Back to Home

Privacy Policy for Eliteathletes Training Camp

Last Updated: 15-12-2025

1. Introduction

Welcome to Eliteathletes Training Camp ("we," "our," or "us"), operated by Eliteathletesco. We provide personalized cycling training, nutrition, strength, and recovery plans through our web application and related services, available worldwide.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. Please read it carefully. By accessing or using Eliteathletes Training Camp, you agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Name, email address, password, age, gender, weight, height
  • Training Goals & Preferences: Target events, performance goals, training availability
  • Health Metrics: Resting heart rate, FTP, training history, injury information
  • Payment Information: Processed securely through our third-party payment processors “https://www.stripe.com/”
  • Communication Data: Messages, feedback, and support requests

2.2 Information Collected Automatically

  • Training Data: Workout files (.FIT, .TCX, .GPX) uploaded or synced from devices/apps
  • Device Information: Device type, operating system, browser type, IP address
  • Usage Data: Training logins, feature usage, interaction patterns
  • Location Data: GPS data from training sessions (only for performance analysis)

2.3 Information from Third Parties

  • Training Platforms: Garmin Connect, Wahoo, Strava, Hammerhead (when authorized)
  • Payment Processors: Billing information for subscription management
  • Analytics Services: Usage patterns to improve our services

3. How We Use Your Information

We use your information to:

  • Generate, adjust, and optimize personalized training plans
  • Calculate training load, fatigue, recovery, and nutrition metrics
  • Process payments and manage global subscriptions
  • Provide customer support in multiple languages/time zones
  • Improve platform features through aggregated analysis
  • Send service-related announcements and training insights
  • Ensure platform security and prevent fraudulent activity
  • Comply with international legal obligations

4. International Compliance Framework

As a global service, we comply with:

  • GDPR (European Union)
  • CCPA/CPRA (California, USA)
  • LGPD (Brazil)
  • PIPEDA (Canada)
  • APP (Australia)
  • Other applicable regional data protection laws

Legal bases for processing include contractual necessity, legitimate interests, consent, and legal obligations.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

  • Global Service Providers: Hosting, payment processing, analytics, communication platforms
  • Professional Advisors: International legal, accounting, and consulting services
  • Legal Requirements: When required by applicable laws worldwide
  • Business Transfers: In connection with merger, acquisition, or sale
  • With Your Explicit Consent: For specific, authorized purposes only

Third-Party Integrations: Connected services (Garmin, Wahoo, etc.) operate under their own privacy policies. We only access authorized data.

6. Data Security & International Transfers

We implement enterprise-grade security measures:

  • Encryption (AES-256) for data at rest and in transit
  • Regular security audits and vulnerability assessments
  • Strict access controls and authentication protocols
  • Secure development lifecycle practices
  • Comprehensive backup and disaster recovery systems

Data may be transferred globally to provide our services. We use Standard Contractual Clauses, Privacy Shield frameworks (where applicable), and other lawful transfer mechanisms.

7. Data Retention Schedule

We retain data based on purpose and legal requirements:

  • Active account data: Retained while account is active
  • Training data: 3 years post-account closure (for return convenience)
  • Financial records: 7-10 years (jurisdiction-dependent legal requirements)
  • Anonymized data: Indefinitely for research and development
  • Deletion requests: Processed within 30 days, subject to legal holds

8. Your Global Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access and receive copies of your data
  • Correct inaccurate or incomplete information
  • Delete your personal data (right to erasure)
  • Restrict or object to certain processing
  • Data portability in machine-readable format
  • Withdraw consent where processing is consent-based
  • Opt-out of sales/sharing (where applicable)
  • Non-discrimination for exercising rights

To exercise rights, contact: [[email protected]]

9. Special Category Data Processing

As we process health and fitness data (special category under GDPR), we:

  • Implement enhanced security and privacy protections
  • Use data exclusively for providing contracted services
  • Never use sensitive data for marketing without explicit consent
  • Allow granular control over data sharing preferences
  • Conduct Data Protection Impact Assessments regularly

10. Cookies and Tracking Technologies

We use necessary, functional, and analytical cookies/trackers:

  • Essential: Required for platform functionality
  • Functional: Remember preferences and settings
  • Analytical: Improve services (with opt-out options)
  • Third-party: Governed by respective provider policies

Global users receive cookie consent banners tailored to regional requirements.

11. Children's Privacy Protection

Our services are not intended for users under 16. We:

  • Do not knowingly collect data from children
  • Implement age-screening during registration
  • Promptly delete discovered child data
  • Comply with COPPA (US), GDPR-K (EU), and similar regulations

12. Automated Decision-Making & AI Transparency

Our platform uses AI for training optimization. We ensure:

  • Human oversight of significant automated decisions
  • Right to request human intervention
  • Transparency about AI logic and factors considered
  • Regular bias testing and algorithmic fairness audits
  • Option to adjust or override AI recommendations

13 Policy Updates & Notification

We may update this policy to reflect:

  • New service features or functionalities
  • Changes in applicable laws and regulations
  • Evolving security standards and best practices

Material changes will be notified via:

  • Email to registered users
  • Platform notifications for 30 days
  • Updated "Last Updated" date
  • Summary of key changes provided

14. Contact & Compliance Information

Data Controller: Eliteathletesco

Email: [email protected]

Website: https://eliteathletesco.com/

Global Compliance Contacts:

  • EU/UK Representative
  • Data Protection Officer
  • US Privacy Inquiries

15. Dispute Resolution & Jurisdiction

  • EU/UK/EEA: Right to lodge complaints with supervisory authorities
  • California: Right to opt-out of sales/sharing via "Do Not Sell/Share My Personal Information" link
  • Other Regions: Contact us first to resolve issues informally
  • Arbitration: Any unresolved disputes may be settled by binding arbitration per our Terms of Service

Governing Law and Jurisdiction:

This Privacy Policy is governed by and construed in accordance with the laws of Spain, with specific reference to:

  • Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD)
  • Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR)
  • Other applicable Spanish and European Union data protection legislation

For any disputes arising from data protection matters, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or the competent supervisory authority in your EU member state."