Privacy Policy

Effective Date: January 25, 2025

At VeloVostra.com ("Website", "Platform", "Service"), we are committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our cycling training platform.

1. Data Controller and Contact Information

1. Controller: VeloVostra.com is the data controller responsible for determining the purposes and means of processing your personal data in connection with our Platform.
2. Contact: If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at [email protected].
3. Scope: This Privacy Policy applies to all personal data processing activities conducted through our Website, training platform, and any accounts you create with us.

2. Personal Data We Collect

We collect personal data that you provide to us directly and automatically through your use of our Platform. The types of data we collect include:

2.1 Information You Provide Directly

• Account Information: Name, email address, password, and profile information
• Training Data: Fitness goals, training history, performance metrics, and progress tracking information
• Health Information: Age, weight, height, fitness level, health conditions, and other data relevant to creating personalized training plans
• Communication Data: Messages, feedback, and support requests you send to us
• Equipment Information: Details about your cycling equipment, bike specifications, and training preferences

2.2 Information Collected Automatically

• Usage Data: Information about how you interact with our Platform, pages visited, features used, and time spent
• Technical Data: IP address, browser type, device information, operating system, and referring URLs
• Training Performance: Workout completion rates, progress metrics, and engagement with training plans
• Location Data: General geographic location (if you choose to provide it) for customizing training recommendations

3. Legal Basis and Purposes for Processing

We process your personal data for the following purposes and on the following legal bases:

3.1 Service Provision (Contractual Necessity)

• Creating and managing your account
• Developing personalized cycling training plans
• Tracking your training progress and performance
• Providing customer support and responding to inquiries
• Delivering educational content and training resources

3.2 Legitimate Business Interests

• Improving and optimizing our Platform and services
• Analyzing usage patterns to enhance user experience
• Preventing fraud and ensuring Platform security
• Conducting research to develop better training methodologies

3.3 Consent

• Sending marketing communications and newsletters
• Processing sensitive health data for training customization
• Using cookies and similar tracking technologies

4. Data Sharing and Recipients

We do not sell your personal data. We may share your information with the following categories of recipients:

1. Service Providers: We work with trusted third-party service providers who help us operate our Platform, including hosting providers, analytics services, and customer support tools. These providers are contractually bound to protect your data and use it only for specified purposes.
2. Legal Requirements: We may disclose your data if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.
3. Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business, subject to appropriate privacy protections.
4. Aggregated Data: We may share anonymized, aggregated data that cannot identify you individually for research, analytics, or marketing purposes.

5. International Data Transfers

Your personal data may be processed and stored in countries outside your home country. When we transfer data internationally, we implement appropriate safeguards such as standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms to ensure your data receives adequate protection.

6. Data Retention

1. Account Data: We retain your account information and training data for as long as your account remains active or as needed to provide our services.
2. Training Records: Historical training data may be retained to maintain the continuity and effectiveness of your personalized training plans.
3. Legal Retention: Some data may be retained longer to comply with legal obligations, resolve disputes, or enforce our agreements.
4. Account Deletion: When you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, typically within 30 days, unless longer retention is required by law.

7. Data Security

We implement comprehensive technical and organizational security measures to protect your personal data, including:

• Encryption: Data transmission and storage are protected using industry-standard encryption
• Access Controls: Strict access controls limit who can view or process your personal data
• Security Monitoring: Continuous monitoring for security threats and vulnerabilities
• Regular Updates: Regular security updates and patches to protect against new threats
• Staff Training: Regular training for staff on data protection and security best practices

8. Cookies and Tracking Technologies

1. Essential Cookies: We use necessary cookies to provide basic Platform functionality, maintain security, and remember your preferences.
2. Analytics Cookies: We may use analytics tools like Google Analytics to understand how users interact with our Platform and improve our services.
3. Cookie Management: You can control cookies through your browser settings. However, disabling certain cookies may affect Platform functionality.
4. Third-Party Cookies: Some third-party services we use may set their own cookies. We recommend reviewing their privacy policies for details.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

1. Access: Request information about the personal data we process about you and obtain a copy of that data.
2. Rectification: Request correction of inaccurate or incomplete personal data.
3. Erasure: Request deletion of your personal data under certain circumstances (also known as the "right to be forgotten").
4. Portability: Request transfer of your personal data to another service provider in a structured, commonly used format.
5. Restriction: Request limitation of processing of your personal data under certain circumstances.
6. Objection: Object to processing of your personal data based on legitimate interests or for direct marketing purposes.
7. Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
8. Lodge Complaints: File a complaint with your local data protection authority if you believe your rights have been violated.

10. Marketing Communications

1. Opt-In: We will only send marketing communications if you have consented or where permitted by law.
2. Content: Marketing communications may include training tips, platform updates, new features, and cycling-related educational content.
3. Opt-Out: You can unsubscribe from marketing communications at any time using the unsubscribe link in our emails or by contacting us directly.
4. Service Communications: Important service-related communications, such as account security notifications, cannot be opted out of while you maintain an account.

11. Third-Party Links and Services

1. External Links: Our Platform may contain links to third-party websites, applications, or services that are not operated by us.
2. No Responsibility: We are not responsible for the privacy practices or content of third-party services.
3. Review Policies: We encourage you to review the privacy policies of any third-party services you interact with through our Platform.

12. Children's Privacy

Our Platform is not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately so we can take appropriate action.

13. Changes to This Privacy Policy

1. Updates: We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features.
2. Notification: We will notify you of material changes by posting the updated policy on our Platform and updating the effective date.
3. Review: We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

14. Governing Law and Jurisdiction

1. Governing Law: This Privacy Policy is governed by the laws of Romania.
2. Disputes: Any disputes relating to this Privacy Policy will be subject to the exclusive jurisdiction of the courts of Romania.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Email: [email protected]
Website: VeloVostra.com

We are committed to addressing your privacy concerns promptly and transparently.

By using VeloVostra.com, you acknowledge that you have read, understood, and agreed to this Privacy Policy.