GDPRPrivacy Policy

The data controller is the Layline team, Praha, Česká republika. For personal data matters, contact us at ahoj@layline.cz.

• Account: name, e-mail, club, role (athlete / coach) — sign-in runs through secure SSO (Keycloak); we never see your password.
• Training data: GPS routes, speeds, manoeuvres, times, conditions and notes.
• Health data limited to heart rate, if you upload it from your watch — we process it only with your consent.
• Media: photos and videos attached to sessions.
• Weather data and wind sensor readings tied to the place and time of a session.
• Technical data necessary for operation (logs, app version).

• Providing the service (contract): the log, analytics, leaderboards, sharing within a team.
• Consent: heart rate, public display in the club leaderboard, marketing communications.
• Legitimate interest: securing the service and preventing abuse.
• We do not use the data for advertising profiling and we do not sell it to third parties.

A large share of Layline users are under 15 years of age. For these athletes we require the consent of a legal guardian; a coach’s access arises only from a confirmed link. We block public pages containing names and photos of minors from search engines and never index athlete detail pages.

• Your coach and your club — to the extent of a confirmed link.
• Your teammates — only what you share yourself.
• Technical providers (hosting, storage) in the EU, bound by a data processing agreement.
• Public authorities only where required by law.

• For as long as your account exists.
• After account cancellation we delete personal data within 30 days; backups within 90 days.
• Anonymised club statistics (with no link to a person) may be retained.

Data is transferred encrypted (TLS), sign-in runs through the OIDC standard with PKCE, and access to data is governed by roles and confirmed links. Media is stored in separate storage with controlled access.

• The right of access to your data and to a copy of it.
• The right to rectification and erasure (the “right to be forgotten”).
• The right to restriction of processing and to object.
• The right to data portability (we will provide your sessions in a machine-readable GPX/JSON format).
• The right to withdraw consent — at any time, without affecting earlier processing.
• The right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz).

To exercise your rights, contact ahoj@layline.cz; we will respond within 30 days at the latest.

The marketing website uses Google Analytics for anonymous traffic measurement (Google cookies); you can decline analytics cookies in the cookie banner. The signed-in part (the coach portal session) uses technical cookies.