Convenience translation. This English version is provided for information only. Only the German version is legally binding; in case of any discrepancy the German version prevails. German version
Privacy Policy
Version 1.2 · As of 16.10.2026 · svscore.de is developed and operated in Germany (Made & hosted in Germany).
1. Controller
The controller responsible for the processing of personal data on svscore.de, insofar as it is not carried out on behalf of the clubs (see section 3), is:
iqmeta GmbH, Am Sonnenhang 24, 71111 Waldenbuch, Germany
represented by its managing director Otto Neff
Telephone +49 (0) 7157 563 111 · E-mail info@iqmeta.com · svscore: support@shootingscore.app
Data protection officer: Otto Neff, support@shootingscore.app
2. Overview
svscore.de is a platform with which shooting clubs manage competitions and club events. We process personal data only insofar as this is necessary for operating the platform, for performing contracts with the clubs or on the basis of legal obligations.
3. Data of Participants and Members – Responsibility of the Clubs
We process data of shooters, participants and members (e.g. online registration, results, members' area, participant app) on behalf of the respective club (processing on behalf pursuant to Art. 28 DSGVO (GDPR)). In this case the controller is the club whose page you are using; you will find its contact details and privacy information in the club's legal notice (Impressum). Please address enquiries concerning these data to the club – we forward enquiries that reach us to the club.
4. Accessing the Website (Server Logs)
When svscore.de is accessed, technically necessary data are processed: IP address, date and time, address accessed, amount of data transferred, browser and operating system (user agent), referrer. The purpose is delivery of the pages, security (e.g. defence against attacks, limitation of requests) and error analysis. The legal basis is Art. 6 (1) (f) GDPR. Logs are deleted after 14 days unless they are needed to investigate a security incident.
Visit counting without cookies: For simple statistics of the public pages (page views and visitors per day, currently active visitors), the server forms a checksum from the IP address and browser identifier together with a random value that changes daily. The person cannot be identified from this, and recognition is not possible on the following day. The IP address is displayed only in shortened form (e.g. 192.168.1.x). Only daily totals (number of page views and visitors) are stored permanently. No cookies are set and no data are transmitted to third parties. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in operation and further development).
Error log: If a technical error occurs in the application (in the browser or on the server), we store the error message, technical details, the address accessed, browser identifier, time and – if logged in – the identifier of the user or club. The purpose is fixing errors (Art. 6 (1) (f) GDPR). Resolved entries are deleted after 90 days, all others after one year at the latest.
5. Cookies and Local Storage
We use exclusively technically necessary cookies or local storage: login cookie of the administration area, the members' area and the participant app, as well as settings such as the cash register selected on a device. A service worker is used for the participant app so that the app starts offline. There is no tracking and no analysis by third parties. The legal basis is § 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6 (1) (b) or (f) GDPR. A cookie banner is therefore not required.
At the user's request, the following are also stored locally in the browser: confirmation of the weapons-law notice, display settings (e.g. zoom and hit size of the target evaluation) and the series of the free target evaluation (see section 6a).
6. Registration and User Accounts of the Clubs
When a club registers, we process the club name, location, short name, name and e-mail address of the registering person, a password (stored only as a hash) and the time of consent to the AGB and AVV. For further users we process name, e-mail, role, login times and – if activated – the two-factor login secret. The purpose is the provision of the user contract (Art. 6 (1) (b) GDPR). The data are stored for the duration of the contract and deleted thereafter, unless statutory retention obligations exist.
6a. Target Evaluation by Photo and Text Recognition
Photos of targets and printouts are evaluated exclusively in the browser on your device (image recognition or text recognition with Tesseract, delivered by svscore.de itself). The photo is not uploaded – unless you expressly use "Erkennung falsch? Foto an svscore senden" (Recognition wrong? Send photo to svscore): in that case we transmit the original photo, crop, recognised hits, your comment, the browser identifier and – if provided – your e-mail address as a support request in order to improve recognition (Art. 6 (1) (a) and (f) GDPR). We delete these data as soon as they are no longer needed for the analysis, at the latest after twelve months. With the free evaluation at svscore.de/scheibe, the series remain only in your browser's local storage; they are not transmitted to us and can be removed by deleting the browser data. In the training book of the participant app only the result is stored (hit positions, rings, Teiler values, title and note), and this is done on behalf of the club (section 3).
6b. Training Book, Weapons Book, Documents and Range Operation
In the participant app, members can keep a training book, a weapons book (weapons, shot counter, maintenance) and documents with an expiry date (e.g. WBK (firearms ownership card), Sachkunde (certificate of competence), with a file if desired). In range operation, attendance (check-in and check-out, range, discipline), range supervision and entries in the shooting range log are recorded. We process these data on behalf of the club (section 3). Documents can be seen only by the person themselves and the administrators of their club. E-mail reminders (weapon maintenance, expiring documents) are received only by persons who have switched them on in the app; each reminder contains an unsubscribe link.
6c. "Single shooter" plan (own account without a club)
Shooters without a svscore club can create their own account (shootingscore.app/single-shooter). Here we ourselves are the controller for all data of the account – unlike club members (section 3). We process: first and last name, e-mail address, confirmation codes and login links (valid for 15 minutes, stored only as a hash), a login cookie (180 days), the training sessions, firearms, maintenance entries and documents with files you enter, and the time of your consent to the terms of use. Legal basis is Art. 6(1)(b) GDPR (contract). Target photos are scored in the browser; only the hit positions are stored, the photo only if you explicitly send it to support. Cancellations and withdrawals (also via the forms /kuendigen and /widerruf) are stored as proof with timestamp (Art. 6(1)(c) GDPR). After the trial or subscription ends, the data remains readable and exportable; without activity we delete the account after 24 months after informing you by e-mail beforehand. You can request deletion at any time; invoice data is retained as described in section 7. Payments are processed by Stripe (section 7).
7. Payment and Invoices (Stripe)
For paid packages we process the billing name, billing address, e-mail address for invoices, booked package, term as well as invoices and payment status. For the calculation of VAT (Stripe Tax) and for invoices to businesses, the VAT ID may additionally be collected. Payment processing (SEPA direct debit, credit card, PayPal) is carried out via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Irland. Payment instrument data (e.g. IBAN, card data, PayPal account) are collected directly by Stripe and not stored on svscore.de. Stripe may also process data in the USA; the transfer is based on the adequacy decision of the EU Commission (EU-US Data Privacy Framework) or standard contractual clauses. Further information: https://stripe.com/de/privacy. The legal basis is Art. 6 (1) (b) and (c) GDPR. We retain invoice data in accordance with obligations under commercial and tax law (up to 10 years).
8. Enquiry Form for District/Gau/Association and Contact by E-mail
If you contact us via the enquiry form or by e-mail, we process your details (name, organisation, e-mail, optionally telephone, number of clubs, message) to handle the enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR. The data are deleted once the enquiry has been conclusively dealt with and no retention obligations exist.
Support tickets: We store enquiries from the administration area ("Hilfe & Support" (Help & Support)) and tickets that we open for an e-mail address with name, e-mail address, club (if any), message history, attached files (images, PDF) and timestamps. Replies are possible via a personal link that cannot be guessed. The legal basis is Art. 6 (1) (b) or (f) GDPR. Tickets are deleted when they are no longer needed for handling and for the contractual relationship and no retention obligations exist.
9. Sending E-mails
For system e-mails (e.g. confirmation of registration, password links, login links, notifications from the clubs) we use our own mail server of iqmeta GmbH (located in Germany, no external sending service).
10. Hosting
The platform is operated at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, location Falkenstein data centre (Germany). A data processing agreement has been concluded with the hosting provider.
11. Recipients
Personal data are passed on only to the service providers named (hosting, e-mail sending, Stripe) and – in the case of participant and member data – to the respective club. Data are passed on to other third parties only if we are legally obliged to do so.
12. Your Rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You may withdraw consents given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg).
13. Security
Transmission is encrypted (HTTPS/TLS with HSTS). Passwords are stored only as a hash; two-factor login is available. The clubs' data are separated from each other. Details are described in Annex 1 of the AVV.
14. Changes
We adapt this privacy policy when the platform or the legal situation changes. The version published at svscore.de/datenschutz at the relevant time applies.