Privacy policy

This English translation is provided for information only. In the event of any discrepancy, the French version prevails.

Data controller

Network System & Software — see the legal notice. Contact for any question about your data: [email protected].

Data collected

Email and password (hashed, never stored in plain text) when you create an account; telemetry data (speed, acceleration, GPS position, cornering angle) recorded through the connected saddle during your sessions; name, email and message content if you use the contact form; payment data processed directly by Stripe, never stored by us.

Data collected through the RAD 4 BMX app

The RAD Signal saddle/sensor, connected via Bluetooth through the RAD 4 BMX mobile app and the app.rad4bmx.fr dashboard, involves collecting: GPS position (latitude/longitude), speed, altitude, heading and GNSS accuracy (number of satellites, PDOP); inertial dynamics data (G-forces, roll/pitch/yaw); model and version of the smartphone used for the connection (sent once per session, for technical monitoring); email and password (hashed, never stored in plain text) of the account used to log in to the dashboard. This data is used exclusively to display your riding statistics and, if you are followed by a coach, for their analysis — it follows the same retention rules and the same GDPR rights as the rest of this document. The RAD 4 BMX account (separate from the shop/subscription account) can be deleted directly from the “🔑 Account” tab of the app.rad4bmx.fr dashboard.

Audience measurement

The website uses an internal visit counter (no third-party tool, no consent required for it, see Cookies below). Each visit is associated with a single-use fingerprint (non-reversible hash of the IP address, browser and day), which cannot be used to re-identify you or track you from one day to the next, and with a random technical identifier set for the duration of your visit (audience measurement cookie, see below) used to reconstruct the sequence of pages viewed during the same visit. The pages of your My account area are never included in this measurement. With your consent (see Cookies below), the website also uses Google Analytics (via Google Tag Manager) for more detailed statistics.

Cookies

The website sets a strictly necessary session cookie (login, order basket) and an audience measurement cookie (random identifier, unrelated to your identity or IP address, which expires when the browser is closed) — no advertising or tracking cookies, no sharing with third parties. The latter falls within the consent exemption provided by the CNIL (French data protection authority) for strictly internal audience measurement cookies. If you accept, the website also uses third-party tools for advertising/statistics purposes (measuring and optimising campaigns): the Meta pixel (Facebook/Instagram), which receives your hashed email address (never in plain text) and Google Analytics via Google Tag Manager. Unlike the audience measurement cookie above, these tools share data with a third party (Meta and/or Google) and do not fall within the CNIL exemption — so they are only loaded after your explicit consent via the banner shown at the bottom of the page, never by default. You can change your choice at any time by clearing this website's browsing data in your browser.

Use of data

Telemetry data is used exclusively to display your own statistics and, if you are followed by a coach, for them to build your training programme. It is neither sold nor shared with third parties for commercial purposes.

Access to data by a coach

A coach only accesses a rider's data if the rider has explicitly joined their group. This link can be removed at any time, from the My account area.

Recipients of the data

Your data is processed by Network System & Software and by the technical service providers needed to run the service: Stripe (payment) and our transactional email provider. The website and data are hosted by Network System & Software itself — see the legal notice. None of these providers uses your data for its own commercial purposes. The Meta pixel (see Cookies section) is the exception: if you accept it, Meta receives your hashed email and uses it under its own privacy policy, for its own advertising needs (campaign measurement and targeting), not only on behalf of RAD 4 BMX.

Retention

Account and telemetry data are kept as long as your account is active. If you no longer log in and have no further contact with us, they are deleted at the latest 3 years after that last interaction (last login or last message), in line with CNIL recommendations — unless a longer legal retention obligation applies (accounting documents and invoices: 10 years, under the French Commercial Code). Contact form messages follow the same 3-year rule after the last exchange.

Your rights

Under the GDPR, you have the right of access, rectification, erasure, restriction and objection, as well as the right to data portability. To exercise them, contact us at [email protected]. You may also lodge a complaint with the CNIL (cnil.fr) or with the data protection authority of your country.