature cannot be provided, or may be limited, without them. No solely automated decision with legal or similarly significant effects is intended for the described app functions.

Updated: 2026-11-08 · Version e2040d09cf6b