Privacy Policy - Wielerflits

1. Introduction

Wielerflits ("we", "us", "our") operates wielerflits.nl, wielerflits.be, cyclingflash.com, and the Wielerflits mobile app. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR/AVG).

By using our website, mobile app, and services, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

Wielerflits BV
MediArena 2
1114 BC Amsterdam-Duivendrecht
The Netherlands
KvK: 71525254
Email: contact@wielerflits.nl
Website: wielerflits.nl

3. What Data We Collect

3.1 Automatically Collected Data

When you visit our website or use our app, we automatically collect:

Browser type and version
Operating system
Device type and screen resolution
Browser language setting
Country (derived via geo-location; your IP address is not stored)
Referring website
Pages viewed, scroll depth, and time spent on pages
Anonymous device and session identifiers (randomly generated IDs stored in your browser)

3.2 Account Information

If you create an account with us (via our login provider), we store:

First and last name
Email address
Profile photo (from your login provider)
Profile preferences

3.3 Payment Information

If you purchase a subscription, our payment processor (Stripe) collects your name, email address, billing address, and payment details. We only store the last 4 digits of your payment method.

3.4 Newsletter Subscriptions

When you subscribe to our newsletter, we collect your email address and subscription preferences. You can unsubscribe at any time using the link in every newsletter.

3.5 Contests and Promotions

When you participate in contests or promotions, we may collect your name and email address to administer prizes and measure campaign effectiveness.

3.6 Polls and Market Research

When you participate in polls, we collect your IP address and an anonymous browser identifier to prevent duplicate votes. Poll responses are used anonymously for statistical purposes. We may also request your participation in surveys or market research to improve our services.

3.7 Push Notifications (Mobile App)

If you enable push notifications in our mobile app, we collect:

A device token for notification delivery
Your device platform, app version, and OS version
Your notification preferences (e.g., breaking news, categories, riders, teams)
Whether a notification was opened

4. How We Use Your Data

We use your personal data for the following purposes:

To provide and maintain our website, app, and services
To manage your account and provide customer support
To process payments and manage subscriptions
To send you newsletters (with your consent)
To send push notifications based on your preferences
To administer contests and promotions
To analyze website and app usage and improve our services
To display relevant advertisements
To detect and prevent fraud and security issues
To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on:

Consent: When you accept cookies, subscribe to newsletters, or enable push notifications
Contract performance: To provide services you've requested, including subscriptions
Legitimate interest: To improve our services, ensure website security, and display advertisements
Legal obligation: To comply with applicable laws and regulations

6. Cookies and Tracking

Our website uses cookies to improve your experience, ensure security, and analyze website performance. Cookies are small text files stored on your device that help us recognize you on repeat visits.

Types of Cookies We Use:

Essential cookies: Required for the website to function properly
Analytical cookies: Help us understand how visitors use our website. Google Analytics places cookies such as _ga and _gid. Our own analytics system uses browser storage (localStorage/sessionStorage) instead of cookies.
Functional cookies: Remember your preferences and settings
Marketing cookies: Used by our advertising partners (Actirise/Sparteo and Massarius) to deliver relevant advertisements via the IAB TCF v2 consent framework

You can manage your cookie preferences at any time via our cookie settings banner. You can also disable cookies in your browser settings, though this may affect the functionality of our website.

7. Data Sharing and Third Parties

7.1 Processors

We use third-party service providers (processors) to help us operate our website and services. These processors have access only to the data necessary to perform their functions and are contractually obligated to protect your data.

Our processors include:

Stripe — payment processing for subscriptions
Google Analytics — website and app usage analysis
Firebase (Google) — push notification delivery and app analytics
Actirise/Sparteo — advertising display on website and app
Massarius — advertising display in the mobile app
Cloudflare — CDN, security, and geo-location services

7.2 Geographic Location

We process your personal data primarily within the European Union. Some of our processors (Google, Stripe) are based outside the EU. We ensure that appropriate safeguards are in place in accordance with the GDPR, including Standard Contractual Clauses (SCCs).

7.3 Advertising Partners

We display advertisements via programmatic advertising networks (Actirise/Sparteo and Massarius). These partners may place cookies and build user profiles for targeted advertising. On our website, advertising cookies are only placed after your consent via the IAB TCF v2 consent framework. You can manage your advertising preferences via our cookie settings.

7.4 Social Media

Our website includes social media sharing buttons and may display social media feeds. These features may collect your IP address and set cookies. Social media features are governed by the privacy policies of the respective platforms.

8. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, or misuse.

Security measures include:

SSL/TLS encryption for all network connections
Secure password storage using industry-standard hashing
Regular security audits and updates
Access controls limiting data access to authorized personnel only
Backup and disaster recovery procedures

9. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Account data: Retained until you delete your account
Newsletter subscriptions: Retained until you unsubscribe
Website and app analytics: Retained for 13 months
Push notification tokens: Retained until you uninstall the app or disable notifications
Server logs: Retained for 30 days

10. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you
Right to rectification: You can request correction of inaccurate or incomplete data
Right to erasure: You can request deletion of your personal data ("right to be forgotten")
Right to restriction: You can request limitation of data processing
Right to data portability: You can request your data in a structured, machine-readable format
Right to object: You can object to processing of your data based on legitimate interests
Right to withdraw consent: You can withdraw consent for data processing at any time
Right to lodge a complaint: You can file a complaint with your national data protection authority (in the Netherlands: Autoriteit Persoonsgegevens)

To exercise any of these rights, please contact us at contact@wielerflits.nl.

11. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Information

If you have questions about this privacy policy or wish to exercise your rights, please contact us: