Privacy Policy
Effective date: May 25, 2018
This statement discloses the types of information collected when you visit attackpoint.org and all other web properties or services owned or operated by Attackpoint LLC (collectively, the "Website"), and how we use and safeguard your information.
Personal Data
Personal data means any information relating to an identified or identifiable natural person. We collect personal data about you:
- When you visit the Website
- When you provide it to us directly via the Website
- When we obtain it indirectly from other users of the Website
- When you contact us by email
Attackpoint processes your personal data in order to provide you with the services of the Website, and to further our legitimate interests, which include:
- Providing you with and improving the services of the Website
- Maintaining the function and security of the Website and your account
- Providing you support related to your use of the Website
- Archiving the results of public athletic competitions
Personal data collected when you visit the Website
When you visit the Website, your browser automatically sends us your IP address and browser version information. We process this information for the purpose of monitoring the Website for problems and abuse. The legal basis for this processing is our legitimate interest in maintaining the function and security of the Website.
Personal data collected when you create an account
We process your username and password for the purpose of signing you into your account securely. The legal basis for this processing is our legitimate interest in maintaining the security of your account.
We process your name for the purposes of identifying your account. The legal basis for this processing is our legitimate interest in maintaining the security of your account and providing you with support.
We process your birthdate for the purpose of screening whether you are old enough to consent to the processing of your personal data. The legal basis for this processing is our legal obligation.
We process your email address if you request to reset your account password, or if we need to contact you about some problem with your account. We may also use your email address to associate your account if you contact us for support by email. The legal basis for this processing is our legitimate interest in maintaining the security of your account and providing support.
If you provide your opt-in consent, Attackpoint will processes your email address in order to send you notifications for the purpose you have specified, for example, to notify you when new splits are posted. The legal basis for this processing is your consent, which you may withdraw at any time by opting out.
If you provide your opt-in consent, Attackpoint will process your email address for the purpose of sending you marketing information about Attackpoint updates and features. The legal basis for this processing is your consent, which you may withdraw at any time by opting out.
You may optionally provide additional information about yourself in your account settings, including location information. This data is processed in order to personalize the Website for you. The legal basis for this processing is your consent, which you may withdraw at any time by removing this information from your profile.
You may optionally choose to share some of your profile information with other users of the Website, and if you do, we will process this information in order to display it to them. The legal basis for this processing is your consent, which you may withdraw at any time by changing your settings under Settings > Edit Profile.
You may optionally choose to provide your timing chip number. If you do, we will process this information to associate newly posted competition results with your account. The legal basis for this processing is your consent, which you may withdraw at any time by deleting your timing chip number from your account.
Personal data collected when you use your account
You may voluntarily add various types of content under your account (such as training entries, discussion messages, event schedules), which may be considered personal data. The purpose of processing this information is to organize and summarize this information for you, and if you choose, to share it with others (if you have elected to make it visible to others). The legal basis for this processing is your consent. You may withdraw your consent at any time by deleting this information from your account. You may review and update your sharing settings under Settings > Edit Permissions.
You may also record health data such as heart rate, weight, injuries, and illness in your training log. If you are located in the EEA, the legal basis for processing this data is your explicit consent.
Personal data collected when you upload activity files
When you upload activity data files or sync them to your account, we process the location information, and biometric data such as heart rate, cadence, and power output. If you are located in the EEA, the legal basis for processing this data is your explicit consent.
Personal data collected when competition results are published to the Website
When race officials upload results from a competition in which you participated, we process your name and the timing chip number used in order to display and analyze the results on the Website. The legal basis for this processing is our legitimate interest in archiving the results of public athletic competitions, and providing you the option to associate the results with your account.
Personal data collected when handling payments
When you make a donation or payment to Attackpoint, your payment information is processed by Paypal or Stripe. Attackpoint does not process or store your credit card information. We do process receipt information from the transaction. The legal basis for this processing is Attackpoint's legal obligation to maintain accounting records.
Information sharing
Attackpoint may share aggregated anonymized data or statistics for research or commercial purposes.
Depending on your settings, some of your personal data may be visible to other Website visitors or search engines. You are urged to consider the risks and benefits before posting any information, and never publish critical personal data online.
Your private personal data is not shared or sold. It may be disclosed to governmental authorities when legally required to do so, or to a successor entity in connection with a corporate change including the Website.
International transfers
Attackpoint is operated from the United States. If you access the Website from outside of the United States, you acknowledge that your personal data will be transferred, processed, and stored in the United States. We have appropriate security measures to guard against the loss, misuse, or alteration of the data we have collected about you.
Retention periods
We retain the personal data collected from you until you delete the data from your account or you delete your account. Your data will be removed from the Website immediately upon deletion but may remain on backup media for up to 60 days following deletion. In addition, copies of public web pages in third-party archives may remain indefinitely.
Your rights
If you are located in the EEA, under the General Data Protection Regulation you have the right to request access, rectification, or erasure of your personal data. You have the right to data portability, restriction of processing and objection to processing your personal data. Where we rely on your consent to use your personal data, you may withdraw your consent at any time. You have the right to lodge a complaint with a supervisory authority.
Controller details
Personal data collected by Attackpoint is controlled by Attackpoint LLC, 8008 Westover Rd, Bethesda MD 20814, USA
Minors
The Website is not targeted towards children and does not knowingly collect any information from children under the age of 13. Where the age of consent is higher than 13, we request that minors under the age of consent do not use the Website without the consent of a legal guardian, unless otherwise permitted by applicable law. If you are a minor and have such consent, you must be able to prove it upon request.
Links to Other Sites
The Website contains links to other sites. Please be aware that we are not responsible for the content or privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of any other site that collects personal data.
Cookies
A cookie is a very small text file that is stored on your device, which is used to save information between requests in your browsing session. For example, Attackpoint uses cookies to remember that you have signed in so that you don't have to re-enter your username and password repeatedly while you are using the Website.
The Website's use of cookies falls into the following categories:
- Strictly necessary cookies: These cookies are necessary for the Website to function and cannot be switched off. You can set your browser to block these cookies, but some parts of the site may no longer work and you will not be able to sign into your account
- Performance cookies: These cookies allow us to monitor visitor traffic and improve the performance of the site. The information these cookies collect is aggregated and anonymous. If you don't allow these cookies, your visits to the site will not be included in our performance analysis.
- Functional cookies: These cookies allow us to enhance personalization of the site or other optional functionality. If you don't allow these cookies you will not be able to use some of this functionality.
- Targeting cookies: These cookies are set through our advertising or affiliate partners. They uniquely identify your browser and device, and may be used to build a profile of your interests and to show you relevant ads on our Website based on your visit to our Website and other sites on the internet. If you don't allow these cookies you will not experience targeted advertising on our Website.
You may also opt out of personalized advertising across the web by visiting Google's ad settings, or aboutads.info for other networks.
The Website does not recognize or respond to browser-initiated Do Not Track signals.
Changes
If our information practices change at any point in the future, we will update this policy statement. We may also update this statement to improve its clarity. In case of material changes that directly impact your privacy, we will also post a prominent notification or message on the Website.
Contact Us
If you have any questions about this Privacy Policy, please contact us.