Privacy Policy for the Cannondale Mobile App and Compatible Devices

Categories of Personal Data Processed

The following sections describe how some personal data is required in order for you to sign in, to allow the App to work effectively and for you to use certain aspects of the App. If you do not provide this mandatory information then we may not be able to log you in or you may not be able to use all aspects of the App. Certain additional information can be provided voluntarily, and where this is the case we have stated this in the corresponding section.

Personal data that is processed when you create an account

When you create a Cannondale Mobile App account, we ask you to provide your email address, name and password.

PURPOSES AND LEGAL GROUNDS

We process your email address because you use your email address and your password to sign in to your account. The legal ground for processing your email address for this purpose is based on our legitimate interest in protecting the security of your account.

We also process your email address for the purpose of sending you important notifications and information about your account, apps and products, such as important safety information, product recalls or other product advisories. The name you provide is associated with your account profile and may be displayed to other users of the Cannondale Mobile App. The legal ground for processing your email address and name for these purposes is our legitimate interest in providing you important information about your account, apps and products, and in providing you the functionality of engaging with other Cannondale Mobile App users.

If you provide your consent to receiving marketing information from us, we will also process your email address for the purpose of sending you marketing information about our products or to contact you about prize draws you have won. The legal ground for processing your email address for this purpose is your consent. You may withdraw your consent at any time by changing your preferences in your account or through the unsubscribe link at the bottom of our marketing emails. The marketing emails you receive may be based on the preferences and data associated with your account. The legal ground for processing this data for this purpose is our legitimate interest in tailoring and reducing the number of marketing emails sent to each particular customer by selecting which customers receive a particular marketing email rather than sending every marketing email to every customer who has consented to receiving marketing emails.

We also process your email address to associate it with your account when you interact with our customer support representatives and for the purposes of obtaining any necessary consents. The legal ground for this processing is our legitimate interest in providing quality customer support.

Personal data that is processed when you sign in to your account with Social Media Credentials

You may choose to sign in to your Cannondale Mobile App account using your social media sign in credentials (e.g., your Facebook or Google sign in credentials). If you choose to do this, the first time you do so you will be asked whether you agree that the social media provider may provide certain information to us, such as your name, email address, and other information associated with your social media account.

All of this information is made available to us by the social media provider due to the way the social sign-in configuration works. If you do not want your information to be shared with us by the social media provider, simply sign in to your account using your Cannondale Mobile App account credentials instead of your social media account credentials.

PURPOSE AND LEGAL GROUND

We associate the email address provided by the social media provider with your account so that you can use your email address to sign in to your account in the future if you no longer wish to sign in using your social media account credentials. The legal ground for processing this information for this purpose is our legitimate interest in providing you an alternative sign-in method and in securing your account.

Additional personal data that is processed if you choose to provide it

If you wish, you can add additional information to your profile, such as your location, contact information, types of activities you participate in, types of products you own, information about your desired fit for how your bicycle components should be adjusted, and your gender, birthdate, height and weight.

PURPOSES AND LEGAL GROUND

This information is used to enable additional functionality of the Cannondale Mobile App and to contact you with notifications and information about your account and to market our products and those of selected third parties to you. The legal ground for processing this information for these purposes is your consent. If you no longer wish to receive marketing please delete this information from your profile and inform us that you do not want to receive marketing.

Personal data that is processed when you choose to upload your location and activity data

You can choose to upload location and activity data from your bicycle and mobile phone to your Cannondale Mobile App account. You can also choose to use your bicycle without providing your consent to upload your activities to us.

PURPOSES AND LEGAL GROUNDS

We process your activity data, if you choose to upload it to us, to enable additional functionality of the Cannondale Mobile App, such to allow you to see and analyze your activity data, see your location on your activity course and maps, track your fitness and environmental impact goals, and, if you wish, share your activity data with others. You can prevent us from receiving further activity data at any time by amending the setting on your device and deleting any existing personal data stored in the Cannondale Mobile App. To ensure deletion of previously uploaded activity data, please contact us using the contact details provided below. If you reside in the European Economic Area or in Switzerland, the legal ground for this processing is your consent, which you can withdraw at any time within your account but which will not affect the processing of your activity data for which you previously gave consent for us to process.

Personal data that is processed when you sync your device

When you sync your device, we may log data about the transmission, such as the IP address used when syncing, the sync time and date, crash/diagnostic logs, geographic location of the device (if enabled), information about your device, information about the network used to sync and device battery level.

PURPOSE AND LEGAL GROUND

We process this information to help identify and resolve errors or syncing issues. The legal ground for processing this information for this purpose is our legitimate interest in resolving errors or syncing issues and providing quality product support.

Personal data that is processed when you connect your account to a third-party app

If you choose to enable your account to access accounts you have with other app providers, such as Garmin Connect, we will obtain information about you from such account, such as activity and fitness information.

PURPOSE AND LEGAL GROUND

This information is used to supplement your activity and fitness information in the Cannondale Mobile App with information you have provided to such third-party apps. The legal ground for this processing is your consent. You can withdraw your consent at any time by disconnecting your account from the third-party app but this will not affect the processing of your activity data for which you previously gave consent for us to process. Please contact us if you no longer want existing data to be processed.

Personal data that is processed when you communicate with us

When you interact with our customer support representatives via email, telephone, online or in person, we collect personal data, such as your name, mailing address, phone number, email address and contact preferences; and information about the products you own, such as their serial numbers and dates of purchase. We also may create event logs that are useful in diagnosing product or app performance-related issues, and capture information relating to the support or service issue. To improve customer service, subject to applicable laws, we may also record and review conversations with customer support representatives, and analyze any feedback provided to us through voluntary customer surveys. With your consent, our customer support representatives may sign in to your account, if appropriate, to help troubleshoot and resolve your issue.

PURPOSE AND LEGAL GROUND

We use this information to provide you with customer and product support and to monitor the quality and types of customer and product support we provide to our customers. The legal ground for processing this information for these purposes is our legitimate interests in providing quality product support. The legal ground for signing in to your account, if appropriate, to help troubleshoot and resolve your issue is consent, which you may withdraw.

Recipients of Personal Data

Service providers

We use cloud, information technology and related infrastructure services from third parties to assist in operating the Cannondale Mobile App, storing your information and communicating with you. Some of these services track the activities associated with use of the Cannondale Mobile App and our communications with you, such how the app is used, whether emails were opened, whether links in the emails were clicked on, and whether other actions were taken following clicks on those links. We use this data to analyze the level of engagement with our communications, provide tailored communications to you, and related purposes.

Third-party apps you ask us to share your data with

If you choose to permit a certain third party app or other third party service provider to access your data in your Cannondale Mobile App account, then we will share such data with the third party. We will not do this without your consent. Once you direct us to share data with a third party, the third party’s handling of your personal data is the responsibility of that third party and you should carefully review the third party’s privacy policy.

Authorized Cannondale bicycle dealers

We may work together with Cannondale authorized dealers to provide you tailored notifications within the Cannondale Mobile App based on your use of the Cannondale Mobile App, products and services you have purchased and your location. You will receive these notifications by default unless you have disabled the notification feature within the Cannondale Mobile App and or the push notification settings of your device.

If you have provided your consent, we may also pass on your email address to the Cannondale authorized dealer from whom you purchased your bicycle equipment or other relevant Cannondale authorized dealers along with information about the types of products and services you may be interested in so that they can provide tailored email marketing to you. You can withdraw your consent at any time by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails you receive. Alternatively, you can indicate your email marketing preferences during registration or at any time by contacting us using the contact details provided below.

Other uses and disclosures

Unless otherwise disclosed during its collection, personal information is retained and processed by us or our parent, subsidiaries, or affiliated companies (“Affiliates”).

Personal data may also be shared in connection with an actual or potential corporate reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock.

We may aggregate the data about multiple users to create aggregated or anonymous statistics for product development purposes. This information may be shared with our authorized retailers, distributors, Affiliates and other third parties.

We will also share personal data with any law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person.

From time to time, we may also use the personal information you provide for the following purposes:

• to contact relevant product owners in response to product recalls or other product advisories;
• to understand the use of the Cannondale Mobile App and make improvements;
• to fulfill contest prizes;
• to respond to specific requests from users;
• to obtain parental consent from applicable users;
• to provide any necessary notices to users or their parent or guardians;
• to protect the security or integrity of the Cannondale Mobile App when necessary;
• to send you notices and solicitations regarding the Cannondale Mobile App, our and our Affiliates’ products;
• to share with authorized retailers and distributors of our and our Affiliates’ products to understand how you use such products and promote such products to you;
• for product development purposes; and
• in general to promote and market our and our Affiliates’ products to you

Cookies and Analytics

Cannondale Mobile App

We also collect data from users about their usage of the Cannondale Mobile App. The types of analytical information that are collected include but are not limited to the date and time the app accesses our servers, app version, the location of the device (if enabled), language setting, what information and files have been downloaded to the app, user behavior (e.g., features used, frequency of use), device state information, device model, hardware and operating system information, and information relating to how the app functions. We use this data to improve the quality and functionality of our app; to develop and market products and features that best serve you and other users; to maintain the security and integrity of the Cannondale Mobile App and to help identify and fix app stability issues and other usability problems as quickly as possible.

The legal ground for processing this analytical information is our legitimate interest in understanding how our customers interact with our products, apps and websites so we can enhance the user experience and functionality of our products, apps and websites.

Examples of third-party providers of analytics and similar services include Google Firebase, which is used to track statistics and user demographics, understand usage of the Cannondale Mobile app, and identify and resolve the root causes of app crashes. Find out more information about Google Firebase.

Website

To the extent versions of the Cannondale Mobile App offer a website interface, we, with assistance from third-party analytics service providers, may collect certain information when you visit our site to help analyze how you and other visitors navigate the website interface, compile aggregate statistics about site usage and response rates, and help diagnose any problems with our servers and administer the website. This information includes but is not limited to IP address, geographic location of the device, browser type, browser language, date and time of your request, time(s) of your visit(s), page views and page elements (e.g., links) that you click. We may use cookies, pixel tags, web beacons, clear GIFs or other similar tools on our site or in our email messages to assist us in collecting and analyzing such information. We use this information to provide better, more relevant content on our site, to identify and fix problems, and to improve your overall experience on our site.

If you do not want information collected through the use of these technologies, there is a simple procedure in most browsers that allows you to automatically decline many of these technologies, or to be given the choice of declining or accepting them.

If you reside in the European Union or other jurisdiction that requires us to obtain your consent to use cookies on our sites, then you will have an opportunity to manage your cookie preferences on the sites; except that certain cookies are required to enable core site functionality, and you cannot choose to disable those cookies. For more information please read our Cookie Policy.

Children

We request individuals under 16 not provide personal data to us. If we learn that we have collected the personal data from a child under 16, we will take steps to delete the information as soon as possible.

Privacy Policy Updates

We may update this Privacy Policy from time to time as we add or change app functionality and services, and as technologies and laws change. You can determine when this Privacy Policy was last revised by referring to the “Last updated” date at the top of this page. Any changes will become effective upon our posting of the revised Privacy Policy. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

Retention of Personal Data

Your personal data will be retained for as long as we have a business relationship with you. Your personal data will be deleted or anonymized approximately three years after your last activity on the Cannondale Mobile App except for your basic product and contact information which will be retained in case we need to notify you of a product recall or other safety issue.

You may request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies.

If your request is approved, we will delete or deidentify the relevant information and will direct our service providers to take similar action.

Exercising Your Rights to Know or Delete
To exercise your rights to know or delete described above, please submit a request by either:

• Calling us at (+1) 833-482-3734
• Emailing us at dataprivacy@cyclingsportsgroup.com

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information.

Transfers of Personal Data

We sell and service our products on a global basis, and are a global business. Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country. Some of our servers are located in the United States, and we and our affiliated companies and third party service providers operate around the world. This means that when we collect your personal information we may process it in various countries. However, we have taken safeguards to require that your personal information will remain protected in accordance with this privacy policy and applicable law. These include implementing the European Commission’s Standard Contractual Clauses for transfers of personal information between our affiliated companies. We have also implemented safeguards with our third party service providers and partners.

Data Controller

Your personal data collected by your use of the Cannondale Mobile App and its related websites and services is controlled by Cycling Sports Group, Inc.

If you have any questions or concerns about our use of your personal data, please contact us at dataprivacy@cyclingsportsgroup.com or write to us at

Cycling Sports Group, Inc.
Office of the General Counsel, Attn: Privacy Compliance Counsel
1 Cannondale Way
Wilton, Connecticut 06897, United States of America

Or call us toll free in the U.S. at (+1) 833-482-3734

Your Rights

1. California User Rights

This section details additional disclosures that are required by the California Consumer Privacy Act (CCPA).

Sharing Personal Information
The CCPA prohibits a third party from reselling personal information unless you have received explicit notice and an opportunity to opt out of further sales. We do not sell your information to any third-parties. We may disclose certain personal information for a business purpose as allowed under the CCPA.

Right to Know and Data Portability
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and validate your request, we will include a list of your personal information that may have been disclosed and the categories of third parties the information may have been disclosed to.  

Right to Delete
You may request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies. 
If your request is approved, we will delete or deidentify the relevant information and will direct our service providers to take similar action.

Exercising Your Rights to Know or Delete
To exercise your rights to know or delete described above, please submit a request by either: 
· Calling us at (+1) 833-482-3734
· Emailing us at dataprivacy@cyclingsportsgroup.com

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. 

You may only submit a request to know twice within a 12-month period. We endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt, unless we require an extension. If we reasonably require an extension we will inform you of the reason and extension period.

Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

2. European User Rights

If you are a resident of the European Economic Area, or in certain other situations, you have the following data protection rights, which you can exercise by contacting us using the details below:

• The right to access, correct, update or request deletion of your personal information.
• The right to object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information.
• The right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. Alternatively, you can indicate your marketing preferences for email, phone and postal marketing during registration or at any time by contacting us using the contact details provided below.
• The right, if we have collected and processed your personal information with your consent, to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

You may request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and confirm your identity, we will review your request. We may deny your deletion request if retaining the information is proper and necessary or if an exception allowing us to retain the information applies. If your request is approved, we will delete or deidentify the relevant information and will direct our service providers to take similar action.

Exercising Your Rights to Know or Delete
To exercise your rights to know or delete described above, please submit a request by either:

• Calling us at (+1) 833-482-3734
• Emailing us at dataprivacy@cyclingsportsgroup.com

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

You also have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.