Privacy policy
Deutsche Fassung (the German version is legally binding)
1. Controller
Unkart Solutions, owner Christoph Unkart, Willy-Brandt-Str. 21, 91052 Erlangen, Germany. Email: christoph.unkart@unkart-solutions.de
2. What we process
- Account: When you sign in with Google we receive your Google account ID, email address, name and profile picture. We store no password. Optionally you can add a display name and your club.
- Beta access: Whether and since when your account is enabled. The tester group on Google Groups is run by Google under Google's terms.
- Results: What you import (file, QR code or range interface): discipline, date and time, range or club and lane, and for each shot the position, rings, decimals, Teiler and time, plus the original import data so we can re-evaluate it later. From this we compute totals, series, group size and mean point of impact.
- QR codes: The content of every scanned QR code (usually a link from the range system or encoded result data) and the time, even if TenX cannot read the format yet. The camera runs only on your device; only the decoded text is sent, never an image.
- TenX watch app: If you pair a Garmin watch we store a checksum of the watch's random device ID (not the ID itself), model, name, pairing time, last contact and watch app version. The 6-digit pairing code is valid for 15 minutes. For each training the watch uploads start time, duration and time zone, and for each detected shot the time, recoil strength and the watch's motion (acceleration, rotation if available) shortly before and after the shot.
- Heart rate (health data, only with explicit consent): If the watch measures your heart rate it sends the value per shot. Heart rate is health data (Art. 9 GDPR). We only process it with your explicit consent, and only to show it next to your shots. Without consent we store no heart rate.
- Android app: The app shows the TenX website and processes the same data. Google sign-in runs in Chrome; a one-time code valid for 2 minutes hands the sign-in to the app. The app uses the camera only with your permission, to read QR codes, and a watch connected via USB only with your permission, to copy the watch app to it.
- Technical: A session cookie for sign-in and cookies for language and theme. The web server briefly processes IP addresses to deliver pages. No tracking, no analytics or advertising cookies.
3. Purpose and legal basis
We process the data to provide the evaluation of your shooting results and the functions of TenX (Art. 6(1)(b) GDPR). Heart rate is processed only with your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR), which you can withdraw at any time in your profile; we then delete stored heart rate values. Cookies are necessary for the requested service (§ 25(2) no. 2 TDDDG).
4. Recipients and hosting
TenX runs on servers of Hetzner Online GmbH in Germany under a data processing agreement. Sign-in uses Google (Google Ireland Ltd.). The watch app sends via the Garmin Connect app on your phone. We do not pass data to other third parties or sell data.
5. Operator access
For administration the operator sees account data (name, email, registration and last activity time, approval status) and the number of your results and scans. Actions on individual accounts (approval, blocking) are logged (Art. 6(1)(f) GDPR).
6. Retention
Your data is kept until you delete individual results, scans or your account. Deleting your account immediately removes all results, scans, paired watches and watch data. Pairing codes expire after 15 minutes, app sign-in codes after 2 minutes. Backups are kept for at most 30 days.
7. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent. Under “Profile” you can download your data and delete your account at any time. You can also lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA).
As of October 2026