Privacy Policy
This policy explains what data BikeAsOne may process, why it is used, who it may be shared with and what your rights are.
1. Data controller
The controller responsible for personal data processing carried out in connection with BikeAsOne is: Vincent, Villevieille.
For any question relating to data protection: contact@bikeasone.com.
2. Data that may be processed
Depending on the features used, BikeAsOne may process the following categories of data:
- Account and profile: identifier, username, email address and profile information provided voluntarily;
- cycling activity: rides, dates, durations, distances, speeds, elevation gain, tracks and related statistics;
- geolocation: GPS coordinates required for ride tracking, mapping, navigation or location sharing when these features are used;
- sensors and accessories: data transmitted by equipment the user chooses to connect, such as a heart-rate sensor or compatible bicycle radar;
- technical data: information required for security, diagnostics, service operation and session management;
- Premium features: technical indicators required to enable, display or manage certain advanced service features; no payment data is required to access them;
- user-provided content: profile picture, description and other information the user chooses to publish or save.
3. Purposes and legal bases
| Processing | Purpose | Generally applicable legal basis |
|---|---|---|
| User account | Create, authenticate and administer the account. | Performance of the service requested by the user. |
| Rides and statistics | Record and display cycling activity and its history. | Performance of the requested service. |
| GPS and navigation | Display location, track the ride and provide enabled navigation features. | Performance of the requested feature and device geolocation permission. |
| Security and technical logs | Prevent abuse, secure accounts, diagnose errors and maintain the service. | Legitimate interest in securing and operating the service, subject to users’ rights. |
| Premium | Enable, display and manage the Premium features made available in the service. | Performance of the contract and applicable legal obligations. |
| Non-essential trackers, if added | Audience measurement, personalisation or other purposes requiring a prior choice. | Consent where required. |
4. Geolocation, routes and location sharing
Some features rely on the user’s GPS location. When ride tracking is enabled, BikeAsOne may use successive positions to calculate and display the route, distance, speed and other activity-related information.
If real-time location sharing is offered and enabled, the location may be made available to people or recipients chosen by the user for the time required by that feature.
Users should avoid publicly sharing location data where it could reveal information they wish to keep private, such as their home, habits or regular journeys.
5. Heart-rate sensors, radar and connected devices
BikeAsOne may allow users to voluntarily connect equipment via Bluetooth or compatible technology. The information received is used to provide the requested feature during the ride and, where provided by the service, to save certain statistics with the ride.
Heart-rate data may constitute health data under the GDPR where it reveals information about a person’s health. Its processing must therefore be limited to what is necessary for the selected feature and rely on an appropriate legal condition, including explicit consent where required.
7. Recipients and processors
Les données sont accessibles uniquement dans la mesure nécessaire au fonctionnement du service. Elles peuvent être traitées par l'éditeur de BikeAsOne et par les prestataires techniques nécessaires, notamment l'hébergeur LWS (Ligne Web Services).
Some features may also rely on mapping services, libraries or external platforms. When a user voluntarily chooses synchronization with a third-party service, the data required for that operation may be sent to that service in accordance with the requested action.
BikeAsOne does not sell its users’ personal data.
8. Retention periods
Data must not be retained longer than necessary for its purpose. In practice, account data and recorded activities may be retained while the account is in use, then deleted or archived where retention is required by law or necessary to establish, exercise or defend legal claims.
Les journaux techniques, de sécurité et les éventuels indicateurs nécessaires au fonctionnement des fonctions Premium sont conservés pendant une durée proportionnée à leur finalité.
9. Cookies, sessions and local storage
BikeAsOne may use session cookies and local-storage mechanisms necessary for authentication, security, maintaining sessions, remembering preferences and the technical operation of the service.
If BikeAsOne uses non-essential trackers in the future, particularly for advertising or certain audience measurements, information and a consent mechanism will be implemented where required by law.
10. Data security
BikeAsOne implements appropriate technical and organisational measures to protect data against unauthorised access, alteration, loss or accidental disclosure. As no computer system can guarantee absolute security, these measures are adapted and reassessed according to risks and changes to the service.
Users contribute to this security by choosing appropriate credentials, protecting access to their device and not disclosing login information.
11. Your rights
Under the conditions provided by the GDPR and French law, a data subject may in particular have rights of access, rectification, erasure, restriction, objection and, where applicable, data portability. Where processing is based on consent, consent may be withdrawn at any time for the future.
A request may be sent to contact@bikeasone.com. Reasonable identity verification may be requested where necessary to avoid disclosing data to an unauthorised person.
12. Account deletion
Users may request deletion of their account and associated data. Some information may nevertheless be retained where required by law or where limited retention is necessary as evidence of a transaction, to comply with a legal obligation, for security or to defend legal rights.
Deleting an account does not necessarily result in the immediate deletion of all technical backup copies; these are deleted or overwritten according to the normal backup cycle and must not be reused for other purposes.
13. Transfers of data outside the European Union
Some providers or third-party services may process data from countries outside the European Economic Area. Where such a transfer occurs, BikeAsOne ensures that it relies on a mechanism provided for by applicable law, such as an adequacy decision or appropriate safeguards.
14. Use by minors
Where use of a feature or processing of a minor’s data requires specific authorisation under applicable law, BikeAsOne may restrict that feature or request the necessary information before processing.
15. Changes to the Privacy Policy
This policy may change to reflect changes to BikeAsOne, the addition of a feature, or legal or technical developments. The date of the latest update appears at the top of this page. Appropriate information will be provided where the nature of a change requires it.
16. Contact and legal documents
For any question about this policy or exercising your rights: contact@bikeasone.com.