Privacy policy

1. Controller

Unkart Solutions, owner Christoph Unkart, Willy-Brandt-Str. 21, 91052 Erlangen, Germany. Email: christoph.unkart@unkart-solutions.de

2. Data we process

• Account: When you sign in with Google we receive your Google account ID, email address, name and profile picture. We do not store a password.
• Activities: FIT files you upload or import from Garmin Connect, including timestamps, GPS positions, speed, heart rate (if present) and jump data.
• Garmin Connect: If you connect your Garmin account, we store your Garmin user ID and the OAuth access tokens needed to retrieve new activities. We only retrieve activity files, no health data.
• Technical: A session cookie to keep you signed in. The web server briefly processes IP addresses to deliver the site. There is no tracking and there are no analytics or advertising cookies.

3. Purpose and legal basis

We process this data to provide the analysis of your kitesurfing sessions (Art. 6(1)(b) GDPR, performance of the service). The Garmin connection is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by disconnecting your Garmin account.

4. Recipients and hosting

The platform runs on servers of Hetzner Online GmbH in Nuremberg, Germany, under a data processing agreement. Google (Google Ireland Ltd.) is used for sign-in and Garmin (Garmin Ltd.) for importing activities. Map tiles are loaded from OpenStreetMap, which transmits your IP address to the OpenStreetMap Foundation. We do not sell data or share it with any other third parties.

5. Retention

Your data is kept until you delete individual sessions or your account. Deleting your account immediately removes all sessions, FIT files and Garmin tokens and deregisters the Garmin connection. Backups are overwritten after 30 days at the latest.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent. You can delete your account and data yourself at any time via "Konto löschen". You may also lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA).

Last updated: October 2026. German version: Datenschutzerklärung.