Privacy notice
1. Controller
Operator and contracting party: Daniel Rentsch (private individual)
Champ Thomas 11
1754 Corjolens
Switzerland
Email: info@pacevelo.com
This notice describes personal data processing for the current version of PaceVelo. [OPERATOR LOCATION SWITZERLAND CONFIRMED; ASSESS FADP/GDPR APPLICABILITY AND ANY REPRESENTATIVE OR DPO]
2. Data and purposes
- Website operation: Requests involve technical connection data such as IP address, time, requested address and browser information, used to deliver the website and detect errors or misuse.
- Account: Email address, first/last name where requested, password hash, account status, language and activity timestamps support registration, authentication and account administration. Passwords are not stored as plain text in the account table.
- Rider and bicycle: Supplied display name, date of birth, sex, height, weight, FTP, profile image and bicycle data support personalisation and calculations. Optional details may be omitted; some calculations require weight or power inputs.
- Calculator: Inputs are processed to calculate results. Temporary overrides are intended not to change the saved profile. [VERIFY CURRENT STORAGE/API/LOGGING: NO PERSISTENT CALCULATION HISTORY IS PLANNED]
- Security and records: Session data, verification/reset tokens, limited security logs and document-version acknowledgements protect accounts and record registration steps.
- Contact: We process your contact details and message to handle your enquiry.
3. Legal grounds
Where the GDPR applies, processing necessary for accounts and requested features is based on Article 6(1)(b). Security measures and necessary operational logs rely on Article 6(1)(f), reflecting our interest in a secure and reliable service. Legally required retention relies on Article 6(1)(c). Other processing requiring consent needs separate consent under Article 6(1)(a).
[ASSESS WHETHER THE ACTUAL USE OF PERFORMANCE/BODY DATA INVOLVES HEALTH DATA; WHERE RELEVANT IMPLEMENT ADDITIONAL ARTICLE 9 GDPR / FADP REQUIREMENTS AND THE CORRESPONDING USER FLOW]
4. Hosting and email
We use Kreativ Media for hosting and Mailjet for account-related messages, such as email verification and password resets. Hosting involves the data necessary for the website and database. Email delivery involves recipients’ addresses, message content and delivery information.
[HOSTING: CONFIRM CONTRACTING ENTITY AND ADDRESS, PROCESSING/BACKUP COUNTRIES AND PROCESSING AGREEMENT]
[MAILJET: ADD CONTRACTING ENTITY, DATA REGION, SUBPROCESSORS, DELIVERY LOGS AND ANY INTERNATIONAL TRANSFERS/SAFEGUARDS FROM YOUR CONTRACT]
Registration does not subscribe you to a newsletter. [CHECK MAILJET OPEN/CLICK TRACKING FOR ACCOUNT EMAILS; DISABLE OR DOCUMENT ACTUAL PROCESSING AND LEGAL GROUNDS]
5. Cookies and device settings
PaceVelo uses technical cookies for authentication, sessions and security, and to remember preferences such as language. Removing or blocking required cookies may prevent login.
[COMPLETE COOKIE INVENTORY: NAMES, PURPOSES, DURATION; CHECK ACTUAL LOCAL/SESSION STORAGE AND ANALYTICS, MARKETING OR THIRD-PARTY INTEGRATIONS]
Additional cookies or access to your device requiring consent are used only after prior consent. [VERIFY THIS AGAINST THE ACTUAL CONSENT AND LOADING MECHANISM]
6. Retention and deletion
Account, profile and bicycle data are processed while you use your account. After a deletion request, data no longer needed is removed, subject to necessary legal retention and handling of specific legal claims. Remaining data is restricted to the corresponding purpose.
[ENTER ACTUAL RETENTION AND DELETION PROCESSES FOR UNVERIFIED ACCOUNTS, SESSIONS/TOKENS, SERVER/SECURITY LOGS, CONTACT EMAILS, ACKNOWLEDGEMENTS, MAILJET AND BACKUPS]
Backups may retain data until the end of their defined cycle. They are not used for ordinary operations; deletions must be reapplied if a backup is restored.
7. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction and a copy or transfer of your data. Consent can be withdrawn for the future. For processing based on legitimate interests, you may object on grounds relating to your situation; a separate objection right applies to direct marketing.
Contact info@pacevelo.com. Proportionate identity verification may be needed to prevent unauthorised disclosure. You may also contact a competent supervisory authority: the FDPIC where Swiss law applies, or under the GDPR notably the authority where you live, work or where the alleged infringement occurred.
8. Calculations and future features
Model calculations generate numerical estimates. They do not decide access to insurance, employment or comparable legal positions. [CONFIRM: NO OTHER AUTOMATED DECISIONS WITH LEGAL OR SIMILARLY SIGNIFICANT EFFECTS]
GPX processing, route planning, payments and marketing are outside the scope of this draft for the current version. We will update the notice and any required choices before enabling additional processing.