PRIVACY POLICY

UPDATED ON 04/03/2025

This privacy policy (the "Policy") describes how VSRUN (the "Company", "VSRUN") collects, uses, protects and discloses your personal information when you access and use our website www.vsrun.com (the "Site") and our mobile application (the "Application").

This Policy aims to inform you transparently about the collection, processing, and management of your personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, relating to the protection of personal data (GDPR), as well as French law relating to data processing, data files and individual liberties of 6 January 1978 as amended (hereinafter, the "Data Protection Act").

VSRUN Company undertakes to respect the confidentiality of your personal information and to guarantee an adequate level of protection thereof.

ARTICLE 1. DATA PROCESSING CONTROLLER

The personal data processing controller is VSRUN company, SAS registered in the Nanterre trade and companies register under number 932879109, whose registered office is located at 32 Rue de Paris, 92100 Boulogne-Billancourt.

The representative of the data processing controller regarding personal data matters can be reached at the following email address: lead.vsrun@gmail.com

ARTICLE 2. TYPES OF DATA COLLECTED

VSRUN collects different categories of personal information that you provide to us directly or that we collect automatically when you use the Site and the Application.

2.1. DATA PROVIDED BY YOU

When using the services offered by VSRUN, you are required to provide us with a certain amount of personal data necessary for the provision of services, account management and improvement of the user experience. In accordance with the General Data Protection Regulation (GDPR), VSRUN undertakes to process your personal data in a transparent, secure manner and in accordance with current legislation.

The personal data you provide is collected for the following purposes:

DATA CATEGORY	DESCRIPTION	PURPOSE
Identity data (Site and Application)	Name, first name, address, email address.	Account management, communication, billing.
Order and payment data (Site only)	Billing information (address, payment method), details of payments made.	Payment processing, contract execution. Regarding the Application, banking data is processed by secure third-party payment providers: Apple Pay, Google Pay or Samsung Wallet.
This information is processed by secure third-party payment providers on the Application: Apple Pay, Google Pay or Samsung Wallet. It is therefore not stored by VSRUN Company.
Data related to your user account on the Application	Username, password, security questions, as well as any other information necessary for the management and security of your account.	Securing account access, subscription management.
Training-related data (Application)	Information about your weight, height, sports performance, running time, distance covered, average speed, frequencies and other data necessary for tracking your physical activities.	Service personalization, performance tracking, data analysis.

2.2. AUTOMATICALLY COLLECTED DATA

When using the Site or Application, certain data is collected automatically through technologies such as cookies, web beacons, and other tracking tools. These technologies collect information about your device, your use of our services, and your preferences. This data is used primarily to improve your user experience, personalize services, and ensure the security of the Site and Application.

2.2.1. Technologies used for collection:

Cookies: Small data files placed on your device when you visit the Site or use the Application. These cookies analyze your behavior on the Site (pages viewed, visit duration, etc.) and are used to improve user experience, security and Site performance.
- Session cookies: Temporary cookies that are deleted when you close your browser.
- Persistent cookies: Cookies that remain on your device for a specified period to facilitate login during your next visits.
- Third-party cookies: Cookies placed by external services used by the Site or Application (e.g., advertising or web analytics services).
Web beacons: Small invisible images or scripts that track activity on the Site or Application. They are often used in conjunction with cookies.
Similar technologies: Other tracking technologies such as local storage (localStorage) or device fingerprinting may be used to collect certain data.

2.2.2. Purposes of data collection:

User experience improvement: Personalization of services and content displayed according to your preferences and browsing habits.
Performance analysis: Monitoring Site or Application performance to detect and resolve technical issues, optimize features, and improve overall efficiency.
Advertising and marketing: Personalization of advertisements displayed based on your browsing behavior, with the ability to provide you with offers and information that particularly interest you.
Security: Detection and prevention of fraud, as well as managing service security and stability.

2.2.3. Cookie and similar technology management:

You can choose to manage cookie settings through your browser settings at any time. You also have the option to refuse certain types of cookies (particularly third-party or advertising cookies) by configuring your browser options.

    However, please note that certain Site or Application features may not be accessible if you choose to disable cookies.

2.2.4. Data retention period:

Data collected automatically via the Site or Application is retained for a maximum period of thirteen (13) months from collection. This period complies with current regulations, particularly the recommendation of the National Commission for Information Technology and Civil Liberties (CNIL) regarding cookie and other tracker management. After this period, data will be automatically deleted or anonymized, unless retention is necessary for litigation management or legal obligation.

2.3. THIRD-PARTY DATA

VSRUN may collect personal data from third-party partners, such as service providers and commercial partners, as part of executing the services offered.

ARTICLE 3. DATA PROCESSING PURPOSES

VSRUN processes your personal data for several objectives, based on legal bases clearly defined by the GDPR (article 6).

3.1. CONTRACT EXECUTION

The personal data you provide us is processed to enable proper execution of the services we offer you. This includes:

Order and payment management, as well as communication related to these orders.
User account administration and sending notifications related to your account or activities on the Site and Application.
Training tracking and service adaptation according to your needs.

3.2. LEGITIMATE INTEREST OF THE COMPANY

VSRUN may process your data based on its legitimate interest to:

Improve our services, personalize user experience and offer you services adapted to your needs.
Ensure service security, prevent fraud and guarantee compliance with terms of use.
Conduct statistical analyses to better understand the use of our Site and Application.

3.3. CONSENT

If you expressly consent, VSRUN may use your personal data for:

Sending marketing, commercial and promotional communications, particularly in the form of newsletters (by email, SMS, or other means of communication).
Offering you targeted advertisements and offers based on your preferences and usage behaviors.

ARTICLE 4. SHARING OF PERSONAL DATA

4.1. SHARING WITH EXTERNAL RECIPIENTS

The personal data you transmit to us may be shared with certain third parties in the following situations, in accordance with current legislation:

Service providers: We may use external providers for managing our services, such as payment services, hosts, data analysts, or providers for sending communications. These providers are contractually bound to respect the confidentiality and security of your personal data, and may only use it within the framework of providing services we have entrusted to them.
Commercial partners: As part of partnerships for offering specific services, your personal data may be shared with commercial partners, only with your prior consent or when necessary for contract execution with you. You will be informed of any sharing of your data for these purposes, and you may object to this sharing by contacting us.
Legal requirements: We may be required to share your personal data with judicial or administrative authorities, or when necessary to respond to legal obligations, such as legal or regulatory requests. This sharing will only be done within the limits authorized by law.

4.2. DATA TRANSFER OUTSIDE THE EUROPEAN UNION

In certain cases, your personal data may be transferred to providers or partners located outside the European Union. These transfers are carried out in accordance with current European regulations, and are protected by legal mechanisms, guaranteeing an adequate level of protection for your personal data. These mechanisms include, but are not limited to, the use of standard contractual clauses approved by the European Commission or appropriate protection agreements, thus guaranteeing the security and confidentiality of your data.

ARTICLE 5. PERSONAL DATA SECURITY

VSRUN takes appropriate technical and organizational measures to guarantee the security of your personal data and protect it against any unauthorized access, loss, modification or illegal disclosure. However, it is important to note that no method of transmission over the Internet or electronic storage is completely secure.

We encourage you to take precautions when communicating your personal data.

ARTICLE 6. DATA RETENTION PERIOD

Your personal data is retained as long as necessary for the execution of services provided, as well as to meet our legal obligations. When the retention period has expired, your data will be either deleted or anonymized, in accordance with legal requirements.

ARTICLE 7. YOUR RIGHTS

In accordance with the GDPR, you have several rights concerning your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right of rectification: You can request updating or correction of incorrect or incomplete data.
Right of deletion: You have the possibility to request deletion of your data, subject to legal obligations.
Right of portability: You can request to receive your data in a structured, commonly used and machine-readable format.
Right of opposition and limitation: You can object to the processing of your data in certain situations or request limitation of processing.
Right to withdraw consent: If you have consented to the processing of your data, you can withdraw this consent at any time.

To exercise these rights, please contact us at the following address: lead.vsrun@gmail.com

In case of dissatisfaction concerning the management of your personal data, you also have the right to file a complaint with the National Commission for Information Technology and Civil Liberties (CNIL), at the following address: 3 Place de Fontenoy, 75007 Paris, or via their website www.cnil.fr.

ARTICLE 8. PRIVACY POLICY MODIFICATIONS

VSRUN Company reserves the right to modify this Privacy Policy to account for the evolution of its practices or to comply with legal requirements. Any modification will be published on the Site and will take effect upon posting, without the need for prior notification to Users. It is the responsibility of Users to regularly consult this Policy.