1. Data controller
The data controller is Fabrice Baret, Kitesurf Rehab / Outdoor Sport Rehab, 64 bis rue des Alpes, 38350 La Mure, France. Contact: baret.fabrice@gmail.com.
2. Data collected
Depending on the features used, Rider Protocol may process:
- account data: email and user identifier;
- rider profile data: practice, level, goals, frequency, session duration, protocol volume and equipment;
- Rider Snapshot answers and estimated priority;
- test results, measures, scores, priorities, generated program, completed sessions and progress;
- access data: paid or guest access and related technical cookies;
- newsletter data if the user subscribes: email, subscription status, source, consent date, unsubscribe date, locale, UTM and referrer;
- technical data required for operation, audience measurement and security.
3. Purposes
Data is used to:
- provide the free snapshot, Rider Snapshot and tests;
- save the profile, results, program and progress;
- manage the user account and sign-in;
- generate and display the 4-week protocol;
- manage paid access, guest access and support;
- improve user experience and understand site usage;
- send Rider Protocol updates only when the user opted in to the newsletter.
4. Legal bases
Processing is based, depending on the case, on service performance, user consent, legitimate interest in operating and improving the website, or compliance with legal obligations.
5. Providers
Data may be processed by technical providers identified in the code: Supabase for account and backup, Vercel for hosting and analytics, Stripe for payment, Microsoft Clarity and Google Analytics if their corresponding identifiers are configured.
Payment data is handled by Stripe. The site does not store card numbers. Newsletter contacts may be exported as CSV for external campaigns, including Wix, only for active consenting contacts.
6. Newsletter
Newsletter subscription is optional, unchecked by default and separate from account creation. Users may withdraw consent through an unsubscribe link. Unsubscribed contacts are not included in the subscriber CSV export.
7. Retention
Data is kept for the time necessary to provide the service, support, consent evidence and applicable obligations. Detailed retention periods may be specified or adjusted depending on technical and legal constraints.
8. Local storage
Some information may be stored locally in the browser: rider profile, Rider Snapshot, results, program, progress, language/theme preferences and cookie consent choice. This allows users to start without an account and keeps the experience fluid.
9. User rights
Under the GDPR, you may request access, rectification, deletion, restriction or objection to the processing of your data. You may also withdraw newsletter consent at any time.
To exercise your rights: baret.fabrice@gmail.com. You may also file a complaint with the CNIL.
10. Sensitive data and security
Rider Protocol is not intended to replace a medical file. Users are invited not to send unnecessary sensitive medical information through general forms. Reasonable measures are implemented to limit unauthorized access, alteration or loss of data.