Data privacy Groupetto app

The operators of the iOS app „Groupetto“ take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the applicable data protection laws and this privacy policy.

When you use this app, various personal data will be collected. Personal data are data that can personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

1. Responsible entity

The responsible entity within the meaning of the General Data Protection Regulation (DSGVO) is:

Groupetto UG (haftungsbeschränkt)
Johann-Sebastian-Bach-Str. 32
79104 Freiburg

Mail: info@groupetto.app

2. What data do we collect

We collect the following personal data from you:

  • Location data, such as the duration, distance, speed, elevation and route of your bike rides, to record your activity.
  • If you use the option to connect external Bluetooth sensors, data such as heart rate and cadence may also be collected by these sensors.
  • If you use the option to connect Apple Health, data such as age and weight may be collected to calculate your calory consumption.
  • If you use the option to share an activity with third-party providers, we will share your activity data with that third-party provider.
  • If you use the option to generate title suggestions, we will share your activity data with that third-party provider.

3. How do we use your data?

We only use your personal data to provide the service you requested, i.e. to record your bike rides and to display and store your activity data in the app, and optionally to share their activities with a third party provider.

The processing of location data is based on Art. 6 (1) lit. f DSGVO, as the data processing is necessary to fulfill the main purpose of the app. The processing of additional data by external Bluetooth sensors is based on Art. 6 (1) lit. a DSGVO, as the processing is based on voluntary consent. The processing of additional data by Apple Health is based on Art. 6 (1) lit. a DSGVO, as the processing is based on voluntary consent.

4. Storage of data

We store your personal data only for as long as necessary to fulfill the purpose for which it was collected. Your activity data remains stored on your device and can only be viewed by you. Data is not shared with third parties unless you choose to share a ride with a third party provider.

5. Transfer of data

We do not pass on your personal data to third parties unless you have expressly authorized us to do so or there is a legal obligation to pass on the data.

a) Sharing functionality
When you use the option to share an activity with a third-party provider, we transmit the activity data you select to that third-party provider. We have no control over what data the third-party provider collects and how it uses it.

The data protection notices of the respective operators apply, to which we refer in the following:

Strava
Strava is a service provided by Strava, Inc. 208 Utah Street, San Francisco, CA USA 94103, USA. The privacy policy of Strava: https://www.strava.com/legal/privacy

Apple Health
Apple Health is a service provided by Apple, Inc. The privacy policy of Apple Health: https://www.apple.com/legal/privacy/data/en/health-app/

b) Export functionality
If you use the option to export an activity as a GPX file, this file will contain all the data collected by our iPhone app. Please note that the use of this file is at your own responsibility and we cannot assume any liability for its use.

c) Feedback functionality
If you use the option to provide feedback in our app, you can do so using the function provided for this purpose. A third-party provider is used for this purpose, which collects and processes the feedback data.

The data protection notices of the respective operators apply, to which we refer in the following:

Typeform
We use Typeform to conduct optionally surveys. Typeform is a service provided by TYPEFORM SL, Calle de Pallars 108 (Aticco), 08018 – Barcelona, Spain. The privacy policy of Typeform: https://admin.typeform.com/to/dwk6gt/

d) Social Media
We maintain a presence on several social networking and blogging platforms, including Facebook, Instagram, Google, WordPress, LinkedIn, TikTok, and Twitter. We may integrate some third-party social networking features into our Services (including the ability for users to interact with others and share certain content and information on social media platforms) or use third-party provided platforms to publish or manage the Services or portions thereof. Through these platforms and features, we may receive or share information about you, and this Privacy Policy applies to that information as well. In addition, some third-party social media or blogging platform providers that we use have their own privacy policies that explain how the third-party providers they provide may collect, use, and protect your information (for example, when you create an account with such platform providers). By using social features, you agree to the privacy policies and terms of use of those third-party providers.

If you choose to communicate with us or another user through social features available on our websites or mobile applications, or through our social media pages or other similar communication or messaging features or services, that information may be made publicly available. For security reasons, please do not provide passwords, social security numbers, payment cards or other confidential information through these features. We may, but have no obligation to, monitor messages and communications between and among users for security and training purposes. We have the right, but not the obligation, to remove content that we deem inappropriate.

e) Title suggestion functionality
When you use the option to generate title suggestions for your activity, we transmit certain information about your activity, such as the duration, distance and date of the activity, to that third-party provider. These information will be used to generate title suggestions. These information is not linked to you.

The data protection notices of the respective operators apply, to which we refer in the following:

ChatGPT
ChatGPT is a service of OpenAI OpCo, LLC. 575 Florida street San Francisco, CA 94110, USA. The privacy policy of OpenAI: https://openai.com/policies

6. Your rights

You have the right to receive information about the personal data we have stored about you, as well as the right to correct, delete or restrict the processing of your data. You also have the right to data portability and the right to object to the processing of your data. You can assert your rights at any time by e-mail or by post to the above address.

In addition, you have the right to complain to a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

7. Data security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss or misuse. However, we would like to point out that the transmission of data via the Internet (e.g. by e-mail) is generally associated with security risks. Complete protection of data against access by third parties is not possible.

8. Changes to the privacy policy

We reserve the right to change this privacy policy in order to adapt it to changed legal situations or in case of changes in data processing. We will publish the changes here.

9. Contact

If you have any questions about the privacy policy or data processing by the Bicycle App, please feel free to contact us.

Status: December 13, 2023