Draft document — not yet legally reviewed. Passages in square brackets are still to be completed.
Privacy policy
1. Controller and contact
The data controller is [TO BE COMPLETED: controller's name and address]. Contact for personal data matters: goparasupport@gmail.com.
2. What data we process and where it comes from
Pilots' sporting results: name, CIVL ID, country, competition and task results, equipment used, and indicators calculated from them. The sources are publicly available CIVL results (civlcomps.org) and data published by competition organisers. The service does not provide IGC files or raw flight tracks.
Account data: the e-mail address of your GoPara account, the linked CIVL ID, chosen language, premium access status and saved filter configurations. We do not store passwords — sign-in is handled by GoPara.
3. Purposes
- presenting sporting analyses and rankings (Task Performance Index, equipment trends);
- running your account: sign-in, linking a pilot to the account, saving settings.
4. Legal basis
The controller's legitimate interest (Article 6(1)(f) GDPR): analysing and presenting publicly available sporting results. [TO BE VERIFIED — lawyer: legal basis for account data.]
5. Right to object and other rights
A pilot may object at any time to the processing of their data in the service. Send a message to goparasupport@gmail.com stating your CIVL ID. The data of the pilot with that CIVL ID is removed from the service with the next data publication.
You also have the right to access, rectify and erase your data, to restrict its processing, and to lodge a complaint with a supervisory authority. [TO BE VERIFIED — lawyer: competent authority and full list of rights.]
6. Cookies and browser storage
xc_sesja— sign-in session, valid for 30 days;xc_jezyk— chosen language, valid for 12 months;- browser storage (localStorage) — filter settings and the last opened tab; this data does not leave your device.
The service uses no advertising or analytics cookies. The sign-in page may load the Google sign-in script.
7. Recipients and retention
[TO BE COMPLETED: hosting provider, any transfers outside the EEA, retention period for account data.]