1. General provisions
This Data Processing Policy explains how Orienteering Future System (OFS) collects, stores and uses personal data of users via the website https://ofs.run, the Telegram bot, and related services.
We comply with Regulation (EU) 2016/679 (GDPR).
2. What data we process
- Email and password during registration
- Name, address, phone, IP and order history for orders and subscriptions
- Training and competition data: GPS, RFID check-ins, timestamps
- Telegram bot data: user ID, messages, interactions
3. Purposes of processing
- Account creation and maintenance
- Providing access to services and subscriptions
- Delivery and payment processing
- Training and event management
- Analytics and performance tracking
- Notifications and service messages (with consent)
4. Legal grounds for processing
- User consent (e.g. newsletter)
- Contract performance (orders, subscriptions)
- Legitimate interest (security, platform improvement)
- Legal obligation (e.g. accounting)
5. Data sharing
We do not sell or transfer your data to third parties except:
- Hosting providers (e.g. Hetzner, AWS)
- Payment processors (Stripe)
- Delivery services (PostNL, DHL, etc.)
- Authorities if required by law
All partners are GDPR-compliant.
6. Data retention
- User accounts — until deleted
- Order and payment history — up to 7 years
- Training results — up to 5 years
- Logs and technical data — up to 12 months
7. User rights under GDPR
- Access and receive a copy of your data
- Correct or delete your personal data
- Restrict or object to processing
- Data portability to another service
- Withdraw consent at any time
To exercise your rights, log into your account or contact us via our
Contact page.
8. Security measures
We use HTTPS, encryption, access control, and regular backups to protect personal data.
9. Updates to this policy
We may update this policy from time to time. The latest version is always available at https://ofs.run.