RC Pit Clock on a Garmin watch
Regulation (EU) 2016/679 (GDPR) and French Act no. 78-17 of 6 January 1978 as amended.
1. Data controller
- Controller
- LSI Tech, sole trader
- Address
- 326 rue Hoche, 84120 Pertuis, France
- Registration
- SIRET 108 094 244 00010
- Contact
- lionel@lsitech.fr
Given the nature and the volume of the processing carried out, LSI Tech is not required to appoint a data protection officer. Any question about personal data can be sent directly to the address above.
2. What this page covers
This page describes RC Pit Clock on a Garmin watch, and nothing else. The processing activities really are separate: they do not involve the same data or the same purposes, and putting them on one page would force every reader to sort out which part concerns them.
The other policies:
- RC Pit Clock on an Android phone
- The lsitech.fr website (French only, as the site itself is)
3. What the app sends, and when
RC Pit Clock runs entirely offline during a race. It talks to our servers for one reason only: to know how many free races you have left, and whether your licence has been bought.
The identifier
The watch sends a device identifier provided by Garmin (uniqueIdentifier).
It belongs to the device and app pair. It carries no name, no Garmin account and none of your fitness
data, and it cannot identify you outside this service.
It is never stored in the clear. On arrival it is turned into an irreversible cryptographic fingerprint (SHA-256 salted with a secret only we hold), and the original identifier is discarded at once. Our database therefore holds no value that leads back to a particular device, not even for us.
Two device settings, sent alongside
The same call sends the watch model (a technical reference such as
006-B3905-00, with no serial number) and the language the watch is set to,
as a numeric code. Both describe the device, never its wearer: every watch of the same model set to the
same language returns exactly the same pair, so they identify nobody, not even indirectly.
They serve two development decisions and nothing else: knowing which models the app actually runs on, so testing can be concentrated there, and knowing whether a translation is worth doing. The legal basis is legitimate interest. They are never sold, passed on, or cross-referenced with anything.
Hardware profile
The same call also sends nine hardware characteristics: firmware version, Connect IQ version, screen width and height, screen shape, presence of a touchscreen, available buttons, unit system (metric or imperial) and time format (12 or 24 hour).
Like the model and the language, these describe the device and its settings: two identical watches, updated and configured the same way, return exactly the same values. None describes the wearer, none distinguishes you from another owner of the same hardware.
They decide where development effort goes: which screen sizes to check the layout on, what share of watches are touch or two-button, whether old firmware is still around, and whether the imperial system is common enough to justify showing ounces rather than centilitres. The legal basis is legitimate interest.
Identifying the calling software
Every call carries a user agent, the header any HTTP client automatically attaches to say what software is sending the request. It is kept.
It does one job: telling a real watch apart from a development simulator, which would otherwise count as a genuine installation and skew the usage figures. On a watch this call is not even issued by the watch itself, but relayed by the Garmin Connect app on your phone.
The header describes software, not a person: it cannot identify you, locate you, or tell you apart from another owner of the same hardware. The legal basis is legitimate interest. Your IP address is neither read nor recorded by the licence service.
4. Purpose and legal basis
The fingerprint exists to count the free races already used and to remember whether a licence was bought. It is what makes reinstalling the app leave that counter alone. The legal basis is performance of the contract: without it, there could be no limited free trial and no way to recognise a customer who has paid.
Buying a licence
Unlocking happens on lsitech.fr/rpcg, which loads PayPal's payment module. PayPal is then the controller of its own processing and may set its own trackers, as described in the website policy (in French). We never see your card details.
5. What we do not collect
No race data, no lap times, no location and no physiological data ever leaves your watch for our servers. The activities you choose to record go to your Garmin Connect account, which we have no access to.
6. How long data is kept
The fingerprint and its counter are kept for as long as the licence exists, a licence being bought for life. Technical logs of the licence service are purged after 90 days.
7. Exercising your rights over your licence
Erasure is available on request, at the address given above, quoting the eight-digit code the app shows on its Licence screen. That code is the only way to find your record, since the original identifier is not kept. Erasing a purchased licence makes it unusable and gives no right to a refund beyond the period already provided for.
8. Server logs
Like any web server, the host keeps connection logs (IP address, date and time of the request, page requested, client type) for security and operational reasons. This processing rests on LSI Tech's legitimate interest in keeping its infrastructure secure. These logs are kept for no longer than 12 months and are never used commercially nor cross-referenced with anything else.
The licence service runs on the same hosting. Its own code, however, neither reads nor records your IP address.
9. Transfers outside the European Union
No data is transferred outside the European Union. The website, the licence service and the mail service are all hosted within the European Union.
10. Security
LSI Tech applies appropriate technical and organisational measures to protect the data it processes: encrypted transport (HTTPS), access control, regular system updates, backups, and a strictly limited number of authorised people.
11. Your rights
Under articles 15 to 22 of the GDPR, you have the following rights over your data:
- Access: confirmation that your data is being processed, and a copy of it.
- Rectification: correction of inaccurate or incomplete data.
- Erasure: deletion of your data, subject to legal retention obligations.
- Restriction: temporary suspension of a processing activity.
- Objection: objection to processing based on legitimate interest.
- Portability: your data in a structured, machine-readable format.
Write to lionel@lsitech.fr, or to the registered address above. You will get an answer within one month. Proof of identity may be requested where there is reasonable doubt about who is asking.
12. Complaints
If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority, the CNIL, at 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr. As a resident of another Member State, you may also complain to your own national authority.
13. Changes to this policy
This policy may change to reflect changes in the product or in the law. The version that applies is the one published on this page on the day you read it. Should a future version process any additional data, this page would be updated before that version is released.
Last updated : 4 September 2026.