Privacy Policy

This Privacy Policy explains how personal data are processed when you use the Trifecta Hunter application or visit the Trifecta Hunter website.

We process personal data only where this is necessary to provide our website and application, to operate their technical functions, to ensure security, or where you have consented to the processing.

1. Controller

The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:

Norman Rath
c/o Trifecta Hunter
Thomas-Müntzer-Str. 10
04207 Leipzig
Germany
E-mail: Click to write
Website: www.ocr-europe.com

2. Definitions

This Privacy Policy uses the terms defined in the GDPR. In particular, “personal data” means any information relating to an identified or identifiable natural person. “Processing” means any operation performed on personal data, including collection, storage, use, transmission, restriction or deletion.

3. Website access and server log files

When you visit the Trifecta Hunter website, the web server may automatically process technical information transmitted by your browser. This may include:

• the IP address of the accessing device;
• the date and time of access;
• the requested page or file;
• the website from which the request originated;
• the browser type and browser version;
• the operating system used;
• the amount of data transferred; and
• technical status and error information.

These data are processed to deliver the website, ensure its stability and security, detect technical errors and prevent misuse or attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically functional operation of the website and the protection of our systems against misuse and attacks.

Server log data are deleted when they are no longer required for these purposes, unless further storage is necessary to investigate a security incident, enforce legal claims or comply with legal obligations.

4. Data processing when using the Trifecta Hunter application

When the Trifecta Hunter application is used, certain technical information may be transmitted to servers operated for Trifecta Hunter. This information is used to provide the application’s notification functionality and to ensure technical compatibility.

The following data may be processed:

• the device token assigned by the respective push notification service;
• the installed application version;
• the installed application build number;
• the operating system version used on the device; and
• the language configured for the application or device.

The push notification device token is used exclusively to address and deliver push notifications to the respective installation of the application.

The application version, build number and operating system version are used to manage push notification registrations, maintain compatibility and prevent notifications from being sent to obsolete or incompatible application installations.

The configured language is used to select the appropriate language for notifications and related application functionality.

These data are not used for advertising, profiling or cross-application tracking. They are not sold, disclosed to data brokers or combined with a name, e-mail address, user account or other information directly identifying the user.

5. Push notifications

Trifecta Hunter may send push notifications relating to application content and enabled notification categories. Push notifications are sent only after the user has granted the required notification permission of the respective operating system.

For this purpose, the application receives a device token from the respective push notification service. This token acts as a technical delivery address for the respective installation of Trifecta Hunter.

To deliver a notification, the device token and the notification content are transmitted to the respective push notification service of the platform provider.

The respective platform provider processes these data in accordance with its applicable privacy terms.

The legal basis for processing in connection with enabled push notifications is Article 6(1)(a) GDPR.

Notification permission may be withdrawn at any time with effect for the future. Notifications can be disabled in the Trifecta Hunter settings or in the iOS notification settings for Trifecta Hunter.

Disabling notifications prevents future push notifications. Technical registration data that are no longer required are deleted or deactivated when the token is reported as invalid, the notification service is discontinued, a justified deletion request is received or the data are otherwise no longer required for the stated purpose.

6. Local notifications

Trifecta Hunter may offer local reminders, for example for favorite events, booked races or participation statuses.

Local notifications are scheduled and managed on the user’s device. Their scheduling does not require the corresponding planning or reminder data to be transmitted to servers operated by Trifecta Hunter.

Users can manage local reminder options within the application and can disable notification permission at any time in the system settings of their device.

7. Locally stored application data

Trifecta Hunter allows users to store application data such as:

• favorite events;
• booked race statuses;
• participation statuses;
• reminder preferences;
• event planning information;
• optional travel planning information; and
• optional notes entered by the user.

Optional travel planning information may include hotel details, travel dates, flight numbers, train information, rental car information and information about travelling by private vehicle.

These application data are stored locally on the user’s device. They are not transmitted to servers operated by Trifecta Hunter.

Users can modify or delete stored data using the corresponding functions provided within the application.

8. Optional iCloud and CloudKit synchronization (iOS)

If iCloud is available and enabled for Trifecta Hunter, locally stored application data may be synchronized between the user’s devices through Apple’s iCloud and CloudKit services.

Depending on the application functions used, synchronized data may include favorite events, race booking and participation statuses, reminder settings, event planning information, travel planning information and optional notes.

These synchronized data are associated with the user’s Apple Account within Apple’s infrastructure. Trifecta Hunter does not create a separate user account for this purpose and does not receive the user’s Apple Account password.

Data transmitted through iCloud or CloudKit are processed by Apple in accordance with the agreements and privacy provisions applicable to the user’s Apple Account and iCloud services.

Users can manage or disable iCloud access for Trifecta Hunter through the iOS settings. Disabling synchronization does not necessarily delete data that have already been stored locally or in iCloud.

9. In-app purchases and subscriptions

If Trifecta Hunter offers in-app purchases or subscriptions, the payment is processed by Apple through the App Store.

Trifecta Hunter does not receive or store payment card numbers, bank account details or Apple Account passwords. Apple may provide technical transaction information required to verify purchase or subscription entitlement.

The processing of payment and Apple Account information by Apple is governed by Apple’s applicable contractual and privacy provisions.

10. External websites and services

The website and application may contain links to external websites or services, including event organizers, registration providers, map services, navigation applications, video platforms or social media services.

No personal data are transmitted to the operator of an external website merely because a standard link is displayed. Data may be transmitted to the respective provider when the user actively opens the link or uses the external service.

The respective provider is responsible for the processing performed after the external website or service is opened. Its own privacy policy and terms apply.

11. Map and navigation services

Trifecta Hunter may allow users to open event locations in map or navigation applications installed on the device.

Location and event destination data are transferred to the selected navigation service only when the user actively chooses to open that service. The subsequent processing is governed by the privacy provisions of the selected provider.

If the application requests access to the user’s current location, that location is used to provide location-related functions such as distance calculation or map display. Unless otherwise expressly stated, the current location is processed on the user’s device and is not transmitted to servers operated by Trifecta Hunter.

Location access can be managed or withdrawn at any time in the privacy and location settings of the device.

12. Matomo website analytics

The Trifecta Hunter website uses Matomo, an open-source web analytics platform, to obtain aggregated information about the use of the website and to improve its content, usability and technical performance.

Matomo is operated on infrastructure controlled by or provided for Trifecta Hunter. The analytics data are not transmitted to Google Analytics or comparable advertising analytics services and are not used for cross-website tracking or advertising purposes.

Matomo is configured without cookies. No Matomo tracking cookies or similar identifiers are stored on the user's device for analytics purposes.

Depending on the technical configuration, Matomo may process the following information:

• the pages visited;
• the date and time of access;
• the website from which the visitor arrived;
• the browser type and browser version;
• the operating system used;
• the device type and screen resolution;
• technical information about the website request; and
• an IP address shortened or anonymized before storage.

The information is used only to create aggregated website statistics, identify technical problems and improve the website. It is not combined with user accounts, names, e-mail addresses or other information directly identifying a visitor.

The processing is based on Article 6(1)(f) GDPR. Our legitimate interests are the analysis and improvement of the website, the detection of technical problems and the secure and efficient operation of the website.

The analytics data are stored only for as long as they are required for these purposes and are subsequently deleted or anonymized.

13. Legal bases for processing

Depending on the individual processing activity, personal data are processed on one or more of the following legal bases:

• Article 6(1)(a) GDPR where the user has given consent, for example for push notifications;
• Article 6(1)(b) GDPR where processing is necessary to provide a service requested by the user or to perform a contract;
• Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation; and
• Article 6(1)(f) GDPR where processing is necessary for our legitimate interests and those interests are not overridden by the user’s rights and freedoms.

14. Legitimate interests

Where processing is based on Article 6(1)(f) GDPR, our legitimate interests include:

• the secure and reliable operation of the website and application;
• the provision of requested technical functions;
• the prevention and investigation of misuse and attacks;
• the detection and correction of technical errors;
• the maintenance of application compatibility and stability; and
• the establishment, exercise or defence of legal claims.

15. Recipients and service providers

Personal data are disclosed only where this is necessary for the stated purposes, where a legal obligation requires disclosure or where the user has consented.

Recipients may include:

• hosting and infrastructure providers;
• Platform providers such as Apple or Google, where required for push notifications, cloud synchronization or app distribution services;
• technical service providers acting on our behalf;
• public authorities where disclosure is legally required; and
• legal or professional advisers where required to protect legal interests.

Service providers acting on our behalf process personal data only in accordance with applicable data protection requirements and contractual instructions.

16. International data transfers

The use of services provided by Apple or other international providers may involve the processing of data outside the European Economic Area.

Where personal data are transferred to a country for which the European Commission has not adopted an adequacy decision, the transfer is based on an appropriate legal safeguard, such as the European Commission’s standard contractual clauses, where required.

17. Storage and deletion

Personal data are stored only for as long as necessary for the respective processing purpose.

Data may be retained for a longer period where this is required by law, where the data are needed to establish, exercise or defend legal claims, or where a security incident must be investigated.

Once the relevant purpose no longer applies and no legal retention obligation or other lawful reason for continued storage exists, the data are deleted or anonymized.

18. Data security

Appropriate technical and organizational measures are used to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure and unauthorized access.

However, data transmission over the internet cannot be guaranteed to be completely secure. Absolute protection against all risks is therefore not possible.

19. Rights of data subjects

Subject to the applicable legal requirements, data subjects have the following rights:

• the right to obtain information about personal data being processed;
• the right to obtain a copy of personal data;
• the right to rectification of inaccurate personal data;
• the right to completion of incomplete personal data;
• the right to erasure of personal data;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interests; and
• the right to withdraw consent at any time with effect for the future.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights, data subjects may contact the controller using the contact details listed in Section 1.

20. Right to object under Article 21 GDPR

Where personal data are processed on the basis of Article 6(1)(f) GDPR, the data subject has the right to object to the processing at any time on grounds relating to his or her particular situation.

Following an objection, the personal data will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated which override the interests, rights and freedoms of the data subject, or unless the processing is required for the establishment, exercise or defence of legal claims.

21. Right to lodge a complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they believe that the processing of their personal data infringes the GDPR.

The supervisory authority responsible for the controller’s location is:

Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
E-mail: post@sdtb.sachsen.de
Website: www.datenschutz.sachsen.de

A complaint may also be submitted to another competent supervisory authority, in particular in the EU Member State of the data subject’s habitual residence, place of work or place of the alleged infringement.

22. Automated decision-making and profiling

Trifecta Hunter does not use personal data for decisions based solely on automated processing that produce legal effects or similarly significantly affect users.

Trifecta Hunter does not use personal data for profiling for advertising or tracking purposes.

23. Obligation to provide data

Users are not legally required to provide the technical data described in this Privacy Policy.

However, certain technical data are required to provide specific functions. For example, a valid push notification device token is required to deliver push notifications. If notification permission is not granted or is withdrawn, the application can still be used, but push notifications cannot be delivered.

24. Changes to this Privacy Policy

This Privacy Policy may be updated where application functions, website functions, legal requirements or processing activities change.

The current version is published on this website.

Last updated: 2 August 2026